careers.roche.com

- F. Hoffmann-La Roche AG -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 35:7d:3a:94:48:2e:95:d5:4c:25:e6:89:78:08:05:7e was issued on by GeoTrust Inc..

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

F. Hoffmann-La Roche AG

Organization: F. Hoffmann-La Roche AG
State / Province: BASEL-STADT
Locality: Basel
Country: CH

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 35:7d:3a:94:48:2e:95:d5:4c:25:e6:89:78:08:05:7e
Serial Number (int): 71099309011781697487563237387701585278
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 67:87:3b:16:2a:46:93:2c:34:f0:87:89:06:05:d1:bf:92:d1:c9:fe
Fingerprint (sha256): 2d:16:49:49:2f:ca:a8:ed:cc:b0:4a:e0:47:df:57:cc:95:a2:40:b1:cc:ea:55:e2:6b:a0:15:46:b0:57:aa:e3

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate careers.roche.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for careers.roche.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.dialogoroche.com.mx
www.melanoominfo.nl
www.foundationmedicine.com.sg.fmi.preprod.opengarden.rch.cm
www.mmomentumexample.com.uat-mmomentum.prod.opengarden.rch.cm
www.dialogoroche.com.co
www.licht-an-fuer-ms.de.msd.prod.opengarden.rch.cm
www.dialogorochecac.com
www.msdiseaseactivity.co.uk.uat-msd.preprod.opengarden.rch.cm
author.psp.dev.opengarden.rch.cm
www.dialogoroche.com
www.licht-an-fuer-ms.de
www.licht-an-fuer-ms.de.uat-msd.preprod.opengarden.rch.cm
www.msdiseaseactivity.com
www.roche.fi
www.foundationmedicineasia.com.uat-fmi.prod.opengarden.rch.cm
www.foundationmedicine.com.sg
www.dialogoroche.com.uat-dialogo.prod.opengarden.rch.cm
www.rocheonline.se
www.latamrochepressday.com
mystudies.roche.com
live.digitalfactory.roche.com
www.dialogoroche.com.ve
www.cotelliczelboraf.nl
www.cotelliczelboraf.nl.uat-mmomentum.preprod.opengarden.rch.cm
www.mmomentum.br.uat-mmomentum.prod.opengarden.rch.cm
www.mmomentum.net
www.mmomentum.br.uat-mmomentum.preprod.opengarden.rch.cm
www.fibrosisquistica.co
www.mmomentumexample.com.uat-mmomentum.preprod.opengarden.rch.cm
www.msdiseaseactivity.co.uk
www.cotelliczelboraf.nl.uat-mmomentum.prod.opengarden.rch.cm
www.dialogoroche.com.uat-dialogo.preprod.opengarden.rch.cm
www.dialogoroche.com.br
www.foundationmedicine.com.sg.uat-fmi.preprod.opengarden.rch.cm
www.rocheplus.es
www.roche-oncology.ch
www.dialogoroche.com.uy
content.bioclinicien.fr
www.roche.co.uk
www.rochemed.gr
www.msdiseaseactivity.com.uat-msd.preprod.opengarden.rch.cm
www.mmomentum.net.uat-mmomentum.preprod.opengarden.rch.cm
www.foundationmedicineasia.com
www.dialogoroche.com.ar
www.mmomentum.net.uat-mmomentum.prod.opengarden.rch.cm
www.roche.ie
www.foundationmedicineasia.com.uat-fmi.preprod.opengarden.rch.cm
www.rochetudastar.hu
www.infomedics.it
www.dialogoroche.com.pe
careers.roche.com

