aem.gene.com

- F. Hoffmann-La Roche AG -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0d:2c:d9:e1:b4:7e:1e:af:9c:62:6b:90:45:63:90:71 was issued on by DigiCert Inc.

With 91 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

F. Hoffmann-La Roche AG

Organization: F. Hoffmann-La Roche AG
Organization unit: Interactive Marketing
Locality: Basel
Country: CH

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:2c:d9:e1:b4:7e:1e:af:9c:62:6b:90:45:63:90:71
Serial Number (int): 17512844172059768216919730843067584625
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a4:0b:e0:50:60:53:cb:f3:55:10:4d:1c:f1:51:c9:fc:af:f9:bf:00
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 41:c2:e6:3d:9e:c7:1f:34:64:da:6e:96:ca:7d:29:cc:20:75:06:af
Fingerprint (sha256): 07:e2:0b:6c:de:f8:4c:3f:41:11:34:56:0c:d7:0f:91:ad:c0:a6:51:df:3c:8e:c1:d2:5d:fe:53:32:9e:4c:60

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate aem.gene.com

91

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aem.gene.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rituxan-hcp.com
phesgo.com
rituxan.com
rethinksma.com
researchcancerimmunotherapy.com
researchakt.com
rarediseasesignup.com
pulmozyme.com
polivy.com
pinkribbonbottle.com
perjeta.com
rituxanforgpampa.com
omliago.com
ocrevus.com
ocrelizumabinfo.com
nutropin.com
mycareforward.com
msvoice.com
lucentis.com
knowipfnow.com
kadcyla.com
rituxanforgpampa-hcp.com
rituxanforpv.com
huntingtonsdiseasehcp.com
valcyte.com
phesgo-hcp.com
hemework.com
xolair.com
xofluza.com
xofluza-hcp.com
whyimmunotherapy.com
venclextahcp.com
venclexta.com
transplantaccessservices.com
rituxanforra-hcp.com
top5claimsmistakesvideo.com
tocilizumabinfo.com
tnkase.com
tecentriq.com
tecentriq-hcp.com
tamiflu.com
rozlytrek.com
rituxanhycela.com
rituxanforra.com
ipfrally.com
huntingtonsdisease.com
actemra.com
bladdercancerinformation.com
emicizumabinfo.com
drugpricinglaw.com
discovertrk.com
cotellic.com
commonclaimsmistakesvideo.com
cellcept.com
cathflo.com
caremanagermsguide.com
biooncology.com
enspryng.com
avastin.com
avastin-hcp.com
asthmainflammation.com
alecensa.com
adjuvantperjeta.com
activase.com
actemrainfo.com
actemrahcp.com
enspryng-hcp.com
ensprynghcp.com
herceptinhylecta.com
genentech-forum.com
herceptin.com
her2treatment.com
hemlibra.com
geographicatrophy.com
genentechoncology.com
genentechhemophilia.com
genentech-pro.com
genentech-medicines.com
genentech-access.com
erivedge.com
gazyva.com
fuzeon.com
faceipf.com
examinebiosimilars.com
evrysdi.com
evrysdi-hcp.com
esbrietstories.com
esbriethcp.com
esbriet.com
aem.gene.com
author.aem.gene.com

