careers.roche.com

- F. Hoffmann-La Roche AG -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 51:6b:0b:a2:c0:a3:18:ac:70:56:08:54:9d:a1:97:38 was issued on by GeoTrust Inc..

With 74 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

F. Hoffmann-La Roche AG

Organization: F. Hoffmann-La Roche AG
State / Province: Basel-Stadt
Locality: Basel
Country: CH

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 51:6b:0b:a2:c0:a3:18:ac:70:56:08:54:9d:a1:97:38
Serial Number (int): 108223279423527673052684162403741570872
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 00:9c:6d:2e:7d:23:7d:d9:a1:e0:89:03:c7:ac:12:e9:a0:8e:c1:48
Fingerprint (sha256): 30:b5:12:cb:41:86:78:42:7f:1d:6b:62:76:52:12:eb:35:d0:0f:ac:a2:cf:8f:25:7d:5a:dd:e4:c8:2a:c6:d0

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate careers.roche.com

74

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for careers.roche.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.fightipf.de
www.fightipf.de.uat-mmomentum.preprod.opengarden.rch.cm
oncology.medical.ly
content.bioclinicien.fr
www.dialogorochecac.com
www.dialogoroche.com.pe
publish.uat-pdmahub.preprod.opengarden.rch.cm
www.foundationmedicine.com.sg.uat-fmi.preprod.opengarden.rch.cm
www.dialogoroche.com.mx
www.latamrochepressday.com
www.medical.ly
www.melanoominfo.nl
www.mmomentum.br.uat-mmomentum.prod.opengarden.rch.cm
www.roche.ie
respiratory.medical.ly
rheumatology.medical.ly
www.rochetudastar.hu
www.foundationmedicineasia.com
www.msdiseaseactivity.co.uk
www.melanoominfo.nl.uat-mmomentum.preprod.opengarden.rch.cm
www.licht-an-fuer-ms.de
www.foundationmedicine.com.sg
pl.hcpnext.preprod.opengarden.rch.cm
dialogoroche.com
www.msdiseaseactivity.com
www.foundationmedicine.com.sg.fmi.preprod.opengarden.rch.cm
www.ipfzone.com.uat-esbriethub.preprod.opengarden.rch.cm
www.rocheonline.se
nl.hcpnext.preprod.opengarden.rch.cm
www.rocheinteract.com.au.uat-rocheinteract-pp.rch.cm
www.roche.at
www.roche.fi
www.rocheinteract.com.au
www.dialogoroche.com
www.fibrosisquistica.co
www.foundationmedicineasia.com.uat-fmi.prod.opengarden.rch.cm
www.dialogoroche.com.uat-dialogo.prod.opengarden.rch.cm
fr.hcpnext.preprod.opengarden.rch.cm
www.msdiseaseactivity.co.uk.uat-msd.preprod.opengarden.rch.cm
www.rocheplus.es
www.dialogoroche.com.br
www.infomedics.it
at.hcpnext.preprod.opengarden.rch.cm
es.hcpnext.preprod.opengarden.rch.cm
www.ipfzone.com.uat-esbriethub.prod.opengarden.rch.cm
rheumatology.publish.uat-pdmahub.preprod.opengarden.rch.cm
author.psp.dev.opengarden.rch.cm
www.msdiseaseactivity.com.uat-msd.preprod.opengarden.rch.cm
live.digitalfactory.roche.com
www.melanoominfo.nl.uat-mmomentum.prod.opengarden.rch.cm
www.roche-oncology.ch
fightipf.de
www.licht-an-fuer-ms.de.uat-msd.preprod.opengarden.rch.cm
www.dialogoroche.com.ve
www.mmomentum.net.uat-mmomentum.prod.opengarden.rch.cm
www.mmomentum.br.uat-mmomentum.preprod.opengarden.rch.cm
www.roche.co.uk
www.dialogoroche.com.co
www.dialogoroche.com.uat-dialogo.preprod.opengarden.rch.cm
www.emactiva.cl.uat-msd.preprod.opengarden.rch.cm
mystudies.roche.com
www.emactiva.cl
www.rochemed.gr
medical.ly
uk2.hcpnext.preprod.opengarden.rch.cm
www.dialogoroche.com.ar
pt.hcpnext.preprod.opengarden.rch.cm
www.mmomentumexample.com.uat-mmomentum.preprod.opengarden.rch.cm
www.dialogoroche.com.ec.uat-dialogo.preprod.opengarden.rch.cm
www.mmomentumexample.com.uat-mmomentum.prod.opengarden.rch.cm
www.foundationmedicineasia.com.uat-fmi.preprod.opengarden.rch.cm
ch.hcpnext.preprod.opengarden.rch.cm
www.dialogoroche.com.uy
careers.roche.com

