cert2.roche.com
- F. Hoffmann-La Roche AG -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 0f:15:ff:92:fb:d0:57:31:70:b7:3a:32:0f:7a:38:df was issued on by DigiCert Inc.
With 60 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
F. Hoffmann-La Roche AG
Organization:
F. Hoffmann-La Roche AG
State / Province:
Basel
Locality: Basel
Country: CH
Locality: Basel
Country: CH
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0f:15:ff:92:fb:d0:57:31:70:b7:3a:32:0f:7a:38:dfSerial Number (int): 20052641830496233525841590362442447071
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 02:fc:5b:bc:8e:ec:01:9f:14:05:5f:3f:a8:b5:36:94:4b:5e:8b:57
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): 78:ae:2f:33:18:62:7a:a0:29:6a:66:0d:53:a3:ef:73:22:99:25:89
Fingerprint (sha256): 26:ec:ef:a9:b9:65:9f:4c:76:42:8e:bd:22:52:bf:1e:a0:24:de:27:6c:0d:30:a8:38:34:93:b4:bb:91:92:75
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl
Check the revocation status for certificate cert2.roche.com
60
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cert2.roche.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cert2.roche.com
roche.com.mx
foundationmedicine.com.uy
www.foundationmedicine.sk
www.foundationmedicine.lv
foundationmedicine.fr
foundationmedicine.com.au
rochefoundationmedicine.com
www.foundationmedicine.nl
www.foundationmedicine-cac.com
foundationmedicine.ro
foundationmedicine.lv
foundationmedicine.nl
foundationmedicine.es
www.esbriet.eu
foundationmedicine.sk
www.foundationmedicine.fi
www.foundationmedicine.dk
www.foundationmedicine.cz
www.foundationmedicine.de
foundationmedicine.ch
www.lymfominfo.se
aboutpv.roche.com
www.foundationmedicine.it
esbriet.eu
roche.no
foundationmedicine.lt
www.aboutpv.roche.com
www.foundationmedicine.pe
foundationmedicine.pt
foundationmedicine.fi
foundationmedicine.cz
ean.ocrevus.global
www.foundationmedicine.fr
www.foundationmedicine.se
www.foundationmedicine.es
www.rochefoundationmedicine.com
www.foundationmedicine.com.au
foundationmedicine.no
foundationmedicine.uk
www.roche.com.mx
www.foundationmedicine.lt
lymfominfo.se
www.foundationmedicine.uk
www.foundationmedicine.com.uy
foundationmedicine.it
www.foundationmedicine.ec
www.foundationmedicine.ro
foundationmedicine-cac.com
foundationmedicine.dk
foundationmedicine.de
www.roche.no
www.foundationmedicine.no
www.foundationmedicine.pt
www.foundationmedicine.ch
foundationmedicine.se
foundationmedicine.pe
www.foundationmedicine.bg
foundationmedicine.bg
foundationmedicine.ec
roche.com.mx
foundationmedicine.com.uy
www.foundationmedicine.sk
www.foundationmedicine.lv
foundationmedicine.fr
foundationmedicine.com.au
rochefoundationmedicine.com
www.foundationmedicine.nl
www.foundationmedicine-cac.com
foundationmedicine.ro
foundationmedicine.lv
foundationmedicine.nl
foundationmedicine.es
www.esbriet.eu
foundationmedicine.sk
www.foundationmedicine.fi
www.foundationmedicine.dk
www.foundationmedicine.cz
www.foundationmedicine.de
foundationmedicine.ch
www.lymfominfo.se
aboutpv.roche.com
www.foundationmedicine.it
esbriet.eu
roche.no
foundationmedicine.lt
www.aboutpv.roche.com
www.foundationmedicine.pe
foundationmedicine.pt
foundationmedicine.fi
foundationmedicine.cz
