careers.roche.com

- F. Hoffmann-La Roche AG -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 7e:0e:5d:0d:3d:da:3a:c3:f3:39:d0:db:f3:0b:17:44 was issued on by GeoTrust Inc..

With 61 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

F. Hoffmann-La Roche AG

Organization: F. Hoffmann-La Roche AG
State / Province: Basel
Locality: Basel
Country: CH

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7e:0e:5d:0d:3d:da:3a:c3:f3:39:d0:db:f3:0b:17:44
Serial Number (int): 167557306938120548803140340587439003460
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 67:a9:26:e6:3b:a1:d1:82:2e:ae:e1:01:a5:75:a1:3f:40:0a:14:18
Fingerprint (sha256): 16:b5:9a:2b:3a:3a:94:8b:1b:8b:a1:62:7c:8b:84:ff:2f:af:7a:72:96:c5:3b:42:43:08:9e:bb:a1:40:9b:fa

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate careers.roche.com

61

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for careers.roche.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.dialogoroche.com
uk2.hcpnext.preprod.opengarden.rch.cm
www.fibrosisquistica.co
www.dialogorochecac.com
www.dialogoroche.com.uat-dialogo.preprod.opengarden.rch.cm
www.emactiva.cl.uat-msd.preprod.opengarden.rch.cm
pt.hcpnext.preprod.opengarden.rch.cm
www.rocheplus.es
www.licht-an-fuer-ms.de
dialogoroche.com
www.foundationmedicineasia.com.uat-fmi.preprod.opengarden.rch.cm
www.dialogoroche.com.uy
mystudies.roche.com
www.roche.ie
www.msdiseaseactivity.co.uk
www.msdiseaseactivity.com
www.mmomentumexample.com.uat-mmomentum.preprod.opengarden.rch.cm
www.dialogoroche.com.uat-dialogo.prod.opengarden.rch.cm
www.dialogoroche.com.pe
es.hcpnext.preprod.opengarden.rch.cm
www.melanoominfo.nl.uat-mmomentum.preprod.opengarden.rch.cm
www.roche-oncology.ch
nl.hcpnext.preprod.opengarden.rch.cm
www.rocheinteract.com.au.uat-rocheinteract-pp.rch.cm
www.melanoominfo.nl
www.latamrochepressday.com
www.rochetudastar.hu
www.mmomentum.br.uat-mmomentum.preprod.opengarden.rch.cm
www.rocheinteract.com.au
www.foundationmedicine.com.sg.fmi.preprod.opengarden.rch.cm
www.dialogoroche.com.co
at.hcpnext.preprod.opengarden.rch.cm
www.rocheonline.se
www.foundationmedicineasia.com
www.msdiseaseactivity.com.uat-msd.preprod.opengarden.rch.cm
www.mmomentumexample.com.uat-mmomentum.prod.opengarden.rch.cm
www.msdiseaseactivity.co.uk.uat-msd.preprod.opengarden.rch.cm
content.bioclinicien.fr
author.psp.dev.opengarden.rch.cm
fr.hcpnext.preprod.opengarden.rch.cm
www.mmomentum.br.uat-mmomentum.prod.opengarden.rch.cm
www.dialogoroche.com.ar
www.roche.co.uk
www.infomedics.it
www.licht-an-fuer-ms.de.uat-msd.preprod.opengarden.rch.cm
www.dialogoroche.com.br
pl.hcpnext.preprod.opengarden.rch.cm
www.dialogoroche.com.ve
www.melanoominfo.nl.uat-mmomentum.prod.opengarden.rch.cm
www.foundationmedicine.com.sg
www.dialogoroche.com.mx
www.mmomentum.net.uat-mmomentum.prod.opengarden.rch.cm
www.roche.fi
www.emactiva.cl.uat-msd.prod.opengarden.rch.cm
live.digitalfactory.roche.com
ch.hcpnext.preprod.opengarden.rch.cm
www.foundationmedicineasia.com.uat-fmi.prod.opengarden.rch.cm
www.rochemed.gr
www.foundationmedicine.com.sg.uat-fmi.preprod.opengarden.rch.cm
www.emactiva.cl
careers.roche.com

