www.genoptix.com
- Novartis Pharma AG -
Issued by DigiCert SHA2 High Assurance Server CA
About this certificate
This digital certificate with serial number 06:85:34:dc:e1:36:90:9a:d1:7d:ab:5f:87:e3:14:74 was issued on by DigiCert Inc.
With 43 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Novartis Pharma AG
Organization:
Novartis Pharma AG
State / Province:
Basel-Stadt
Locality: Basel
Country: CH
Locality: Basel
Country: CH
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 06:85:34:dc:e1:36:90:9a:d1:7d:ab:5f:87:e3:14:74Serial Number (int): 8667015642089862417763075181701698676
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 1e:fe:10:25:5e:06:35:03:0a:0d:2d:63:01:0e:f3:d6:ca:24:89:88
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b
Fingerprint (sha1): df:56:8f:e1:e4:f0:65:94:ff:41:2e:cf:4b:78:db:a8:42:6e:d3:c2
Fingerprint (sha256): 75:8d:f9:63:41:d3:29:0c:53:50:db:fb:27:8c:e7:e8:57:7f:75:d9:3d:e8:23:d1:b9:b6:2a:2b:9b:ec:e7:03
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g5.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g5.crl
Check the revocation status for certificate www.genoptix.com
43
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.genoptix.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.genoptix.com
www.auth.novartis.com
www.ewsdrpbaseline.com
www.ewsdrptraining.com
alcon.com
www.alcon.com
www.alcon.dk
www.alcon.se
www.alcon.no
www.alcon.fi
www.pharma.us.novartis.com
prod.pharma.us.novartis.com
www.be.alcon.com
prod.be.alcon.com
www.alcon.es
www.de.alcon.com
prod.de.alcon.com
www.br.alcon.com
prod.br.alcon.com
www.alcon.fr
www.alcon.ch
www.alcon.ru
www.alcon.hu
www.alcon.com.tw
www.tr.alcon.com
prod.tr.alcon.com
www.uk.alcon.com
prod.uk.alcon.com
www.ve.alcon.com
prod.ve.alcon.com
www.alcon.mx
www.cz.alcon.com
prod.cz.alcon.com
www.alcon.ca
www.alcon.com.cn
www.alcon.co.jp
www.sandoz.com
www.alcon.co.it
www.sandoz.uk.com
www.us.sandoz.com
prod.us.sandoz.com
www.sandoz.nl
prod.alcon.com.cn
www.auth.novartis.com
www.ewsdrpbaseline.com
www.ewsdrptraining.com
alcon.com
www.alcon.com
www.alcon.dk
www.alcon.se
www.alcon.no
www.alcon.fi
www.pharma.us.novartis.com
prod.pharma.us.novartis.com
www.be.alcon.com
prod.be.alcon.com
www.alcon.es
www.de.alcon.com
prod.de.alcon.com
www.br.alcon.com
prod.br.alcon.com
www.alcon.fr
www.alcon.ch
www.alcon.ru
www.alcon.hu
www.alcon.com.tw
www.tr.alcon.com
prod.tr.alcon.com
www.uk.alcon.com
prod.uk.alcon.com
www.ve.alcon.com
prod.ve.alcon.com
www.alcon.mx
www.cz.alcon.com
prod.cz.alcon.com
www.alcon.ca
www.alcon.com.cn
www.alcon.co.jp
www.sandoz.com
www.alcon.co.it
www.sandoz.uk.com
www.us.sandoz.com
prod.us.sandoz.com
www.sandoz.nl
prod.alcon.com.cn
Other certificates including the domain name genoptix.com
(limited to 100 certificates)
www.genoptix.com
genoptix.com
5709436928655360-fe2.pantheonsite.io
incapsula.com
www.genoptix.com
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
www.genoptix.com
5709436928655360-fe2.pantheonsite.io
www.genoptix.com
www.genoptix.com
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
www.genoptix.com
incapsula.com
5709436928655360-fe2.pantheonsite.io
www.genoptix.com
5709436928655360-fe2.pantheonsite.io
incapsula.com
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
ssl331248.cloudflaressl.com
ssl7782.cloudflare.com
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
www.genoptix.com
genoptix.com
*.genoptix.com
genoptix.com
incapsula.com
sails1.genoptix.com
5709436928655360-fe2.pantheonsite.io
www.genoptix.com
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
www.genoptix.com
cim.genoptix.com
incapsula.com
incapsula.com
