dialog-62-test.roche.com

Issued by COMODO RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 38:f5:64:88:ba:fa:3d:d8:bf:64:db:7b:29:cd:21:a3 was issued on by COMODO CA Limited.

With 45 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dialog-62-test.roche.com,OU=Domain Control Validated+OU=COMODO SSL Unified Communications

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 38:f5:64:88:ba:fa:3d:d8:bf:64:db:7b:29:cd:21:a3
Serial Number (int): 75710919568153524102912878750515143075
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 35:2c:ff:6e:a7:11:38:99:62:37:b8:40:70:b1:5b:8b:9d:94:59:96
AuthorityKeyId: 90:af:6a:3a:94:5a:0b:d8:90:ea:12:56:73:df:43:b4:3a:28:da:e7

Fingerprint (sha1): 66:62:79:26:42:f8:1a:19:d2:b1:2d:0d:5b:5f:15:b8:a8:e0:f7:33
Fingerprint (sha256): 02:6b:8e:8e:4e:81:a2:3c:73:1e:15:8c:24:63:9b:0b:c0:b0:e5:db:bb:6a:31:0e:dd:11:bb:a9:cc:71:96:05

Issuing Certificate URL: http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl

Check the revocation status for certificate dialog-62-test.roche.com

45

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dialog-62-test.roche.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dialog-62-test.roche.com
author-eu-Stage2.roche.com
author-eu-SuppDev2.roche.com
author-eu-Train.roche.com
author-eu-dev.roche.com
author-eu-owpdev.roche.com
author-eu-prod.roche.com
author-eu-qa.roche.com
author-eu-stage.roche.com
campaigns-test.roche.com
campaigns.roche.com
cssportal.roche.com
diagnostics-dev.roche.com
diagnostics-owp-dev.roche.com
diagnostics-qa.roche.com
diagnostics-test.roche.com
diagnostics.roche.com
dialog-62.roche.com
dialog-dev.roche.com
dialog-prod.roche.com
dialog-qa.roche.com
dialog-test.roche.com
dialog.roche.com
e-labdoc.roche.com
elabdoc.roche.com
origin-diagnostics-owp-dev.roche.com
origin-diagnostics-qa.roche.com
origin-diagnostics-test.roche.com
origin-diagnostics.roche.com
owp-62-test.roche.com
owp-62.roche.com
preview-owp.dev.roche.com
preview-owp.qa.roche.com
preview-owp.roche.com
preview-owp.test.roche.com
roche-eu-stage-2-owp.roche.com
roche-eu-stage-2.roche.com
roche-eu-train-owp.roche.com
roche-eu-train.roche.com
www.cssportal.roche.com
www.diagnostics-test.roche.com
www.diagnostics.roche.com
www.dialog.roche.com
www.e-labdoc.roche.com
www.elabdoc.roche.com