Other certificates including the domain name roche.com

(limited to 100 certificates)
involve.roche.com
www.hpv16and18.com
easydrive-uat.roche.com
advancedanalytics.roche.com
main.rhelp.roche.com
api.fido.tst.pdaa.science.roche.com
sni.cloudflaressl.com
magentocloud28.map.fastly.net
rbalvprexd0.bas.roche.com
cieas01.roche.com
harmonytest.de
sequencing.roche.com
esource.roche.com
e-medical.roche.com
esource.roche.com
maps-uat.roche.com
coaguchek.com
rsmsourcing.roche.com
deimos.roche.com
cert2.roche.com
sni.cloudflaressl.com
cdn.appstore.gene.com
shpivee1-01.roche.com
eews-dev.roche.com
myaccess.roche.com
ican.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
albecsinternaltest.aws.cloud.roche.com
cert3.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
mrdivee2-02.netlab.roche.com
rodip.roche.com
nsrdcongresses.roche.com
rbavxsentry11.bas.roche.com
mobilesolution-dev.roche.com
wamua.roche.com
dialog-62-test.roche.com
identity-hu.login.digitalidentity.roche.com
rocheggcpac.roche.com
san-003.ceros.com
video.hive.roche.com
sni.cloudflaressl.com
rssg.roche.com
usdiagnostics.roche.com
mftemeaext.roche.com
anadisuat01.sc1.roche.com
careers.roche.com
flow.roche.com
cert3.roche.com
sni.cloudflaressl.com
misp.roche.com
cert2.roche.com
careers.roche.com
api.rockwizz.roche.com
bitbucket-nala-qa.roche.com
careers.roche.com
wamdev.roche.com
sonar-dev-old.roche.com
diauxhub.roche.com
careers.roche.com
globalfms.roche.com
rexis-dialog-dev.roche.com
san-003.ceros.com
sc1lvflexq2.sc1.roche.com
easydrive-dev.roche.com
send-tst.roche.com
indigrow.roche.com
careers.roche.com
careers.roche.com
env5-remotedashboard.roche.com
mrd25.me
cert2.roche.com
*.esrv-hub-uat.roche.com
sb.eu.phcaa.science.roche.com
san-003.ceros.com
extaccess-nala.roche.com
magentocloud28.map.fastly.net
go.roche.com
magentocloud32.map.fastly.net
sni.cloudflaressl.com
status.repository.roche.com
itot.roche.com
ssl882748.cloudflaressl.com
sni.cloudflaressl.com
esrv-marketplace-dev.roche.com
careers.roche.com
gispeopledev.roche.com
imcore.roche.com
booster.roche.com
sni.cloudflaressl.com
akamai-san195.exacttarget.com
raumbuch.roche.com
pitas01.roche.com
sni.cloudflaressl.com
c1edb.roche.com
magentocloud45.map.fastly.net
shpivee1-01.roche.com
hpv16and18.com

Certificate

The complete raw certificate details for careers.roche.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLeZRUBOh4UVf3ddxtW3
rF3i5czgkCCzX3X/4S/hRbvqUqQ/gGFvB1L+e9DNcNOvUaFevghDeZZ8HcoH4ZZH
VM4ezm/ylmIccbMJnFtt6U5FaqtOb92A1yjczVoERU9Ph6AJen8c0UeNNXsHXrg+
lCgkTpgBwioBXouVuJN/RRdyhETAoHdFntvHo+nCbTt0ZJo21qtbBcolr9+bcONH
QRZHoeIkKeL492u0oWpy1HjTic87iF6tPgmhA+8IgqMBI3Yyg+JItZBcY/fOKvzH
wkB/K4EuY9DFinXq6LhBu0y9kC3X9IO3mHos1hKlIyTmZVpzWRCdK/n24g711RRA
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 108223279423527673052684162403741570872
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Basel-Stadt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Basel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'F. Hoffmann-La Roche AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'careers.roche.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24328290453152877316484950246749474407305577712031738268722256114033989814714511194262267124728131787170144233286779605641251081989273946512959877550116408247357703424836657110044212694675012707364678424332563681224236757297003498730890586783141144673922169505767575903745420715894573293134887043428999225384065014702951693036596967468728074731633367032242217775117741981936554025530183631097528671802256555793098500504381047572884494390459528830831997124219717052240070846172748518298338168002610475502045448863479110417393541590953434342853735018861253281132050672630163187585822655187518729219973597401352869527721
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2663 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fightipf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fightipf.de.uat-mmomentum.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oncology.medical.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.bioclinicien.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogorochecac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publish.uat-pdmahub.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.sg.uat-fmi.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.latamrochepressday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medical.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melanoominfo.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentum.br.uat-mmomentum.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'respiratory.medical.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rheumatology.medical.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochetudastar.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicineasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melanoominfo.nl.uat-mmomentum.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.licht-an-fuer-ms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.sg.fmi.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipfzone.com.uat-esbriethub.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheonline.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nl.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheinteract.com.au.uat-rocheinteract-pp.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheinteract.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fibrosisquistica.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicineasia.com.uat-fmi.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.uat-dialogo.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.co.uk.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheplus.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.infomedics.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'at.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipfzone.com.uat-esbriethub.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rheumatology.publish.uat-pdmahub.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author.psp.dev.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.com.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.digitalfactory.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melanoominfo.nl.uat-mmomentum.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche-oncology.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fightipf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.licht-an-fuer-ms.de.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentum.net.uat-mmomentum.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentum.br.uat-mmomentum.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.uat-dialogo.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emactiva.cl.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mystudies.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emactiva.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochemed.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medical.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk2.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pt.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentumexample.com.uat-mmomentum.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.ec.uat-dialogo.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentumexample.com.uat-mmomentum.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicineasia.com.uat-fmi.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ch.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.roche.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015e3290c9a80000040300483046022100f2bc9314483c40044e187639149572cd72427ac5d711f43f186a5f57132c61460221008e5dd5001e4e646d4e227eac29b78cff20d140abf3b7000d538a1f7c3c3eb141007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015e3290c9bf0000040300473045022060f0f4bd1c5947e0344fae2aa823f1252e95e04e44dde4c409ebea5adfd1af1d022100be17a62e1be10b4116447171d964cad1181706b6716291d3101576441bd44979
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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