vpn.range.roche.net
Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1
About this certificate
This digital certificate with serial number 0a:74:f0:03:8b:6f:21:17:09:d6:cd:67:24:74:fc:fa was issued on by DigiCert, Inc..
With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=vpn.range.roche.net
DigiCert, Inc.
Organization:
DigiCert, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0a:74:f0:03:8b:6f:21:17:09:d6:cd:67:24:74:fc:faSerial Number (int): 13899454452581326071864584916916567290
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: f6:69:63:fe:69:01:de:47:f9:b1:73:aa:1e:12:ec:e0:35:b9:e8:c0
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23
Fingerprint (sha1): e7:d5:68:7d:ac:8a:57:47:3a:d5:b1:d1:2a:5e:02:ac:e8:c7:19:5b
Fingerprint (sha256): 08:0c:b7:e8:af:ed:c9:d7:c4:b0:91:03:4f:51:8b:d8:a9:ba:d7:1c:60:05:86:f6:26:a2:90:03:24:75:11:4f
Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
Check the revocation status for certificate vpn.range.roche.net
51
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for vpn.range.roche.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
vpn.range.roche.net
dtkpulse.range.roche.net
dtk.range.roche.net
exvpn.range.roche.net
gconnect-sg.gene.com
gconnect-sg.roche.com
imobile.gene.com
pcs-poc.gene.com
pdust.gene.com
ppebas.range.roche.net
pulse.range.roche.net
pulsesecure2.gene.com
pulsesecure.gene.com
pulsesecureipv6.gene.com
pulsesecure-sg.gene.com
rba2pulse.range.roche.net
rbaapptestipv6.range.roche.net
rbaapptest.range.roche.net
rbapulseipv6.range.roche.net
rbapulse.range.roche.net
rba.range.roche.net
rbupulse.range.roche.net
rbu.range.roche.net
rdwpulse.range.roche.net
rdw.range.roche.net
rgw.range.roche.net
ridpulse.range.roche.net
rid.range.roche.net
rllpulse.range.roche.net
rll.range.roche.net
rm2pulseipv6.range.roche.net
rm2pulse.range.roche.net
rm2.range.roche.net
rmxpulse.range.roche.net
rmx.range.roche.net
rshpulse.range.roche.com.cn
rshpulse.range.roche.net
rsh.range.roche.com.cn
rsh.range.roche.net
rsopulse.range.roche.net
rso.range.roche.net
rsy.range.roche.net
rt5pulse.range.roche.net
rt5.range.roche.net
shpapptest.range.roche.net
shppulseipv6.range.roche.net
shppulse.range.roche.net
shp.range.roche.net
ssportal.gene.com
ssportal.gip.gene.com
vpnmobile.range.roche.net
dtkpulse.range.roche.net
dtk.range.roche.net
exvpn.range.roche.net
gconnect-sg.gene.com
gconnect-sg.roche.com
imobile.gene.com
pcs-poc.gene.com
pdust.gene.com
ppebas.range.roche.net
pulse.range.roche.net
pulsesecure2.gene.com
pulsesecure.gene.com
pulsesecureipv6.gene.com
pulsesecure-sg.gene.com
rba2pulse.range.roche.net
rbaapptestipv6.range.roche.net
rbaapptest.range.roche.net
rbapulseipv6.range.roche.net
rbapulse.range.roche.net
rba.range.roche.net
rbupulse.range.roche.net
rbu.range.roche.net
rdwpulse.range.roche.net
rdw.range.roche.net
rgw.range.roche.net
ridpulse.range.roche.net
rid.range.roche.net
rllpulse.range.roche.net
rll.range.roche.net
rm2pulseipv6.range.roche.net
rm2pulse.range.roche.net
rm2.range.roche.net
rmxpulse.range.roche.net
rmx.range.roche.net
rshpulse.range.roche.com.cn
rshpulse.range.roche.net
rsh.range.roche.com.cn
rsh.range.roche.net
rsopulse.range.roche.net
rso.range.roche.net
rsy.range.roche.net
rt5pulse.range.roche.net
rt5.range.roche.net
shpapptest.range.roche.net
shppulseipv6.range.roche.net
shppulse.range.roche.net
shp.range.roche.net
ssportal.gene.com
ssportal.gip.gene.com
