careers.roche.com

- F. Hoffmann-La Roche AG -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 09:bf:46:0b:6b:95:fa:f0:42:ad:f4:54:e3:d2:e4:16 was issued on by DigiCert Inc.

With 79 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

F. Hoffmann-La Roche AG

Organization: F. Hoffmann-La Roche AG
State / Province: Basel
Locality: Basel
Country: CH

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:bf:46:0b:6b:95:fa:f0:42:ad:f4:54:e3:d2:e4:16
Serial Number (int): 12956201335522649228671540403067085846
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a2:0e:73:ec:6a:15:ce:2d:e0:41:fe:d5:ec:47:89:a6:77:ac:56:8a
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): ae:8a:2b:ed:5b:7d:43:d0:52:ac:4c:c8:54:df:4e:e9:e5:4c:23:c4
Fingerprint (sha256): 2c:57:77:8f:1c:1f:f2:cd:b5:16:56:7a:fb:08:1a:7d:27:8b:85:ab:65:fc:4f:da:43:2e:d9:0e:97:b0:52:14

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate careers.roche.com

79

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for careers.roche.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

careers.roche.com
www.alecensa.com.au
www.foundationmedicine.cl
www.foundationmedicine.ie
www.foundationmedicine.pl
www.roche.ch
www.dialogoroche.com.br
www.roche.co.za
www.mojemedicina.cz
www.bitacoraparaenfermeras.pe
www.roche.com.bd
www.portal.roche.de
www.medinfo.rs
www.ensayosclinicosroche.es
www.zelborafcotellic.com.au
www.roche.ru
www.roche.es
www.dialogoroche.com.co
www.roche.com.bo
www.roche.com.my
www.foundationmedicine.at
www.rochegate.fi
www.dialogoroche.com
www.latamrochepressday.com
www.roche.fi
www.dialogoroche.cl
medinfo.roche.com
www.roche.ro
mystudies.roche.com
www.roche4professionals.nl
www.forpatients.roche.com
www.rochehelse.no
www.foundationmedicine.be
www.rocheplus.es
www.mircera.com.au
www.e-roche.ro
www.foundationmedicine.com.mx
www.bitacoraparaenfermeras.com.pe
www.roche.ie
respiratory.medically.roche.com
www.dialogorochecac.com
www.roche.lv
www.msdiseaseactivity.com
www.foundationmedicine.com.br
www.roche4med.co.il
www.dialogoroche.com.mx
www.fightipf.de
www.foundationmedicine-la.com
www.foundationmedicineasia.com
www.ocrevus.global
oncology.medically.roche.com
medically.roche.com
www.dialogoroche.com.ar
www.dialogoroche.com.uy
www.infomedics.it
www.gazyva.com.au
www.roche.co.uk
www.dlalekarzy.roche.pl
b2b.roche.it
www.roche.sk
www.dialogoroche.com.bo
content.bioclinicien.fr
www.avastin.com.au
www.roche.at
www.esbriet.com.au
www.rocheinteract.com.au
www.foundationmedicine.co
www.foundationmedicine.com.ar
www.rocheonline.se
www.dialogoroche.com.pe
www.roche.com.ar
www.rocheonline.sk
roche.ch
www.ieepo.com
www.roche.pl
forpatients.roche.com
www.dialogoroche.com.ec
www.roche.com.uy
rheumatology.medically.roche.com

