careers.roche.com

- F. Hoffmann-La Roche AG -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 04:e0:c4:df:a9:c8:9a:f9:1b:ad:a5:d1:67:c0:20:2a was issued on by DigiCert Inc.

With 91 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

F. Hoffmann-La Roche AG

Organization: F. Hoffmann-La Roche AG
State / Province: Basel
Locality: Basel
Country: CH

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e0:c4:df:a9:c8:9a:f9:1b:ad:a5:d1:67:c0:20:2a
Serial Number (int): 6483979552159504952158747697692549162
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: d1:bf:43:7b:29:7b:c2:f2:a1:34:03:98:67:62:af:89:15:8f:55:fc
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): e4:9b:11:e9:c9:39:28:66:b0:69:ab:93:36:98:94:ce:6c:dd:54:2c
Fingerprint (sha256): 09:4f:88:40:7d:4a:69:cc:d6:82:bd:c1:8a:6f:20:d6:ae:07:26:37:9c:04:01:42:c3:29:87:aa:99:7e:38:e6

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate careers.roche.com

91

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for careers.roche.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

careers.roche.com
www.rocheplus.es
www.roche.ch
www.rocheamericalatina.com
www.knowyourbiologic.com.au
www.rocheresources.co.uk
www.foundationmedicine.com.mx
www.rochetudastar.hu
www.roche.ie
www.dialogoroche.com.co
www.dialogoroche.com.pe
roche.ch
oncology.medically.roche.com
www.medinfo.rs
www.dialogoroche.com.ec
www.bitacoraparaenfermeras.pe
www.ocrevus.global
www.rochescience.at
www.bitacoraparaenfermeras.com.pe
www.msdiseaseactivity.com
www.esbriet.com.au
www.zelborafcotellic.com.au
www.dialogoroche.com.mx
www.dialogoroche.com.uy
forpatients.roche.com
www.foundationmedicine.be
medinfo.roche.com
rheumatology.medically.roche.com
professionnels.roche.fr
www.rochegate.fi
www.infomedics.it
www.foundationmedicine.cl
www.foundationmedicine-la.com
www.alecensa.com.au
www.roche.com.my
www.dialogoroche.cl
www.rochepro.hr
www.roche.ro
www.roche.es
www.roche4med.co.il
www.avastin.com.au
www.roche4professionals.nl
www.rochescience.co.uk
www.dialogoroche.com.ar
www.roche.fi
www.rochehelse.no
www.forpatients.roche.com
www.roche.co.za
www.roche.at
www.mojemedicina.cz
mystudies.roche.com
www.foundationmedicine.pl
www.dlalekarzy.roche.pl
www.foundationmedicine.ie
www.dialogoroche.com
b2b.roche.it
www.roche.co.uk
www.foundationmedicine.at
www.dialogoroche.com.br
www.conflusion.cl
www.portal.roche.de
www.dialogoroche.com.bo
www.rocheonline.se
www.gazyva.com.au
www.foundationmedicineasia.com
www.foundationmedicine.com.ar
www.roche.com.bd
www.rocheinteract.com.au
www.roche.lv
www.cotellic.global
www.ieepo.com
www.rocheonline.sk
www.foundationmedicine.com.br
www.latamrochepressday.com
www.dialogorochecac.com
www.roche.com.uy
www.roche.com.ar
www.mircera.com.au
respiratory.medically.roche.com
www.foundationmedicine.co
content.bioclinicien.fr
medically.roche.com
www.fightipf.de
www.roche.sk
www.roche.pl
www.roche.com.bo
www.e-roche.ro
www.mitroche.dk
www.rochenet.pt
www.ensayosclinicosroche.es
www.roche.ru

