aws-ghh-ireland-ssl-1-euwest.merck.com

- Merck Sharp & Dohme Corp. -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number cb:ff:fc:82:ba:1d:d4:44:23:b3:b3:d0:a7:e4:e2:7a was issued on by Sectigo Limited.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Merck Sharp & Dohme Corp.

Organization: Merck Sharp & Dohme Corp.
Organization unit: Data & System Protection
Organization unit: Hosted by Merck Sharp & Dohme Corp.
Organization unit: Unified Communications
Address: One Merck Drive
Postal code: 08889
State / Province: New Jersey
Locality: Whitehouse Station
Country: US

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): cb:ff:fc:82:ba:1d:d4:44:23:b3:b3:d0:a7:e4:e2:7a
Serial Number (int): 271162440367745823394243401595719311994
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 88:59:f2:73:87:25:ce:27:4c:2c:3b:3d:ef:bf:f7:df:89:74:2e:95
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 58:73:6b:7c:96:7b:9f:2f:08:1d:33:96:d0:8a:c4:21:17:26:2d:dd
Fingerprint (sha256): e0:64:cd:28:45:a8:a9:17:a3:4f:68:6c:91:a0:be:4c:02:53:77:d6:c9:27:cd:b6:49:12:bf:2c:fd:cc:d9:90

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate aws-ghh-ireland-ssl-1-euwest.merck.com

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aws-ghh-ireland-ssl-1-euwest.merck.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aws-ghh-ireland-ssl-1-euwest.merck.com
contraceptivematch.com
hpvwise.co.uk
inventingforlife.msd.co.il
msd.es
msd.lt
msdconnect.pl
msdhealthnews.gr
shinglesaware.co.uk
staywell.ro
vaccinesfacts.co.uk
www.contraceptivematch.com
www.hpvwise.co.uk
www.inventingforlife.msd.co.il
www.msd.es
www.msd.lt
www.msdconnect.pl
www.msdhealthnews.gr
www.shinglesaware.co.uk
www.staywell.ro
www.vaccinesfacts.co.uk

Other certificates including the domain name merck.com

(limited to 100 certificates)
*.apps.americas-app2.cf.webappsp.com
tibcobpm-it.merck.com
usml2f-sfn.merck.com
argusmarttestoci.merck.ls-cloud.com
uat.cmdbupdate.merck.com
epub-nv-redirects-cert-1.merck.com
apptechwpt2.merck.com
asia-cert3.cf.merck.com
merckvaccines-uat.merck.com
egate-emea.merck.com
tst-webmail.merck.com
egate-emea.merck.com
idfederation.merck.com
straindb.gin.merck.com
idpcd-uat.merck.com
qlctccp0110.merck.com
password.merck.com
oudadmincloud.merck.com
cis-isales.merck.com
eddy.merck.com
sgskct-expwyc-cls.merck.com
mmjardevtest.merck.com
ieird-sft.merck.com
lctcvd6771.merck.com
mpm.merck.com
ktchpcpi001.merck.com
cdas-ut.merck.com
sync.merck.com
phone-tst.merck.com
oimprodoci.merck.ls-cloud.com
keymap-api.merck.com
isales-dev.merck.com
epub-nv-redirects-cert-1.merck.com
gulf-isales.merck.com
comment-test.merck.com
usctapp40961.merck.com
sgpayroll.merck.com
dev5-mma-admin.merck.com
epub-nv-redirects-cert-1.merck.com
wpm-it-ovd.merck.com
omdlx.merck.com
cloudmail.merck.com
usctapt11168.merck.com
*.apps.asia.cf.webappsp.com
myphone-pilot.merck.com
iebrif-sfn.merck.com
test-september.merck.com
mmjarsit.merck.com
tiea-ut.merck.com
hpcws-ctc-b.merck.com
soaadmincloud.merck.com
*.apps.asia.cf.webappsp.com
incapsula.com
essalf-sfn.merck.com
hemwb-tst.merck.com
brcmpf-sfn.merck.com
tableau.merck.com
euwedmp700001.merck.com
deburf-sfn.merck.com
dvdol.merck.com
g2n.merck.com
lctcvp1042.merck.com
uswptf-mrl.merck.com
beantt-expwye-cls.merck.com
iexpense-ut.merck.com
wwwredirect.merck.com
o365mail-dev-vip.merck.com
test-september.merck.com
www.msd.lt
sftprod.merck.com
usctapt640774.merck.com
*.apps.americas.cf.webappsp.com
trend-ut.merck.com
epub-nv-redirects-cert-1.merck.com
sip.ucfederation.com
epub-nv-redirects-cert-1.merck.com
tsps-dev.merck.com
epub-nv-redirects-cert-1.merck.com
pvanalytics.merck.com
cirrusjar.merck.com
canmobileapp.merck.com
testname.merck.com
*.apps.europe.cf.webappsp.com
www.merck.com
testwildcard.oct.merck.com
egate-ap.merck.com
dev.jupyterhub.gin.merck.com
hivaccess-ut.merck.com
usuedzp750003-1.merck.com
usctapt006899.merck.com
aws-ghh-amer-ssl-1-useast.merck.com
test222sans.merck.com
www.msd.lt
desktop-test.merck.com
tacsctcp2.merck.com
uswhsc2-guest-drac.merck.com
cdas-utcf.merck.com
epub-nv-app-cert-3.merck.com
*.apps.americas.cf.webappsp.com
lctcvp1058.merck.com