vpnmobile.range.roche.net
Other certificates including the domain name roche.net
(limited to 100 certificates)
coaguchek.com
partneraccess.roche.net
sentry-ppe.roche.net
edi2.roche.net
mdm.roche.net
sni.cloudflaressl.com
*.edidev2.roche.net
sg3vk030.roche.net
range.roche.net
sentryasiagmail.roche.net
sentrygmailtest.roche.net
vpn.range.roche.net
*.edidev2.roche.net
remoteaccess.roche.net
*.edi2.roche.net
rosa.roche.net
rkavoglh.roche.net
sni.cloudflaressl.com
se2vk030.roche.net
mdm-test.roche.net
partneraccess.roche.net
remoteaccess.roche.net
esrv-hub-uat.roche.net
*.editest2.roche.net
sni.cloudflaressl.com
editest3.roche.net
se2vk030.roche.net
se3vk030.roche.net
*.edi2.roche.net
sni.cloudflaressl.com
api-home.roche.net
sni.cloudflaressl.com
sni.cloudflaressl.com
sentryasiagmail.roche.net
sni.cloudflaressl.com
sni.cloudflaressl.com
rkavoglh.roche.net
*.rosa.roche.net
prod.rosa.roche.net
sentryemeao365.roche.net
cat.navify.esrv-hub-dev.roche.net
sni.cloudflaressl.com
ridusaxprod.dia.roche.net
aauthctx.roche.net
api-home.roche.net
sni.cloudflaressl.com
api-uat-home.roche.com
roche.net
edidev2.roche.net
*.edi2.roche.net
mb2vk030.roche.net
sentrynalao365.roche.net
roche.net
vpn.range.roche.net
roche.net
api-home.roche.net
roche.net
*.range.roche.net
mdm-dev.roche.net
range.roche.net
home.roche.net
sni.cloudflaressl.com
zh5vk030.roche.net
smartwebpoc.roche.net
roche.net
edi2.roche.net
cat.navify.esrv-hub-dev.roche.net
api-uat-home.roche.net
api-home.roche.net
*.edi2.roche.net
roche.net
api-home.roche.net
*.range.roche.net
sni.cloudflaressl.com
vpn.range.roche.net
remoteaccess.roche.net
sni.cloudflaressl.com
partneraccess.roche.net
esrv-hub-dev.roche.net
sni.cloudflaressl.com
roche.net
*.edidev2.roche.net
businesspartners.roche.net
sni.cloudflaressl.com
mdm-test.roche.net
range.roche.net
*.rosa.roche.net
esrv-hub-uat.roche.net
mb2vk030.roche.net
se2vk030.roche.net
range.roche.net
sni.cloudflaressl.com
uat-home.roche.net
sentry-ppe.roche.net
fr4vk030.roche.net
sni.cloudflaressl.com
sni.cloudflaressl.com
mdm.roche.net
edidev.roche.net
sni.cloudflaressl.com
partneraccess.roche.net
sentry-ppe.roche.net
edi2.roche.net
mdm.roche.net
sni.cloudflaressl.com
*.edidev2.roche.net
sg3vk030.roche.net
range.roche.net
sentryasiagmail.roche.net
sentrygmailtest.roche.net
vpn.range.roche.net
*.edidev2.roche.net
remoteaccess.roche.net
*.edi2.roche.net
rosa.roche.net
rkavoglh.roche.net
sni.cloudflaressl.com
se2vk030.roche.net
mdm-test.roche.net
partneraccess.roche.net
remoteaccess.roche.net
esrv-hub-uat.roche.net
*.editest2.roche.net
sni.cloudflaressl.com
editest3.roche.net
se2vk030.roche.net
se3vk030.roche.net
*.edi2.roche.net
sni.cloudflaressl.com
api-home.roche.net
sni.cloudflaressl.com
sni.cloudflaressl.com
sentryasiagmail.roche.net
sni.cloudflaressl.com
sni.cloudflaressl.com
rkavoglh.roche.net
*.rosa.roche.net
prod.rosa.roche.net
sentryemeao365.roche.net
cat.navify.esrv-hub-dev.roche.net
sni.cloudflaressl.com
ridusaxprod.dia.roche.net
aauthctx.roche.net
api-home.roche.net
sni.cloudflaressl.com
api-uat-home.roche.com
roche.net
edidev2.roche.net
*.edi2.roche.net
mb2vk030.roche.net
sentrynalao365.roche.net
roche.net
vpn.range.roche.net
roche.net
api-home.roche.net
roche.net
*.range.roche.net
mdm-dev.roche.net
range.roche.net
home.roche.net
sni.cloudflaressl.com
zh5vk030.roche.net
smartwebpoc.roche.net
roche.net
edi2.roche.net
cat.navify.esrv-hub-dev.roche.net
api-uat-home.roche.net
