aem.gene.com

- F. Hoffmann-La Roche AG -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 02:1a:7b:1f:c4:59:2f:48:94:86:bd:0c:05:e0:a9:f3 was issued on by DigiCert Inc.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

F. Hoffmann-La Roche AG

Organization: F. Hoffmann-La Roche AG
Locality: Basel
Country: CH

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:1a:7b:1f:c4:59:2f:48:94:86:bd:0c:05:e0:a9:f3
Serial Number (int): 2795952963112903974828071007738178035
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 45:fb:57:f7:f4:b1:4e:e0:e3:11:f1:0e:c4:ca:a4:85:0c:a3:0b:b2
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 0e:85:03:2f:be:6b:07:34:41:54:bc:16:0e:eb:72:ff:6c:ab:f1:ea
Fingerprint (sha256): 09:1d:7f:85:ae:96:e9:f0:a3:f6:1c:8b:e5:f6:6a:54:66:19:10:b6:e5:69:49:f8:58:be:0b:6b:a0:9b:34:2a

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate aem.gene.com

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aem.gene.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aem.gene.com
actemra.com
actemrahcp.com
actemrainfo.com
activase.com
againstlivercancer.com
alecensa.com
avastin.com
biomarkertesting.com
cancerscreenweek.org
cathflo.com
cellcept.com
cotellic.com
discovertrk.com
drugpricinglaw.com
earlynsclc.com
emicizumabinfo.com
enspryng.com
enspryng-hcp.com
erivedge.com
esbriet.com
esbriethcp.com
evrysdi.com
evrysdi-hcp.com
faceipf.com
fuzeon.com
gavreto.com
gavreto-hcp.com
gazyva.com
gazyva-hcp.com
genentech-access.com
genentech-forum.com
genentechhemophilia.com
genentech-medicines.com
genentechoncology.com
genentech-pro.com
hemework.com
hemlibra.com
hemlibra-hcp.com
her2treatment.com
her2treatmentoptions.com
herceptin.com
herceptinhylecta.com
herconnection.com
homevisionmonitor.com
huntingtonsdisease.com
huntingtonsdiseasehcp.com
kadcyla.com
lucentis.com
mycareforward.com
mytactictrial.com
nutropin.com
ocrelizumabinfo.com
ocrevus.com
ocrevus-hcp.com
ophthalmologyvision.com
perjeta.com
phesgo.com
phesgo-hcp.com
pinkribbonbottle.com
polivy.com
pulmozyme.com
researchakt.com
rituxan.com
rituxanforgpampa.com
rituxanforgpampa-hcp.com
rituxanforpv.com
rituxanforra.com
rituxanforra-hcp.com
rituxan-hcp.com
rituxanhycela.com
rozlytrek.com
rozlytrek-hcp.com
screenyourlungs.org
strokeawareness.com
susvimo.com
susvimo-hcp.com
tamiflu.com
tecentriq.com
tecentriq-hcp.com
thehiddenpredator.com
tnkase.com
vabysmo.com
vabysmo-hcp.com
venclextahcp.com
xofluza.com
xofluza-hcp.com
xolair.com
xolairhcp.com

