www.genoptix.com

- Novartis Pharma AG -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 09:ca:b7:b7:c7:9e:13:87:8f:91:f2:54:ca:4c:1b:33 was issued on by DigiCert Inc.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Novartis Pharma AG

Organization: Novartis Pharma AG
Locality: Basel
Country: CH

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:ca:b7:b7:c7:9e:13:87:8f:91:f2:54:ca:4c:1b:33
Serial Number (int): 13015622168978105862724506591469247283
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: dd:58:ae:3e:4a:b1:df:db:4b:b1:07:32:7b:84:12:d2:f4:7d:57:18
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 3d:a7:99:08:fa:63:e3:6b:93:37:65:46:ee:a6:5d:51:89:8d:9b:be
Fingerprint (sha256): 60:53:e4:2b:04:24:e0:5f:42:65:dd:7b:9b:8a:c8:35:23:7a:23:49:9e:6b:4d:26:cb:d1:20:78:3b:9b:5b:53

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate www.genoptix.com

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.genoptix.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.genoptix.com
www.auth.novartis.com
www.ewsdrpbaseline.com
www.ewsdrptraining.com
alcon.com
www.alcon.com
www.alcon.dk
www.alcon.se
www.alcon.no
www.alcon.fi
www.pharma.us.novartis.com
prod.pharma.us.novartis.com
www.be.alcon.com
prod.be.alcon.com
www.alcon.es
www.de.alcon.com
prod.de.alcon.com
www.br.alcon.com
prod.br.alcon.com
www.alcon.fr
www.alcon.ch
www.alcon.ru
www.alcon.hu
www.alcon.com.tw
www.tr.alcon.com
prod.tr.alcon.com
www.uk.alcon.com
prod.uk.alcon.com
www.ve.alcon.com
prod.ve.alcon.com
www.alcon.mx
www.cz.alcon.com
prod.cz.alcon.com
www.alcon.ca
www.alcon.com.cn
www.alcon.co.jp
www.sandoz.com
www.alcon.co.it
www.sandoz.uk.com
www.us.sandoz.com
prod.us.sandoz.com
www.sandoz.nl
prod.alcon.com.cn
www.sandoz.com.cn
www.sandoz.hr
prod.sandoz.com.cn
www.sandoz.it
www.sandozfarma.es
www.sandoz.ca
www.alcon.co.kr
www.sandoz.pl
www.sandoz.no
www.sandoz.dk
www.sandoz.se
www.sandoz.fi
www.alconpharma.jp
www.sandoz.com.tr
www.sandoz.cz
www.sandoz.hu
www.sandoz.ru
www.sandoz.com.ar
www.sandoz.com.au
www.sandoz.fr
www.sandoz.be
www.sandoz.ua
www.sandoz.de
www.sandoz-pharmaceuticals.ch
www.wavelight.de
www.sandoz.com.co
www.alcon.ua
www.sandoz.com.br
www.patientassistancenow.com
www.alcon.pt
www.sandoz.ro
www.sandoz.kr
www.navigatebp.com
www.sandoz.at
www.sandoz.rs
www.sandoz.jp
www.sandoz.bg
www.sandozca.com
www.hexal.de
www.sandoz.gr
www.medforum.com.mx
prod.kz.alcon.com
www.kz.alcon.com
www.cosentyx.com

