careers.roche.com

- F. Hoffmann-La Roche AG -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 7a:9a:c3:ec:69:d5:4f:c1:e3:9d:31:2a:7c:76:c0:fe was issued on by GeoTrust Inc..

With 73 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

F. Hoffmann-La Roche AG

Organization: F. Hoffmann-La Roche AG
State / Province: Basel-Stadt
Locality: Basel
Country: CH

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7a:9a:c3:ec:69:d5:4f:c1:e3:9d:31:2a:7c:76:c0:fe
Serial Number (int): 162969403002446969265568720214004515070
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 76:be:67:01:d3:b6:d2:49:7a:70:2d:fd:51:5d:12:8b:a9:8b:55:1e
Fingerprint (sha256): 0e:af:74:75:ae:b7:7a:9e:28:76:77:71:1d:9d:22:62:2b:8a:a4:47:0d:25:ad:f8:b4:98:e3:52:8a:34:ca:10

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate careers.roche.com

73

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for careers.roche.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.roche.co.uk
www.infomedics.it
www.dialogoroche.com.ve
www.rocheplus.es
www.emactiva.cl
www.roche-oncology.ch
www.msdiseaseactivity.co.uk
www.dialogoroche.com.mx
www.latamrochepressday.com
www.roche.at
www.roche.fi
www.licht-an-fuer-ms.de
www.fibrosisquistica.co
www.rochetudastar.hu
www.roche.ie
www.melanoominfo.nl
dialogoroche.com
www.dialogoroche.com
www.dialogoroche.com.ar
www.msdiseaseactivity.com
www.dialogoroche.com.pe
www.dialogoroche.com.br
content.bioclinicien.fr
www.foundationmedicine.com.sg
www.rocheonline.se
www.dialogoroche.com.co
www.foundationmedicineasia.com
www.rocheinteract.com.au
www.dialogoroche.com.uy
www.dialogorochecac.com
www.fightipf.de
fightipf.de
www.rochemed.gr
www.fightipf.de.uat-mmomentum.preprod.opengarden.rch.cm
www.msdiseaseactivity.com.uat-msd.preprod.opengarden.rch.cm
es.hcpnext.preprod.opengarden.rch.cm
www.rocheinteract.com.au.uat-rocheinteract-pp.rch.cm
www.dialogoroche.com.ec.uat-dialogo.preprod.opengarden.rch.cm
nl.hcpnext.preprod.opengarden.rch.cm
www.mmomentum.net.uat-mmomentum.prod.opengarden.rch.cm
fr.hcpnext.preprod.opengarden.rch.cm
pl.hcpnext.preprod.opengarden.rch.cm
www.mmomentumexample.com.uat-mmomentum.prod.opengarden.rch.cm
www.mmomentumexample.com.uat-mmomentum.preprod.opengarden.rch.cm
at.hcpnext.preprod.opengarden.rch.cm
www.dialogoroche.com.uat-dialogo.prod.opengarden.rch.cm
ch.hcpnext.preprod.opengarden.rch.cm
www.mmomentum.br.uat-mmomentum.preprod.opengarden.rch.cm
uk2.hcpnext.preprod.opengarden.rch.cm
www.foundationmedicine.com.sg.fmi.preprod.opengarden.rch.cm
www.foundationmedicineasia.com.uat-fmi.prod.opengarden.rch.cm
www.ipfzone.com.uat-esbriethub.prod.opengarden.rch.cm
www.foundationmedicine.com.sg.uat-fmi.preprod.opengarden.rch.cm
www.melanoominfo.nl.uat-mmomentum.prod.opengarden.rch.cm
www.licht-an-fuer-ms.de.uat-msd.preprod.opengarden.rch.cm
www.mmomentum.br.uat-mmomentum.prod.opengarden.rch.cm
www.melanoominfo.nl.uat-mmomentum.preprod.opengarden.rch.cm
www.dialogoroche.com.uat-dialogo.preprod.opengarden.rch.cm
www.emactiva.cl.uat-msd.preprod.opengarden.rch.cm
www.ipfzone.com.uat-esbriethub.preprod.opengarden.rch.cm
publish.uat-pdmahub.preprod.opengarden.rch.cm
pt.hcpnext.preprod.opengarden.rch.cm
www.foundationmedicineasia.com.uat-fmi.preprod.opengarden.rch.cm
author.psp.dev.opengarden.rch.cm
www.msdiseaseactivity.co.uk.uat-msd.preprod.opengarden.rch.cm
respiratory.medical.ly
oncology.medical.ly
rheumatology.medical.ly
medical.ly
www.medical.ly
mystudies.roche.com
live.digitalfactory.roche.com
careers.roche.com

