author-na-prod.roche.com

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number c1:33:f5:39:7e:27:1c:84:dd:37:fa:24:6d:e3:f9:bd was issued on by Sectigo Limited.

With 41 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=author-na-prod.roche.com

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): c1:33:f5:39:7e:27:1c:84:dd:37:fa:24:6d:e3:f9:bd
Serial Number (int): 256810784071674591673437599572800305597
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 78:f2:54:ce:fa:16:56:d4:26:66:48:ab:44:97:c7:9f:f7:79:55:12
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 7c:6b:52:14:ff:e9:87:dc:99:e4:06:71:5d:5a:c5:41:21:37:10:a4
Fingerprint (sha256): 2a:b3:eb:c7:19:51:c5:09:ca:bf:71:11:46:f7:fd:85:b4:6e:31:05:b0:3c:11:f3:9d:d5:54:64:56:21:5b:b3

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate author-na-prod.roche.com

41

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for author-na-prod.roche.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

author-na-prod.roche.com
author-na-prod-64.roche.com
coaguchek.com.cn
coaguchek.es
custombiotech.roche.com
global.hpv16and18.com
harmonytest.com
hpv16and18.co.uk
hpv16and18.com
hpv16and18.jp
lifescience.roche.com
oncologyresearchkits.roche.com
pruebas.coaguchek.es
rms-affiliate-resource.roche.com
sequencing.roche.com
spanish.hpv16and18.com
www.cervicalcancer-risk.com
www.cervicalcancer-screening.com
www.coaguchek.com.cn
www.coaguchek.es
www.coaguchek.fi
www.coaguchek.it
www.coaguchek.no
www.coaguchek.ro
www.custombiotech.roche.com
www.global.hpv16and18.com
www.harmonytest.com
www.hpv-roche.at
www.hpv16-18.fr
www.hpv16and18.co.uk
www.hpv16and18.com
www.hpv16and18.jp
www.hpv16e18.it
www.ithembalife.com
www.lifescience.roche.com
www.oncologyresearchkits.roche.com
www.pruebaharmony.com
www.pruebas.coaguchek.es
www.rms-affiliate-resource.roche.com
www.sequencing.roche.com
www.spanish.hpv16and18.com

Other certificates including the domain name roche.com

(limited to 100 certificates)
involve.roche.com
www.hpv16and18.com
easydrive-uat.roche.com
advancedanalytics.roche.com
main.rhelp.roche.com
sni.cloudflaressl.com
magentocloud28.map.fastly.net
rbalvprexd0.bas.roche.com
cieas01.roche.com
harmonytest.de
sequencing.roche.com
esource.roche.com
e-medical.roche.com
esource.roche.com
coaguchek.com
rsmsourcing.roche.com
deimos.roche.com
cert2.roche.com
sni.cloudflaressl.com
cdn.appstore.gene.com
shpivee1-01.roche.com
eews-dev.roche.com
myaccess.roche.com
ican.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
cert3.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
mrdivee2-02.netlab.roche.com
rodip.roche.com
nsrdcongresses.roche.com
rbavxsentry11.bas.roche.com
mobilesolution-dev.roche.com
wamua.roche.com
dialog-62-test.roche.com
rocheggcpac.roche.com
san-003.ceros.com
video.hive.roche.com
sni.cloudflaressl.com
rssg.roche.com
mftemeaext.roche.com
anadisuat01.sc1.roche.com
careers.roche.com
flow.roche.com
cert3.roche.com
sni.cloudflaressl.com
misp.roche.com
cert2.roche.com
careers.roche.com
api.rockwizz.roche.com
bitbucket-nala-qa.roche.com
careers.roche.com
wamdev.roche.com
sonar-dev-old.roche.com
diauxhub.roche.com
careers.roche.com
globalfms.roche.com
san-003.ceros.com
sc1lvflexq2.sc1.roche.com
easydrive-dev.roche.com
send-tst.roche.com
indigrow.roche.com
careers.roche.com
careers.roche.com
env5-remotedashboard.roche.com
mrd25.me
cert2.roche.com
*.esrv-hub-uat.roche.com
sb.eu.phcaa.science.roche.com
san-003.ceros.com
extaccess-nala.roche.com
magentocloud28.map.fastly.net
go.roche.com
magentocloud32.map.fastly.net
sni.cloudflaressl.com
ssl882748.cloudflaressl.com
sni.cloudflaressl.com
esrv-marketplace-dev.roche.com
careers.roche.com
imcore.roche.com
booster.roche.com
sni.cloudflaressl.com
akamai-san195.exacttarget.com
raumbuch.roche.com
pitas01.roche.com
sni.cloudflaressl.com
c1edb.roche.com
magentocloud45.map.fastly.net
shpivee1-01.roche.com
hpv16and18.com
hivemind.roche.com
searchsquad.roche.com
cferondanetrochedia-qa.roche.com
esign.roche.com
diaitsupport.roche.com
sni.cloudflaressl.com
magentocloud32.map.fastly.net
r32web.sap.roche.com
apis.cwp.roche.com

Certificate

The complete raw certificate details for author-na-prod.roche.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 256810784071674591673437599572800305597
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'author-na-prod.roche.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 935555176944644289627052234767335390848959162991180444558136347427994771877276739473407140101792902104572622328313971151863577858569575142219591934280508611933345390228831572127681579087588677406548059597926372416588667907403703631938036615838929544779410830566924815500738693424363896956540008938285037329781956598493961907157080273774196357148856699130874610621053163532307039061043493080937214127633746345719479976597195373614625545416887914620296082096864684296757922906323851533978157977055253638672131924516417334752803594372063508226106106832335266459078262202375957949262061029633420598021664865889719402137773690584293399778340864468735904676144454950661652828227203923182589719289387212608339386300153319736222511862671117317736108971366126744558976667204873295480895871847051048765251815536935635348520232802043328941672661224958252299707897507671628390020717665079882307880796612634951083532572698687894649087469324924672580902576685557863931198020481136295939343289086960714828007553734022935579990833654217565841377895331153083090785932809355120724123686830380205577105182546176242784173221785097868146396826907524145039035478389847739685992027826461310056131976347028853707940639524642913237591569998768259057407159561
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							78f254cefa1656d4266648ab4497c79ff7795512
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (952 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author-na-prod.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author-na-prod-64.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coaguchek.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coaguchek.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'custombiotech.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'global.hpv16and18.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harmonytest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpv16and18.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpv16and18.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpv16and18.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifescience.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oncologyresearchkits.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pruebas.coaguchek.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rms-affiliate-resource.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sequencing.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spanish.hpv16and18.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cervicalcancer-risk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cervicalcancer-screening.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coaguchek.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coaguchek.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coaguchek.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coaguchek.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coaguchek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coaguchek.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.custombiotech.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.global.hpv16and18.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harmonytest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hpv-roche.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hpv16-18.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hpv16and18.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hpv16and18.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hpv16and18.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hpv16e18.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ithembalife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifescience.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oncologyresearchkits.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pruebaharmony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pruebas.coaguchek.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rms-affiliate-resource.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sequencing.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spanish.hpv16and18.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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