careers.roche.com

- F. Hoffmann-La Roche AG -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 7a:75:d5:56:59:03:9e:69:5b:6f:07:73:2e:1c:b0:d0 was issued on by GeoTrust Inc..

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

F. Hoffmann-La Roche AG

Organization: F. Hoffmann-La Roche AG
State / Province: Basel-Stadt
Locality: Basel
Country: CH

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7a:75:d5:56:59:03:9e:69:5b:6f:07:73:2e:1c:b0:d0
Serial Number (int): 162777641212624406088295332352643346640
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): d4:61:67:fe:2e:31:43:3d:27:50:d3:c2:a2:4a:b3:c5:bd:53:1a:37
Fingerprint (sha256): 0d:f0:0e:85:5a:da:79:fd:75:c8:f8:c2:45:cc:3f:0c:b2:99:d5:75:4b:45:26:65:0a:59:65:a6:aa:75:cf:75

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate careers.roche.com

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for careers.roche.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.rochemed.gr
foundationmedicine.com.br
www.roche.ru
www.rocheonline.se
www.latamrochepressday.com
medical.ly
www.dialogorochecac.com
www.infomedics.it
www.dialogoroche.com.br
foundationmedicine.co
www.fightipf.de
fightipf.de
www.licht-an-fuer-ms.de
www.roche.pl
foundationmedicine.com.mx
www.dialogoroche.com.co
www.dialogoroche.com.ar
www.roche-oncology.ch
rocheinteract.com.au
www.rocheinteract.com.au
www.msdiseaseactivity.com
msdiseaseactivity.com
emactiva.cl
www.emactiva.cl
www.roche.ie
www.dialogoroche.com.mx
www.dialogoroche.com.ve
www.rochetudastar.hu
www.dialogoroche.com.uy
ipfzone.com
www.ipfzone.com
www.rocheplus.es
esbriet.com.au
www.esbriet.com.au
foundationmedicine.com.sg
www.foundationmedicine.com.sg
www.gazyva.com.au
gazyva.com.au
www.dialogoroche.com.pe
foundationmedicineasia.com
www.foundationmedicineasia.com
www.msdiseaseactivity.co.uk
foundationmedicine.cl
www.roche.fi
www.foundationmedicine.com.ar
foundationmedicine.com.ar
content.bioclinicien.fr
www.roche.at
dialogoroche.com
www.dialogoroche.com
www.roche.co.uk
es.hcpnext.preprod.opengarden.rch.cm
www.ipfzone.com.uat-esbriethub.preprod.opengarden.rch.cm
www.licht-an-fuer-ms.de.uat-msd.preprod.opengarden.rch.cm
ar.uat-rfm.prod.opengarden.rch.cm
ar.uat-rfm.preprod.opengarden.rch.cm
mx.uat-rfm.prod.opengarden.rch.cm
co.uat-rfm.preprod.opengarden.rch.cm
www.rocheinteract.com.au.uat-rocheinteract-pp.rch.cm
www.foundationmedicineasia.com.uat-fmi.preprod.opengarden.rch.cm
esbriet.uat-psp.preprod.opengarden.rch.cm
publish.uat-pdmahub.preprod.opengarden.rch.cm
co.uat-rfm.prod.opengarden.rch.cm
br.uat-rfm.prod.opengarden.rch.cm
gazyva.uat-psp.preprod.opengarden.rch.cm
cl.uat-rfm.preprod.opengarden.rch.cm
nl.hcpnext.preprod.opengarden.rch.cm
fr.hcpnext.preprod.opengarden.rch.cm
pl.hcpnext.preprod.opengarden.rch.cm
www.emactiva.cl.uat-msd.preprod.opengarden.rch.cm
esbriet.uat-psp.prod.opengarden.rch.cm
www.msdiseaseactivity.com.uat-msd.preprod.opengarden.rch.cm
pt.hcpnext.preprod.opengarden.rch.cm
ch.hcpnext.preprod.opengarden.rch.cm
author.psp.dev.opengarden.rch.cm
www.dialogoroche.com.uat-dialogo.preprod.opengarden.rch.cm
www.foundationmedicine.com.sg.fmi.preprod.opengarden.rch.cm
uk2.hcpnext.preprod.opengarden.rch.cm
at.hcpnext.preprod.opengarden.rch.cm
mx.uat-rfm.preprod.opengarden.rch.cm
www.msdiseaseactivity.co.uk.uat-msd.preprod.opengarden.rch.cm
br.uat-rfm.preprod.opengarden.rch.cm
cl.uat-rfm.prod.opengarden.rch.cm
rheumatology.publish.uat-pdmahub.preprod.opengarden.rch.cm
www.dialogoroche.com.ec.uat-dialogo.preprod.opengarden.rch.cm
rheumatology.publish.uat-pdmahub.prod.opengarden.rch.cm
gazyva.uat-psp.prod.opengarden.rch.cm
oncology.medically.roche.com
medically.roche.com
respiratory.medically.roche.com
mystudies.roche.com
rheumatology.medically.roche.com
careers.roche.com