api-home.roche.net
*.edi2.roche.net
roche.net
api-home.roche.net
*.range.roche.net
sni.cloudflaressl.com
vpn.range.roche.net
remoteaccess.roche.net
sni.cloudflaressl.com
partneraccess.roche.net
esrv-hub-dev.roche.net
sni.cloudflaressl.com
roche.net
*.edidev2.roche.net
businesspartners.roche.net
sni.cloudflaressl.com
mdm-test.roche.net
range.roche.net
*.rosa.roche.net
esrv-hub-uat.roche.net
mb2vk030.roche.net
se2vk030.roche.net
range.roche.net
sni.cloudflaressl.com
uat-home.roche.net
sentry-ppe.roche.net
fr4vk030.roche.net
sni.cloudflaressl.com
sni.cloudflaressl.com
mdm.roche.net
edidev.roche.net
sni.cloudflaressl.com
Certificate
The complete raw certificate details for vpn.range.roche.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIMRDCCCiygAwIBAgIQCnTwA4tvIRcJ1s1nJHT8+jANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN MjIwODE2MDAwMDAwWhcNMjMwOTA4MjM1OTU5WjAeMRwwGgYDVQQDExN2cG4ucmFu Z2Uucm9jaGUubmV0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxb9m uOnwQBZdagUl2XbpBIBs16CGKbqgUoCoKAn3NmOop52ZZsas4VsJaz5FTv5dxdA5 T56ziMxl5ylTGbS8LtkD1eDRgRSXf6nCYqny+PwTHPr1mz5jz6bhLHyu9HS+EjwK 9RxFk/I+hTvoDrqW0LDOt2EKhDaVJyujV/9lKS1gZIxpgQOHqnVyTxFpIFnF/UOI hJKtmflyc1jhXYlF83P8pfvpLCxhjw2Xqybrkwj5gRwhshCN5X4zpD60g5L9DymE zk6C0UhNksyhbYPq9M2NNhHMdeaszAFwKaaKcPKtcOkIpnbu4hNkZlt2XSepUQr5 ClQjuLN3HTUH/8OkIQIDAQABo4IIPjCCCDowHwYDVR0jBBgwFoAUpbTW6zbE52um 38RkCwEqIAS4ZiMwHQYDVR0OBBYEFPZpY/5pAd5H+bFzqh4S7OA1uejAMIIEzgYD VR0RBIIExTCCBMGCE3Zwbi5yYW5nZS5yb2NoZS5uZXSCGGR0a3B1bHNlLnJhbmdl LnJvY2hlLm5ldIITZHRrLnJhbmdlLnJvY2hlLm5ldIIVZXh2cG4ucmFuZ2Uucm9j aGUubmV0ghRnY29ubmVjdC1zZy5nZW5lLmNvbYIVZ2Nvbm5lY3Qtc2cucm9jaGUu Y29tghBpbW9iaWxlLmdlbmUuY29tghBwY3MtcG9jLmdlbmUuY29tgg5wZHVzdC5n ZW5lLmNvbYIWcHBlYmFzLnJhbmdlLnJvY2hlLm5ldIIVcHVsc2UucmFuZ2Uucm9j aGUubmV0ghVwdWxzZXNlY3VyZTIuZ2VuZS5jb22CFHB1bHNlc2VjdXJlLmdlbmUu Y29tghhwdWxzZXNlY3VyZWlwdjYuZ2VuZS5jb22CF3B1bHNlc2VjdXJlLXNnLmdl bmUuY29tghlyYmEycHVsc2UucmFuZ2Uucm9jaGUubmV0gh5yYmFhcHB0ZXN0aXB2 Ni5yYW5nZS5yb2NoZS5uZXSCGnJiYWFwcHRlc3QucmFuZ2Uucm9jaGUubmV0ghxy YmFwdWxzZWlwdjYucmFuZ2Uucm9jaGUubmV0ghhyYmFwdWxzZS5yYW5nZS5yb2No ZS5uZXSCE3JiYS5yYW5nZS5yb2NoZS5uZXSCGHJidXB1bHNlLnJhbmdlLnJvY2hl Lm5ldIITcmJ1LnJhbmdlLnJvY2hlLm5ldIIYcmR3cHVsc2UucmFuZ2Uucm9jaGUu bmV0ghNyZHcucmFuZ2Uucm9jaGUubmV0ghNyZ3cucmFuZ2Uucm9jaGUubmV0ghhy aWRwdWxzZS5yYW5nZS5yb2NoZS5uZXSCE3JpZC5yYW5nZS5yb2NoZS5uZXSCGHJs bHB1bHNlLnJhbmdlLnJvY2hlLm5ldIITcmxsLnJhbmdlLnJvY2hlLm5ldIIccm0y cHVsc2VpcHY2LnJhbmdlLnJvY2hlLm5ldIIYcm0ycHVsc2UucmFuZ2Uucm9jaGUu bmV0ghNybTIucmFuZ2Uucm9jaGUubmV0ghhybXhwdWxzZS5yYW5nZS5yb2NoZS5u ZXSCE3JteC5yYW5nZS5yb2NoZS5uZXSCG3JzaHB1bHNlLnJhbmdlLnJvY2hlLmNv bS5jboIYcnNocHVsc2UucmFuZ2Uucm9jaGUubmV0ghZyc2gucmFuZ2Uucm9jaGUu Y29tLmNughNyc2gucmFuZ2Uucm9jaGUubmV0ghhyc29wdWxzZS5yYW5nZS5yb2No ZS5uZXSCE3Jzby5yYW5nZS5yb2NoZS5uZXSCE3JzeS5yYW5nZS5yb2NoZS5uZXSC GHJ0NXB1bHNlLnJhbmdlLnJvY2hlLm5ldIITcnQ1LnJhbmdlLnJvY2hlLm5ldIIa c2hwYXBwdGVzdC5yYW5nZS5yb2NoZS5uZXSCHHNocHB1bHNlaXB2Ni5yYW5nZS5y b2NoZS5uZXSCGHNocHB1bHNlLnJhbmdlLnJvY2hlLm5ldIITc2hwLnJhbmdlLnJv Y2hlLm5ldIIRc3Nwb3J0YWwuZ2VuZS5jb22CFXNzcG9ydGFsLmdpcC5nZW5lLmNv bYIZdnBubW9iaWxlLnJhbmdlLnJvY2hlLm5ldDAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGfBgNVHR8EgZcwgZQwSKBGoESG Qmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQw OTZTSEEyNTYyMDIyQ0ExLmNybDBIoEagRIZCaHR0cDovL2NybDQuZGlnaWNlcnQu Y29tL0dlb1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIwMjJDQTEuY3JsMD4G