ean.ocrevus.global
www.foundationmedicine.fr
www.foundationmedicine.se
www.foundationmedicine.es
www.rochefoundationmedicine.com
www.foundationmedicine.com.au
foundationmedicine.no
foundationmedicine.uk
www.roche.com.mx
www.foundationmedicine.lt
lymfominfo.se
www.foundationmedicine.uk
www.foundationmedicine.com.uy
foundationmedicine.it
www.foundationmedicine.ec
www.foundationmedicine.ro
foundationmedicine-cac.com
foundationmedicine.dk
foundationmedicine.de
www.roche.no
www.foundationmedicine.no
www.foundationmedicine.pt
www.foundationmedicine.ch
foundationmedicine.se
foundationmedicine.pe
www.foundationmedicine.bg
foundationmedicine.bg
foundationmedicine.ec
Other certificates including the domain name roche.com
(limited to 100 certificates)
involve.roche.com
www.hpv16and18.com
easydrive-uat.roche.com
advancedanalytics.roche.com
main.rhelp.roche.com
sni.cloudflaressl.com
magentocloud28.map.fastly.net
rbalvprexd0.bas.roche.com
cieas01.roche.com
harmonytest.de
sequencing.roche.com
esource.roche.com
e-medical.roche.com
esource.roche.com
coaguchek.com
rsmsourcing.roche.com
deimos.roche.com
cert2.roche.com
sni.cloudflaressl.com
cdn.appstore.gene.com
shpivee1-01.roche.com
eews-dev.roche.com
myaccess.roche.com
ican.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
cert3.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
mrdivee2-02.netlab.roche.com
rodip.roche.com
nsrdcongresses.roche.com
rbavxsentry11.bas.roche.com
mobilesolution-dev.roche.com
wamua.roche.com
dialog-62-test.roche.com
rocheggcpac.roche.com
san-003.ceros.com
video.hive.roche.com
sni.cloudflaressl.com
rssg.roche.com
mftemeaext.roche.com
anadisuat01.sc1.roche.com
careers.roche.com
flow.roche.com
cert3.roche.com
sni.cloudflaressl.com
misp.roche.com
cert2.roche.com
careers.roche.com
api.rockwizz.roche.com
bitbucket-nala-qa.roche.com
careers.roche.com
wamdev.roche.com
sonar-dev-old.roche.com
diauxhub.roche.com
careers.roche.com
globalfms.roche.com
san-003.ceros.com
sc1lvflexq2.sc1.roche.com
easydrive-dev.roche.com
send-tst.roche.com
indigrow.roche.com
careers.roche.com
careers.roche.com
env5-remotedashboard.roche.com
mrd25.me
cert2.roche.com
*.esrv-hub-uat.roche.com
sb.eu.phcaa.science.roche.com
san-003.ceros.com
extaccess-nala.roche.com
magentocloud28.map.fastly.net
go.roche.com
magentocloud32.map.fastly.net
sni.cloudflaressl.com
ssl882748.cloudflaressl.com
sni.cloudflaressl.com
esrv-marketplace-dev.roche.com
careers.roche.com
imcore.roche.com
booster.roche.com
sni.cloudflaressl.com
akamai-san195.exacttarget.com
raumbuch.roche.com
pitas01.roche.com
sni.cloudflaressl.com
c1edb.roche.com
magentocloud45.map.fastly.net
shpivee1-01.roche.com
hpv16and18.com
hivemind.roche.com
searchsquad.roche.com
cferondanetrochedia-qa.roche.com
esign.roche.com
diaitsupport.roche.com
sni.cloudflaressl.com
magentocloud32.map.fastly.net
r32web.sap.roche.com
apis.cwp.roche.com
www.hpv16and18.com
easydrive-uat.roche.com
advancedanalytics.roche.com
main.rhelp.roche.com
sni.cloudflaressl.com
magentocloud28.map.fastly.net
rbalvprexd0.bas.roche.com
cieas01.roche.com
harmonytest.de
sequencing.roche.com
esource.roche.com
e-medical.roche.com
esource.roche.com
coaguchek.com
rsmsourcing.roche.com
deimos.roche.com
