incapsula.com

- Incapsula Inc -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 57:13:cb:d2:ec:19:83:60:e8:56:6b:00 was issued on by GlobalSign nv-sa.

With 91 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 57:13:cb:d2:ec:19:83:60:e8:56:6b:00
Serial Number (int): 26949127976254750469966424832
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: a6:f8:64:d1:79:f5:92:89:3d:93:f9:30:51:e0:dc:2f:09:1c:ae:36
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 71:42:71:f5:e3:6a:d9:1c:48:8a:bc:43:ab:6b:c1:bc:ef:68:da:6c
Fingerprint (sha256): 88:19:05:33:e2:e3:1f:22:44:5c:ab:65:21:67:a9:b7:e4:82:9e:66:e3:8c:dc:a7:6a:a2:5f:ad:64:a3:2c:97

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate incapsula.com

91

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.aboutspms.com
*.alconexchangeportaltraining.com
*.annualreview.novartis.com
*.betterconversations.novartis.com
*.bioupper.com
*.carcinoid.com
*.cardservices.novartis.com
*.cibavision.com
*.cookie.airoptix.com
*.cosentyx.com
*.customer.us.pharma.novartis.com
*.dev.myalcon.com
*.du-kriegst-mich-nicht-krumm.de
*.entresto.com
*.exelonpatch.com
*.extavia.com
*.focalinxr.com
*.focalview.com
*.get.cibavision.com
*.gilenya.com
*.global.airoptix.com
*.hf360.info
*.ilaris.com
*.irmadashboard.novartis.com
*.joingetconnected.com
*.kymriah.com
*.locatorservices.novartis.com
*.migraene-helden.de
*.myalcon.my
*.ncc.novartis.com
*.non-us.kymriah.com
*.novartis.com
*.novartispharma.com
*.novartispharma.fr
*.nvfund.com
*.offerallocation.novartis.com
*.oncologyaccessnow.com
*.pro.pataday.com
*.ptoryasis.co.il
*.qa.myalcon.com
*.realityofspa.com
*.sandoz-biosimilars.com
*.services.novartis.com
*.sjiasupport.com
*.supplierconnect.novartispharma.com
*.talkspms.com
*.tempodivita.it
*.thisaslife.com
*.todaymyway.com.au
*.unidosporlapsoriasis.com
*.us.keepitpumping.com
*.us.state.lookup.novartis.com
*.virtualconsultant.alcon.com
aboutspms.com
alconexchangeportaltraining.com
bioupper.com
carcinoid.com
cardservices.novartis.com
cibavision.com
cosentyx.com
customer.us.pharma.novartis.com
du-kriegst-mich-nicht-krumm.de
entresto.com
exelonpatch.com
extavia.com
focalinxr.com
focalview.com
gilenya.com
hf360.info
ilaris.com
irmadashboard.novartis.com
joingetconnected.com
kymriah.com
locatorservices.novartis.com
migraene-helden.de
myalcon.my
ncc.novartis.com
novartispharma.com
nvfund.com
offerallocation.novartis.com
oncologyaccessnow.com
ptoryasis.co.il
realityofspa.com
sandoz-biosimilars.com
services.novartis.com
sjiasupport.com
talkspms.com
tempodivita.it
todaymyway.com.au
unidosporlapsoriasis.com

Other certificates including the domain name incapsula.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncF96FfIx7GuFD8K2232
7IYr+njYlmcEIonh0+v6SagbiR59F+mst4Z2HGUMI9ttw/aA8L+RVxfXLxamEbMF
02TqhB+mKeT0JFfiiUL8EN0IJOHnfrTTHvBnUJgnG9BpfNEd9NEr55CkXyOgAebt
BrehJ83R7/OmrpFUaOoPjVBEvPLJHY4Da38i9+bB3DIwVen4qiqJoDlnHbvguPSr
l4mu5siacR1abAHnxtKSuNl9Ta3jJ/I2izJOlolJquEKNiTFgU86eZ6AFi6sk/hy
vj+wd5nkbK/zFnP7YhMqYLrmwWvHzPbPT6t52YzETDJuCuiIbjgx+7zusw1TnhZ4
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 26949127976254750469966424832
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-29 02:21:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-03 10:06:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19914828255471399063050127571334115372219381473843694946824704034750571748493758954939916632357071561003042596189626136294075649801880838966005440565313939279010329912568385568959814641620828552142389134107525316667265303909174678224413749022826827805333419208151811200440591055796998691112135647496148217370056668273617201788027182780888983061527178821698993431995030867697227260362974140821293363432727750199296005830247367585752805201492544563136535045338752732013135557774364345526114769057650415486708162131468812304652121457167651433889576139145409588516674339086508832921583553986718950499449216962366482577497
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1908 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aboutspms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alconexchangeportaltraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.annualreview.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.betterconversations.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bioupper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carcinoid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cardservices.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cibavision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cookie.airoptix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cosentyx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.customer.us.pharma.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.myalcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.du-kriegst-mich-nicht-krumm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.entresto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exelonpatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.extavia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.focalinxr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.focalview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.get.cibavision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gilenya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.global.airoptix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hf360.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ilaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.irmadashboard.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.joingetconnected.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kymriah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.locatorservices.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.migraene-helden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myalcon.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ncc.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.non-us.kymriah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.novartispharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.novartispharma.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nvfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.offerallocation.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oncologyaccessnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pro.pataday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ptoryasis.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.myalcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realityofspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandoz-biosimilars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.services.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sjiasupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supplierconnect.novartispharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.talkspms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tempodivita.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thisaslife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.todaymyway.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unidosporlapsoriasis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us.keepitpumping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us.state.lookup.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.virtualconsultant.alcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboutspms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alconexchangeportaltraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bioupper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carcinoid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardservices.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cibavision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosentyx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.us.pharma.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'du-kriegst-mich-nicht-krumm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entresto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exelonpatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extavia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'focalinxr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'focalview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gilenya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hf360.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irmadashboard.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joingetconnected.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kymriah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locatorservices.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'migraene-helden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myalcon.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncc.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novartispharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nvfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offerallocation.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oncologyaccessnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptoryasis.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realityofspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandoz-biosimilars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjiasupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talkspms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tempodivita.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'todaymyway.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unidosporlapsoriasis.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a6f864d179f592893d93f93051e0dc2f091cae36
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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