bi.b-ms.de

Issued by Amazon

About this certificate

This digital certificate with serial number 0b:c3:a4:ca:45:62:b1:50:e9:dc:4d:ce:71:e1:7b:1a was issued on by Amazon.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bi.b-ms.de

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:c3:a4:ca:45:62:b1:50:e9:dc:4d:ce:71:e1:7b:1a
Serial Number (int): 15637348181785970504304512372251392794
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: bd:e2:26:c0:28:e3:8c:34:2d:da:d3:43:20:56:39:ef:5d:a6:c4:30
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): e4:f3:1b:df:4a:23:86:90:3f:fd:18:44:c0:9b:77:57:69:e9:ed:76
Fingerprint (sha256): 91:5b:bf:b3:c6:fd:18:9b:b9:bd:a8:54:52:f1:fe:56:02:73:64:80:53:62:00:e2:c3:43:65:b6:00:43:3c:cb

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate bi.b-ms.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bi.b-ms.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bi.b-ms.de
policies.bms.com
www.bezeposiaprogram.ca
www.erythropoiese.com
www.coulditbehcm.com
www.car-t.jp
www.therapie-initiative-ich.de
www.opdivohcp.com
www.keepmaturationontrack.ca
www.workingforuc.com
www.zeposia.lu
www.inrebic.ch
documents.bms.com
communications.bms.com
www.zeposia.dk
www.dernaechsteschritt.de
www.bmsmelanoma.com
www.istodax-japan.jp
www.bmsmedical.de
www.hematologi.se
www.zeposia.ca
www.clinicalnurseconnection.com
bms.congressconnection.com
www.rethinklymphoma.com
www.bms-connect.com.au
www.opdivo.com
www1.bms.ch
www.bmscanada.ca
www.immunologypathways.com
horizont.bms.se
www.tyknology.com
www.ioteachwithmehcp.com
workingtogetherforpatients.com
www.ioteachwithme.com
corpcomms.bms.com
www.eliquis.co.uk
www.detect-afib.com
www.revlimid-japan.jp
www.understandingibd.com
www.bms.com
www.lenadex-japan.jp
www.opdivogastroeso.com
www.orencia.com
www.connectregistries.com
www.myelomapvd.com.au
packageinserts.bms.com
www.bmsinnovationaccelerator.com
www.workingtogetherforpatients.com
www.rinpashu.jp
bms.com
www.exposehcm.com
www.bmsstudyconnect.ca
www.haemhq.com.au
www.opdivo-yervoybonusage.com
www.b-ms.de
keymessages.bms.com
fi.b-ms.de
www.ketsusen.jp
www.bmsstudyconnect.com.au
www.bmsmedinfo.com
login.patient-link.bms.com
www.bms-oncall.com.au
www.bmsmedical.co.uk
bmscelgeneintegration.bms.com
www.bms-immuno-dermatologie.de
login.consultant-link.bms.com
www.bms.ch
www.emplicitihcp.com
www.opdivoyervoymnsclc.com
www.kotsuzuishu.jp
www.eliquis.ie
www.bmsstudyconnect.de
360.bms.com
bmscanada.ca
www.onureg.at
www.pomalyst-japan.jp
www.bmsehr.com
www.bmsprofesionales.es
www.opdivocombomnsclc-mpm.com
www.theshareregistry.org
bdigital.bms.com
www.bmsmedical.com
www.congressconnection.com
www.bmsrequest-a-representative.com
www.eventprivacypolicy.bms.com
www.bmsknowledgeexchange.com
rmp.b-ms.de
www.reblozylondemand.com
www.targetedproteindegraders.com
www.xn--nyrekrftinfo-cdb.dk
www.opdivorx.com
supplierlink.bms.com
www.celmed.jp
www.valuepack.bms.com
www.seelag3.com
www.bmsstudyconnect.com
www.bmshaematologynow.co.uk
www.zeposia.it
www.imunologiabms.com.br
www.empliciti.com