A1UdIAQ3MDUwMwYGZ4EMAQIBMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGln aWNlcnQuY29tL0NQUzCBhwYIKwYBBQUHAQEEezB5MCQGCCsGAQUFBzABhhhodHRw Oi8vb2NzcC5kaWdpY2VydC5jb20wUQYIKwYBBQUHMAKGRWh0dHA6Ly9jYWNlcnRz LmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEyNTYyMDIy Q0ExLmNydDAJBgNVHRMEAjAAMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdQDo PtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYKlZ0O7AAAEAwBGMEQC IH/bRm9mhTbtYVwaasrtdyNgwXNZVDFG+B1h+Bj3P4yzAiA/8aUg2M+B/+wYTufi T4P8nqDhLhU2i9VqNbG3mlamQAB2ADXPGRu/sWxXvw+tTG1Cy7u2JyAmUeo/4Srv qAPDO9ZMAAABgqVnQ/wAAAQDAEcwRQIhAPwcxxV7oidoOSnXodXrwIhY839shEuV g1n3MQcyw/VnAiBcUl3IFTfXqwe7mHFZ7Q8D5RGcjwXJwvmJJW2CX41mgAB3ALc+ +yTfnE26dfI5xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABgqVnQ/AAAAQDAEgwRgIh AMY69uUW4b5VDKC4cWkr+iuLpgTkWrlVlSS5I3fBCiAJAiEAhAaffi4ZIALuuFWD vKFwptCuLIQevXa4ziE6YIxjfgcwDQYJKoZIhvcNAQELBQADggIBAKHZVnSabIUL W2kKm7NyEdmpeEHXPUDFHqXKA11UHCDuZnPTp5QcU5SjTum4XaWmAl45dG3/AJYH Xg2D9pchdyn+pfx8rZeawCSv71PX5N2cSKMrE1jaGfgDsx30hN08NmB9u+8/3HaK qhi5qFDQIPrK2Dq8trKFoqKgzc/KE94Vce3bDLaYuG4uDacJf+Znf+Xpc15dcXVq WZdPdb3Q+NoXbIEfTSPt7fa53wkst1aMJaXrxaaKFOZ+e2O+l1fvYcNUIpUHSMgI eryMdo4/VYjbXenwinbDdBdG4Orfk8EKRN+mdssACWua3iIVKFoxNVhToY3+/RtZ NQI8YD7nVzthcXXj+EVB+i2OaAF7p6ZUeZInsOEhAG20BTOkrSI4LJU+Jkq77FJv DGdjVG7QR1gFkOdi22yqgQ+BydhJmtMi6JwjoPWoXMg8paKx/InCBqPdqVId6dae eIzDZvFFUlkHyViiM5J92yJDfN2rvG/IhV/85TM14fGyc+NW0ksiBz4p/k/Nu1GU AfTdqbMPUQBPOwKg2N+yZxjA2OK8FCDf4m/heKfsl+aEWqRmHD6d7KGaN7Ep/wiu mHvv7MtemDMadMhiRd46Xs58TWmKLqrqm+RzIvkFuIIFZf4dP8vQdYbSRA9AsF54 IaiFSHJ7mL9s6UTtSaLNu3G2BrevGp+3 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxb9muOnwQBZdagUl2Xbp BIBs16CGKbqgUoCoKAn3NmOop52ZZsas4VsJaz5FTv5dxdA5T56ziMxl5ylTGbS8 LtkD1eDRgRSXf6nCYqny+PwTHPr1mz5jz6bhLHyu9HS+EjwK9RxFk/I+hTvoDrqW 0LDOt2EKhDaVJyujV/9lKS1gZIxpgQOHqnVyTxFpIFnF/UOIhJKtmflyc1jhXYlF 83P8pfvpLCxhjw2Xqybrkwj5gRwhshCN5X4zpD60g5L9DymEzk6C0UhNksyhbYPq 9M2NNhHMdeaszAFwKaaKcPKtcOkIpnbu4hNkZlt2XSepUQr5ClQjuLN3HTUH/8Ok IQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 13899454452581326071864584916916567290 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-16 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-08 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vpn.range.roche.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24963329556876951087218031552093832978530967261444212659203195116996391546286256093889548967113540264460752664595672583991779281521555798696385780274905430018736530385802829890070607002927188531486956986239427393476853863275756793277057506105737678522942313308173955828954687954105067398166605322722066852961841711302887104960407896942989968260626651185875270366179348469614440090935623335425360696070797698487726293426640405690418482590956254715803238428450903721040657255088525904848239066220634038547613528495608761792201066935445402022518025442931668744312666916929642049108192644419215383722249140178948683179041 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f66963fe6901de47f9b173aa1e12ece035b9e8c0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1221 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.range.roche.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dtkpulse.range.roche.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dtk.range.roche.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exvpn.range.roche.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gconnect-sg.gene.