Other certificates including the domain name roche.com

(limited to 100 certificates)
involve.roche.com
www.hpv16and18.com
easydrive-uat.roche.com
advancedanalytics.roche.com
main.rhelp.roche.com
api.fido.tst.pdaa.science.roche.com
sni.cloudflaressl.com
magentocloud28.map.fastly.net
rbalvprexd0.bas.roche.com
cieas01.roche.com
harmonytest.de
sequencing.roche.com
esource.roche.com
e-medical.roche.com
esource.roche.com
maps-uat.roche.com
coaguchek.com
rsmsourcing.roche.com
deimos.roche.com
cert2.roche.com
sni.cloudflaressl.com
cdn.appstore.gene.com
shpivee1-01.roche.com
eews-dev.roche.com
myaccess.roche.com
ican.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
albecsinternaltest.aws.cloud.roche.com
cert3.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
mrdivee2-02.netlab.roche.com
rodip.roche.com
nsrdcongresses.roche.com
rbavxsentry11.bas.roche.com
mobilesolution-dev.roche.com
wamua.roche.com
dialog-62-test.roche.com
identity-hu.login.digitalidentity.roche.com
rocheggcpac.roche.com
san-003.ceros.com
video.hive.roche.com
sni.cloudflaressl.com
rssg.roche.com
usdiagnostics.roche.com
mftemeaext.roche.com
anadisuat01.sc1.roche.com
careers.roche.com
flow.roche.com
cert3.roche.com
sni.cloudflaressl.com
misp.roche.com
cert2.roche.com
careers.roche.com
api.rockwizz.roche.com
bitbucket-nala-qa.roche.com
careers.roche.com
wamdev.roche.com
sonar-dev-old.roche.com
diauxhub.roche.com
careers.roche.com
globalfms.roche.com
rexis-dialog-dev.roche.com
san-003.ceros.com
sc1lvflexq2.sc1.roche.com
easydrive-dev.roche.com
send-tst.roche.com
indigrow.roche.com
careers.roche.com
careers.roche.com
env5-remotedashboard.roche.com
mrd25.me
cert2.roche.com
*.esrv-hub-uat.roche.com
sb.eu.phcaa.science.roche.com
san-003.ceros.com
extaccess-nala.roche.com
magentocloud28.map.fastly.net
go.roche.com
magentocloud32.map.fastly.net
sni.cloudflaressl.com
status.repository.roche.com
itot.roche.com
ssl882748.cloudflaressl.com
sni.cloudflaressl.com
esrv-marketplace-dev.roche.com
careers.roche.com
gispeopledev.roche.com
imcore.roche.com
booster.roche.com
sni.cloudflaressl.com
akamai-san195.exacttarget.com
raumbuch.roche.com
pitas01.roche.com
sni.cloudflaressl.com
c1edb.roche.com
magentocloud45.map.fastly.net
shpivee1-01.roche.com
hpv16and18.com