Other certificates including the domain name roche.com

(limited to 100 certificates)
involve.roche.com
www.hpv16and18.com
easydrive-uat.roche.com
advancedanalytics.roche.com
main.rhelp.roche.com
sni.cloudflaressl.com
magentocloud28.map.fastly.net
rbalvprexd0.bas.roche.com
cieas01.roche.com
harmonytest.de
sequencing.roche.com
esource.roche.com
e-medical.roche.com
esource.roche.com
coaguchek.com
rsmsourcing.roche.com
deimos.roche.com
cert2.roche.com
sni.cloudflaressl.com
cdn.appstore.gene.com
shpivee1-01.roche.com
eews-dev.roche.com
myaccess.roche.com
ican.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
cert3.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
mrdivee2-02.netlab.roche.com
rodip.roche.com
nsrdcongresses.roche.com
rbavxsentry11.bas.roche.com
mobilesolution-dev.roche.com
wamua.roche.com
dialog-62-test.roche.com
rocheggcpac.roche.com
san-003.ceros.com
video.hive.roche.com
sni.cloudflaressl.com
rssg.roche.com
mftemeaext.roche.com
anadisuat01.sc1.roche.com
careers.roche.com
flow.roche.com
cert3.roche.com
sni.cloudflaressl.com
misp.roche.com
cert2.roche.com
careers.roche.com
api.rockwizz.roche.com
bitbucket-nala-qa.roche.com
careers.roche.com
wamdev.roche.com
sonar-dev-old.roche.com
diauxhub.roche.com
careers.roche.com
globalfms.roche.com
san-003.ceros.com
sc1lvflexq2.sc1.roche.com
easydrive-dev.roche.com
send-tst.roche.com
indigrow.roche.com
careers.roche.com
careers.roche.com
env5-remotedashboard.roche.com
mrd25.me
cert2.roche.com
*.esrv-hub-uat.roche.com
sb.eu.phcaa.science.roche.com
san-003.ceros.com
extaccess-nala.roche.com
magentocloud28.map.fastly.net
go.roche.com
magentocloud32.map.fastly.net
sni.cloudflaressl.com
ssl882748.cloudflaressl.com
sni.cloudflaressl.com
esrv-marketplace-dev.roche.com
careers.roche.com
imcore.roche.com
booster.roche.com
sni.cloudflaressl.com
akamai-san195.exacttarget.com
raumbuch.roche.com
pitas01.roche.com
sni.cloudflaressl.com
c1edb.roche.com
magentocloud45.map.fastly.net
shpivee1-01.roche.com
hpv16and18.com
hivemind.roche.com
searchsquad.roche.com
cferondanetrochedia-qa.roche.com
esign.roche.com
diaitsupport.roche.com
sni.cloudflaressl.com
magentocloud32.map.fastly.net
r32web.sap.roche.com
apis.cwp.roche.com

