connect2bms.com

- BRISTOL-MYERS SQUIBB COMPANY -

Issued by Thawte TLS RSA CA G1

About this certificate

This digital certificate with serial number 06:ba:33:e5:61:30:b2:82:70:1e:a9:ec:5a:f6:31:31 was issued on by DigiCert Inc.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

BRISTOL-MYERS SQUIBB COMPANY

Organization: BRISTOL-MYERS SQUIBB COMPANY
State / Province: New Jersey
Locality: Pennington
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:ba:33:e5:61:30:b2:82:70:1e:a9:ec:5a:f6:31:31
Serial Number (int): 8942187766614892557456180770229334321
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: d2:01:31:45:b7:ad:fc:15:73:a6:95:b5:73:09:30:de:d3:4d:ff:ba
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (sha1): a6:0a:5d:55:3f:8c:09:b0:ee:cf:60:68:b1:42:75:98:c9:ad:e4:08
Fingerprint (sha256): fc:81:f3:9a:e0:eb:5b:60:63:4d:1b:77:5a:40:57:28:fc:ac:68:f2:64:c3:29:bd:99:8e:84:f6:eb:aa:37:cb

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate connect2bms.com

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for connect2bms.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

connect2bms.com
www.understandingHCM.ca
www.themissingucstep.com
www.onureg.ca
understandingHCM.ca
themissingucstep.com
onureg.ca
www.mmtreatmentoptions.com
hcm-angehen.at
mmtreatmentoptions.com
www.hcm-angehen.at
www.connect2bms.com
www.mmcenterfornurses.com
www.myelomacentral.com
www.bmsesign.com
www.sprycel.com
mmcenterfornurses.com
myelomacentral.com
bmsesign.com
sprycel.com
www.zeposia.com
www.mysotyktu.co.uk
www.tjekdinpuls.dk
www.podriasercmh.com
www.sotyktu.no
www.bmshcpresources.com
www.sotyktuespanol.com
buildeasy.bms.com
zeposia.com
mysotyktu.co.uk
tjekdinpuls.dk
podriasercmh.com
sotyktu.no
bmshcpresources.com
sotyktuespanol.com
www.takaisintahtiin.fi
www.sotyktu.se
www.bmsimmunologi.no
takaisintahtiin.fi
sotyktu.se
bmsimmunologi.no
www.camzyosbrasil.com.br
www.cardiomiopatiahipertrofica.com.br
www.camzyosfinder.com
camzyosbrasil.com.br
cardiomiopatiahipertrofica.com.br
camzyosfinder.com
www.hcm-institute.be
www.camzyos.se
www.opdivo-cm577.ca
opdivo-cm577.ca
hcm-institute.be
camzyos.se
www.sotyktu.co.uk
sotyktu.co.uk
www.immunoscienceacademy.be
immunoscienceacademy.be
www.psoriasis-initiative-ich.de
psoriasis-initiative-ich.de
www.bmsaccesssupport.com
bmsaccesssupport.com
www.cu-initiative-ich.de
cu-initiative-ich.de
www.zeposiaespanol.com
zeposiaespanol.com
www.gemeinsam-gegen-krebs.de
gemeinsam-gegen-krebs.de
www.pflege-onkologie.de
pflege-onkologie.de
www.bmscopay.com
bmscopay.com
www.krebs.de
krebs.de
lenalidomiderems.com
thalomidrems.com
pomalystrems.com
breyanzirems.com
abecmarems.com
www.augtyro.com
augtyro.com
www.augtyrohcp.com
augtyrohcp.com
www.seropositiverisks.com
seropositiverisks.com
www.hcmrealtalk.com
hcmrealtalk.com
www.camzyos.com.au
camzyos.com.au
www.eliquis.bmscustomerconnect.com
eliquis.bmscustomerconnect.com