Other certificates including the domain name roche.com

(limited to 100 certificates)
involve.roche.com
www.hpv16and18.com
easydrive-uat.roche.com
advancedanalytics.roche.com
main.rhelp.roche.com
api.fido.tst.pdaa.science.roche.com
sni.cloudflaressl.com
magentocloud28.map.fastly.net
rbalvprexd0.bas.roche.com
cieas01.roche.com
harmonytest.de
sequencing.roche.com
esource.roche.com
e-medical.roche.com
esource.roche.com
maps-uat.roche.com
coaguchek.com
rsmsourcing.roche.com
deimos.roche.com
cert2.roche.com
sni.cloudflaressl.com
cdn.appstore.gene.com
shpivee1-01.roche.com
eews-dev.roche.com
myaccess.roche.com
ican.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
albecsinternaltest.aws.cloud.roche.com
cert3.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
mrdivee2-02.netlab.roche.com
rodip.roche.com
nsrdcongresses.roche.com
rbavxsentry11.bas.roche.com
mobilesolution-dev.roche.com
wamua.roche.com
dialog-62-test.roche.com
identity-hu.login.digitalidentity.roche.com
rocheggcpac.roche.com
san-003.ceros.com
video.hive.roche.com
sni.cloudflaressl.com
rssg.roche.com
usdiagnostics.roche.com
mftemeaext.roche.com
anadisuat01.sc1.roche.com
careers.roche.com
flow.roche.com
cert3.roche.com
sni.cloudflaressl.com
misp.roche.com
cert2.roche.com
careers.roche.com
api.rockwizz.roche.com
bitbucket-nala-qa.roche.com
careers.roche.com
wamdev.roche.com
sonar-dev-old.roche.com
diauxhub.roche.com
careers.roche.com
globalfms.roche.com
rexis-dialog-dev.roche.com
san-003.ceros.com
sc1lvflexq2.sc1.roche.com
easydrive-dev.roche.com
send-tst.roche.com
indigrow.roche.com
careers.roche.com
careers.roche.com
env5-remotedashboard.roche.com
mrd25.me
cert2.roche.com
*.esrv-hub-uat.roche.com
sb.eu.phcaa.science.roche.com
san-003.ceros.com
extaccess-nala.roche.com
magentocloud28.map.fastly.net
go.roche.com
magentocloud32.map.fastly.net
sni.cloudflaressl.com
status.repository.roche.com
itot.roche.com
ssl882748.cloudflaressl.com
sni.cloudflaressl.com
esrv-marketplace-dev.roche.com
careers.roche.com
gispeopledev.roche.com
imcore.roche.com
booster.roche.com
sni.cloudflaressl.com
akamai-san195.exacttarget.com
raumbuch.roche.com
pitas01.roche.com
sni.cloudflaressl.com
c1edb.roche.com
magentocloud45.map.fastly.net
shpivee1-01.roche.com
hpv16and18.com