5709436928655360-fe2.pantheonsite.io
incapsula.com
www.genoptix.com
5709436928655360-fe2.pantheonsite.io
www.genoptix.com
www.genoptix.com
5709436928655360-fe2.pantheonsite.io
*.genoptix.com
ecompass.genoptix.com
sails1.genoptix.com
*.genoptix.com
5709436928655360-fe2.pantheonsite.io
ssl537996.cloudflaressl.com
5709436928655360-fe2.pantheonsite.io
sails2.genoptix.com
*.genoptix.com
www.genoptix.com
sails1.genoptix.com
ssl537997.cloudflaressl.com
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
www.genoptix.com
5709436928655360-fe2.pantheonsite.io
www.genoptix.com
5709436928655360-fe2.pantheonsite.io
ssl331248.cloudflaressl.com
www.genoptix.com
www.genoptix.com
media.genoptix.com
www.genoptix.com
5709436928655360-fe2.pantheonsite.io
*.genoptix.com
www.genoptix.com
5709436928655360-fe2.pantheonsite.io
www.genoptix.com
www.novartis.com
www.genoptix.com
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
www.genoptix.com
www.genoptix.com
ssl7782.cloudflare.com
5709436928655360-fe2.pantheonsite.io
www.genoptix.com
www.genoptix.com
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
www.genoptix.com
spectrum.genoptix.com
www.genoptix.com
www.genoptix.com
www.genoptix.com
incapsula.com
www.genoptix.com
www.genoptix.com
clientlounge.genoptix.com
genoptix.com
5709436928655360-fe2.pantheonsite.io
incapsula.com
www.genoptix.com
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
www.genoptix.com
5709436928655360-fe2.pantheonsite.io
www.genoptix.com
www.genoptix.com
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
www.genoptix.com
incapsula.com
5709436928655360-fe2.pantheonsite.io
www.genoptix.com
5709436928655360-fe2.pantheonsite.io
incapsula.com
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
ssl331248.cloudflaressl.com
ssl7782.cloudflare.com
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
www.genoptix.com
genoptix.com
*.genoptix.com
genoptix.com
incapsula.com
sails1.genoptix.com
5709436928655360-fe2.pantheonsite.io
www.genoptix.com
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
www.genoptix.com
cim.genoptix.com
incapsula.com
incapsula.com
5709436928655360-fe2.pantheonsite.io
incapsula.com
www.genoptix.com
5709436928655360-fe2.pantheonsite.io
www.genoptix.com
www.genoptix.com
5709436928655360-fe2.pantheonsite.io
*.genoptix.com
ecompass.genoptix.com
sails1.genoptix.com
*.genoptix.com
5709436928655360-fe2.pantheonsite.io
ssl537996.cloudflaressl.com
5709436928655360-fe2.pantheonsite.io
sails2.genoptix.com
*.genoptix.com
www.genoptix.com
sails1.genoptix.com
ssl537997.cloudflaressl.com
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
www.genoptix.com
5709436928655360-fe2.pantheonsite.io
www.genoptix.com
5709436928655360-fe2.pantheonsite.io
ssl331248.cloudflaressl.com
www.genoptix.com
www.genoptix.com
media.genoptix.com
www.genoptix.com
5709436928655360-fe2.pantheonsite.io
*.genoptix.com
www.genoptix.com
5709436928655360-fe2.pantheonsite.io
www.genoptix.com
www.novartis.com
www.genoptix.com
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
www.genoptix.com
www.genoptix.com
ssl7782.cloudflare.com
5709436928655360-fe2.pantheonsite.io
www.genoptix.com
www.genoptix.com
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
www.genoptix.com
spectrum.genoptix.com
www.genoptix.com
www.genoptix.com
www.genoptix.com
incapsula.com
www.genoptix.com
www.genoptix.com
clientlounge.genoptix.com
Certificate
