bms.com

- Bristol-Myers Squibb Co. -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 08:41:54:16:5d:a1:45:96:91:94:cd:db:b1:d6:20:fa was issued on by DigiCert Inc.

With 101 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bristol-Myers Squibb Co.

Organization: Bristol-Myers Squibb Co.
State / Province: New Jersey
Locality: Pennington
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:41:54:16:5d:a1:45:96:91:94:cd:db:b1:d6:20:fa
Serial Number (int): 10973028756487444424348188896719675642
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c8:71:d3:fa:b0:0b:e8:b5:1e:5f:01:30:11:34:bb:96:cd:a8:03:27
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): ea:bb:2a:45:52:6c:bd:53:30:2a:a4:a6:26:7c:00:26:98:02:0d:77
Fingerprint (sha256): 71:ba:76:71:fa:43:97:59:74:90:8b:0f:42:75:ed:d2:a4:46:f1:98:44:39:86:c7:ba:9e:05:2d:2c:81:8e:5f

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate bms.com

101

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bms.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bms.com
hetjuisteritme.be
orenciapatient.se
kanen-net.info
reyataz.com
melanom-wissen.ch
nulojixhcp.bmscustomerconnect.com
opdivorx.com
globalbmsmedinfo.com
bms-ioconnect.com.au
onureg.at
revlimid-japan.jp
pomalyst-japan.jp
celmed.jp
istodax-japan.jp
lenadex-japan.jp
opdivocombotherapy.com
eliquisdataportal.com
eliquis.at
kenaloghcp.bmscustomerconnect.com
zeposia.se
takaisintahtiin.fi
sprycel.jp
eliquis.bmscustomerconnect.com
patientsupport.bmscustomerconnect.com
zeposia.com
bmsaccesssupport.bmscustomerconnect.com
msmindshift.com
bmspricinginformation.com
opdivosafetytool.com
evotaz.com
bmscustomerconnect.com
opdivoespanol.com
eliquis.co.uk
bms-io-academy.co.uk
immunonkologi.se
opdivopatient.se
immuno-oncologie.nl
riumachitearoom.jp
bmshealthcare.jp
orencia.jp
eliquis.jp
yervoy.jp
car-t.jp
immunooncology.jp
rinpashu.jp
hemapedia.jp
anticoagulante.info
eliquis.ie
opd.bmssafetytools.com
immunooncology.be
immunoscienceacademy.be
herzstolpern.at
sprycel.com
exposehcm.com
realconnections.com
seelag3.com
bmsmelanoma.com
empliciti.jp
consent.bmsinformation.com
upl.org
evotazhcp.com
bmsmedical.com
bmsmedinfo.fr
bmsmedinfo.co.uk
eliquis-patienteninfo.de
imunologiabms.com.br
notimetowait.com
eliquis.com
opdivo.com
orencia.com
eliquishcp.com
detect-afib.com
eliquisespanol.com
opdivohcp.com
orenciahcp.com
msinharmony.com
yervoy.com
opdivoyervoymnsclc.com
zeposiaespanol.com
bmsmedinfo.com
sprycel-hcp.com
empliciti.com
emplicitihcp.com
tyknology.com
immunooncologyhcp.com
immunooncology.com
bms-onkologie.de
orencia.de
aktiv-mit-rheuma.de
aktiv-mit-psa.de
aktiv-mit-jia.de
bmsmedinfo.de
nulojix.de
pflege-onkologie.de
eliquis.de
krebs.de
herzstolpern.de
auf-herz-und-venen.de
dernaechsteschritt.de
eli.bmssafetytools.com

