careers.roche.com

- F. Hoffmann-La Roche AG -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 6f:be:ca:fb:f1:32:19:5b:d6:3c:37:05:66:07:cf:18 was issued on by GeoTrust Inc..

With 50 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

F. Hoffmann-La Roche AG

Organization: F. Hoffmann-La Roche AG
State / Province: BASEL-STADT
Locality: Basel
Country: CH

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6f:be:ca:fb:f1:32:19:5b:d6:3c:37:05:66:07:cf:18
Serial Number (int): 148534960942902461270695700907113828120
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 2c:05:a8:7e:8e:9c:61:ca:5c:a7:e9:9c:01:76:7c:67:12:b0:9e:ff
Fingerprint (sha256): 2e:e6:5b:c2:35:bd:2d:9d:83:d8:12:8d:ca:64:5c:d1:ed:c9:1f:82:d6:f0:15:12:6b:12:ca:e4:48:71:88:4a

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate careers.roche.com

50

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for careers.roche.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.infomedics.it
live.digitalfactory.roche.com
www.foundationmedicineasia.com.uat-fmi.prod.opengarden.rch.cm
www.dialogoroche.com.pe
www.foundationmedicineasia.com.uat-fmi.preprod.opengarden.rch.cm
www.dialogoroche.com.uat-dialogo.preprod.opengarden.rch.cm
www.mmomentum.net.uat-mmomentum.preprod.opengarden.rch.cm
mystudies.roche.com
www.roche-oncology.ch
www.mmomentum.net.uat-mmomentum.prod.opengarden.rch.cm
www.mmomentum.net
www.mmomentumexample.com.uat-mmomentum.preprod.opengarden.rch.cm
content.bioclinicien.fr
www.mmomentum.br.uat-mmomentum.prod.opengarden.rch.cm
www.roche.ie
www.mmomentum.br.uat-mmomentum.preprod.opengarden.rch.cm
www.cotelliczelboraf.nl
www.licht-an-fuer-ms.de.msd.prod.opengarden.rch.cm
www.rochemed.gr
www.latamrochepressday.com
www.rocheplus.es
www.rocheonline.se
www.roche.fi
www.rochetudastar.hu
www.msdiseaseactivity.co.uk.uat-msd.preprod.opengarden.rch.cm
www.cotelliczelboraf.nl.uat-mmomentum.preprod.opengarden.rch.cm
www.msdiseaseactivity.com.uat-msd.preprod.opengarden.rch.cm
www.dialogoroche.com.co
www.licht-an-fuer-ms.de.uat-msd.preprod.opengarden.rch.cm
www.msdiseaseactivity.com
www.msdiseaseactivity.co.uk
www.dialogorochecac.com
www.licht-an-fuer-ms.de
www.dialogoroche.com.br
www.dialogoroche.com.ve
www.dialogoroche.com.ar
www.dialogoroche.com.uat-dialogo.prod.opengarden.rch.cm
www.foundationmedicineasia.com
www.roche.co.uk
www.foundationmedicine.com.sg.fmi.preprod.opengarden.rch.cm
www.mmomentumexample.com.uat-mmomentum.prod.opengarden.rch.cm
www.dialogoroche.com.mx
www.foundationmedicine.com.sg.uat-fmi.preprod.opengarden.rch.cm
www.foundationmedicine.com.sg
www.cotelliczelboraf.nl.uat-mmomentum.prod.opengarden.rch.cm
author.psp.dev.opengarden.rch.cm
www.dialogoroche.com.uy
www.fibrosisquistica.co
www.dialogoroche.com
careers.roche.com

