careers.roche.com

- F. Hoffmann-La Roche AG -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 3d:c2:c4:79:92:f6:d9:a0:8c:3f:02:14:1b:30:b6:5a was issued on by GeoTrust Inc..

With 63 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

F. Hoffmann-La Roche AG

Organization: F. Hoffmann-La Roche AG
State / Province: Basel-Stadt
Locality: Basel
Country: CH

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3d:c2:c4:79:92:f6:d9:a0:8c:3f:02:14:1b:30:b6:5a
Serial Number (int): 82094198317808839661108301136596612698
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): ff:86:3e:64:02:cf:28:37:ba:9e:8d:b2:35:09:3c:20:31:af:cc:74
Fingerprint (sha256): 09:df:9a:75:7f:52:cc:be:c5:a3:ad:ae:92:e0:9d:37:f9:eb:44:30:35:54:5c:e2:d6:1c:51:d4:93:99:41:b4

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate careers.roche.com

63

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for careers.roche.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.licht-an-fuer-ms.de
uk2.hcpnext.preprod.opengarden.rch.cm
mystudies.roche.com
www.roche.fi
www.rocheonline.se
www.fightipf.de
fightipf.de
www.roche.co.uk
www.dialogoroche.com.ar
nl.hcpnext.preprod.opengarden.rch.cm
www.rocheinteract.com.au
at.hcpnext.preprod.opengarden.rch.cm
www.dialogoroche.com.ve
www.dialogoroche.com.br
www.infomedics.it
www.dialogoroche.com.uat-dialogo.prod.opengarden.rch.cm
www.foundationmedicine.com.sg.uat-fmi.preprod.opengarden.rch.cm
www.melanoominfo.nl
www.dialogorochecac.com
www.mmomentumexample.com.uat-mmomentum.preprod.opengarden.rch.cm
www.dialogoroche.com.mx
www.mmomentum.br.uat-mmomentum.prod.opengarden.rch.cm
www.foundationmedicine.com.sg.fmi.preprod.opengarden.rch.cm
www.melanoominfo.nl.uat-mmomentum.preprod.opengarden.rch.cm
www.msdiseaseactivity.com.uat-msd.preprod.opengarden.rch.cm
www.melanoominfo.nl.uat-mmomentum.prod.opengarden.rch.cm
www.mmomentum.net.uat-mmomentum.prod.opengarden.rch.cm
www.rocheinteract.com.au.uat-rocheinteract-pp.rch.cm
www.mmomentum.br.uat-mmomentum.preprod.opengarden.rch.cm
www.fightipf.de.uat-mmomentum.preprod.opengarden.rch.cm
es.hcpnext.preprod.opengarden.rch.cm
www.roche-oncology.ch
www.rocheplus.es
www.mmomentumexample.com.uat-mmomentum.prod.opengarden.rch.cm
www.roche.ie
www.foundationmedicineasia.com.uat-fmi.preprod.opengarden.rch.cm
www.dialogoroche.com.co
fr.hcpnext.preprod.opengarden.rch.cm
www.foundationmedicineasia.com
www.dialogoroche.com.pe
www.rochetudastar.hu
dialogoroche.com
pt.hcpnext.preprod.opengarden.rch.cm
www.dialogoroche.com
www.licht-an-fuer-ms.de.uat-msd.preprod.opengarden.rch.cm
www.foundationmedicine.com.sg
www.fibrosisquistica.co
content.bioclinicien.fr
www.rochemed.gr
www.msdiseaseactivity.co.uk.uat-msd.preprod.opengarden.rch.cm
www.latamrochepressday.com
www.foundationmedicineasia.com.uat-fmi.prod.opengarden.rch.cm
www.dialogoroche.com.uy
live.digitalfactory.roche.com
www.emactiva.cl.uat-msd.preprod.opengarden.rch.cm
www.msdiseaseactivity.co.uk
www.emactiva.cl
www.dialogoroche.com.uat-dialogo.preprod.opengarden.rch.cm
ch.hcpnext.preprod.opengarden.rch.cm
author.psp.dev.opengarden.rch.cm
www.msdiseaseactivity.com
pl.hcpnext.preprod.opengarden.rch.cm
careers.roche.com