Other certificates including the domain name roche.com

(limited to 100 certificates)
involve.roche.com
www.hpv16and18.com
easydrive-uat.roche.com
advancedanalytics.roche.com
main.rhelp.roche.com
sni.cloudflaressl.com
magentocloud28.map.fastly.net
rbalvprexd0.bas.roche.com
cieas01.roche.com
harmonytest.de
esource.roche.com
e-medical.roche.com
esource.roche.com
coaguchek.com
rsmsourcing.roche.com
deimos.roche.com
cert2.roche.com
sni.cloudflaressl.com
cdn.appstore.gene.com
shpivee1-01.roche.com
eews-dev.roche.com
myaccess.roche.com
ican.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
cert3.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
mrdivee2-02.netlab.roche.com
rodip.roche.com
nsrdcongresses.roche.com
rbavxsentry11.bas.roche.com
mobilesolution-dev.roche.com
wamua.roche.com
dialog-62-test.roche.com
rocheggcpac.roche.com
san-003.ceros.com
video.hive.roche.com
sni.cloudflaressl.com
rssg.roche.com
mftemeaext.roche.com
anadisuat01.sc1.roche.com
careers.roche.com
flow.roche.com
cert3.roche.com
sni.cloudflaressl.com
misp.roche.com
cert2.roche.com
careers.roche.com
api.rockwizz.roche.com
bitbucket-nala-qa.roche.com
careers.roche.com
wamdev.roche.com
sonar-dev-old.roche.com
diauxhub.roche.com
careers.roche.com
globalfms.roche.com
san-003.ceros.com
sc1lvflexq2.sc1.roche.com
easydrive-dev.roche.com
send-tst.roche.com
indigrow.roche.com
careers.roche.com
careers.roche.com
env5-remotedashboard.roche.com
mrd25.me
cert2.roche.com
*.esrv-hub-uat.roche.com
sb.eu.phcaa.science.roche.com
san-003.ceros.com
extaccess-nala.roche.com
magentocloud28.map.fastly.net
go.roche.com
magentocloud32.map.fastly.net
sni.cloudflaressl.com
ssl882748.cloudflaressl.com
sni.cloudflaressl.com
esrv-marketplace-dev.roche.com
careers.roche.com
imcore.roche.com
booster.roche.com
sni.cloudflaressl.com
akamai-san195.exacttarget.com
raumbuch.roche.com
pitas01.roche.com
sni.cloudflaressl.com
c1edb.roche.com
magentocloud45.map.fastly.net
shpivee1-01.roche.com
hpv16and18.com
hivemind.roche.com
searchsquad.roche.com
cferondanetrochedia-qa.roche.com
esign.roche.com
diaitsupport.roche.com
sni.cloudflaressl.com
magentocloud32.map.fastly.net
r32web.sap.roche.com
apis.cwp.roche.com
sni.cloudflaressl.com