Certificate

The complete raw certificate details for careers.roche.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/Jo22mxor6M0qZXs0if
xD96UchIFANSbIC4B6iPToh0uMZEudbJ1DQpa8wyHc6AnAmExvQ0+eTjBGg8R4GA
xegnM9sqyzqzaIL371dES2/ofqMePO8puzaLULyZa/QtA7wI2XFbWJlIAx0zxOoM
lyGC1+NuGPx3i/p0LBA/bFduIjiqk92mtIMFpHPPN1lbYDtw405fh+xU8ecclfOF
8vfvWNh+7eRKoM6rYpXGhQSus0dP7L72sg3SUsPOaE/0u9hPOqPUfTgHkCiwpBRJ
PZSAkMeE7YXLA6vxg3Wdcdla7QVdrQ2qNoYa+gibTnMaO71YCi+VP98e90Fgg5sY
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 162777641212624406088295332352643346640
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Basel-Stadt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Basel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'F. Hoffmann-La Roche AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'careers.roche.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22211239997012695277833089925834786160181998655571787156831294220512870919421427266190823114849665836459257869937210223927933912672005270078651940797567783331288434914826220938124316414765151726528227679110640193105440045582197237764753749243347314418007237334021405335441918419439344975196350652735311798964586837921350637174691914510719362140520931526242456128138033974269645131286558460022627763743388548363995635038521175039302741924571790616837693028662478406849140979212589009726055460946057712879131384480117607455093427452077083495346073209351836733158772556500242320075807211289892833258131500843996129466543
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2889 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochemed.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheonline.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.latamrochepressday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medical.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogorochecac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.infomedics.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fightipf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fightipf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.licht-an-fuer-ms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche-oncology.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocheinteract.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheinteract.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msdiseaseactivity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emactiva.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emactiva.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochetudastar.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipfzone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipfzone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheplus.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esbriet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esbriet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gazyva.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gazyva.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicineasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicineasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.bioclinicien.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipfzone.com.uat-esbriethub.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.licht-an-fuer-ms.de.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.uat-rfm.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.uat-rfm.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx.uat-rfm.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'co.uat-rfm.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheinteract.com.au.uat-rocheinteract-pp.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicineasia.com.uat-fmi.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esbriet.uat-psp.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publish.uat-pdmahub.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'co.uat-rfm.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'br.uat-rfm.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gazyva.uat-psp.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cl.uat-rfm.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nl.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emactiva.cl.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esbriet.uat-psp.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.com.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pt.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ch.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author.psp.dev.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.uat-dialogo.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.sg.fmi.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk2.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'at.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx.uat-rfm.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.co.uk.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'br.uat-rfm.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cl.uat-rfm.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rheumatology.publish.uat-pdmahub.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.ec.uat-dialogo.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rheumatology.publish.uat-pdmahub.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gazyva.uat-psp.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oncology.medically.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medically.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'respiratory.medically.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mystudies.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rheumatology.medically.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.roche.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002d7ff35523db52efcc758234b91cb5012ab8278a202383b516cefe07018a7da2f3f3adbd2654c1c695d370cf409525c5b14e2648dcc311358cc4a3a7268fc510ed2ab18d786d98ba3fc43bae6ac48b2f62b9697a6cd8200816b4045f403bab7574db972dd452ed2a406a7199d1d39bfe1e27d13923bdb604d9ebd9e095cd5488bf1b57e7f0621415bf5cb133a32bc2f03780d7e5602eb3c6905f8d9e7413ea90eabd7a743ce15b2447a6999680884de64fde5dbb3946f05598e666bbe96f716a4be6908223fb429cea58433267820bcc5ef2b2bae68ca187abf35efbe51efd0a02f9e6e3ae1e325cdf04aafce96072c55ed07bdfa4802d87211eac1da76812a3