Other certificates including the domain name bms.com

(limited to 100 certificates)
*.web-uat.bms.com
cloudapi-dev.web-dev.bms.com
pmwebspec-dev.web-dev.bms.com
bms.com
online-annual-report-2019.bms.com
chatlanguage-api-uat.web-dev.bms.com
sclaunchapi.web.bms.com
sampleredirector-lab.web-lab.bms.com
phlieconusc.bms.com
*.web-uat.bms.com
purl-dev.web-dev.bms.com
s3restapi.web-dev.bms.com
compliance-uat.web-dev.bms.com
simphoni-uat.web-dev.bms.com
sitecentral-intg-uat.web-dev.bms.com
akamaisecure3.qualtrics.com
pc-rc.web.bms.com
sampleredirector-lab.web-lab.bms.com
confluencetest.web-dev.bms.com
lt3-distreview-ws-dev1.web-dev.bms.com
jira.web-dev.bms.com
frictionless.bms.com
*.web-dev.bms.com
gettoknowlungcancer-dev.web-dev.bms.com
testebstandjava.web-dev.bms.com
testebstandej.web-dev.bms.com
svclayer-api-rc.web.bms.com
compgps-dev.web-dev.bms.com
siteminder-dev.web-dev.bms.com
medsights-rc.web.bms.com
iddea-mauth-proxy-dev.web-dev.bms.com
eaaapi-uat.web-dev.bms.com
paxata-dev-cm.web-dev.bms.com
pdmpa-uat.web-dev.bms.com
connect2bms.com
lt3-distreview-dotnet-ws-test.web-dev.bms.com
active-journal-dev.web-dev.bms.com
sinequa-uat.web-dev.bms.com
siteminder-dev.web-dev.bms.com
loadingdock-lab.web-lab.bms.com
who.bms.com
glt-rc-preview.web.bms.com
beio-dev.web-dev.bms.com
*.web-dev.bms.com
360-uatr.web-dev.bms.com
siteminder-dev.web-dev.bms.com
fun-rc.web.bms.com
*.web-dev.bms.com
eportal-uat.bms.com
gpve.bms.com
idm-idq-dev.web-dev.bms.com
loki.bms.com
sampleredirector-dev.web-dev.bms.com
tcws.web.bms.com
gps-data-mapping-dev.web-dev.bms.com
edcnodehdp02.web.bms.com
siteminder-dev.web-dev.bms.com
siteminder-dev.web-dev.bms.com
*.web.bms.com
commgps-preview.web.bms.com
fun-dev.web-dev.bms.com
bms.com
pubd-rc.web.bms.com
sinequa-uat.web-dev.bms.com
contractorvideo.web-dev.bms.com
beio-pushnotification-api-dev.web-dev.bms.com
*.spappsp.bms.com
testebstandej.web-dev.bms.com
bms.com
uspcomplianceandethics.bms.com
mytrials.bms.com
paxata-dev-cm.web-dev.bms.com
tcwsloginsvc-lab.web-lab.bms.com
testebstandej.web-dev.bms.com
sinequa-dev.web-dev.bms.com
eroster-api-uat.web-dev.bms.com
rwcbff09.pri.bms.com
ewhitebook.bms.com
*.web-uat.bms.com
clinicaltrialsnavigator-dev.web-dev.bms.com
fiori.bms.com
pubpodcasts.web.bms.com
testebstandej.web-dev.bms.com
autoptp-rc.web.bms.com
rex-tst.bms.com
sampleredirector-dev.web-dev.bms.com
sampleredirector-lab.web-lab.bms.com
svclayer-npa-api-dev.web-dev.bms.com
*.bms.com
t-rc.web.bms.com
testebstandnodejs.web-dev.bms.com
sampleredirector-dev.web-dev.bms.com
*.web.bms.com
smusath.net.bms.com
lt3-distreview-ws-dev.web-dev.bms.com
*.web-uat.bms.com
lt3-distreview-uat.web-dev.bms.com
edcnodehdp01-devprev-dev.web-dev.bms.com
lt3-distreview-gateway-uat.web-dev.bms.com
us.webmail.bms.com