Certificate

The complete raw certificate details for careers.roche.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMwzCCC6ugAwIBAgIQCb9GC2uV+vBCrfRU49LkFjANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0xOTA0MDkwMDAwMDBaFw0yMDA1MDMxMjAwMDBaMGsxCzAJBgNVBAYTAkNIMQ4w
DAYDVQQIEwVCYXNlbDEOMAwGA1UEBxMFQmFzZWwxIDAeBgNVBAoTF0YuIEhvZmZt
YW5uLUxhIFJvY2hlIEFHMRowGAYDVQQDExFjYXJlZXJzLnJvY2hlLmNvbTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMloqG1Mvh6FeipFFuNdwNC7LyT1
Ify4QR/zeFmK/yE/mkmm7Gdjv7IXDutVpvduMwyOSe0jzxwSsKzHYMLmJYzvqXhl
ZOrVLcltPqZeKywXS6NppLyyytjrjxfBBCDFDKhaE/DHU1ebcFVrvA8gom0Jc4m+
K3NxAzz340ZcllmgroWf5XqjoL7OGiK0vR7QbbnoCUMdslbsFoF2LodPs18sYx8x
hnGZeBRVLFIwo2j/2z41ec1EspubGG+YKICebsgL/3bkAcnrdeUSnemZ9z1wIThf
UYFPNitN+JIZNyfZT5ARi9/gdswEunwL+ox+ohOPnYoTiZCUnBxz9EU+0W0CAwEA
AaOCCW4wgglqMB8GA1UdIwQYMBaAFJBY/7CcdahRVHex7fKjQxY4nmzFMB0GA1Ud
DgQWBBSiDnPsahXOLeBB/tXsR4mmd6xWijCCBt4GA1UdEQSCBtUwggbRghFjYXJl
ZXJzLnJvY2hlLmNvbYITd3d3LmFsZWNlbnNhLmNvbS5hdYIZd3d3LmZvdW5kYXRp
b25tZWRpY2luZS5jbIIZd3d3LmZvdW5kYXRpb25tZWRpY2luZS5pZYIZd3d3LmZv
dW5kYXRpb25tZWRpY2luZS5wbIIMd3d3LnJvY2hlLmNoghd3d3cuZGlhbG9nb3Jv
Y2hlLmNvbS5icoIPd3d3LnJvY2hlLmNvLnphghN3d3cubW9qZW1lZGljaW5hLmN6
gh13d3cuYml0YWNvcmFwYXJhZW5mZXJtZXJhcy5wZYIQd3d3LnJvY2hlLmNvbS5i
ZIITd3d3LnBvcnRhbC5yb2NoZS5kZYIOd3d3Lm1lZGluZm8ucnOCG3d3dy5lbnNh
eW9zY2xpbmljb3Nyb2NoZS5lc4Ibd3d3LnplbGJvcmFmY290ZWxsaWMuY29tLmF1
ggx3d3cucm9jaGUucnWCDHd3dy5yb2NoZS5lc4IXd3d3LmRpYWxvZ29yb2NoZS5j
b20uY2+CEHd3dy5yb2NoZS5jb20uYm+CEHd3dy5yb2NoZS5jb20ubXmCGXd3dy5m
b3VuZGF0aW9ubWVkaWNpbmUuYXSCEHd3dy5yb2NoZWdhdGUuZmmCFHd3dy5kaWFs
b2dvcm9jaGUuY29tghp3d3cubGF0YW1yb2NoZXByZXNzZGF5LmNvbYIMd3d3LnJv
Y2hlLmZpghN3d3cuZGlhbG9nb3JvY2hlLmNsghFtZWRpbmZvLnJvY2hlLmNvbYIM
d3d3LnJvY2hlLnJvghNteXN0dWRpZXMucm9jaGUuY29tghp3d3cucm9jaGU0cHJv
ZmVzc2lvbmFscy5ubIIZd3d3LmZvcnBhdGllbnRzLnJvY2hlLmNvbYIRd3d3LnJv
Y2hlaGVsc2Uubm+CGXd3dy5mb3VuZGF0aW9ubWVkaWNpbmUuYmWCEHd3dy5yb2No
ZXBsdXMuZXOCEnd3dy5taXJjZXJhLmNvbS5hdYIOd3d3LmUtcm9jaGUucm+CHXd3
dy5mb3VuZGF0aW9ubWVkaWNpbmUuY29tLm14giF3d3cuYml0YWNvcmFwYXJhZW5m
ZXJtZXJhcy5jb20ucGWCDHd3dy5yb2NoZS5pZYIfcmVzcGlyYXRvcnkubWVkaWNh
bGx5LnJvY2hlLmNvbYIXd3d3LmRpYWxvZ29yb2NoZWNhYy5jb22CDHd3dy5yb2No
ZS5sdoIZd3d3Lm1zZGlzZWFzZWFjdGl2aXR5LmNvbYIdd3d3LmZvdW5kYXRpb25t
ZWRpY2luZS5jb20uYnKCE3d3dy5yb2NoZTRtZWQuY28uaWyCF3d3dy5kaWFsb2dv
cm9jaGUuY29tLm14gg93d3cuZmlnaHRpcGYuZGWCHXd3dy5mb3VuZGF0aW9ubWVk
aWNpbmUtbGEuY29tgh53d3cuZm91bmRhdGlvbm1lZGljaW5lYXNpYS5jb22CEnd3
dy5vY3JldnVzLmdsb2JhbIIcb25jb2xvZ3kubWVkaWNhbGx5LnJvY2hlLmNvbYIT
bWVkaWNhbGx5LnJvY2hlLmNvbYIXd3d3LmRpYWxvZ29yb2NoZS5jb20uYXKCF3d3
dy5kaWFsb2dvcm9jaGUuY29tLnV5ghF3d3cuaW5mb21lZGljcy5pdIIRd3d3Lmdh
enl2YS5jb20uYXWCD3d3dy5yb2NoZS5jby51a4IXd3d3LmRsYWxla2Fyenkucm9j
aGUucGyCDGIyYi5yb2NoZS5pdIIMd3d3LnJvY2hlLnNrghd3d3cuZGlhbG9nb3Jv
Y2hlLmNvbS5ib4IXY29udGVudC5iaW9jbGluaWNpZW4uZnKCEnd3dy5hdmFzdGlu
LmNvbS5hdYIMd3d3LnJvY2hlLmF0ghJ3d3cuZXNicmlldC5jb20uYXWCGHd3dy5y
b2NoZWludGVyYWN0LmNvbS5hdYIZd3d3LmZvdW5kYXRpb25tZWRpY2luZS5jb4Id
d3d3LmZvdW5kYXRpb25tZWRpY2luZS5jb20uYXKCEnd3dy5yb2NoZW9ubGluZS5z
ZYIXd3d3LmRpYWxvZ29yb2NoZS5jb20ucGWCEHd3dy5yb2NoZS5jb20uYXKCEnd3
dy5yb2NoZW9ubGluZS5za4IIcm9jaGUuY2iCDXd3dy5pZWVwby5jb22CDHd3dy5y
b2NoZS5wbIIVZm9ycGF0aWVudHMucm9jaGUuY29tghd3d3cuZGlhbG9nb3JvY2hl
LmNvbS5lY4IQd3d3LnJvY2hlLmNvbS51eYIgcmhldW1hdG9sb2d5Lm1lZGljYWxs
eS5yb2NoZS5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB
BggrBgEFBQcDAjA+BgNVHR8ENzA1MDOgMaAvhi1odHRwOi8vY2RwLmdlb3RydXN0
LmNvbS9HZW9UcnVzdFJTQUNBMjAxOC5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1s
AQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAI
BgZngQwBAgIwdQYIKwYBBQUHAQEEaTBnMCYGCCsGAQUFBzABhhpodHRwOi8vc3Rh
dHVzLmdlb3RydXN0LmNvbTA9BggrBgEFBQcwAoYxaHR0cDovL2NhY2VydHMuZ2Vv
dHJ1c3QuY29tL0dlb1RydXN0UlNBQ0EyMDE4LmNydDAJBgNVHRMEAjAAMIIBBQYK
KwYBBAHWeQIEAgSB9gSB8wDxAHYApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fN
DsgN3BAAAAFqArIJAwAABAMARzBFAiEA7CceGeHRLadjJiL2TsvE7xO9axFidDSH
j4JZHOTUXq8CIGv+TxnB+cLT+1oqnXqSXa4kiXCD5vEIo4cnPBn3T1OBAHcAh3W/
51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16ggw8AAAFqArIFcgAABAMASDBGAiEA
t9pkZT7eZZABtGFdnGnqNEbRR9e42RNPGKvT4yOSnLsCIQC3fa9O+4r1FLWVS441
fMgsSHjiYWUgoMY4lMFDCJTgjDANBgkqhkiG9w0BAQsFAAOCAQEAKZrkjouFJOPz
6G0LituY0u5gF/nhJ3WL0r3Z3fvvK7ApU9hqQOQZk4JG5r1k2LGbPTDcMczk5Okm
HTk5bcrjo+/LNXsFUU5pVkEEOHFDIwGhYN1eGq6xrUYh/oWBNaCS93w5dwPoeuni
+KulT9U0FZCpYCDuxAzftUszblTCxRmYP/pKL+V7PD7F9Q98V6sMx7Iemlatk6hT
bT4iMoy+RgV+urTPc1xp3a0Qni3gwNFGf3zgH5TVpoOdE70Nt7UYEW6EEykRK56L
d93mk5zxa+Wc3Zr7umoLbLSb9qKT6T6ok+mbuXvMeQo/bQxT4DICXTVEEx/fq87k
ApUs5hgrJA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWiobUy+HoV6KkUW413A
0LsvJPUh/LhBH/N4WYr/IT+aSabsZ2O/shcO61Wm924zDI5J7SPPHBKwrMdgwuYl
jO+peGVk6tUtyW0+pl4rLBdLo2mkvLLK2OuPF8EEIMUMqFoT8MdTV5twVWu8DyCi