Certificate

The complete raw certificate details for careers.roche.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMOTCCCyGgAwIBAgIQNX06lEguldVMJeaJeAgFfjANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU
R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTcwNDEyMDAwMDAwWhcNMTgwMzA4MjM1
OTU5WjBxMQswCQYDVQQGEwJDSDEUMBIGA1UECAwLQkFTRUwtU1RBRFQxDjAMBgNV
BAcMBUJhc2VsMSAwHgYDVQQKDBdGLiBIb2ZmbWFubi1MYSBSb2NoZSBBRzEaMBgG
A1UEAwwRY2FyZWVycy5yb2NoZS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDKrR38anLh8xZmjiB3tQ1euqk2u0J0cX3qpwRn7jiynaUZXQgxi9cF
gkk8i6tdco1/t5VsOOwoEMAbaFnijyMTenQUvJcYAnAc3nR2rJtcpVdADYXdiv5a
wWWunBst06l9hgu+zoVuVxaOIpIawdROrN+zxuvHCZoBymYfd6UFPjE2EiweAhcX
nUsXv6AwOaQ5ZSgElKhZIR+kfIhcuGNEr1/Cj0NeJ2q/BcIRtur5Zq2WuYJKlzNm
ZRUXscPz1RDQVUCWv8N4EPfwyhmrebD5rXeRnZ/Uc9rVvGiL09+pKlpV2mHbIRkb
l+QQ+RS+owUck2Lqz2jDCnCM0oONhZL5AgMBAAGjggj4MIII9DCCB1oGA1UdEQSC
B1EwggdNghd3d3cuZGlhbG9nb3JvY2hlLmNvbS5teIITd3d3Lm1lbGFub29taW5m
by5ubII7d3d3LmZvdW5kYXRpb25tZWRpY2luZS5jb20uc2cuZm1pLnByZXByb2Qu
b3BlbmdhcmRlbi5yY2guY22CPXd3dy5tbW9tZW50dW1leGFtcGxlLmNvbS51YXQt
bW1vbWVudHVtLnByb2Qub3BlbmdhcmRlbi5yY2guY22CF3d3dy5kaWFsb2dvcm9j
aGUuY29tLmNvgjJ3d3cubGljaHQtYW4tZnVlci1tcy5kZS5tc2QucHJvZC5vcGVu
Z2FyZGVuLnJjaC5jbYIXd3d3LmRpYWxvZ29yb2NoZWNhYy5jb22CPXd3dy5tc2Rp
c2Vhc2VhY3Rpdml0eS5jby51ay51YXQtbXNkLnByZXByb2Qub3BlbmdhcmRlbi5y
Y2guY22CIGF1dGhvci5wc3AuZGV2Lm9wZW5nYXJkZW4ucmNoLmNtghR3d3cuZGlh
bG9nb3JvY2hlLmNvbYIXd3d3LmxpY2h0LWFuLWZ1ZXItbXMuZGWCOXd3dy5saWNo
dC1hbi1mdWVyLW1zLmRlLnVhdC1tc2QucHJlcHJvZC5vcGVuZ2FyZGVuLnJjaC5j
bYIZd3d3Lm1zZGlzZWFzZWFjdGl2aXR5LmNvbYIMd3d3LnJvY2hlLmZpgj13d3cu
Zm91bmRhdGlvbm1lZGljaW5lYXNpYS5jb20udWF0LWZtaS5wcm9kLm9wZW5nYXJk
ZW4ucmNoLmNtgh13d3cuZm91bmRhdGlvbm1lZGljaW5lLmNvbS5zZ4I3d3d3LmRp
YWxvZ29yb2NoZS5jb20udWF0LWRpYWxvZ28ucHJvZC5vcGVuZ2FyZGVuLnJjaC5j
bYISd3d3LnJvY2hlb25saW5lLnNlghp3d3cubGF0YW1yb2NoZXByZXNzZGF5LmNv
bYITbXlzdHVkaWVzLnJvY2hlLmNvbYIdbGl2ZS5kaWdpdGFsZmFjdG9yeS5yb2No
ZS5jb22CF3d3dy5kaWFsb2dvcm9jaGUuY29tLnZlghd3d3cuY290ZWxsaWN6ZWxi
b3JhZi5ubII/d3d3LmNvdGVsbGljemVsYm9yYWYubmwudWF0LW1tb21lbnR1bS5w
cmVwcm9kLm9wZW5nYXJkZW4ucmNoLmNtgjV3d3cubW1vbWVudHVtLmJyLnVhdC1t
bW9tZW50dW0ucHJvZC5vcGVuZ2FyZGVuLnJjaC5jbYIRd3d3Lm1tb21lbnR1bS5u
ZXSCOHd3dy5tbW9tZW50dW0uYnIudWF0LW1tb21lbnR1bS5wcmVwcm9kLm9wZW5n
YXJkZW4ucmNoLmNtghd3d3cuZmlicm9zaXNxdWlzdGljYS5jb4JAd3d3Lm1tb21l
bnR1bWV4YW1wbGUuY29tLnVhdC1tbW9tZW50dW0ucHJlcHJvZC5vcGVuZ2FyZGVu
LnJjaC5jbYIbd3d3Lm1zZGlzZWFzZWFjdGl2aXR5LmNvLnVrgjx3d3cuY290ZWxs
aWN6ZWxib3JhZi5ubC51YXQtbW1vbWVudHVtLnByb2Qub3BlbmdhcmRlbi5yY2gu
Y22COnd3dy5kaWFsb2dvcm9jaGUuY29tLnVhdC1kaWFsb2dvLnByZXByb2Qub3Bl
bmdhcmRlbi5yY2guY22CF3d3dy5kaWFsb2dvcm9jaGUuY29tLmJygj93d3cuZm91
bmRhdGlvbm1lZGljaW5lLmNvbS5zZy51YXQtZm1pLnByZXByb2Qub3BlbmdhcmRl
bi5yY2guY22CEHd3dy5yb2NoZXBsdXMuZXOCFXd3dy5yb2NoZS1vbmNvbG9neS5j
aIIXd3d3LmRpYWxvZ29yb2NoZS5jb20udXmCF2NvbnRlbnQuYmlvY2xpbmljaWVu
LmZygg93d3cucm9jaGUuY28udWuCD3d3dy5yb2NoZW1lZC5ncoI7d3d3Lm1zZGlz
ZWFzZWFjdGl2aXR5LmNvbS51YXQtbXNkLnByZXByb2Qub3BlbmdhcmRlbi5yY2gu
Y22COXd3dy5tbW9tZW50dW0ubmV0LnVhdC1tbW9tZW50dW0ucHJlcHJvZC5vcGVu
Z2FyZGVuLnJjaC5jbYIed3d3LmZvdW5kYXRpb25tZWRpY2luZWFzaWEuY29tghd3
d3cuZGlhbG9nb3JvY2hlLmNvbS5hcoI2d3d3Lm1tb21lbnR1bS5uZXQudWF0LW1t
b21lbnR1bS5wcm9kLm9wZW5nYXJkZW4ucmNoLmNtggx3d3cucm9jaGUuaWWCQHd3
dy5mb3VuZGF0aW9ubWVkaWNpbmVhc2lhLmNvbS51YXQtZm1pLnByZXByb2Qub3Bl
bmdhcmRlbi5yY2guY22CFHd3dy5yb2NoZXR1ZGFzdGFyLmh1ghF3d3cuaW5mb21l
ZGljcy5pdIIXd3d3LmRpYWxvZ29yb2NoZS5jb20ucGWCEWNhcmVlcnMucm9jaGUu
Y29tMAkGA1UdEwQCMAAwDgYDVR0PAQH/BAQDAgWgMCsGA1UdHwQkMCIwIKAeoByG
Gmh0dHA6Ly9nbi5zeW1jYi5jb20vZ24uY3JsMIGdBgNVHSAEgZUwgZIwgY8GBmeB
DAECAjCBhDA/BggrBgEFBQcCARYzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jl
c291cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMEEGCCsGAQUFBwICMDUMM2h0dHBzOi8v
d3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvcmVwb3NpdG9yeS9sZWdhbDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAU0m/3lvSFP3I8
MH0j2oV4m6N8WnwwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8v
Z24uc3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRwOi8vZ24uc3ltY2IuY29tL2du
LmNydDATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxNAT
TZL8SmL3YwtGXukqDzX23izO6GCS6S7dH7brxJt0FhtLkoLcsiz3MnPXnb5U44i5
wWn8UhBoLWVuiqPCNv7OKEgJ8uiK0hfUrB+EEu7M9XZsU9gUIBh4Oqxlrl+oV1ug
0/Bi8YnnCAKySJTtofDeq0JtmHmK7qv+EYhOEThlQTD123bR05GMEzjRLZfitgrZ
NYDLklWHAn7qrDiF5Z+v5v6dhWzZ0418pj4oNX7cesBCraAKViNkzAjIo3E9XZzn
2H+LX1Mv9XZ3ImOgWtpg1Hkfn4dGLvFC8FwniP9+uUbGxGJ/0rKBS98gfPk7xkSJ
DEAHt9din5xqqh+ZxA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyq0d/Gpy4fMWZo4gd7UN