Other certificates including the domain name connect2bms.com

(limited to 100 certificates)
connect2bms.com
connect2bms.com
connect2bms.com
imperva.com
imperva.com
*.bmspophealth.com
connect2bms.com
connect2bms.com
*.bmspophealth.com
imperva.com
imperva.com
imperva.com
connect2bms.com
connect2bms.com
imperva.com
connect2bms.com
imperva.com
connect2bms.com
imperva.com
*.bmspophealth.com
imperva.com
connect2bms.com
connect2bms.com
zeposia.com
imperva.com
connect2bms.com
connect2bms.com

Certificate

The complete raw certificate details for connect2bms.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+NZ87uoHnar8pxqhTJg
VPsVpsQiV26grjM4wedhJoOerqyk7U9H6sqkUjMJhaMdPHUZJJqX1yVCMwiGZnqi
6UW9/11ttVSMJ/mQsh5WrwHId7UeytUKN+gA/0UzBSSIzAOBcTP83U/HiHuPAU9D
BXxUkJoY3Aawy1FjYPzZPTZDGrYRCb93ItaNKk2TYlp3McZFRNeCbYJryn7BN8Py
03A/A6TGwZPOZdCtDWBjZmDYHBDTYMeVU77dgY6v0+/yoVSMpkC1AbwgEykPj/xP
MunXShfJORxUVY5wVGLKYxaMR3GXjHo3tD/U+aNM1xoakky+WlTO1NL/+hb7XyK2
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8942187766614892557456180770229334321
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BRISTOL-MYERS SQUIBB COMPANY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'connect2bms.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23718674170263194578799565685791905432808706332036425841205219031482655209281221105492556822877412622974108708191126182220659867619441516016279826399692772164969444367353995732974967935385435050885141486220083795038653921877494118562472435476590549104078283963940615024067204988652681354962619395855694222624745112718585020450854124730072314894588495719735878305764556408225820258561578073472001610198644886351720189617412028105497842240132811925959058180485617039503893274304978278342291308098787041423798110639168750800062091076848381126608891259806397721693467783341090250229332646177507541099092713368260117182151
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d2013145b7adfc1573a695b5730930ded34dffba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1867 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect2bms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.understandingHCM.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.themissingucstep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onureg.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'understandingHCM.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themissingucstep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onureg.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmtreatmentoptions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcm-angehen.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmtreatmentoptions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hcm-angehen.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect2bms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmcenterfornurses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myelomacentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmsesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sprycel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmcenterfornurses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myelomacentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmsesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sprycel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zeposia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mysotyktu.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tjekdinpuls.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.podriasercmh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sotyktu.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmshcpresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sotyktuespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildeasy.bms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zeposia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysotyktu.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tjekdinpuls.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podriasercmh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sotyktu.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmshcpresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sotyktuespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.takaisintahtiin.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sotyktu.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmsimmunologi.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takaisintahtiin.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sotyktu.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmsimmunologi.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.camzyosbrasil.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardiomiopatiahipertrofica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.camzyosfinder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camzyosbrasil.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardiomiopatiahipertrofica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camzyosfinder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hcm-institute.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.camzyos.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opdivo-cm577.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opdivo-cm577.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcm-institute.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camzyos.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sotyktu.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sotyktu.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.immunoscienceacademy.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immunoscienceacademy.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.psoriasis-initiative-ich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psoriasis-initiative-ich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmsaccesssupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmsaccesssupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cu-initiative-ich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cu-initiative-ich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zeposiaespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zeposiaespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gemeinsam-gegen-krebs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gemeinsam-gegen-krebs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pflege-onkologie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pflege-onkologie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmscopay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmscopay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.krebs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krebs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lenalidomiderems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thalomidrems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pomalystrems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breyanzirems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abecmarems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.augtyro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'augtyro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.augtyrohcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'augtyrohcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seropositiverisks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seropositiverisks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hcmrealtalk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcmrealtalk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.camzyos.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camzyos.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eliquis.bmscustomerconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eliquis.bmscustomerconnect.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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