cdn.appstore.gene.com

- F. Hoffmann-La Roche AG -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0b:04:97:eb:a3:d6:93:3d:dd:f8:c8:38:d6:31:a0:9e was issued on by DigiCert Inc.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

F. Hoffmann-La Roche AG

Organization: F. Hoffmann-La Roche AG
Locality: Basel
Country: CH

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:04:97:eb:a3:d6:93:3d:dd:f8:c8:38:d6:31:a0:9e
Serial Number (int): 14645358454242018222205251568872300702
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b0:a1:4b:5d:40:9c:f0:6a:d7:75:90:c0:29:e7:ee:77:8c:e6:65:88
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): c2:af:d2:b2:ca:95:12:43:00:34:04:43:e8:c1:dc:04:7e:91:5e:1f
Fingerprint (sha256): 0b:de:fc:a1:fe:27:74:e9:de:14:6c:50:4c:ff:29:4a:8b:d5:3a:02:5f:a5:46:d8:10:0b:9c:c2:41:6c:e0:6d

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate cdn.appstore.gene.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cdn.appstore.gene.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

appmanager.gene.com
appzone-ua.gene.com
appzone-ua.roche.com
appzone.gene.com
appzone.roche.com
cdn.appstore.gene.com

Other certificates including the domain name gene.com

(limited to 100 certificates)
aem.gene.com
sni.cloudflaressl.com
actnow.gene.com
gcast.gene.com
labintheloop.gene.com
ecd.gene.com
skin.atp.gene.com
partners.gene.com
apsuat.gene.com
brandcenter.gene.com
fmvnav.gene.com
cdn.appstore.gene.com
ecd.gene.com
ecd.gene.com
gworks.gene.com
cad.gene.com
fmvnav-uat.gene.com
learn.gene.com
respwlimss402.gene.com
www.medicalinformation.gene.com
screenshots.gene.com
contractswizuat.gene.com
mcfmvwiz.gene.com
aem.gene.com
foodallergy.gene.com
datatools.gene.com
mld.atp.gene.com
gcampaign.gene.com
mx.gene.com
datatools.gene.com
anaaistst01.gene.com
sni.cloudflaressl.com
dnacloud-dev.gene.com
mx-uat.gene.com
ptddt.gene.com
pi-pd-pivision.gene.com
r32web.sap.roche.com
dev-screenshots.gene.com
aem.gene.com
csu1.gene.com
ltd.atp.gene.com
qlikprd.gene.com
ptddt.gene.com
qlikprd.gene.com
sni.cloudflaressl.com
aem.gene.com
cad.gene.com
atp.gene.com
vpn.range.roche.net
gmemori.gene.com
cad-dev.gene.com
prescientstatic.gene.com
aem.gene.com
sni.cloudflaressl.com
logmycommute-dev.gene.com
gride-hff.gene.com
*.gene.com
thestudio.gene.com
epicxcontent.gene.com
contractswizuat.gene.com
pwsm-uat.gene.com
aem.gene.com
*.dev2.converge.gene.com
extsimsval.gene.com
staging.atp.gene.com
*.genehub-sandbox.gene.com
nutropin.atp.gene.com
ecdsolr-dev.gene.com
aem.gene.com
learn-uat.gene.com
mta-sts.gene.com
mss.gene.com
gmemorisolr-qa.gene.com
reswebappprd303.gene.com
anaaistst01.gene.com
sni.cloudflaressl.com
her2.atp.gene.com
cdn.appstore.gene.com
gmemori-qa.gene.com
resmsgprd.gene.com
aem.gene.com
mx-uat.gene.com
*.gene.com
*.tst.grml.gene.com
feedback.gene.com
10-36-6-208-gredcloud.gene.com
giohubuat.gene.com
*.gene.com
epicxcontent.gene.com
t-s.gene.com
aem.gene.com
ccp1pweb.ccp1.gene.com
logmycommute.gene.com
logmycommute-dev.gene.com
reswebappprd301.gene.com
giohubuat.gene.com
contractswizuat.gene.com
sni.cloudflaressl.com
developer.gene.com
futurelabplus-network.gene.com

Certificate

The complete raw certificate details for cdn.appstore.gene.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2o2pQFJ5ZCjkBNYxGxoj
ACOAssNc9RNDkPxR4ClHI0MsAIa7za82PLG5xjGDF0WAiE76TYH1ktmXV4VzzJh2
LQrXTYlPbuZfVF+KRtQVvhlevKUo7RmYd8oEs2H5ScRtI2GVt2Bltq778ZCxfAXf
YfKSRzkYakCpBlaRZoZySEvs5mqpsToJKhbiYNQF9kLc2m/Pg0UeVyj2IaaTHxlL
KWobQ47uw21u5LzSMoEXYuT3Lw3I66CJLVVDQxU5zRgomt8T24sg8a64YO1qG6+i
e9pSPpUdWJ93ne4ktEIt58ZKWoACAfJIZajUdwWMdvzCNBF5S1MEdDCfuRTpCTg8
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14645358454242018222205251568872300702
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-31 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Basel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'F. Hoffmann-La Roche AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cdn.appstore.gene.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27589806193172613961915475962614841904946186228961784531848826568468558372651806047602438707933178486764169280386766850381602639387336923219391933014920968861814628885981270799408808703735777810928171389207615988177271796292633754455703919027595488633370722430104978863392201704441266041150383506269888133322423741486707003412956035086382072433793171094924107563197675587287993732718146875549323078408895382780772393503762714510315134106928363568328415303297654148999588892790849527081326444971866751838922492862805073336065369487710012941899440824090373151688350464687772085331792553119637752302396267120309126577273
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b0a14b5d409cf06ad77590c029e7ee778ce66588
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appmanager.gene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appzone-ua.gene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appzone-ua.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appzone.gene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appzone.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.appstore.gene.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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