bQlzib4rc3EDPPfjRlyWWaCuhZ/leqOgvs4aIrS9HtBtuegJQx2yVuwWgXYuh0+z
XyxjHzGGcZl4FFUsUjCjaP/bPjV5zUSym5sYb5gogJ5uyAv/duQByet15RKd6Zn3
PXAhOF9RgU82K034khk3J9lPkBGL3+B2zAS6fAv6jH6iE4+dihOJkJScHHP0RT7R
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12956201335522649228671540403067085846
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-03 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Basel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Basel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'F. Hoffmann-La Roche AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'careers.roche.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25425508040920382238196508646180083590293067920670557552299717624147875472489333392961194465191065938827938856157233207193158001075712192262412897029953899618400488021600421983587560504223511157505647267408010370341960479614294950792433322132191109591210328482523648967395085169891540895377393742440007341957320790255604601605895215882127402356067344551012803504419981654676834950631140242285361653324770377472245834828300248907745902236777927350582625270715932487221472845573276632336643151016515913743109716462266866403337188665181328197009303299674295897521665566522055230961407241356910856337434923664235170812269
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a20e73ec6a15ce2de041fed5ec4789a677ac568a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1749 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alecensa.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mojemedicina.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bitacoraparaenfermeras.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.com.bd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portal.roche.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medinfo.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ensayosclinicosroche.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zelborafcotellic.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.com.bo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochegate.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.latamrochepressday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medinfo.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mystudies.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche4professionals.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.forpatients.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochehelse.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheplus.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mircera.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.e-roche.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bitacoraparaenfermeras.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'respiratory.medically.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogorochecac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche4med.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fightipf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine-la.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicineasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ocrevus.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oncology.medically.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medically.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.infomedics.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gazyva.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dlalekarzy.roche.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b.roche.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.bo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.bioclinicien.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avastin.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esbriet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheinteract.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheonline.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheonline.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ieepo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forpatients.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rheumatology.medically.roche.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016a02b209030000040300473045022100ec271e19e1d12da7632622f64ecbc4ef13bd6b11627434878f82591ce4d45eaf02206bfe4f19c1f9c2d3fb5a2a9d7a925dae24897083e6f108a387273c19f74f53810077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016a02b205720000040300483046022100b7da64653ede659001b4615d9c69ea3446d147d7b8d9134f18abd3e323929cbb022100b77daf4efb8af514b5954b8e357cc82c4878e2616520a0c63894c1430894e08c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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