Other certificates including the domain name roche.com

(limited to 100 certificates)
involve.roche.com
www.hpv16and18.com
easydrive-uat.roche.com
advancedanalytics.roche.com
main.rhelp.roche.com
api.fido.tst.pdaa.science.roche.com
sni.cloudflaressl.com
magentocloud28.map.fastly.net
rbalvprexd0.bas.roche.com
cieas01.roche.com
harmonytest.de
sequencing.roche.com
esource.roche.com
e-medical.roche.com
esource.roche.com
maps-uat.roche.com
coaguchek.com
rsmsourcing.roche.com
deimos.roche.com
cert2.roche.com
sni.cloudflaressl.com
cdn.appstore.gene.com
shpivee1-01.roche.com
eews-dev.roche.com
myaccess.roche.com
ican.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
albecsinternaltest.aws.cloud.roche.com
cert3.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
mrdivee2-02.netlab.roche.com
rodip.roche.com
nsrdcongresses.roche.com
rbavxsentry11.bas.roche.com
mobilesolution-dev.roche.com
wamua.roche.com
dialog-62-test.roche.com
identity-hu.login.digitalidentity.roche.com
rocheggcpac.roche.com
san-003.ceros.com
video.hive.roche.com
sni.cloudflaressl.com
rssg.roche.com
usdiagnostics.roche.com
mftemeaext.roche.com
anadisuat01.sc1.roche.com
careers.roche.com
flow.roche.com
cert3.roche.com
sni.cloudflaressl.com
misp.roche.com
cert2.roche.com
careers.roche.com
api.rockwizz.roche.com
bitbucket-nala-qa.roche.com
careers.roche.com
wamdev.roche.com
sonar-dev-old.roche.com
diauxhub.roche.com
careers.roche.com
globalfms.roche.com
rexis-dialog-dev.roche.com
san-003.ceros.com
sc1lvflexq2.sc1.roche.com
easydrive-dev.roche.com
send-tst.roche.com
indigrow.roche.com
careers.roche.com
careers.roche.com
env5-remotedashboard.roche.com
mrd25.me
cert2.roche.com
*.esrv-hub-uat.roche.com
sb.eu.phcaa.science.roche.com
san-003.ceros.com
extaccess-nala.roche.com
magentocloud28.map.fastly.net
go.roche.com
magentocloud32.map.fastly.net
sni.cloudflaressl.com
status.repository.roche.com
itot.roche.com
ssl882748.cloudflaressl.com
sni.cloudflaressl.com
esrv-marketplace-dev.roche.com
careers.roche.com
gispeopledev.roche.com
imcore.roche.com
booster.roche.com
sni.cloudflaressl.com
akamai-san195.exacttarget.com
raumbuch.roche.com
pitas01.roche.com
sni.cloudflaressl.com
c1edb.roche.com
magentocloud45.map.fastly.net
shpivee1-01.roche.com
hpv16and18.com

Certificate

The complete raw certificate details for careers.roche.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw67vm9lv5Jon5Kfc/n7y
iDc/pg/vAs4YXMvQjLjn0ja/mt52TVnpOekjYHXlkPbz4gS+O6ju/DXyynOo77gf
bG9HA1sMwiERtXJbbPanZg3p9MIMrSpmta8jwRJ4K8Y9FIdIeJp0AfRXnlJROPvS
lfUldtroiIcJ4+ahfWTSWvemoW9/xZMeTDlIey38eom2j+zjy8T5HeZwtDTocpxS
0h8pRuXBoONfasEuHEeNoGoQCkeoVjq3rrKoGfvn1LNu9yMHsTlcwFD5WvVwzAfn
H8sn2Hgs+67WV7D9SbjCAk1KZuLvSIJWk4un4KBLDmR82ApffcK1BxJVtihrXqRP
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 148534960942902461270695700907113828120
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BASEL-STADT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Basel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'F. Hoffmann-La Roche AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'careers.roche.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24702733611195770259579114904452705232799508954658169148296597956469243074171931173065175948315843508140534053942959445587875164080044451246227064096987282942804982256883446429902891441772186291387775006615871273988907830743851657213110956980774358399021233490439406558193629885291487709904694968317122059162486608422015159092000692683158967999096106757612697005088639028808650207662233423728681809019869227032895849481735341557491984413578724287156922942512712178579090367685130128053187624948513907842199306234984359624407479592923957451781033949617316153305996248679617974958661607496927091459250435340966411128583
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1852 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.infomedics.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.digitalfactory.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicineasia.com.uat-fmi.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicineasia.com.uat-fmi.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.uat-dialogo.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentum.net.uat-mmomentum.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mystudies.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche-oncology.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentum.net.uat-mmomentum.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentumexample.com.uat-mmomentum.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.bioclinicien.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentum.br.uat-mmomentum.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentum.br.uat-mmomentum.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cotelliczelboraf.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.licht-an-fuer-ms.de.msd.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochemed.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.latamrochepressday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheplus.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheonline.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochetudastar.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.co.uk.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cotelliczelboraf.nl.uat-mmomentum.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.com.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.licht-an-fuer-ms.de.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogorochecac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.licht-an-fuer-ms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.uat-dialogo.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicineasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.sg.fmi.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentumexample.com.uat-mmomentum.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.sg.uat-fmi.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cotelliczelboraf.nl.uat-mmomentum.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author.psp.dev.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fibrosisquistica.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.roche.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003bcd742c01a6efa7011610d65c8dfa63b3debf264494f4237abdf6f8f6a0186e459b38fe7a6ad848d36fd57486e939b5c0e6f1c9a2e165fcc960c7e61d4d7a477b1a55034a95ce56f2a0972f8a4cb04196ee145842495c454cbbecfe58677ebd027f61aec0e0cba4ed17b3a53640a765a83b43bd162a8e4372300b383829c721ddb6437e274da4ceacea6409eb16a4746c2fe8cd91d145e2ed17e5cd473d9d2d02aa7a8e8f8d60b5a8686af4e8a69decf1ec9029df071743bf320fd5ad2d37ced96906607766a07867df294682812e982a726ef9db8626ec5b019a86ddf17710a5b03451e9a4e87a1d29fd9a0172e4405eaa75ff69ecf6d2152a2c28f35f89b9