Certificate

The complete raw certificate details for careers.roche.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINlzCCDH+gAwIBAgIQfg5dDT3aOsPzOdDb8wsXRDANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU
R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTcwNzEyMDAwMDAwWhcNMTgwOTAyMjM1
OTU5WjBrMQswCQYDVQQGEwJDSDEOMAwGA1UECAwFQmFzZWwxDjAMBgNVBAcMBUJh
c2VsMSAwHgYDVQQKDBdGLiBIb2ZmbWFubi1MYSBSb2NoZSBBRzEaMBgGA1UEAwwR
Y2FyZWVycy5yb2NoZS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCu/Khn1oGO4iw8PxJ6Y3erpiVoz8uXPhT9U6SqFbaEur6EhH5Yu6eT1ggELJ6V
ZP/1AnFS+sfThK/kfzqJb0x51oe7a2cPCDgWhtE9m10CqcFTRkOL+FF3NNWXezsq
wfOyUOHACBUfsi3ZyvcKlnN7zsHXG0H6M6cUy1MrNTyRfNEqPuDH7U0LWrTMr9O6
2jQVyiaGfQIgdXqERah/6D+Q3k6DrLhbaHk1b2CdE5AXWr3lu2ZyUz7fp2mmjaKc
yTy1JDmFd2tTIi9w+u3clBaepw+2dDWqqBL7bZ0nKYLJNtHnYdUnWXeZ0xHn9hET
A/sA/svAbzdOgJjHhirS3y4VAgMBAAGjggpcMIIKWDCCCL4GA1UdEQSCCLUwggix
ghR3d3cuZGlhbG9nb3JvY2hlLmNvbYIldWsyLmhjcG5leHQucHJlcHJvZC5vcGVu
Z2FyZGVuLnJjaC5jbYIXd3d3LmZpYnJvc2lzcXVpc3RpY2EuY2+CF3d3dy5kaWFs
b2dvcm9jaGVjYWMuY29tgjp3d3cuZGlhbG9nb3JvY2hlLmNvbS51YXQtZGlhbG9n
by5wcmVwcm9kLm9wZW5nYXJkZW4ucmNoLmNtgjF3d3cuZW1hY3RpdmEuY2wudWF0
LW1zZC5wcmVwcm9kLm9wZW5nYXJkZW4ucmNoLmNtgiRwdC5oY3BuZXh0LnByZXBy
b2Qub3BlbmdhcmRlbi5yY2guY22CEHd3dy5yb2NoZXBsdXMuZXOCF3d3dy5saWNo
dC1hbi1mdWVyLW1zLmRlghBkaWFsb2dvcm9jaGUuY29tgkB3d3cuZm91bmRhdGlv
bm1lZGljaW5lYXNpYS5jb20udWF0LWZtaS5wcmVwcm9kLm9wZW5nYXJkZW4ucmNo
LmNtghd3d3cuZGlhbG9nb3JvY2hlLmNvbS51eYITbXlzdHVkaWVzLnJvY2hlLmNv
bYIMd3d3LnJvY2hlLmllght3d3cubXNkaXNlYXNlYWN0aXZpdHkuY28udWuCGXd3
dy5tc2Rpc2Vhc2VhY3Rpdml0eS5jb22CQHd3dy5tbW9tZW50dW1leGFtcGxlLmNv
bS51YXQtbW1vbWVudHVtLnByZXByb2Qub3BlbmdhcmRlbi5yY2guY22CN3d3dy5k
aWFsb2dvcm9jaGUuY29tLnVhdC1kaWFsb2dvLnByb2Qub3BlbmdhcmRlbi5yY2gu
Y22CF3d3dy5kaWFsb2dvcm9jaGUuY29tLnBlgiRlcy5oY3BuZXh0LnByZXByb2Qu
b3BlbmdhcmRlbi5yY2guY22CO3d3dy5tZWxhbm9vbWluZm8ubmwudWF0LW1tb21l
bnR1bS5wcmVwcm9kLm9wZW5nYXJkZW4ucmNoLmNtghV3d3cucm9jaGUtb25jb2xv
Z3kuY2iCJG5sLmhjcG5leHQucHJlcHJvZC5vcGVuZ2FyZGVuLnJjaC5jbYI0d3d3
LnJvY2hlaW50ZXJhY3QuY29tLmF1LnVhdC1yb2NoZWludGVyYWN0LXBwLnJjaC5j
bYITd3d3Lm1lbGFub29taW5mby5ubIIad3d3LmxhdGFtcm9jaGVwcmVzc2RheS5j
b22CFHd3dy5yb2NoZXR1ZGFzdGFyLmh1gjh3d3cubW1vbWVudHVtLmJyLnVhdC1t
bW9tZW50dW0ucHJlcHJvZC5vcGVuZ2FyZGVuLnJjaC5jbYIYd3d3LnJvY2hlaW50
ZXJhY3QuY29tLmF1gjt3d3cuZm91bmRhdGlvbm1lZGljaW5lLmNvbS5zZy5mbWku
cHJlcHJvZC5vcGVuZ2FyZGVuLnJjaC5jbYIXd3d3LmRpYWxvZ29yb2NoZS5jb20u
Y2+CJGF0LmhjcG5leHQucHJlcHJvZC5vcGVuZ2FyZGVuLnJjaC5jbYISd3d3LnJv
Y2hlb25saW5lLnNlgh53d3cuZm91bmRhdGlvbm1lZGljaW5lYXNpYS5jb22CO3d3
dy5tc2Rpc2Vhc2VhY3Rpdml0eS5jb20udWF0LW1zZC5wcmVwcm9kLm9wZW5nYXJk
ZW4ucmNoLmNtgj13d3cubW1vbWVudHVtZXhhbXBsZS5jb20udWF0LW1tb21lbnR1
bS5wcm9kLm9wZW5nYXJkZW4ucmNoLmNtgj13d3cubXNkaXNlYXNlYWN0aXZpdHku
Y28udWsudWF0LW1zZC5wcmVwcm9kLm9wZW5nYXJkZW4ucmNoLmNtghdjb250ZW50
LmJpb2NsaW5pY2llbi5mcoIgYXV0aG9yLnBzcC5kZXYub3BlbmdhcmRlbi5yY2gu
Y22CJGZyLmhjcG5leHQucHJlcHJvZC5vcGVuZ2FyZGVuLnJjaC5jbYI1d3d3Lm1t
b21lbnR1bS5ici51YXQtbW1vbWVudHVtLnByb2Qub3BlbmdhcmRlbi5yY2guY22C
F3d3dy5kaWFsb2dvcm9jaGUuY29tLmFygg93d3cucm9jaGUuY28udWuCEXd3dy5p
bmZvbWVkaWNzLml0gjl3d3cubGljaHQtYW4tZnVlci1tcy5kZS51YXQtbXNkLnBy
ZXByb2Qub3BlbmdhcmRlbi5yY2guY22CF3d3dy5kaWFsb2dvcm9jaGUuY29tLmJy