Other certificates including the domain name roche.com

(limited to 100 certificates)
involve.roche.com
www.hpv16and18.com
easydrive-uat.roche.com
advancedanalytics.roche.com
main.rhelp.roche.com
sni.cloudflaressl.com
magentocloud28.map.fastly.net
rbalvprexd0.bas.roche.com
cieas01.roche.com
harmonytest.de
sequencing.roche.com
esource.roche.com
e-medical.roche.com
esource.roche.com
coaguchek.com
rsmsourcing.roche.com
deimos.roche.com
cert2.roche.com
sni.cloudflaressl.com
cdn.appstore.gene.com
shpivee1-01.roche.com
eews-dev.roche.com
myaccess.roche.com
ican.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
cert3.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
mrdivee2-02.netlab.roche.com
rodip.roche.com
nsrdcongresses.roche.com
rbavxsentry11.bas.roche.com
mobilesolution-dev.roche.com
wamua.roche.com
dialog-62-test.roche.com
rocheggcpac.roche.com
san-003.ceros.com
video.hive.roche.com
sni.cloudflaressl.com
rssg.roche.com
mftemeaext.roche.com
anadisuat01.sc1.roche.com
careers.roche.com
flow.roche.com
cert3.roche.com
sni.cloudflaressl.com
misp.roche.com
cert2.roche.com
careers.roche.com
api.rockwizz.roche.com
bitbucket-nala-qa.roche.com
careers.roche.com
wamdev.roche.com
sonar-dev-old.roche.com
diauxhub.roche.com
careers.roche.com
globalfms.roche.com
san-003.ceros.com
sc1lvflexq2.sc1.roche.com
easydrive-dev.roche.com
send-tst.roche.com
indigrow.roche.com
careers.roche.com
careers.roche.com
env5-remotedashboard.roche.com
mrd25.me
cert2.roche.com
*.esrv-hub-uat.roche.com
sb.eu.phcaa.science.roche.com
san-003.ceros.com
extaccess-nala.roche.com
magentocloud28.map.fastly.net
go.roche.com
magentocloud32.map.fastly.net
sni.cloudflaressl.com
ssl882748.cloudflaressl.com
sni.cloudflaressl.com
esrv-marketplace-dev.roche.com
careers.roche.com
imcore.roche.com
booster.roche.com
sni.cloudflaressl.com
akamai-san195.exacttarget.com
raumbuch.roche.com
pitas01.roche.com
sni.cloudflaressl.com
c1edb.roche.com
magentocloud45.map.fastly.net
shpivee1-01.roche.com
hpv16and18.com
hivemind.roche.com
searchsquad.roche.com
cferondanetrochedia-qa.roche.com
esign.roche.com
diaitsupport.roche.com
sni.cloudflaressl.com
magentocloud32.map.fastly.net
r32web.sap.roche.com
apis.cwp.roche.com

Certificate

The complete raw certificate details for careers.roche.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkOO01Hejh7/+BT2/UlF
7xPJz/GA/02JyJGnE4o8aLLJDI4lcchTOGzzknfVVxKjO6UFokE+328y48KzuNF0
It4WnQ0IzrFGhh6+47PM8hHPka/UERkfCnx/5hdZnByxVX1sOFCyKWEa1eGrroBo
CAFBuVUK/xsZnewBZmDXvMpYg9epemnOywe8P0zmHHTHbyU4VRE96MOmHhFbJrj+
gFhSotQvTp2eaBXrPDimSZNCH+VJhrNNmdWxsVptgyxfvlK5e06oXw2e3w3HumMp
lcqOn+Ojz8QkKqB1JBGA6bxDHtiw2Ner5V3NMQDSqJaTnSC41U53wtmGoLfSw7kK
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6483979552159504952158747697692549162
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-26 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Basel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Basel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'F. Hoffmann-La Roche AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'careers.roche.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23008685551853694456784785989131507083641174278230464141445724046700690180968600631972055501178859440621949104715878217676841470287658868910074919722737335442332394467910170058082031824778147869577104208020772082555259739957651784835710669418571811947724533259254994117435298581671796248723140910997315466683076088729317912532720245771101924571933997604654826927274606735705250721614815614801542024330545663961216476711881400168100743079546132876791881009817384160856048508338719582724783764622911174973610297513435350895303030203082604125417454372371674414890850167849883041637636295104370140934785088582261168212653
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d1bf437b297bc2f2a13403986762af89158f55fc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2015 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheplus.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheamericalatina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.knowyourbiologic.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheresources.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochetudastar.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oncology.medically.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medinfo.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bitacoraparaenfermeras.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ocrevus.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochescience.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bitacoraparaenfermeras.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esbriet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zelborafcotellic.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forpatients.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medinfo.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rheumatology.medically.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'professionnels.roche.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochegate.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.infomedics.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine-la.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alecensa.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochepro.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche4med.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avastin.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche4professionals.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochescience.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochehelse.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.forpatients.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mojemedicina.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mystudies.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dlalekarzy.roche.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b.roche.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.conflusion.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portal.roche.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.bo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheonline.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gazyva.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicineasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.com.bd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheinteract.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cotellic.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ieepo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheonline.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.latamrochepressday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogorochecac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mircera.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'respiratory.medically.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.bioclinicien.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medically.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fightipf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.com.bo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.e-roche.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mitroche.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochenet.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ensayosclinicosroche.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016afa2e85a50000040300463044022002d1e1d4bec2a5058797dc74605a38d975903d090e168ccecafdd7b68d47793d02201f104b53bdd88af8ed3a671d89514ccbd2951857369685b0e3a50e370bf755210077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016afa2e86960000040300483046022100eb2f257f7fe2e93a2f4d4b28cb2d43d4ec1dbb7267d7f2458936a5e79e694f53022100d238f375bd59135f985fc29ae25492e343732a22ed14aa9bac4e992bc821ad91
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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