The complete raw certificate details for www.genoptix.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIPzCCByegAwIBAgIQBoU03OE2kJrRfatfh+MUdDANBgkqhkiG9w0BAQsFADBw MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz dXJhbmNlIFNlcnZlciBDQTAeFw0xNjA0MTkwMDAwMDBaFw0xNzA4MTcxMjAwMDBa MGsxCzAJBgNVBAYTAkNIMRQwEgYDVQQIEwtCYXNlbC1TdGFkdDEOMAwGA1UEBxMF QmFzZWwxGzAZBgNVBAoTEk5vdmFydGlzIFBoYXJtYSBBRzEZMBcGA1UEAxMQd3d3 Lmdlbm9wdGl4LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANxM Drw5INt+G8pm29JK3yObtzRZn0dsgjjFgf5G9Re9rqs2V21b+vUyOBuW8yHoIrwq TkPKHIpHNi6viJv9WVlCpuSoaVXqNa03l+UQIb4KxluSOUtpH7gkmfLyUXc9dWtg vdZ9/ypNsxtyHpb+iX/aLs48nthsTnRdpUyizoux3ytIG3T2ACbxxVgCLZkt3a4c /vLNnEmQVG/LiXXfi3/us753y/NrKerltOe2rZ2dIyYpBg2GcgoVVy+FlTo6N6kd PAfKM0NXu049XFmXprpL0kq7JvRDD43CC3EVbazez8jUdP9osxSvDU7ywxT6Sm8O 7z14Z8UeqDyq0AL5MvUCAwEAAaOCBNgwggTUMB8GA1UdIwQYMBaAFFFo/5CvAgd1 PMzZZWRiohK4WXI7MB0GA1UdDgQWBBQe/hAlXgY1AwoNLWMBDvPWyiSJiDCCAwgG A1UdEQSCAv8wggL7ghB3d3cuZ2Vub3B0aXguY29tghV3d3cuYXV0aC5ub3ZhcnRp cy5jb22CFnd3dy5ld3NkcnBiYXNlbGluZS5jb22CFnd3dy5ld3NkcnB0cmFpbmlu Zy5jb22CCWFsY29uLmNvbYINd3d3LmFsY29uLmNvbYIMd3d3LmFsY29uLmRrggx3 d3cuYWxjb24uc2WCDHd3dy5hbGNvbi5ub4IMd3d3LmFsY29uLmZpghp3d3cucGhh cm1hLnVzLm5vdmFydGlzLmNvbYIbcHJvZC5waGFybWEudXMubm92YXJ0aXMuY29t ghB3d3cuYmUuYWxjb24uY29tghFwcm9kLmJlLmFsY29uLmNvbYIMd3d3LmFsY29u LmVzghB3d3cuZGUuYWxjb24uY29tghFwcm9kLmRlLmFsY29uLmNvbYIQd3d3LmJy LmFsY29uLmNvbYIRcHJvZC5ici5hbGNvbi5jb22CDHd3dy5hbGNvbi5mcoIMd3d3 LmFsY29uLmNoggx3d3cuYWxjb24ucnWCDHd3dy5hbGNvbi5odYIQd3d3LmFsY29u LmNvbS50d4IQd3d3LnRyLmFsY29uLmNvbYIRcHJvZC50ci5hbGNvbi5jb22CEHd3 dy51ay5hbGNvbi5jb22CEXByb2QudWsuYWxjb24uY29tghB3d3cudmUuYWxjb24u Y29tghFwcm9kLnZlLmFsY29uLmNvbYIMd3d3LmFsY29uLm14ghB3d3cuY3ouYWxj b24uY29tghFwcm9kLmN6LmFsY29uLmNvbYIMd3d3LmFsY29uLmNhghB3d3cuYWxj b24uY29tLmNugg93d3cuYWxjb24uY28uanCCDnd3dy5zYW5kb3ouY29tgg93d3cu YWxjb24uY28uaXSCEXd3dy5zYW5kb3oudWsuY29tghF3d3cudXMuc2FuZG96LmNv bYIScHJvZC51cy5zYW5kb3ouY29tgg13d3cuc2FuZG96Lm5sghFwcm9kLmFsY29u LmNvbS5jbjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG AQUFBwMCMHUGA1UdHwRuMGwwNKAyoDCGLmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNv bS9zaGEyLWhhLXNlcnZlci1nNS5jcmwwNKAyoDCGLmh0dHA6Ly9jcmw0LmRpZ2lj ZXJ0LmNvbS9zaGEyLWhhLXNlcnZlci1nNS5jcmwwTAYDVR0gBEUwQzA3BglghkgB hv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQ UzAIBgZngQwBAgIwgYMGCCsGAQUFBwEBBHcwdTAkBggrBgEFBQcwAYYYaHR0cDov L29jc3AuZGlnaWNlcnQuY29tME0GCCsGAQUFBzAChkFodHRwOi8vY2FjZXJ0cy5k aWdpY2VydC5jb20vRGlnaUNlcnRTSEEySGlnaEFzc3VyYW5jZVNlcnZlckNBLmNy dDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4IBAQBUVhtIJiRpkNRIWcVb S2UIZgSR3SUYIPGHw/MO13wvagz4TJdiTyKvA9LScspSDZVz1V2BAqqRn0BQjYDY m5HMqvSDEBo4J+12M/f9Ajr9aI7oSitN/cv/m5bzQGhVbwTLt25k+CYhKEYBnSCo huCD8TY4MFzJvZAfGwmTOwBBCKc8eQHJETvcd0uejbTbEeD7Ch8I6Tm1lsvwBPk5 G/t7nbQrtfvew9fIUDz1c9bbw5Y/nBO8sFOzLXnZ48WZnQ5cuQ+dtRB2lHs7TNXD 8KMzKAFWt7qx9bGEQcQLMxh87VXWHC7rM1bftItpajKWNGqdPlZaX466aRNy9/YB QUga -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EwOvDkg234bymbb0krf I5u3NFmfR2yCOMWB/kb1F72uqzZXbVv69TI4G5bzIegivCpOQ8ocikc2Lq+Im/1Z WUKm5KhpVeo1rTeX5RAhvgrGW5I5S2kfuCSZ8vJRdz11a2C91n3/Kk2zG3Ielv6J f9ouzjye2GxOdF2lTKLOi7HfK0gbdPYAJvHFWAItmS3drhz+8s2cSZBUb8uJdd+L f+6zvnfL82sp6uW057atnZ0jJikGDYZyChVXL4WVOjo3qR08B8ozQ1e7Tj1cWZem ukvSSrsm9EMPjcILcRVtrN7PyNR0/2izFK8NTvLDFPpKbw7vPXhnxR6oPKrQAvky 9QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 8667015642089862417763075181701698676 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-19 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-17 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Basel-Stadt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Basel' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Novartis Pharma AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.genoptix.