Other certificates including the domain name genoptix.com

(limited to 100 certificates)
www.genoptix.com
genoptix.com
5709436928655360-fe2.pantheonsite.io
incapsula.com
www.genoptix.com
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
www.genoptix.com
5709436928655360-fe2.pantheonsite.io
www.genoptix.com
www.genoptix.com
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
www.genoptix.com
incapsula.com
5709436928655360-fe2.pantheonsite.io
www.genoptix.com
5709436928655360-fe2.pantheonsite.io
incapsula.com
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
ssl331248.cloudflaressl.com
ssl7782.cloudflare.com
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
www.genoptix.com
genoptix.com
*.genoptix.com
genoptix.com
incapsula.com
sails1.genoptix.com
5709436928655360-fe2.pantheonsite.io
www.genoptix.com
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
www.genoptix.com
cim.genoptix.com
incapsula.com
incapsula.com
5709436928655360-fe2.pantheonsite.io
incapsula.com
www.genoptix.com
5709436928655360-fe2.pantheonsite.io
www.genoptix.com
www.genoptix.com
5709436928655360-fe2.pantheonsite.io
*.genoptix.com
ecompass.genoptix.com
sails1.genoptix.com
*.genoptix.com
5709436928655360-fe2.pantheonsite.io
ssl537996.cloudflaressl.com
5709436928655360-fe2.pantheonsite.io
sails2.genoptix.com
*.genoptix.com
www.genoptix.com
sails1.genoptix.com
ssl537997.cloudflaressl.com
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
www.genoptix.com
5709436928655360-fe2.pantheonsite.io
www.genoptix.com
5709436928655360-fe2.pantheonsite.io
ssl331248.cloudflaressl.com
www.genoptix.com
www.genoptix.com
media.genoptix.com
www.genoptix.com
5709436928655360-fe2.pantheonsite.io
*.genoptix.com
www.genoptix.com
5709436928655360-fe2.pantheonsite.io
www.genoptix.com
www.novartis.com
www.genoptix.com
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
www.genoptix.com
www.genoptix.com
ssl7782.cloudflare.com
5709436928655360-fe2.pantheonsite.io
www.genoptix.com
www.genoptix.com
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
www.genoptix.com
spectrum.genoptix.com
www.genoptix.com
www.genoptix.com
www.genoptix.com
incapsula.com
www.genoptix.com
www.genoptix.com
clientlounge.genoptix.com