giRwbC5oY3BuZXh0LnByZXByb2Qub3BlbmdhcmRlbi5yY2guY22CF3d3dy5kaWFs
b2dvcm9jaGUuY29tLnZlgjh3d3cubWVsYW5vb21pbmZvLm5sLnVhdC1tbW9tZW50
dW0ucHJvZC5vcGVuZ2FyZGVuLnJjaC5jbYIdd3d3LmZvdW5kYXRpb25tZWRpY2lu
ZS5jb20uc2eCF3d3dy5kaWFsb2dvcm9jaGUuY29tLm14gjZ3d3cubW1vbWVudHVt
Lm5ldC51YXQtbW1vbWVudHVtLnByb2Qub3BlbmdhcmRlbi5yY2guY22CDHd3dy5y
b2NoZS5maYIud3d3LmVtYWN0aXZhLmNsLnVhdC1tc2QucHJvZC5vcGVuZ2FyZGVu
LnJjaC5jbYIdbGl2ZS5kaWdpdGFsZmFjdG9yeS5yb2NoZS5jb22CJGNoLmhjcG5l
eHQucHJlcHJvZC5vcGVuZ2FyZGVuLnJjaC5jbYI9d3d3LmZvdW5kYXRpb25tZWRp
Y2luZWFzaWEuY29tLnVhdC1mbWkucHJvZC5vcGVuZ2FyZGVuLnJjaC5jbYIPd3d3
LnJvY2hlbWVkLmdygj93d3cuZm91bmRhdGlvbm1lZGljaW5lLmNvbS5zZy51YXQt
Zm1pLnByZXByb2Qub3BlbmdhcmRlbi5yY2guY22CD3d3dy5lbWFjdGl2YS5jbIIR
Y2FyZWVycy5yb2NoZS5jb20wCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwKwYD
VR0fBCQwIjAgoB6gHIYaaHR0cDovL2duLnN5bWNiLmNvbS9nbi5jcmwwgZ0GA1Ud
IASBlTCBkjCBjwYGZ4EMAQICMIGEMD8GCCsGAQUFBwIBFjNodHRwczovL3d3dy5n
ZW90cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9zaXRvcnkvbGVnYWwwQQYIKwYBBQUH
AgIwNQwzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9yZXBvc2l0
b3J5L2xlZ2FsMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSME
GDAWgBTSb/eW9IU/cjwwfSPahXibo3xafDBXBggrBgEFBQcBAQRLMEkwHwYIKwYB
BQUHMAGGE2h0dHA6Ly9nbi5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9n
bi5zeW1jYi5jb20vZ24uY3J0MBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3
DQEBCwUAA4IBAQBEucBzpbdeMCnMIglJgnj00gHcTaaT9ckc74KfgJ+HJQBlGHig
k4YkfyhKl2c88aD3Vkoj9LVYshvuWE9+0sfXsqDQpDqiwsrDMdWkIGa2DJjspDBo
UH39EfT/qD2w3rlMQ6d/jWdRZRNUYHB/1DuhOzIVmqAoSFMNkMw+9RhZ5mdc5PQo
ZxGzgfqn9t73iWnX7K96rg13BaYEqA5tT1vXAYR3OUruKtdzhkQPYCr8rcyeqfyX
RexnwkkYo3kUrHW75tr27fbbhR4smYdAnjQ+Geit8kMAoLuCbGRBGWivJCM5Fl96
O/XsEjMLbLtPhEKMCDSleizE/wsnPU2Uqiq6
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvyoZ9aBjuIsPD8SemN3
q6YlaM/Llz4U/VOkqhW2hLq+hIR+WLunk9YIBCyelWT/9QJxUvrH04Sv5H86iW9M
edaHu2tnDwg4FobRPZtdAqnBU0ZDi/hRdzTVl3s7KsHzslDhwAgVH7It2cr3CpZz
e87B1xtB+jOnFMtTKzU8kXzRKj7gx+1NC1q0zK/Tuto0Fcomhn0CIHV6hEWof+g/
kN5Og6y4W2h5NW9gnROQF1q95btmclM+36dppo2inMk8tSQ5hXdrUyIvcPrt3JQW
nqcPtnQ1qqgS+22dJymCyTbR52HVJ1l3mdMR5/YREwP7AP7LwG83ToCYx4Yq0t8u
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 167557306938120548803140340587439003460
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Basel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Basel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'F. Hoffmann-La Roche AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'careers.roche.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22090055285798129046787848375413101874799797811355435925091199395610026393024021612769571507495937496089744936518134213708399876231743725804162172619600343837377089332798766944228240140000215831018734781865109434418559105018712620158553916649237111296904742217030816783264236681951808688554368464845043793902988012195969900159391391443727223104718477461915198477342497599751777024115670071828884498961132302175023694461978327337155585043319284077774195261954321515413181611040050299025964049152748895029036104271183133847773910530955134753732748038640714320956165325120682449905246813451786275738036421359134463438357
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2229 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk2.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fibrosisquistica.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogorochecac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.uat-dialogo.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emactiva.cl.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pt.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheplus.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.licht-an-fuer-ms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicineasia.com.uat-fmi.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mystudies.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentumexample.com.uat-mmomentum.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.uat-dialogo.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melanoominfo.nl.uat-mmomentum.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche-oncology.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nl.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheinteract.com.au.uat-rocheinteract-pp.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melanoominfo.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.latamrochepressday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochetudastar.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentum.br.uat-mmomentum.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheinteract.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.sg.fmi.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'at.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheonline.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicineasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.com.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentumexample.com.uat-mmomentum.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.co.uk.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.bioclinicien.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author.psp.dev.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentum.br.uat-mmomentum.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.infomedics.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.licht-an-fuer-ms.de.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melanoominfo.nl.uat-mmomentum.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentum.net.uat-mmomentum.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emactiva.cl.uat-msd.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.digitalfactory.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ch.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicineasia.com.uat-fmi.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochemed.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.sg.uat-fmi.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emactiva.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.roche.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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