careers.roche.com

- F. Hoffmann-La Roche AG -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 4e:cc:7c:2a:2d:e1:91:66:c8:fd:b9:eb:4c:72:38:59 was issued on by GeoTrust Inc..

With 83 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

F. Hoffmann-La Roche AG

Organization: F. Hoffmann-La Roche AG
State / Province: Basel-Stadt
Locality: Basel
Country: CH

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4e:cc:7c:2a:2d:e1:91:66:c8:fd:b9:eb:4c:72:38:59
Serial Number (int): 104741530590937741719516588011831834713
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 6c:0e:2a:f7:ea:1c:6c:0b:f8:d0:ad:fc:ad:64:6e:d1:ae:81:98:32
Fingerprint (sha256): 08:0b:11:ea:bf:d7:d4:72:3d:23:87:bd:2e:fa:83:b1:b7:3d:de:31:8e:cb:39:1a:f5:8d:0d:77:6a:01:5d:74

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate careers.roche.com

83

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for careers.roche.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.dialogoroche.com.uy
www.msdiseaseactivity.co.uk
author.psp.dev.opengarden.rch.cm
www.latamrochepressday.com
content.bioclinicien.fr
www.dialogorochecac.com
www.dialogoroche.com.ar
www.medical.ly
www.roche.fi
publish.uat-pdmahub.preprod.opengarden.rch.cm
es.hcpnext.preprod.opengarden.rch.cm
www.roche.at
www.rochemed.gr
www.dialogoroche.com.ve
www.foundationmedicine.com.sg
www.msdiseaseactivity.co.uk.uat-msd.preprod.opengarden.rch.cm
www.ipfzone.com.uat-esbriethub.preprod.opengarden.rch.cm
nl.hcpnext.preprod.opengarden.rch.cm
www.melanoominfo.nl
www.infomedics.it
fr.hcpnext.preprod.opengarden.rch.cm
www.dialogoroche.com
www.dialogoroche.com.uat-dialogo.preprod.opengarden.rch.cm
respiratory.medical.ly
respiratory.medically.roche.com
www.mmomentumexample.com.uat-mmomentum.prod.opengarden.rch.cm
www.melanoominfo.nl.uat-mmomentum.prod.opengarden.rch.cm
www.mmomentumexample.com.uat-mmomentum.preprod.opengarden.rch.cm
www.mmomentum.br.uat-mmomentum.preprod.opengarden.rch.cm
www.melanoominfo.nl.uat-mmomentum.preprod.opengarden.rch.cm
www.mmomentum.net.uat-mmomentum.prod.opengarden.rch.cm
dialogoroche.com
publish.uat-pdmahub.prod.opengarden.rch.cm
www.msdiseaseactivity.com
uk2.hcpnext.preprod.opengarden.rch.cm
ch.hcpnext.preprod.opengarden.rch.cm
www.fightipf.de
www.ipfzone.com
www.roche.ie
at.hcpnext.preprod.opengarden.rch.cm
www.dialogoroche.com.br
www.fibrosisquistica.co
www.licht-an-fuer-ms.de
www.fightipf.de.uat-mmomentum.preprod.opengarden.rch.cm
www.dialogoroche.com.pe
pl.hcpnext.preprod.opengarden.rch.cm
www.dialogoroche.com.uat-dialogo.prod.opengarden.rch.cm
www.foundationmedicineasia.com.uat-fmi.prod.opengarden.rch.cm
rheumatology.medical.ly
www.roche.co.uk
www.foundationmedicine.com.sg.uat-fmi.preprod.opengarden.rch.cm
www.dialogoroche.com.mx
medical.ly
oncology.medically.roche.com
www.rochetudastar.hu
www.foundationmedicineasia.com.uat-fmi.preprod.opengarden.rch.cm
oncology.medical.ly
pt.hcpnext.preprod.opengarden.rch.cm
www.emactiva.cl.uat-msd.preprod.opengarden.rch.cm
www.licht-an-fuer-ms.de.uat-msd.preprod.opengarden.rch.cm
www.rocheinteract.com.au.uat-rocheinteract-pp.rch.cm
medically.roche.com
msdiseaseactivity.com
www.ipfzone.com.uat-esbriethub.prod.opengarden.rch.cm
rheumatology.publish.uat-pdmahub.prod.opengarden.rch.cm
www.rocheinteract.com.au
www.emactiva.cl
fightipf.de
www.rocheplus.es
ipfzone.com
www.foundationmedicineasia.com
www.dialogoroche.com.ec.uat-dialogo.preprod.opengarden.rch.cm
www.msdiseaseactivity.com.uat-msd.preprod.opengarden.rch.cm
www.roche-oncology.ch
www.rocheonline.se
mystudies.roche.com
live.digitalfactory.roche.com
www.mmomentum.br.uat-mmomentum.prod.opengarden.rch.cm
www.foundationmedicine.com.sg.fmi.preprod.opengarden.rch.cm
www.dialogoroche.com.co
rheumatology.publish.uat-pdmahub.preprod.opengarden.rch.cm
rheumatology.medically.roche.com
careers.roche.com