Certificate

The complete raw certificate details for bms.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XpwhcWnUegIw3e+wwZg
9ocRIt3bXJC5aISln9hTPmMZ18DJnlP8kWWisAbfeR5WUAcIFvdRZSMZMI8/bMjP
5/WUK+GaX0s5w8DkcgffFjDe+JNhvQ6/xHN2FJWW1qAgSgtVVghuIGU7JoJQe91I
WixLoJIDRejV2LurqVq7E9Wi9CX4cJKVToKF5Exi/0f2GlUdEFsGGJvxWsbqAYUj
MW1Twl6r99j3u3WYRnBkBTVhtoc1ReU9aJ1k4TviRAXm7cbmzW9/Ye0gGq6sc1yG
DLB8chALfTDzvXhhc8utt7b4eIzov625XwgDrkU2/er8493EY7dizvlxGaozZVtL
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10973028756487444424348188896719675642
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bristol-Myers Squibb Co.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bms.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28968949025281768694891033874491866980653121485791064751448769611502277713022955761476345106309317795296778291598471153701286684872089684470611687606868117794341944418848424615584803924293405972936600199327069884202445675072429780872281783754019404891462170255081650062111924013285920896160991840562054904211647946810382686737361555028571534165230504813747527064737829175654276952160831532568624715410891234940038723056472493513513483227687779619344024039876727861667900030953241236279389632518361851365033832930078820337045790835132084429725406370703679367307646393193646752356947460307380999004816487357068540070667
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c871d3fab00be8b51e5f01301134bb96cda80327
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1836 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hetjuisteritme.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orenciapatient.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanen-net.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reyataz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melanom-wissen.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nulojixhcp.bmscustomerconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opdivorx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalbmsmedinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bms-ioconnect.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onureg.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revlimid-japan.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pomalyst-japan.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celmed.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'istodax-japan.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lenadex-japan.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opdivocombotherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eliquisdataportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eliquis.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kenaloghcp.bmscustomerconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zeposia.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takaisintahtiin.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sprycel.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eliquis.bmscustomerconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patientsupport.bmscustomerconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zeposia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmsaccesssupport.bmscustomerconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msmindshift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmspricinginformation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opdivosafetytool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evotaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmscustomerconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opdivoespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eliquis.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bms-io-academy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immunonkologi.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opdivopatient.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immuno-oncologie.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riumachitearoom.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmshealthcare.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orencia.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eliquis.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yervoy.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'car-t.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immunooncology.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rinpashu.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hemapedia.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anticoagulante.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eliquis.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opd.bmssafetytools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immunooncology.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immunoscienceacademy.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herzstolpern.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sprycel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exposehcm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realconnections.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seelag3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmsmelanoma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'empliciti.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.bmsinformation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evotazhcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmsmedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmsmedinfo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmsmedinfo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eliquis-patienteninfo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imunologiabms.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notimetowait.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eliquis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opdivo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orencia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eliquishcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'detect-afib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eliquisespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opdivohcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orenciahcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msinharmony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yervoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opdivoyervoymnsclc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zeposiaespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmsmedinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sprycel-hcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'empliciti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emplicitihcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tyknology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immunooncologyhcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immunooncology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bms-onkologie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orencia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aktiv-mit-rheuma.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aktiv-mit-psa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aktiv-mit-jia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmsmedinfo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nulojix.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pflege-onkologie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eliquis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krebs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herzstolpern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auf-herz-und-venen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dernaechsteschritt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eli.bmssafetytools.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004a8f267b644bc01e918937f04000e00c599a255b9260181f62b5fe53dd9ff073f907486d79df67fb52798e410ccf94501989e927ebde20db0110b971ffb517bced1b5aa45dc340226fef469c778f500018b3aa67ade5b4800777a6d95953103816f953f0a83b35c3491840bad8059f8125298a2cc8617694d734f484fd2c6f7ec7393089e1a9f660f25b306908e9cd583219dedbe10d01e76c7d233f54029fa25b71e9b0da5fb64aeba711f9150c2aadeab3db4c856a707e10cbf38d2d69d992b9312facabc2211d0eb9837b30205a0db7fbd9ee235db58c6bb53d4a6ac3e3ed243e06d5cad7dc4128389c3d27d1c4fbdeb086e27b5cede11e5e907926422d9d