cert2.roche.com
sni.cloudflaressl.com
cdn.appstore.gene.com
shpivee1-01.roche.com
eews-dev.roche.com
myaccess.roche.com
ican.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
cert3.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
mrdivee2-02.netlab.roche.com
rodip.roche.com
nsrdcongresses.roche.com
rbavxsentry11.bas.roche.com
mobilesolution-dev.roche.com
wamua.roche.com
dialog-62-test.roche.com
rocheggcpac.roche.com
san-003.ceros.com
video.hive.roche.com
sni.cloudflaressl.com
rssg.roche.com
mftemeaext.roche.com
anadisuat01.sc1.roche.com
careers.roche.com
flow.roche.com
cert3.roche.com
sni.cloudflaressl.com
misp.roche.com
cert2.roche.com
careers.roche.com
api.rockwizz.roche.com
bitbucket-nala-qa.roche.com
careers.roche.com
wamdev.roche.com
sonar-dev-old.roche.com
diauxhub.roche.com
careers.roche.com
globalfms.roche.com
san-003.ceros.com
sc1lvflexq2.sc1.roche.com
easydrive-dev.roche.com
send-tst.roche.com
indigrow.roche.com
careers.roche.com
careers.roche.com
env5-remotedashboard.roche.com
mrd25.me
cert2.roche.com
*.esrv-hub-uat.roche.com
sb.eu.phcaa.science.roche.com
san-003.ceros.com
extaccess-nala.roche.com
magentocloud28.map.fastly.net
go.roche.com
magentocloud32.map.fastly.net
sni.cloudflaressl.com
ssl882748.cloudflaressl.com
sni.cloudflaressl.com
esrv-marketplace-dev.roche.com
careers.roche.com
imcore.roche.com
booster.roche.com
sni.cloudflaressl.com
akamai-san195.exacttarget.com
raumbuch.roche.com
pitas01.roche.com
sni.cloudflaressl.com
c1edb.roche.com
magentocloud45.map.fastly.net
shpivee1-01.roche.com
hpv16and18.com
hivemind.roche.com
searchsquad.roche.com
cferondanetrochedia-qa.roche.com
esign.roche.com
diaitsupport.roche.com
sni.cloudflaressl.com
magentocloud32.map.fastly.net
r32web.sap.roche.com
apis.cwp.roche.com
Certificate
The complete raw certificate details for cert2.roche.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIKujCCCaKgAwIBAgIQDxX/kvvQVzFwtzoyD3o43zANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTgwNzA2MDAwMDAwWhcN MTkwNjA3MTIwMDAwWjBpMQswCQYDVQQGEwJDSDEOMAwGA1UECBMFQmFzZWwxDjAM BgNVBAcTBUJhc2VsMSAwHgYDVQQKExdGLiBIb2ZmbWFubi1MYSBSb2NoZSBBRzEY MBYGA1UEAxMPY2VydDIucm9jaGUuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAu61irwdDsQ2d83nSbRM/SwkyX5PXRSNdXn8KvXYado8YBVFadFao b1G45q7WoSZqmYaj/+79hM3sIb3ufNmDsDtANY7F4fhB9ARuKeazIBTVqDiJiOWz IG2xLPX4dAJk+BkZepKfV3w7it29YZfGKyhsYLXTaRvSmtr73jdmyLbcnWkNOUmI j+O+pFotrS0kB4Cj6HfYuo5rZgjf0j5CXaR7HVBadIkP70H+0UNLCmCqbUHkWVTR oGCUCA1GmIvTzptfkW+MDKbWB5+WB2Xf44km921EFvPtPBqAZWhukxkN6kOgP1Wx sRJ7N4OwXfa04WvOn8ZVCl4nEvwyPMr4qQIDAQABo4IHeDCCB3QwHwYDVR0jBBgw FoAUD4BhHIIxYdUvKOeNRji0LOHG2eIwHQYDVR0OBBYEFAL8W7yO7AGfFAVfP6i1 NpRLXotXMIIFqAYDVR0RBIIFnzCCBZuCD2NlcnQyLnJvY2hlLmNvbYIMcm9jaGUu Y29tLm14ghlmb3VuZGF0aW9ubWVkaWNpbmUuY29tLnV5ghl3d3cuZm91bmRhdGlv bm1lZGljaW5lLnNrghl3d3cuZm91bmRhdGlvbm1lZGljaW5lLmx2ghVmb3VuZGF0 aW9ubWVkaWNpbmUuZnKCGWZvdW5kYXRpb25tZWRpY2luZS5jb20uYXWCG3JvY2hl Zm91bmRhdGlvbm1lZGljaW5lLmNvbYIZd3d3LmZvdW5kYXRpb25tZWRpY2luZS5u bIIed3d3LmZvdW5kYXRpb25tZWRpY2luZS1jYWMuY29tghVmb3VuZGF0aW9ubWVk aWNpbmUucm+CFWZvdW5kYXRpb25tZWRpY2luZS5sdoIVZm91bmRhdGlvbm1lZGlj aW5lLm5sghVmb3VuZGF0aW9ubWVkaWNpbmUuZXOCDnd3dy5lc2JyaWV0LmV1ghVm