Other certificates including the domain name roche.com

(limited to 100 certificates)
involve.roche.com
www.hpv16and18.com
easydrive-uat.roche.com
advancedanalytics.roche.com
main.rhelp.roche.com
api.fido.tst.pdaa.science.roche.com
sni.cloudflaressl.com
magentocloud28.map.fastly.net
rbalvprexd0.bas.roche.com
cieas01.roche.com
harmonytest.de
sequencing.roche.com
esource.roche.com
e-medical.roche.com
esource.roche.com
maps-uat.roche.com
coaguchek.com
rsmsourcing.roche.com
deimos.roche.com
cert2.roche.com
sni.cloudflaressl.com
cdn.appstore.gene.com
shpivee1-01.roche.com
eews-dev.roche.com
myaccess.roche.com
ican.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
albecsinternaltest.aws.cloud.roche.com
cert3.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
mrdivee2-02.netlab.roche.com
rodip.roche.com
nsrdcongresses.roche.com
rbavxsentry11.bas.roche.com
mobilesolution-dev.roche.com
wamua.roche.com
dialog-62-test.roche.com
identity-hu.login.digitalidentity.roche.com
rocheggcpac.roche.com
san-003.ceros.com
video.hive.roche.com
sni.cloudflaressl.com
rssg.roche.com
usdiagnostics.roche.com
mftemeaext.roche.com
anadisuat01.sc1.roche.com
careers.roche.com
flow.roche.com
cert3.roche.com
sni.cloudflaressl.com
misp.roche.com
cert2.roche.com
careers.roche.com
api.rockwizz.roche.com
bitbucket-nala-qa.roche.com
careers.roche.com
wamdev.roche.com
sonar-dev-old.roche.com
diauxhub.roche.com
careers.roche.com
globalfms.roche.com
rexis-dialog-dev.roche.com
san-003.ceros.com
sc1lvflexq2.sc1.roche.com
easydrive-dev.roche.com
send-tst.roche.com
indigrow.roche.com
careers.roche.com
careers.roche.com
env5-remotedashboard.roche.com
mrd25.me
cert2.roche.com
*.esrv-hub-uat.roche.com
sb.eu.phcaa.science.roche.com
san-003.ceros.com
extaccess-nala.roche.com
magentocloud28.map.fastly.net
go.roche.com
magentocloud32.map.fastly.net
sni.cloudflaressl.com
status.repository.roche.com
itot.roche.com
ssl882748.cloudflaressl.com
sni.cloudflaressl.com
esrv-marketplace-dev.roche.com
careers.roche.com
gispeopledev.roche.com
imcore.roche.com
booster.roche.com
sni.cloudflaressl.com
akamai-san195.exacttarget.com
raumbuch.roche.com
pitas01.roche.com
sni.cloudflaressl.com
c1edb.roche.com
magentocloud45.map.fastly.net
shpivee1-01.roche.com
hpv16and18.com