Other certificates including the domain name gene.com

(limited to 100 certificates)
aem.gene.com
sni.cloudflaressl.com
actnow.gene.com
gcast.gene.com
labintheloop.gene.com
ecd.gene.com
skin.atp.gene.com
partners.gene.com
apsuat.gene.com
brandcenter.gene.com
fmvnav.gene.com
cdn.appstore.gene.com
ecd.gene.com
ecd.gene.com
gworks.gene.com
cad.gene.com
fmvnav-uat.gene.com
learn.gene.com
respwlimss402.gene.com
www.medicalinformation.gene.com
screenshots.gene.com
contractswizuat.gene.com
mcfmvwiz.gene.com
aem.gene.com
foodallergy.gene.com
datatools.gene.com
mld.atp.gene.com
gcampaign.gene.com
mx.gene.com
datatools.gene.com
anaaistst01.gene.com
sni.cloudflaressl.com
dnacloud-dev.gene.com
mx-uat.gene.com
ptddt.gene.com
pi-pd-pivision.gene.com
r32web.sap.roche.com
dev-screenshots.gene.com
aem.gene.com
csu1.gene.com
ltd.atp.gene.com
qlikprd.gene.com
ptddt.gene.com
qlikprd.gene.com
sni.cloudflaressl.com
aem.gene.com
cad.gene.com
atp.gene.com
vpn.range.roche.net
gmemori.gene.com
cad-dev.gene.com
prescientstatic.gene.com
aem.gene.com
sni.cloudflaressl.com
logmycommute-dev.gene.com
gride-hff.gene.com
*.gene.com
thestudio.gene.com
epicxcontent.gene.com
contractswizuat.gene.com
pwsm-uat.gene.com
aem.gene.com
*.dev2.converge.gene.com
extsimsval.gene.com
staging.atp.gene.com
*.genehub-sandbox.gene.com
nutropin.atp.gene.com
ecdsolr-dev.gene.com
aem.gene.com
learn-uat.gene.com
mta-sts.gene.com
mss.gene.com
gmemorisolr-qa.gene.com
reswebappprd303.gene.com
anaaistst01.gene.com
sni.cloudflaressl.com
her2.atp.gene.com
cdn.appstore.gene.com
gmemori-qa.gene.com
resmsgprd.gene.com
aem.gene.com
mx-uat.gene.com
*.gene.com
*.tst.grml.gene.com
feedback.gene.com
10-36-6-208-gredcloud.gene.com
giohubuat.gene.com
*.gene.com
epicxcontent.gene.com
t-s.gene.com
aem.gene.com
ccp1pweb.ccp1.gene.com
logmycommute.gene.com
logmycommute-dev.gene.com
reswebappprd301.gene.com
giohubuat.gene.com
contractswizuat.gene.com
sni.cloudflaressl.com
developer.gene.com
futurelabplus-network.gene.com

Certificate

The complete raw certificate details for aem.gene.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSAbALaJZGjEVi+thZDD
hrlWS1ETvhRNyhdgs2ZOk/vaGkWmFm2SsZqqNPilhj+mWy7fAaNZTxOjk2q0r2PV
wGCwExgj03+S379ISc6ux7D9dsrOSYsuep5d6Cyat0q+GPdAG0EvuM9GBafAWaIV
L1v6pZoraVc+l+ne+lvDA1hfO7nofSMCpOW4k9Z6G4u4sQcol/v68oBukTgUaMr0
FBnfo5LajcNtGXZNga74JwC5Lnf6wwYEz6wCQ0jNhXjOmp6/bQfh1LAtnrMQLQKO
oM4TFy4mixfwwaOqWFopt1rRZm0cZHsgGxyByk4nnp8bxQh35PyFBEmtNAfv3usY
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2795952963112903974828071007738178035
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Basel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'F. Hoffmann-La Roche AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aem.gene.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23874871440649993179996847241629363768475614856575099995013067339606642370186402916761923965374594710177752222547231485758795216022682877416151124582681120193236656194234167793054141041149693907756025370096425186041883501360425926111248112916673467681033625354120448349664149285711695352974470040508198243391883857275021466282340779522528320076693078782835379433947013586926860677705749718098347838799827639725793451986132233476296334758222943984404904840796503937695788180438456225820955220912233828572404569609807710877286381241150307467534335295095123024932164816378689630299794343337423156137028604050865096693797
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							45fb57f7f4b14ee0e311f10ec4caa4850ca30bb2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1541 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aem.gene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actemra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actemrahcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actemrainfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'againstlivercancer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alecensa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avastin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biomarkertesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cancerscreenweek.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cathflo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cellcept.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cotellic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discovertrk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drugpricinglaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earlynsclc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emicizumabinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enspryng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enspryng-hcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erivedge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esbriet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esbriethcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evrysdi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evrysdi-hcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faceipf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuzeon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gavreto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gavreto-hcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gazyva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gazyva-hcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genentech-access.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genentech-forum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genentechhemophilia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genentech-medicines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genentechoncology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genentech-pro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hemework.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hemlibra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hemlibra-hcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'her2treatment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'her2treatmentoptions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herceptin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herceptinhylecta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homevisionmonitor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huntingtonsdisease.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huntingtonsdiseasehcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kadcyla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucentis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycareforward.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytactictrial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutropin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocrelizumabinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocrevus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocrevus-hcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ophthalmologyvision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perjeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phesgo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phesgo-hcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinkribbonbottle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polivy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulmozyme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'researchakt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rituxan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rituxanforgpampa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rituxanforgpampa-hcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rituxanforpv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rituxanforra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rituxanforra-hcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rituxan-hcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rituxanhycela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rozlytrek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rozlytrek-hcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'screenyourlungs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strokeawareness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'susvimo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'susvimo-hcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tamiflu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecentriq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecentriq-hcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehiddenpredator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tnkase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vabysmo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vabysmo-hcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venclextahcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xofluza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xofluza-hcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xolair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xolairhcp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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