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gconnect-sg.roche.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imobile.gene.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcs-poc.gene.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdust.gene.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppebas.range.roche.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse.range.roche.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulsesecure2.gene.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulsesecure.gene.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulsesecureipv6.gene.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulsesecure-sg.gene.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rba2pulse.range.roche.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbaapptestipv6.range.roche.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbaapptest.range.roche.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbapulseipv6.range.roche.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbapulse.range.roche.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rba.range.roche.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbupulse.range.roche.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbu.range.roche.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rdwpulse.range.roche.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rdw.range.roche.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rgw.range.roche.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ridpulse.range.roche.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rid.range.roche.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rllpulse.range.roche.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rll.range.roche.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rm2pulseipv6.range.roche.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rm2pulse.range.roche.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rm2.range.roche.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmxpulse.range.roche.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmx.range.roche.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rshpulse.range.roche.com.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rshpulse.range.roche.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsh.range.roche.com.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsh.range.roche.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsopulse.range.roche.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rso.range.roche.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsy.range.roche.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rt5pulse.range.roche.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rt5.range.roche.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shpapptest.range.roche.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shppulseipv6.range.roche.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shppulse.range.roche.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shp.range.roche.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssportal.gene.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssportal.gip.gene.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpnmobile.range.roche.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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