Certificate

The complete raw certificate details for aws-ghh-ireland-ssl-1-euwest.merck.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIyjCCB7KgAwIBAgIRAMv//IK6HdREI7Oz0Kfk4nowDQYJKoZIhvcNAQELBQAw
gZUxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO
BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE9MDsGA1UE
AxM0U2VjdGlnbyBSU0EgT3JnYW5pemF0aW9uIFZhbGlkYXRpb24gU2VjdXJlIFNl
cnZlciBDQTAeFw0xOTExMjkwMDAwMDBaFw0yMDExMjgyMzU5NTlaMIIBMDELMAkG
A1UEBhMCVVMxDjAMBgNVBBETBTA4ODg5MRMwEQYDVQQIEwpOZXcgSmVyc2V5MRsw
GQYDVQQHExJXaGl0ZWhvdXNlIFN0YXRpb24xGDAWBgNVBAkTD09uZSBNZXJjayBE
cml2ZTEiMCAGA1UECgwZTWVyY2sgU2hhcnAgJiBEb2htZSBDb3JwLjEhMB8GA1UE
CwwYRGF0YSAmIFN5c3RlbSBQcm90ZWN0aW9uMSwwKgYDVQQLDCNIb3N0ZWQgYnkg
TWVyY2sgU2hhcnAgJiBEb2htZSBDb3JwLjEfMB0GA1UECxMWVW5pZmllZCBDb21t
dW5pY2F0aW9uczEvMC0GA1UEAxMmYXdzLWdoaC1pcmVsYW5kLXNzbC0xLWV1d2Vz
dC5tZXJjay5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9i98I
cEGLVNb4EiJ45CJbv1h00wZIYJW5dai5PR6Sgf2flanVUJHBTgjjpJPW600n++XL
/2VuGix2mqjiSLyqvjEM8ApRoULKpxXRe0yR8K98JBOtDs9ULtVBcZDX4ODEHoGn
2/puUDxtAgtyRe8VVSE28pC9u5RJOxNBurh9pEugoXk58Kx8UGWh2/8+NdWv5AO5
/v4ACcxqUdgJQR9ug1JT76wPyicNJt1xoxFumyuEnu/TDhmygZqTw+GtT6vWBQVQ
50M4qYlcvaKt25uoFBHyQekupzNBOsBShMPfl6mDgpUqRcF7jNYtrkpci9BFSl3x
A7cwg0FYMFsYXNfRAgMBAAGjggR1MIIEcTAfBgNVHSMEGDAWgBQX2dYlJ2f5McJJ
Q9kwNkSMbKlP6zAdBgNVHQ4EFgQUiFnyc4clzidMLDs977/334l0LpUwDgYDVR0P
AQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMEoGA1UdIARDMEEwNQYMKwYBBAGyMQECAQMEMCUwIwYIKwYBBQUHAgEW
F2h0dHBzOi8vc2VjdGlnby5jb20vQ1BTMAgGBmeBDAECAjBaBgNVHR8EUzBRME+g
TaBLhklodHRwOi8vY3JsLnNlY3RpZ28uY29tL1NlY3RpZ29SU0FPcmdhbml6YXRp
b25WYWxpZGF0aW9uU2VjdXJlU2VydmVyQ0EuY3JsMIGKBggrBgEFBQcBAQR+MHww
VQYIKwYBBQUHMAKGSWh0dHA6Ly9jcnQuc2VjdGlnby5jb20vU2VjdGlnb1JTQU9y
Z2FuaXphdGlvblZhbGlkYXRpb25TZWN1cmVTZXJ2ZXJDQS5jcnQwIwYIKwYBBQUH
MAGGF2h0dHA6Ly9vY3NwLnNlY3RpZ28uY29tMIIBswYDVR0RBIIBqjCCAaaCJmF3
cy1naGgtaXJlbGFuZC1zc2wtMS1ldXdlc3QubWVyY2suY29tghZjb250cmFjZXB0
aXZlbWF0Y2guY29tgg1ocHZ3aXNlLmNvLnVrghppbnZlbnRpbmdmb3JsaWZlLm1z
ZC5jby5pbIIGbXNkLmVzggZtc2QubHSCDW1zZGNvbm5lY3QucGyCEG1zZGhlYWx0
aG5ld3MuZ3KCE3NoaW5nbGVzYXdhcmUuY28udWuCC3N0YXl3ZWxsLnJvghN2YWNj
aW5lc2ZhY3RzLmNvLnVrghp3d3cuY29udHJhY2VwdGl2ZW1hdGNoLmNvbYIRd3d3
Lmhwdndpc2UuY28udWuCHnd3dy5pbnZlbnRpbmdmb3JsaWZlLm1zZC5jby5pbIIK
d3d3Lm1zZC5lc4IKd3d3Lm1zZC5sdIIRd3d3Lm1zZGNvbm5lY3QucGyCFHd3dy5t
c2RoZWFsdGhuZXdzLmdyghd3d3cuc2hpbmdsZXNhd2FyZS5jby51a4IPd3d3LnN0
YXl3ZWxsLnJvghd3d3cudmFjY2luZXNmYWN0cy5jby51azCCAQQGCisGAQQB1nkC
BAIEgfUEgfIA8AB2AAe3XBvlfWj/8bDGHSMVx7rmV3xXlLdq7rxhOhpp06IcAAAB
bragAi8AAAQDAEcwRQIhAMMe7dXlyFpmg89UPzHTnt1o41ZMeIm/dY5hI6MTn8nW
AiBbOerkXOPDKvrnmNviDUJCymCUpBYb0VsAexYlHIVNIQB2AF6nc/nfVsDntTZI
fdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABbragAh0AAAQDAEcwRQIgX3YULnjm9Vv/
/w9TZh+2bsPfNXiC2en8oDJIAR2Cut0CIQCvPBG2Kes7wyz+6ruYcU8AsKbOtUYK
BJhlhAplTO7W/TANBgkqhkiG9w0BAQsFAAOCAQEAWX1bN3W1MnN+X2qYhhRh/lIY
4gN5Uc2tQ1sw7yBC5Ee0b7AXWf/bb4LFU6vK+rgTzJIaZSBz9xYEZNl3Fc4gSwYu
dMmcmdzXqsu9WBTO/3bWONhdGp5wYJjvVc1ajXUo622HQpc3VjYxJO/mlKMv0p0W
arX8p+hRWVr13Go/Jsqxj2JwIXbsZNkDv1HGoZQKsuiRE1B0K8OAJhoEkIo5/S33
ECIvNv5EPYO8RW18AfqcTCixf+Md0b86dTa/ivVtX8u3cEHb7TocPblkleKPeYG8
LTFo4dbJdTMfudsx7fEiA40gtn5qmieDLgfPU/ce1kJ1ReUijN4BEv5fGJ8J+Q==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYvfCHBBi1TW+BIieOQi
W79YdNMGSGCVuXWouT0ekoH9n5Wp1VCRwU4I46ST1utNJ/vly/9lbhosdpqo4ki8
qr4xDPAKUaFCyqcV0XtMkfCvfCQTrQ7PVC7VQXGQ1+DgxB6Bp9v6blA8bQILckXv
FVUhNvKQvbuUSTsTQbq4faRLoKF5OfCsfFBlodv/PjXVr+QDuf7+AAnMalHYCUEf
boNSU++sD8onDSbdcaMRbpsrhJ7v0w4ZsoGak8PhrU+r1gUFUOdDOKmJXL2irdub