Certificate

The complete raw certificate details for careers.roche.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FLBoPFiVII5KdxkxqCj
ovJdNXKXsVRMJ829mvFtqvtuKHdrLr250sKi9KPRXqI3EuWm01iDVkbPYEuy39XM
BLu4PNghF83eSPHlR9TlYcGCinsBvTE7ZlDfoQ+mevZtG5GfjiwaKzo0t1LM/div
Ub7jJHe3TgrvJmB0nGKZiszaTHLDAHrWOy8KIm0f/3JySTZGs9WXbS0xRQOCgyWs
vTytT8ZIbJEzVqCGOZZiMDrqHMREVC9vHvNu19VEzmRnlrYZH74qOlR51l65ntws
RYlZvdhe8O6xwsEixCmMcNuRhmpVOK6y9wy1vsD6b5Xs+CI1ngLU3L75g4E8emHN
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 104741530590937741719516588011831834713
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Basel-Stadt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Basel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'F. Hoffmann-La Roche AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'careers.roche.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28318188995481408022527700504497964541885276507923298290731858259191197031042518540333568273250373173351272019829771808867594997756317985478553614838928649950289180170502133039864944988305221146876560827502927418881300865511952931640514995796145850892724443347147287296631618600112357664969852269277324406947864781441673248225156446780090841863188987807521250881937609858440025620272110396618721914282832569425503807944864778310441228122474559979008434831068333312175489678735883863763707021503178249183590601629700344158573762246856865906341040798434487648900511659310442345253598578430409387624300647229654829223307
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2935 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author.psp.dev.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.latamrochepressday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.bioclinicien.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogorochecac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medical.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publish.uat-pdmahub.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochemed.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.co.uk.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipfzone.com.uat-esbriethub.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nl.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melanoominfo.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.infomedics.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.uat-dialogo.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'respiratory.medical.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'respiratory.medically.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentumexample.com.uat-mmomentum.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melanoominfo.nl.uat-mmomentum.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentumexample.com.uat-mmomentum.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentum.br.uat-mmomentum.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melanoominfo.nl.uat-mmomentum.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentum.net.uat-mmomentum.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publish.uat-pdmahub.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk2.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ch.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fightipf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipfzone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'at.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fibrosisquistica.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.licht-an-fuer-ms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fightipf.de.uat-mmomentum.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.uat-dialogo.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicineasia.com.uat-fmi.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rheumatology.medical.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.sg.uat-fmi.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medical.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oncology.medically.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochetudastar.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicineasia.com.uat-fmi.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oncology.medical.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pt.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emactiva.cl.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.licht-an-fuer-ms.de.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheinteract.com.au.uat-rocheinteract-pp.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medically.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msdiseaseactivity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipfzone.com.uat-esbriethub.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rheumatology.publish.uat-pdmahub.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheinteract.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emactiva.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fightipf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheplus.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipfzone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicineasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.ec.uat-dialogo.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.com.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche-oncology.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheonline.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mystudies.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.digitalfactory.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentum.br.uat-mmomentum.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.sg.fmi.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rheumatology.publish.uat-pdmahub.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rheumatology.medically.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.roche.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015f0f46945300000403004830460221008563ada10387765afee99a3937e749fa244379f0fe2e59b52b22a4d6a6b76515022100ecc32a36c1500d4cb3ae9b888fdf9db22f57bb19345a402a38d320f445c3bdea007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015f0f4694890000040300483046022100d7e3c3de6ae2e14e7156469b1773659b0cc02a3bf7f7049f0d7fb9d1ecdb1ada022100f538ac831ce552fb07ca0ac03185f3bb54ca1b547ce5328f5e6c1e4caf20407d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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