Other certificates including the domain name roche.com

(limited to 100 certificates)
involve.roche.com
www.hpv16and18.com
easydrive-uat.roche.com
advancedanalytics.roche.com
main.rhelp.roche.com
sni.cloudflaressl.com
magentocloud28.map.fastly.net
rbalvprexd0.bas.roche.com
cieas01.roche.com
harmonytest.de
sequencing.roche.com
esource.roche.com
e-medical.roche.com
esource.roche.com
coaguchek.com
rsmsourcing.roche.com
deimos.roche.com
cert2.roche.com
sni.cloudflaressl.com
cdn.appstore.gene.com
shpivee1-01.roche.com
eews-dev.roche.com
myaccess.roche.com
ican.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
cert3.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
mrdivee2-02.netlab.roche.com
rodip.roche.com
nsrdcongresses.roche.com
rbavxsentry11.bas.roche.com
mobilesolution-dev.roche.com
wamua.roche.com
dialog-62-test.roche.com
rocheggcpac.roche.com
san-003.ceros.com
video.hive.roche.com
sni.cloudflaressl.com
rssg.roche.com
mftemeaext.roche.com
anadisuat01.sc1.roche.com
careers.roche.com
flow.roche.com
cert3.roche.com
sni.cloudflaressl.com
misp.roche.com
cert2.roche.com
careers.roche.com
api.rockwizz.roche.com
bitbucket-nala-qa.roche.com
careers.roche.com
wamdev.roche.com
sonar-dev-old.roche.com
diauxhub.roche.com
careers.roche.com
globalfms.roche.com
san-003.ceros.com
sc1lvflexq2.sc1.roche.com
easydrive-dev.roche.com
send-tst.roche.com
indigrow.roche.com
careers.roche.com
careers.roche.com
env5-remotedashboard.roche.com
mrd25.me
cert2.roche.com
*.esrv-hub-uat.roche.com
sb.eu.phcaa.science.roche.com
san-003.ceros.com
extaccess-nala.roche.com
magentocloud28.map.fastly.net
go.roche.com
magentocloud32.map.fastly.net
sni.cloudflaressl.com
ssl882748.cloudflaressl.com
sni.cloudflaressl.com
esrv-marketplace-dev.roche.com
careers.roche.com
imcore.roche.com
booster.roche.com
sni.cloudflaressl.com
akamai-san195.exacttarget.com
raumbuch.roche.com
pitas01.roche.com
sni.cloudflaressl.com
c1edb.roche.com
magentocloud45.map.fastly.net
shpivee1-01.roche.com
hpv16and18.com
hivemind.roche.com
searchsquad.roche.com
cferondanetrochedia-qa.roche.com
esign.roche.com
diaitsupport.roche.com
sni.cloudflaressl.com
magentocloud32.map.fastly.net
r32web.sap.roche.com
apis.cwp.roche.com

Certificate

The complete raw certificate details for dialog-62-test.roche.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+ymXSkFDngs0LVyhZK58
vuy8+omCNa9JdPE2Daupy7+GuU7Ay0uJ3hquhJ7g568d26SRnoxcIdmivMHAxy06
eoTWPF0waSWsepxF2Lh4M3cLU7x5gjRbO9mqqspxSIfgwwWbeoKnzMC+YIy05Hpy
QWDVnxPVqGewvyfxnpn2VatdzIyLnhwH2frnilRhlYVlyjsxWnB+DNym+lkyQ2n6
abEXEcrVUM+cBojl5wjAg627x8CSnoIdAftX7hs2zcflj9fajwOgSGWTau966mxA
afJeZvip+bs0i8Y/jnNiyPR9xZBxDLqHp9FAACCWzx7Yf9VkxtL4M1g9S9ecDtsg
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 75710919568153524102912878750515143075
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO SSL Unified Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dialog-62-test.roche.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31706323821527227145507421972530536674675426184380082013469926988368112927925724491391498275836060816526999043183620173767218731315643996380777200236104253073934913250044865488686062356704183015841005374503595228832823564917122394892787987769974221378019448668020541037402811088631909938118994136285423058718927402302164341441712466749188590764245009444680309585014246878147821585611853974053252867043271911308731189650754201606988358783940592423174341291815342689923879554214258692488205916691894667540692405012393183280682869989234447025014371925436204501931088484277456783418027573436667317303963757919354096394419
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 90af6a3a945a0bd890ea125673df43b43a28dae7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							352cff6ea71138996237b84070b15b8b9d945996
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialog-62-test.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author-eu-Stage2.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author-eu-SuppDev2.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author-eu-Train.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author-eu-dev.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author-eu-owpdev.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author-eu-prod.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author-eu-qa.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author-eu-stage.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaigns-test.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaigns.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cssportal.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diagnostics-dev.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diagnostics-owp-dev.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diagnostics-qa.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diagnostics-test.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diagnostics.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialog-62.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialog-dev.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialog-prod.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialog-qa.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialog-test.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialog.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-labdoc.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elabdoc.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-diagnostics-owp-dev.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-diagnostics-qa.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-diagnostics-test.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-diagnostics.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owp-62-test.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owp-62.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview-owp.dev.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview-owp.qa.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview-owp.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview-owp.test.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-eu-stage-2-owp.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-eu-stage-2.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-eu-train-owp.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-eu-train.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cssportal.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diagnostics-test.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diagnostics.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialog.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.e-labdoc.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elabdoc.roche.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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