qBQR8kHpLqczQTrAUoTD35epg4KVKkXBe4zWLa5KXIvQRUpd8QO3MINBWDBbGFzX
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271162440367745823394243401595719311994
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '08889'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Whitehouse Station'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'One Merck Drive'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Merck Sharp & Dohme Corp.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Data & System Protection'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hosted by Merck Sharp & Dohme Corp.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unified Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aws-ghh-ireland-ssl-1-euwest.merck.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23928012709066939388782281727436120974570625088311485792303703139209004132619938817461868142368815173276243801649357450347173467776083071797968098949255797430426370668976423824068884571624930758652341819652607195620677829272339622216522352291934287803695194448019499719349154167121516219698971359683611549057488806419866050379587040636883475141960883360138916776996157585071568579829820987184268076188198375896202164341793080382355492177836374271869560168549968750116879462297488089634842678122000686596721416040725527443199094522713167658829467463753241587671104773575099465911914634058737649876258545672206379964369
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8859f2738725ce274c2c3b3defbff7df89742e95
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (426 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-ghh-ireland-ssl-1-euwest.merck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contraceptivematch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpvwise.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inventingforlife.msd.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msd.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msd.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msdconnect.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msdhealthnews.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shinglesaware.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staywell.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaccinesfacts.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.contraceptivematch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hpvwise.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inventingforlife.msd.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msd.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msd.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdconnect.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdhealthnews.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shinglesaware.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staywell.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaccinesfacts.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016eb6a0022f0000040300473045022100c31eedd5e5c85a6683cf543f31d39edd68e3564c7889bf758e6123a3139fc9d602205b39eae45ce3c32afae798dbe20d4242ca6094a4161bd15b007b16251c854d210076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016eb6a0021d000004030047304502205f76142e78e6f55bffff0f53661fb66ec3df357882d9e9fca03248011d82badd022100af3c11b629eb3bc32cfeeabb98714f00b0a6ceb5460a049865840a654ceed6fd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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