Other certificates including the domain name roche.com

(limited to 100 certificates)
involve.roche.com
www.hpv16and18.com
easydrive-uat.roche.com
advancedanalytics.roche.com
main.rhelp.roche.com
api.fido.tst.pdaa.science.roche.com
sni.cloudflaressl.com
magentocloud28.map.fastly.net
rbalvprexd0.bas.roche.com
cieas01.roche.com
harmonytest.de
sequencing.roche.com
esource.roche.com
e-medical.roche.com
esource.roche.com
maps-uat.roche.com
coaguchek.com
rsmsourcing.roche.com
deimos.roche.com
cert2.roche.com
sni.cloudflaressl.com
cdn.appstore.gene.com
shpivee1-01.roche.com
eews-dev.roche.com
myaccess.roche.com
ican.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
albecsinternaltest.aws.cloud.roche.com
cert3.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
mrdivee2-02.netlab.roche.com
rodip.roche.com
nsrdcongresses.roche.com
rbavxsentry11.bas.roche.com
mobilesolution-dev.roche.com
wamua.roche.com
dialog-62-test.roche.com
identity-hu.login.digitalidentity.roche.com
rocheggcpac.roche.com
san-003.ceros.com
video.hive.roche.com
sni.cloudflaressl.com
rssg.roche.com
usdiagnostics.roche.com
mftemeaext.roche.com
anadisuat01.sc1.roche.com
careers.roche.com
flow.roche.com
cert3.roche.com
sni.cloudflaressl.com
misp.roche.com
cert2.roche.com
careers.roche.com
api.rockwizz.roche.com
bitbucket-nala-qa.roche.com
careers.roche.com
wamdev.roche.com
sonar-dev-old.roche.com
diauxhub.roche.com
careers.roche.com
globalfms.roche.com
rexis-dialog-dev.roche.com
san-003.ceros.com
sc1lvflexq2.sc1.roche.com
easydrive-dev.roche.com
send-tst.roche.com
indigrow.roche.com
careers.roche.com
careers.roche.com
env5-remotedashboard.roche.com
mrd25.me
cert2.roche.com
*.esrv-hub-uat.roche.com
sb.eu.phcaa.science.roche.com
san-003.ceros.com
extaccess-nala.roche.com
magentocloud28.map.fastly.net
go.roche.com
magentocloud32.map.fastly.net
sni.cloudflaressl.com
status.repository.roche.com
itot.roche.com
ssl882748.cloudflaressl.com
sni.cloudflaressl.com
esrv-marketplace-dev.roche.com
careers.roche.com
gispeopledev.roche.com
imcore.roche.com
booster.roche.com
sni.cloudflaressl.com
akamai-san195.exacttarget.com
raumbuch.roche.com
pitas01.roche.com
sni.cloudflaressl.com
c1edb.roche.com
magentocloud45.map.fastly.net
shpivee1-01.roche.com
hpv16and18.com

Certificate

The complete raw certificate details for careers.roche.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5sUg0h6UuMVmRrrusZJo
3G1bvj69IUqxm0EvUZa8Lg1FowFCe7u98o73zNo+EoFKbykOvvso32Bn3zJm8+v/
TX2alhcvfH41i0hNRrDtBtvePuAY+sd+jBbaq9yZi8gn2T8xK9oL7K1Gy601UoxV
4hhLY1iGaWec5wpSUvyP8hVLFYq6HzrTf5fWTvbC9NZEIYPEdG2jCZBOcWt3TkVw
FSHuUukUeV9KeCKeffvxULS4XKKr3VcNnRfyefkvF3M2Q/QYXU5UGm01gXPABYh3
0o7xG2zs+gq7Uys1Dj7MpyBaeVozgyJpLvQol+tnpT1Q+lFejJLvXm3bOtg6FY1s
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 82094198317808839661108301136596612698
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Basel-Stadt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Basel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'F. Hoffmann-La Roche AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'careers.roche.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29132017683629839860559886896874932889838741176292549205957886141903372591270912639268804470685332646146996424539131858639700593073703641731687336869240955058975794405138563363893024242877484585883464600472167731987163117801670293862004056876661968369485098248897153620283626348196088316762681605493267444596856569017897924429437061680015758724187427579797448394122759844556028758997415012533573714999438072186182315448132806454541025140883129349805350038186219204729468943453774905322905227323680995112711878179254475893262608672249948282078260268647935909415561689455871616526279503015235171759534888060563519007771
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2268 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.licht-an-fuer-ms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk2.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mystudies.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheonline.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fightipf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fightipf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nl.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheinteract.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'at.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.infomedics.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.uat-dialogo.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.sg.uat-fmi.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melanoominfo.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogorochecac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentumexample.com.uat-mmomentum.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentum.br.uat-mmomentum.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.sg.fmi.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melanoominfo.nl.uat-mmomentum.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.com.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melanoominfo.nl.uat-mmomentum.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentum.net.uat-mmomentum.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheinteract.com.au.uat-rocheinteract-pp.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentum.br.uat-mmomentum.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fightipf.de.uat-mmomentum.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche-oncology.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheplus.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentumexample.com.uat-mmomentum.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicineasia.com.uat-fmi.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicineasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochetudastar.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pt.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.licht-an-fuer-ms.de.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fibrosisquistica.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.bioclinicien.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochemed.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.co.uk.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.latamrochepressday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicineasia.com.uat-fmi.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.digitalfactory.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emactiva.cl.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emactiva.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.uat-dialogo.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ch.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author.psp.dev.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.roche.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015d7a0c7171000004030047304502200f261c06f4640650f37c7e06cc6fc0cfb58f2f1ee80c145b5be08e3cc9008a19022100994789fb7cf7b4959d4fa053197c279750832ea893ead469f28cf5bee745aef2007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015d7a0c718c000004030048304602210094216c0035e71abc974f067f3f43aeecd18da6bc71ce4ad49eb0352067097305022100d3d5bcbca5d1371425f0a9f4a46c06e7530d30d6e8c54edd70700ff8adcbcc5b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0085dbf79385b0de46455e95c302486517059b0ac56f522403a6dbc5cf1df333bf7f2e65b55e994436e7e53e167845dcdaa4022fce37bc17bbd9fcac915b1b25604da96b058c41eeab7a97bfed148d7998168f404262163278cbd64909e331c043cfa9e442d69151e61c022fec2e263543dffac50273a8a4c91d1a551b882725d0bddb23cc66ad078f2124bf07f7dd0f1a201509451c4ab48376dabef2054236079f85984c404c66c897b02850836bdcf11761567c0c762de7932752e554e141a4ad47e35878f0ee090cfffc5dbeb0308656170608948c020e2f12457bc79b71fe7d6205e173c8fa547f874442ec2bd0876956c815954ea36187a6acf62c74afc0