nlroexpep01.perrigo.com

- Perrigo Company -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 03:af:00:18:63:f6:09:36:fe:25:22:97:3d:54:ba:db was issued on by DigiCert Inc.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Perrigo Company

Organization: Perrigo Company
Organization unit: IT&S
State / Province: Michigan
Locality: Allegan
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:af:00:18:63:f6:09:36:fe:25:22:97:3d:54:ba:db
Serial Number (int): 4896337870010698035722328164099472091
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 97:c1:05:30:49:76:a6:46:bf:1b:76:84:e5:da:e1:0e:03:90:f1:f5
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 6c:2e:7d:0d:61:45:4e:ec:29:84:02:1a:7e:f0:79:a4:d9:52:af:bf
Fingerprint (sha256): fc:78:f1:1e:b1:3d:31:6a:11:af:ef:79:b9:dd:45:b4:7e:a3:50:ec:c6:79:ca:08:00:f9:7e:5e:8a:eb:b8:ac

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate nlroexpep01.perrigo.com

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nlroexpep01.perrigo.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nlroexpep01.perrigo.com
collabedge.perrigo.com
eu-expe-cluster.perrigo.com
nlroexpep02.perrigo.com
usalvcsee2.perrigo.com
perrigo.com
video.perrigo.com
collab-edge.eu.perrigo.com
usalvcsee1.perrigo.com
eu.perrigo.com
collab-edge.perrigo.com

Other certificates including the domain name perrigo.com

(limited to 100 certificates)
nlroexpep01.perrigo.com
investor.perrigo.com
*.perrigo.com
webmail.perrigo.co.il
adfs.perrigo.com
*.perrigo.com
newinside.perrigo.com
mail.perrigo.com
*.perrigo.com
adfs.perrigo.com
*.perrigo.com
adfs.perrigo.com
mailil.perrigo.com
adfs.perrigo.com
adfs.perrigo.com
adfs.perrigo.com
newinside.perrigo.com
mail.perrigo.com
*.perrigo.com
mail.perrigo.mx
usalvcsee1.perrigo.com
*.perrigo.com
perrigo.com
mail.perrigo.com
mail.perrigo.com
omega.perrigo.com
adfs.perrigo.com
newinside.perrigo.com
storefront.perrigo.com
*.perrigo.com
*.perrigo.com
mail.perrigo.com
*.perrigo.com
omega.perrigo.com
storefront.perrigo.com
*.perrigo.com
investor.perrigo.com
*.perrigo.com
*.perrigo.com
*.perrigo.com
usaledge1.perrigo.com
perrigo.com
investor.perrigo.com
mail.perrigo.mx
investor.perrigo.com
pidpq.perrigo.com
perrigo.com
*.perrigo.com
newinside.perrigo.com
citrix.perrigo.com
investor.perrigo.com
webmail.perrigo.co.il
mail.perrigouk.com
investor.perrigo.com
adfs.perrigo.com
www.perrigo.com
*.perrigo.com
pidp.perrigo.com
perrigo.com
usalvcsee1.perrigo.com
usalvcsee2.perrigo.com
st.perrigo.com
perrigo.com
mail.perrigo.com
storefront.perrigo.com
im.perrigo.com
www.perrigo.com
mail.perrigo.com
mail.perrigouk.com
mail.perrigo.com
citrix.perrigo.com
nlroexpep01.perrigo.com

Certificate

The complete raw certificate details for nlroexpep01.perrigo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4896337870010698035722328164099472091
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-17 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Allegan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Perrigo Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT&S'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nlroexpep01.perrigo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 832955018872643026371199348414017788202908952551508601833869906630836591294280585004030695890699077223988157217377209511424290190731727883609598788772339115843044357507016489208431354994747118370986848684128320008086813157741446520686862254688237679915091374489847648012184764758136674979471452532331546543336045196465970060597914014019235509975142840438547850521724897620469265010528781970725037922769821029015963946918100228839533810061138620796435658019237148012044852610966534886000830005600528328667026367116092384461787278746033167513954320402580622996706344698246379429128289674074541502248802040658288287129765517729731197254425170685856985623274480671453169243303059355184923022809633598319354505017754783408608899131476688475624866255298303484454685573772341221627839855449401537002833012131369315765171330118603099687325138307089099801531338421848794160862710842214907927816746865003444662513065126655472875770950935608424873106420621687815959738955735704157493287044077892461829564846551510054140463754771690612105751685525304109985137165452269888719620477456733925269992443659099947002496851722336654776877101485284968225141818208191486471486335573402886231333405857223287140410002486713969898015360116608921300016588693
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							97c105304976a646bf1b7684e5dae10e0390f1f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (255 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nlroexpep01.perrigo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collabedge.perrigo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu-expe-cluster.perrigo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nlroexpep02.perrigo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usalvcsee2.perrigo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perrigo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.perrigo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.eu.perrigo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usalvcsee1.perrigo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.perrigo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.perrigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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