Certificate

The complete raw certificate details for www.genoptix.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILMjCCChqgAwIBAgIQCcq3t8eeE4ePkfJUykwbMzANBgkqhkiG9w0BAQsFADBw
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz
dXJhbmNlIFNlcnZlciBDQTAeFw0xOTA0MDIwMDAwMDBaFw0xOTEwMzAxMjAwMDBa
MFUxCzAJBgNVBAYTAkNIMQ4wDAYDVQQHEwVCYXNlbDEbMBkGA1UEChMSTm92YXJ0
aXMgUGhhcm1hIEFHMRkwFwYDVQQDExB3d3cuZ2Vub3B0aXguY29tMIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA058IEIeEjSoLvjUwNLp5pQigDHC6HRJP
SqwZdapLuYe8qVGQAuZq/6Qls65oZztqFJUdT/L6L+hQ5goVNE7uJ3kjCuxwHX8r
z2HcOsI1WAr3w9U5LPICpsbz/1t3h6GhK24BsB+m/qbFhR5JpGQqAP4bIlID6FLa
qM92ljupcX315cCDU7jaw/6jbfQkzfTP5ZcH/u56iDXLQWzO34FrxaRJb8Ha26TS
eDoJhHagmpBLpc/2ub5DtVo2wDFq5EYE454Mg7mE/6w4iUPyEixYjFJgx0BxteXU
hhGUMvcAlAuOfKRm6ciynHTeePzIPYDTAOt72RuS90zNNq+vYKFAowIDAQABo4IH
4TCCB90wHwYDVR0jBBgwFoAUUWj/kK8CB3U8zNllZGKiErhZcjswHQYDVR0OBBYE
FN1Yrj5Ksd/bS7EHMnuEEtL0fVcYMIIF/AYDVR0RBIIF8zCCBe+CEHd3dy5nZW5v
cHRpeC5jb22CFXd3dy5hdXRoLm5vdmFydGlzLmNvbYIWd3d3LmV3c2RycGJhc2Vs
aW5lLmNvbYIWd3d3LmV3c2RycHRyYWluaW5nLmNvbYIJYWxjb24uY29tgg13d3cu
YWxjb24uY29tggx3d3cuYWxjb24uZGuCDHd3dy5hbGNvbi5zZYIMd3d3LmFsY29u
Lm5vggx3d3cuYWxjb24uZmmCGnd3dy5waGFybWEudXMubm92YXJ0aXMuY29tghtw
cm9kLnBoYXJtYS51cy5ub3ZhcnRpcy5jb22CEHd3dy5iZS5hbGNvbi5jb22CEXBy
b2QuYmUuYWxjb24uY29tggx3d3cuYWxjb24uZXOCEHd3dy5kZS5hbGNvbi5jb22C
EXByb2QuZGUuYWxjb24uY29tghB3d3cuYnIuYWxjb24uY29tghFwcm9kLmJyLmFs
Y29uLmNvbYIMd3d3LmFsY29uLmZyggx3d3cuYWxjb24uY2iCDHd3dy5hbGNvbi5y
dYIMd3d3LmFsY29uLmh1ghB3d3cuYWxjb24uY29tLnR3ghB3d3cudHIuYWxjb24u
Y29tghFwcm9kLnRyLmFsY29uLmNvbYIQd3d3LnVrLmFsY29uLmNvbYIRcHJvZC51
ay5hbGNvbi5jb22CEHd3dy52ZS5hbGNvbi5jb22CEXByb2QudmUuYWxjb24uY29t
ggx3d3cuYWxjb24ubXiCEHd3dy5jei5hbGNvbi5jb22CEXByb2QuY3ouYWxjb24u
Y29tggx3d3cuYWxjb24uY2GCEHd3dy5hbGNvbi5jb20uY26CD3d3dy5hbGNvbi5j
by5qcIIOd3d3LnNhbmRvei5jb22CD3d3dy5hbGNvbi5jby5pdIIRd3d3LnNhbmRv
ei51ay5jb22CEXd3dy51cy5zYW5kb3ouY29tghJwcm9kLnVzLnNhbmRvei5jb22C
DXd3dy5zYW5kb3oubmyCEXByb2QuYWxjb24uY29tLmNughF3d3cuc2FuZG96LmNv
bS5jboINd3d3LnNhbmRvei5ocoIScHJvZC5zYW5kb3ouY29tLmNugg13d3cuc2Fu
ZG96Lml0ghJ3d3cuc2FuZG96ZmFybWEuZXOCDXd3dy5zYW5kb3ouY2GCD3d3dy5h
bGNvbi5jby5rcoINd3d3LnNhbmRvei5wbIINd3d3LnNhbmRvei5ub4INd3d3LnNh
bmRvei5ka4INd3d3LnNhbmRvei5zZYINd3d3LnNhbmRvei5maYISd3d3LmFsY29u
cGhhcm1hLmpwghF3d3cuc2FuZG96LmNvbS50coINd3d3LnNhbmRvei5jeoINd3d3
LnNhbmRvei5odYINd3d3LnNhbmRvei5ydYIRd3d3LnNhbmRvei5jb20uYXKCEXd3
dy5zYW5kb3ouY29tLmF1gg13d3cuc2FuZG96LmZygg13d3cuc2FuZG96LmJlgg13
d3cuc2FuZG96LnVhgg13d3cuc2FuZG96LmRlgh13d3cuc2FuZG96LXBoYXJtYWNl
dXRpY2Fscy5jaIIQd3d3LndhdmVsaWdodC5kZYIRd3d3LnNhbmRvei5jb20uY2+C
DHd3dy5hbGNvbi51YYIRd3d3LnNhbmRvei5jb20uYnKCHHd3dy5wYXRpZW50YXNz
aXN0YW5jZW5vdy5jb22CDHd3dy5hbGNvbi5wdIINd3d3LnNhbmRvei5yb4INd3d3
LnNhbmRvei5rcoISd3d3Lm5hdmlnYXRlYnAuY29tgg13d3cuc2FuZG96LmF0gg13
d3cuc2FuZG96LnJzgg13d3cuc2FuZG96Lmpwgg13d3cuc2FuZG96LmJnghB3d3cu
c2FuZG96Y2EuY29tggx3d3cuaGV4YWwuZGWCDXd3dy5zYW5kb3ouZ3KCE3d3dy5t
ZWRmb3J1bS5jb20ubXiCEXByb2Qua3ouYWxjb24uY29tghB3d3cua3ouYWxjb24u
Y29tghB3d3cuY29zZW50eXguY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwdQYDVR0fBG4wbDA0oDKgMIYuaHR0cDovL2Ny
bDMuZGlnaWNlcnQuY29tL3NoYTItaGEtc2VydmVyLWc2LmNybDA0oDKgMIYuaHR0
cDovL2NybDQuZGlnaWNlcnQuY29tL3NoYTItaGEtc2VydmVyLWc2LmNybDBMBgNV
HSAERTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5k
aWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjCBgwYIKwYBBQUHAQEEdzB1MCQGCCsG
AQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wTQYIKwYBBQUHMAKGQWh0
dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJIaWdoQXNzdXJh
bmNlU2VydmVyQ0EuY3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQC
BQAwDQYJKoZIhvcNAQELBQADggEBAC8K7bsP/KXWwRrJov1AvlVQgmKFr2ZskyU0
2ojDsnDypOvYjx+3YZ2G8lyezrLfZTMsrpOAA18UuOgQxUaEKTpt6qh7cbQrSPcj
hQPLQXb0OBUVdL+t4L0+6x2m0Rtu8HbuisEQ3ldCoZhkww5+Kyq/iOFeqM+zpXAK
nRjrnZzWmDLHg4u9tey8A4B7MEOmn9eLup0PKBDeLsIJ6/OIREhIGiUwQJY5b10h
Wo1T5/j4FabBf/Gx3VtLxZgus7pZCG2yAZmNRvWPTiktkZYze3mwcoAGJlYrpPcK
HBBPWbuY6EvlXi8gL48PkT3GQqVAt4nmzbh2TDJqkByMDzr9pww=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA058IEIeEjSoLvjUwNLp5
pQigDHC6HRJPSqwZdapLuYe8qVGQAuZq/6Qls65oZztqFJUdT/L6L+hQ5goVNE7u
J3kjCuxwHX8rz2HcOsI1WAr3w9U5LPICpsbz/1t3h6GhK24BsB+m/qbFhR5JpGQq
AP4bIlID6FLaqM92ljupcX315cCDU7jaw/6jbfQkzfTP5ZcH/u56iDXLQWzO34Fr
xaRJb8Ha26TSeDoJhHagmpBLpc/2ub5DtVo2wDFq5EYE454Mg7mE/6w4iUPyEixY
jFJgx0BxteXUhhGUMvcAlAuOfKRm6ciynHTeePzIPYDTAOt72RuS90zNNq+vYKFA
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13015622168978105862724506591469247283
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-30 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Basel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Novartis Pharma AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.genoptix.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26714703704386106459520109116714613585082901625283566879766245418617044106608264728525114921279872055816592658190232649977061928639313647806504291337916038819172027662732648926756853276280053654193915276586705935908063545847396994958912932940449888548550423324391736247896277095324942763183492241058951362300102462580755830912153531135112095917447648190096591547759746129322522496538978565852457506305865335685303706977077821537420567857921200759738033623389430873288392947396670026438159528862190551462050749368126053248658057673947686788744194090262178250669261194240793260889169783953121111365979145820561146462371