b3VuZGF0aW9ubWVkaWNpbmUuc2uCGXd3dy5mb3VuZGF0aW9ubWVkaWNpbmUuZmmC GXd3dy5mb3VuZGF0aW9ubWVkaWNpbmUuZGuCGXd3dy5mb3VuZGF0aW9ubWVkaWNp bmUuY3qCGXd3dy5mb3VuZGF0aW9ubWVkaWNpbmUuZGWCFWZvdW5kYXRpb25tZWRp Y2luZS5jaIIRd3d3Lmx5bWZvbWluZm8uc2WCEWFib3V0cHYucm9jaGUuY29tghl3 d3cuZm91bmRhdGlvbm1lZGljaW5lLml0ggplc2JyaWV0LmV1gghyb2NoZS5ub4IV Zm91bmRhdGlvbm1lZGljaW5lLmx0ghV3d3cuYWJvdXRwdi5yb2NoZS5jb22CGXd3 dy5mb3VuZGF0aW9ubWVkaWNpbmUucGWCFWZvdW5kYXRpb25tZWRpY2luZS5wdIIV Zm91bmRhdGlvbm1lZGljaW5lLmZpghVmb3VuZGF0aW9ubWVkaWNpbmUuY3qCEmVh bi5vY3JldnVzLmdsb2JhbIIZd3d3LmZvdW5kYXRpb25tZWRpY2luZS5mcoIZd3d3 LmZvdW5kYXRpb25tZWRpY2luZS5zZYIZd3d3LmZvdW5kYXRpb25tZWRpY2luZS5l c4Ifd3d3LnJvY2hlZm91bmRhdGlvbm1lZGljaW5lLmNvbYIdd3d3LmZvdW5kYXRp b25tZWRpY2luZS5jb20uYXWCFWZvdW5kYXRpb25tZWRpY2luZS5ub4IVZm91bmRh dGlvbm1lZGljaW5lLnVrghB3d3cucm9jaGUuY29tLm14ghl3d3cuZm91bmRhdGlv bm1lZGljaW5lLmx0gg1seW1mb21pbmZvLnNlghl3d3cuZm91bmRhdGlvbm1lZGlj aW5lLnVrgh13d3cuZm91bmRhdGlvbm1lZGljaW5lLmNvbS51eYIVZm91bmRhdGlv bm1lZGljaW5lLml0ghl3d3cuZm91bmRhdGlvbm1lZGljaW5lLmVjghl3d3cuZm91 bmRhdGlvbm1lZGljaW5lLnJvghpmb3VuZGF0aW9ubWVkaWNpbmUtY2FjLmNvbYIV Zm91bmRhdGlvbm1lZGljaW5lLmRrghVmb3VuZGF0aW9ubWVkaWNpbmUuZGWCDHd3 dy5yb2NoZS5ub4IZd3d3LmZvdW5kYXRpb25tZWRpY2luZS5ub4IZd3d3LmZvdW5k YXRpb25tZWRpY2luZS5wdIIZd3d3LmZvdW5kYXRpb25tZWRpY2luZS5jaIIVZm91 bmRhdGlvbm1lZGljaW5lLnNlghVmb3VuZGF0aW9ubWVkaWNpbmUucGWCGXd3dy5m b3VuZGF0aW9ubWVkaWNpbmUuYmeCFWZvdW5kYXRpb25tZWRpY2luZS5iZ4IVZm91 bmRhdGlvbm1lZGljaW5lLmVjMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwawYDVR0fBGQwYjAvoC2gK4YpaHR0cDovL2NybDMu ZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNi5jcmwwL6AtoCuGKWh0dHA6Ly9jcmw0 LmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzYuY3JsMEwGA1UdIARFMEMwNwYJYIZI AYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9D UFMwCAYGZ4EMAQICMHwGCCsGAQUFBwEBBHAwbjAkBggrBgEFBQcwAYYYaHR0cDov L29jc3AuZGlnaWNlcnQuY29tMEYGCCsGAQUFBzAChjpodHRwOi8vY2FjZXJ0cy5k aWdpY2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJlU2VydmVyQ0EuY3J0MAkGA1Ud EwQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBALSV RKthr7CaG297heJNwPDNn/Z7WzYtpDhZGyBdyi6VFp+rJRWYkQZApL501yz00Oyv SvVfbx0iI1GCJRljO3BfU+zqYlPNTsygx3D5lJqpMgU2FYYiNgRMZ1uV7TkGoW/l Go0KhJjsoGV2U/okMzWzv/L+Hs7mb2sHG+J687lXKEOtrUCzr43hrdUkRZa2ZXuj jNVmc60Ra1sET7L3hfCFd1bcG+J5eK4rtie4/jdv+A4h6jvC4Ia5VUT2CszTjQaY DVInX4YaOPOqEa/mgWpGHKTulXHdvW1ft/Bc6pdSRIfsaiFqqj9zwPXXJevF/Ti+ ORSbvJ7YmZC4suDbRm4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu61irwdDsQ2d83nSbRM/ SwkyX5PXRSNdXn8KvXYado8YBVFadFaob1G45q7WoSZqmYaj/+79hM3sIb3ufNmD sDtANY7F4fhB9ARuKeazIBTVqDiJiOWzIG2xLPX4dAJk+BkZepKfV3w7it29YZfG KyhsYLXTaRvSmtr73jdmyLbcnWkNOUmIj+O+pFotrS0kB4Cj6HfYuo5rZgjf0j5C XaR7HVBadIkP70H+0UNLCmCqbUHkWVTRoGCUCA1GmIvTzptfkW+MDKbWB5+WB2Xf 44km921EFvPtPBqAZWhukxkN6kOgP1WxsRJ7N4OwXfa04WvOn8ZVCl4nEvwyPMr4 qQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 20052641830496233525841590362442447071 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-07 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Basel' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Basel' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'F. Hoffmann-La Roche AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cert2.roche.