Other certificates including the domain name b-ms.de

(limited to 100 certificates)
bms.com
packageinserts.bms.com
bms.com
packageinserts.bms.com
bi.b-ms.de
bms.com
www.b-ms.de
mantis.b-ms.de
packageinserts.bms.com
b-ms.de
b-ms.de
bms.com
bms.com
bms.com
link.b-ms.de
mantis.b-ms.de
bms.com
congress-highlights.de
bms.com
bi.b-ms.de
bi.b-ms.de
congress-highlights.de
bi.b-ms.de
bms.com
b-ms.de
packageinserts.bms.com
iframes.b-ms.de
iframes.b-ms.de
b-ms.de
bms.com
bms.com
b-ms.de
bms.com
packageinserts.bms.com
link.b-ms.de
bms.com
packageinserts.bms.com
fi.b-ms.de
bi.b-ms.de
link.b-ms.de
congress-highlights.de
www.b-ms.de
fi.b-ms.de
packageinserts.bms.com
bi.b-ms.de
packageinserts.bms.com
bms.com
bms.com
bi.b-ms.de
www.b-ms.de
bms.com
fi.b-ms.de
link.b-ms.de
b-ms.de
link.b-ms.de
b-ms.de
bms.com
b-ms.de
b-ms.de
b-ms.de
b-ms.de
link.b-ms.de
bms.com
b-ms.de
bms.com
bi.b-ms.de
b-ms.de
bi.b-ms.de
www.b-ms.de
www.b-ms.de

Certificate

The complete raw certificate details for bi.b-ms.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/GGOELVzR/QPYcXy6gQ
wFkPUSaTZfvRhyjaDRDF+19M1pG5n2YjMYVioNE6TzHmVm4hyygXC2a2sM4fkrLb
e9VFjo3ezn2+L1CTYgqtu0K0vqbnobQoTM874muJFbEj4YVfflgBIxFkpKusc9Rj
iK1IWopxYnY0f2Y+cwtewvWjccLnkDAIIw4mn9QwTgByqA5Lrf09xKL9IKQVH1w2
hDZD0JZ0mwWdwyKrM7RU4BVHgW4N5jMFcS0/Bin6/h2UP2zsueblyQVCwMp+nuJY
SwE121QmSjzM6nb2zaCXffsyhDUgRaR5KtGuA+gUs2RnT6D1ryp6PJq603JOG1wI
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15637348181785970504304512372251392794
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bi.b-ms.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25745475977375974263609815307916589518787083255094958128368929594429170069927997196366300987151808845162716255020080169044977759815743106111423180647222506305943234761978266932659906969845615695351551422678253441425866577874064883454793464852029180219240720404624173305441565566700497069956834083035290091162189088851656298317572371194676167915634573713108320745876043345140788075831745906007498398443027907814276052762624334546488776755446441076849236680427764320231847891280004760815336138881768714187232973147151644652898311073728297425194891720985450227416086234404204385669666711342202705393060311136644353493133
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bde226c028e38c342ddad343205639ef5da6c430
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2226 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.b-ms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'policies.bms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bezeposiaprogram.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.erythropoiese.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coulditbehcm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.car-t.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.therapie-initiative-ich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opdivohcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepmaturationontrack.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.workingforuc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zeposia.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inrebic.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documents.bms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communications.bms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zeposia.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dernaechsteschritt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmsmelanoma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.istodax-japan.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmsmedical.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hematologi.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zeposia.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clinicalnurseconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bms.congressconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rethinklymphoma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bms-connect.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opdivo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.bms.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmscanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.immunologypathways.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horizont.bms.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tyknology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ioteachwithmehcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workingtogetherforpatients.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ioteachwithme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corpcomms.bms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eliquis.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.detect-afib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.revlimid-japan.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.understandingibd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lenadex-japan.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opdivogastroeso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orencia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectregistries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myelomapvd.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'packageinserts.bms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmsinnovationaccelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.workingtogetherforpatients.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rinpashu.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exposehcm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmsstudyconnect.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haemhq.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opdivo-yervoybonusage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.b-ms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keymessages.bms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fi.b-ms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ketsusen.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmsstudyconnect.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmsmedinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.patient-link.bms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bms-oncall.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmsmedical.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmscelgeneintegration.bms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bms-immuno-dermatologie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.consultant-link.bms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bms.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emplicitihcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opdivoyervoymnsclc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kotsuzuishu.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eliquis.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmsstudyconnect.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '360.bms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmscanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onureg.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pomalyst-japan.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmsehr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmsprofesionales.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opdivocombomnsclc-mpm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theshareregistry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdigital.bms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmsmedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.congressconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmsrequest-a-representative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eventprivacypolicy.bms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmsknowledgeexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmp.b-ms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reblozylondemand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.targetedproteindegraders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--nyrekrftinfo-cdb.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opdivorx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supplierlink.bms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.celmed.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valuepack.bms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seelag3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmsstudyconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmshaematologynow.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zeposia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imunologiabms.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.empliciti.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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