XrqpNrtCdHF96qcEZ+44sp2lGV0IMYvXBYJJPIurXXKNf7eVbDjsKBDAG2hZ4o8j
E3p0FLyXGAJwHN50dqybXKVXQA2F3Yr+WsFlrpwbLdOpfYYLvs6FblcWjiKSGsHU
Tqzfs8brxwmaAcpmH3elBT4xNhIsHgIXF51LF7+gMDmkOWUoBJSoWSEfpHyIXLhj
RK9fwo9DXidqvwXCEbbq+WatlrmCSpczZmUVF7HD89UQ0FVAlr/DeBD38MoZq3mw
+a13kZ2f1HPa1bxoi9PfqSpaVdph2yEZG5fkEPkUvqMFHJNi6s9owwpwjNKDjYWS
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 71099309011781697487563237387701585278
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BASEL-STADT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Basel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'F. Hoffmann-La Roche AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'careers.roche.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25585504843012898722808692255484232518285956403240726204798097317652606347048736978619039641368964555202119168747932981210877307928099960108148214427535170226101862657270300581019751507208907332592226057367332508074530502355839587087183321707747134465826796924502719504003390041264202371470649321390853765350389210902374822232995651047816366297164261126714306645641152820640447503978587779643561340452963300817401165614640254934023795864664488793588947194742045083687984444525935184000077479146283327997430687688956577356133083403592175810297551964154058377712076706785631229571521100569478894506640713301663209067257
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1873 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melanoominfo.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.sg.fmi.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentumexample.com.uat-mmomentum.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.licht-an-fuer-ms.de.msd.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogorochecac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.co.uk.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author.psp.dev.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.licht-an-fuer-ms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.licht-an-fuer-ms.de.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicineasia.com.uat-fmi.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.uat-dialogo.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheonline.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.latamrochepressday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mystudies.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.digitalfactory.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cotelliczelboraf.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cotelliczelboraf.nl.uat-mmomentum.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentum.br.uat-mmomentum.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentum.br.uat-mmomentum.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fibrosisquistica.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentumexample.com.uat-mmomentum.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cotelliczelboraf.nl.uat-mmomentum.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.uat-dialogo.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.sg.uat-fmi.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheplus.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche-oncology.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.bioclinicien.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochemed.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.com.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentum.net.uat-mmomentum.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicineasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentum.net.uat-mmomentum.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicineasia.com.uat-fmi.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochetudastar.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.infomedics.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.roche.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00c4d0134d92fc4a62f7630b465ee92a0f35f6de2ccee86092e92edd1fb6ebc49b74161b4b9282dcb22cf73273d79dbe54e388b9c169fc5210682d656e8aa3c236fece284809f2e88ad217d4ac1f8412eeccf5766c53d8142018783aac65ae5fa8575ba0d3f062f189e70802b24894eda1f0deab426d98798aeeabfe11884e1138654130f5db76d1d3918c1338d12d97e2b60ad93580cb925587027eeaac3885e59fafe6fe9d856cd9d38d7ca63e28357edc7ac042ada00a562364cc08c8a3713d5d9ce7d87f8b5f532ff576772263a05ada60d4791f9f87462ef142f05c2788ff7eb946c6c4627fd2b2814bdf207cf93bc644890c4007b7d7629f9c6aaa1f99c4