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23692062597041829660446437109654294491679282741765943187909856667811631870614153078768055488007619486497472199967931991533844929478403830941520726127319282792176638887020366625297192524643505894710883124503896558924058903585246674469841408699111402473832924170864458344253900683341562696670905971424163872676982491802600610017603063062291772577664384386470689918549982928492447808663256058435493580649674265275598860308422507915004323086111607695211600220059513013700819962313505689823393274001842593893305007311020289036920894472181913940330676009481135745964266258585071004894592901569829350085044903077995235440809 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 02fc5bbc8eec019f14055f3fa8b536944b5e8b57 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1439 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert2.roche.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.com.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.com.uy' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.sk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.lv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochefoundationmedicine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine-cac.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.ro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.lv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esbriet.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.sk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lymfominfo.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboutpv.roche.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esbriet.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.lt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aboutpv.roche.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.pe' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ean.ocrevus.global' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochefoundationmedicine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.com.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.lt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lymfominfo.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.uy' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.ec' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.ro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine-cac.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.pe' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.bg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.bg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.ec' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00b49544ab61afb09a1b6f7b85e24dc0f0cd9ff67b5b362da438591b205dca2e95169fab251598910640a4be74d72cf4d0ecaf4af55f6f1d222351822519633b705f53ecea6253cd4ecca0c770f9949aa932053615862236044c675b95ed3906a16fe51a8d0a8498eca0657653fa243335b3bff2fe1ecee66f6b071be27af3b9572843adad40b3af8de1add5244596b6657ba38cd56673ad116b5b044fb2f785f0857756dc1be27978ae2bb627b8fe376ff80e21ea3bc2e086b95544f60accd38d06980d52275f861a38f3aa11afe6816a461ca4ee9571ddbd6d5fb7f05cea97524487ec6a216aaa3f73c0f5d725ebc5fd38be39149bbc9ed89990b8b2e0db466e