Other certificates including the domain name roche.com

(limited to 100 certificates)
involve.roche.com
www.hpv16and18.com
easydrive-uat.roche.com
advancedanalytics.roche.com
main.rhelp.roche.com
api.fido.tst.pdaa.science.roche.com
sni.cloudflaressl.com
magentocloud28.map.fastly.net
rbalvprexd0.bas.roche.com
cieas01.roche.com
harmonytest.de
sequencing.roche.com
esource.roche.com
e-medical.roche.com
esource.roche.com
maps-uat.roche.com
coaguchek.com
rsmsourcing.roche.com
deimos.roche.com
cert2.roche.com
sni.cloudflaressl.com
cdn.appstore.gene.com
shpivee1-01.roche.com
eews-dev.roche.com
myaccess.roche.com
ican.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
albecsinternaltest.aws.cloud.roche.com
cert3.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
mrdivee2-02.netlab.roche.com
rodip.roche.com
nsrdcongresses.roche.com
rbavxsentry11.bas.roche.com
mobilesolution-dev.roche.com
wamua.roche.com
dialog-62-test.roche.com
identity-hu.login.digitalidentity.roche.com
rocheggcpac.roche.com
san-003.ceros.com
video.hive.roche.com
sni.cloudflaressl.com
rssg.roche.com
usdiagnostics.roche.com
mftemeaext.roche.com
anadisuat01.sc1.roche.com
careers.roche.com
flow.roche.com
cert3.roche.com
sni.cloudflaressl.com
misp.roche.com
cert2.roche.com
careers.roche.com
api.rockwizz.roche.com
bitbucket-nala-qa.roche.com
careers.roche.com
wamdev.roche.com
sonar-dev-old.roche.com
diauxhub.roche.com
careers.roche.com
globalfms.roche.com
rexis-dialog-dev.roche.com
san-003.ceros.com
sc1lvflexq2.sc1.roche.com
easydrive-dev.roche.com
send-tst.roche.com
indigrow.roche.com
careers.roche.com
careers.roche.com
env5-remotedashboard.roche.com
mrd25.me
cert2.roche.com
*.esrv-hub-uat.roche.com
sb.eu.phcaa.science.roche.com
san-003.ceros.com
extaccess-nala.roche.com
magentocloud28.map.fastly.net
go.roche.com
magentocloud32.map.fastly.net
sni.cloudflaressl.com
status.repository.roche.com
itot.roche.com
ssl882748.cloudflaressl.com
sni.cloudflaressl.com
esrv-marketplace-dev.roche.com
careers.roche.com
gispeopledev.roche.com
imcore.roche.com
booster.roche.com
sni.cloudflaressl.com
akamai-san195.exacttarget.com
raumbuch.roche.com
pitas01.roche.com
sni.cloudflaressl.com
c1edb.roche.com
magentocloud45.map.fastly.net
shpivee1-01.roche.com
hpv16and18.com

Certificate

The complete raw certificate details for careers.roche.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDK6s7ICKxHSrOqpEGlg
U9FF7Qij+2unQE0Fc6bFCq3yppj3u1zxl5f0HXnZ+KDIFpIDQM5jKJarwLas8Hxh
OrlENdyURZhtqgrjaQAZAcZV+x+Wop1nBE85EK05vC/W5fhmi2JB+pzdf1WREWGg
nEWUYhyEKSQm66asUBlrW0dn+G1bg+/wctAGLTJYM/nYDUggYbvYIPKN6oeAezry
m/GeLaMddLHbLa+0HmmeragUzZ0QULCL2KtKrjGfkCiifa1p32U61yKWc5fy+W+L
8iaPkQ5l68V/iuTwRA+YJzq3pTdLIrtxyVqsjc/PHvF2Z5iS9SrBvX704s6RYnLC
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 162969403002446969265568720214004515070
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Basel-Stadt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Basel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'F. Hoffmann-La Roche AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'careers.roche.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23252863666113287553043284036929460790538700575534092166680083125475921697609959049799705753889205887859448640414167284041244341547404970850841204327930983804601220523624972484970256509858786261460709817895513093155177442226846871787801767811124573685049008738311387375581843310925913227152289145135367660692172284174616014284559414868840759700804993630867417829652018955548621103669363820751020648329137699604206441290761347622072612945573315658251529296078839567883005087467557459799092919037174145938406559595733656716532720617221137774480181324091184473947587265197446838765639672732826813651445499017125055087107
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2603 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.infomedics.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheplus.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emactiva.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche-oncology.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.latamrochepressday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.licht-an-fuer-ms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fibrosisquistica.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochetudastar.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melanoominfo.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.bioclinicien.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheonline.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicineasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheinteract.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogorochecac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fightipf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fightipf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochemed.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fightipf.de.uat-mmomentum.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.com.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheinteract.com.au.uat-rocheinteract-pp.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.ec.uat-dialogo.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nl.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentum.net.uat-mmomentum.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentumexample.com.uat-mmomentum.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentumexample.com.uat-mmomentum.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'at.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.uat-dialogo.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ch.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentum.br.uat-mmomentum.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk2.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.sg.fmi.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicineasia.com.uat-fmi.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipfzone.com.uat-esbriethub.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.sg.uat-fmi.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melanoominfo.nl.uat-mmomentum.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.licht-an-fuer-ms.de.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentum.br.uat-mmomentum.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melanoominfo.nl.uat-mmomentum.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.uat-dialogo.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emactiva.cl.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipfzone.com.uat-esbriethub.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publish.uat-pdmahub.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pt.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicineasia.com.uat-fmi.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author.psp.dev.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.co.uk.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'respiratory.medical.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oncology.medical.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rheumatology.medical.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medical.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medical.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mystudies.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.digitalfactory.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.roche.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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