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27809932472995352521395552944778663137929999556833605919798709341634336852120324799954140089064583177179921806223810129639580878651334941014253062036337711400282557553882022080233109306195275630314748892718933774268445838470977270860579884950229387634363422782203044260274850121885668904278301937459908651085580921502547308303334367695579046747017311331289703861834489803958804751836509269401157138451445652050819757455234290952580424192492685723271764444767097649969343973774265512703457946346863228919863737002827281551499527941518294903250624340204549205870283300602267996035902365762063635805596019090310601192181 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1efe10255e0635030a0d2d63010ef3d6ca248988 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (767 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.genoptix.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auth.novartis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ewsdrpbaseline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ewsdrptraining.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alcon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alcon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alcon.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alcon.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alcon.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alcon.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pharma.us.novartis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.pharma.us.novartis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.be.alcon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.be.alcon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alcon.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.de.alcon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.de.alcon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.br.alcon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.br.alcon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alcon.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alcon.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alcon.ru' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alcon.hu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alcon.com.tw' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tr.alcon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.tr.alcon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uk.alcon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.uk.alcon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ve.alcon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.ve.alcon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alcon.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cz.alcon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.cz.alcon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alcon.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alcon.com.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alcon.co.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandoz.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alcon.co.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandoz.uk.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.us.sandoz.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.us.sandoz.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandoz.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.alcon.com.cn' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g5.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g5.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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