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dd58ae3e4ab1dfdb4bb107327b8412d2f47d5718
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1523 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.genoptix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auth.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ewsdrpbaseline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ewsdrptraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alcon.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alcon.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alcon.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alcon.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pharma.us.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.pharma.us.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.be.alcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.be.alcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alcon.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.de.alcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.de.alcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.br.alcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.br.alcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alcon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alcon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alcon.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alcon.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alcon.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tr.alcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.tr.alcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uk.alcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.uk.alcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ve.alcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.ve.alcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alcon.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cz.alcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.cz.alcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alcon.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alcon.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alcon.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandoz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alcon.co.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandoz.uk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.us.sandoz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.us.sandoz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandoz.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.alcon.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandoz.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandoz.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.sandoz.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandoz.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandozfarma.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandoz.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alcon.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandoz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandoz.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandoz.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandoz.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandoz.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alconpharma.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandoz.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandoz.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandoz.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandoz.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandoz.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandoz.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandoz.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandoz.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandoz.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandoz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandoz-pharmaceuticals.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wavelight.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandoz.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alcon.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandoz.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.patientassistancenow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alcon.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandoz.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandoz.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.navigatebp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandoz.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandoz.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandoz.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandoz.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandozca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hexal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandoz.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medforum.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.kz.alcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kz.alcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cosentyx.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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