Other certificates including the domain name gene.com

(limited to 100 certificates)
aem.gene.com
sni.cloudflaressl.com
actnow.gene.com
gcast.gene.com
labintheloop.gene.com
ecd.gene.com
skin.atp.gene.com
partners.gene.com
apsuat.gene.com
brandcenter.gene.com
fmvnav.gene.com
cdn.appstore.gene.com
ecd.gene.com
ecd.gene.com
gworks.gene.com
cad.gene.com
fmvnav-uat.gene.com
learn.gene.com
respwlimss402.gene.com
www.medicalinformation.gene.com
screenshots.gene.com
contractswizuat.gene.com
mcfmvwiz.gene.com
aem.gene.com
foodallergy.gene.com
datatools.gene.com
mld.atp.gene.com
gcampaign.gene.com
mx.gene.com
datatools.gene.com
anaaistst01.gene.com
sni.cloudflaressl.com
dnacloud-dev.gene.com
mx-uat.gene.com
ptddt.gene.com
pi-pd-pivision.gene.com
r32web.sap.roche.com
dev-screenshots.gene.com
aem.gene.com
csu1.gene.com
ltd.atp.gene.com
qlikprd.gene.com
ptddt.gene.com
qlikprd.gene.com
sni.cloudflaressl.com
aem.gene.com
cad.gene.com
atp.gene.com
vpn.range.roche.net
gmemori.gene.com
cad-dev.gene.com
prescientstatic.gene.com
aem.gene.com
sni.cloudflaressl.com
logmycommute-dev.gene.com
gride-hff.gene.com
*.gene.com
thestudio.gene.com
epicxcontent.gene.com
contractswizuat.gene.com
pwsm-uat.gene.com
aem.gene.com
*.dev2.converge.gene.com
extsimsval.gene.com
staging.atp.gene.com
*.genehub-sandbox.gene.com
nutropin.atp.gene.com
ecdsolr-dev.gene.com
aem.gene.com
learn-uat.gene.com
mta-sts.gene.com
mss.gene.com
gmemorisolr-qa.gene.com
reswebappprd303.gene.com
anaaistst01.gene.com
sni.cloudflaressl.com
her2.atp.gene.com
cdn.appstore.gene.com
gmemori-qa.gene.com
resmsgprd.gene.com
aem.gene.com
mx-uat.gene.com
*.gene.com
*.tst.grml.gene.com
feedback.gene.com
10-36-6-208-gredcloud.gene.com
giohubuat.gene.com
*.gene.com
epicxcontent.gene.com
t-s.gene.com
aem.gene.com
ccp1pweb.ccp1.gene.com
logmycommute.gene.com
logmycommute-dev.gene.com
reswebappprd301.gene.com
giohubuat.gene.com
contractswizuat.gene.com
sni.cloudflaressl.com
developer.gene.com
futurelabplus-network.gene.com

Certificate

The complete raw certificate details for aem.gene.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyr8GRTXG0O2jGAixAri8
J+vUQb3hTwZKnuwI9fbimkKv70HUXx0pt9cw4egWcXkoZohUiwWakBnN5DsZQrqH
cto+hHQT2KacMgRRsW7xh9eNGf1cviT5ooVKNEYicPcV3XfBDPaWtAHNqvXvSfz7
9lK1i8+jUrKtlwLjC0Ryh5fw5HektqhUKpnPwmgNV6bNdPBag0hh69BhrUouayGs
9Sakrc7X1p+kKMt+PehPldmlPE2OATZ6Kvkw80lPBGQ1m5RKbRaUcHqZHTOVXA1O
ekpmDZJEBDDHPEdDxnKTTUQAKtJZyHn0+Fm78WG+Rx2xp5+NoXhs46K6yl7w7hwX
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17512844172059768216919730843067584625
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Basel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'F. Hoffmann-La Roche AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Interactive Marketing'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aem.gene.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25594335291715088317194240046150700461469123669469629503946893738475165817824330353533939510165201943056905881504901013504007356740094414717618536021798866212825681536077877075031070401523944840457323599024163870617303917698772315902678734449323244197444867392937045363195205436430549013330985852122622759892158292359830701770500534139112149263329990995590153483165276659967264739866244298983570627276968115618995005552423490365128657341427965718228582194176834467474965587841446465629004166611791495225148718662495040501274374764088656615039632687135014037341679900368815492078348767902658059272170210933623446312859
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a40be0506053cbf355104d1cf151c9fcaff9bf00
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1632 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rituxan-hcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phesgo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rituxan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rethinksma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'researchcancerimmunotherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'researchakt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rarediseasesignup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulmozyme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polivy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinkribbonbottle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perjeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rituxanforgpampa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omliago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocrevus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocrelizumabinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutropin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycareforward.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucentis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knowipfnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kadcyla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rituxanforgpampa-hcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rituxanforpv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huntingtonsdiseasehcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valcyte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phesgo-hcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hemework.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xolair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xofluza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xofluza-hcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whyimmunotherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venclextahcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venclexta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transplantaccessservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rituxanforra-hcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'top5claimsmistakesvideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tocilizumabinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tnkase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecentriq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecentriq-hcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tamiflu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rozlytrek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rituxanhycela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rituxanforra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipfrally.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huntingtonsdisease.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actemra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bladdercancerinformation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emicizumabinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drugpricinglaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discovertrk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cotellic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commonclaimsmistakesvideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cellcept.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cathflo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caremanagermsguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biooncology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enspryng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avastin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avastin-hcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asthmainflammation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alecensa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adjuvantperjeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actemrainfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actemrahcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enspryng-hcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ensprynghcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herceptinhylecta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genentech-forum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herceptin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'her2treatment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hemlibra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geographicatrophy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genentechoncology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genentechhemophilia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genentech-pro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genentech-medicines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genentech-access.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erivedge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gazyva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuzeon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faceipf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'examinebiosimilars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evrysdi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evrysdi-hcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esbrietstories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esbriethcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esbriet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aem.gene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author.aem.gene.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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