careers.roche.com

- F. Hoffmann-La Roche AG -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 6c:86:51:a2:25:c7:21:53:fe:29:f4:12:57:93:3a:52 was issued on by GeoTrust Inc..

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

F. Hoffmann-La Roche AG

Organization: F. Hoffmann-La Roche AG
State / Province: Basel-Stadt
Locality: Basel
Country: CH

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6c:86:51:a2:25:c7:21:53:fe:29:f4:12:57:93:3a:52
Serial Number (int): 144254047045646483260942488183929780818
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 39:48:08:09:71:21:a0:4a:2a:9b:7d:f5:7f:6a:32:08:2a:ec:81:3b
Fingerprint (sha256): 31:50:e0:4f:c1:09:00:89:64:8c:e1:5f:e6:49:b9:09:a2:5e:32:81:b1:44:0b:b4:9b:90:3a:7b:b3:f1:b1:01

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate careers.roche.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for careers.roche.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.roche-oncology.ch
www.roche.at
www.dialogoroche.com.mx
www.roche.ie
www.rochemed.gr
www.rochetudastar.hu
www.dialogoroche.com.ar
foundationmedicineasia.com
www.foundationmedicineasia.com
www.dialogoroche.com.uy
www.rocheplus.es
www.roche.co.uk
rocheinteract.com.au
www.rocheinteract.com.au
www.licht-an-fuer-ms.de
www.foundationmedicine.com.sg
foundationmedicine.com.sg
www.latamrochepressday.com
www.ipfzone.com
ipfzone.com
www.dialogoroche.com
dialogoroche.com
www.infomedics.it
www.msdiseaseactivity.co.uk
www.dialogoroche.com.br
oncology.medical.ly
respiratory.medical.ly
www.medical.ly
medical.ly
rheumatology.medical.ly
www.melanoominfo.nl
emactiva.cl
www.emactiva.cl
www.dialogoroche.com.ve
content.bioclinicien.fr
www.dialogoroche.com.co
www.dialogoroche.com.pe
www.roche.fi
msdiseaseactivity.com
www.msdiseaseactivity.com
www.rocheonline.se
www.msdiseaseactivity.co.uk.uat-msd.preprod.opengarden.rch.cm
www.foundationmedicine.com.sg.uat-fmi.preprod.opengarden.rch.cm
www.mmomentumexample.com.uat-mmomentum.preprod.opengarden.rch.cm
www.ipfzone.com.uat-esbriethub.preprod.opengarden.rch.cm
br.uat-rfm.prod.opengarden.rch.cm
www.emactiva.cl.uat-msd.preprod.opengarden.rch.cm
www.mmomentum.net.uat-mmomentum.prod.opengarden.rch.cm
mx.uat-rfm.prod.opengarden.rch.cm
author.psp.dev.opengarden.rch.cm
www.melanoominfo.nl.uat-mmomentum.prod.opengarden.rch.cm
publish.uat-pdmahub.prod.opengarden.rch.cm
co.uat-rfm.preprod.opengarden.rch.cm
www.foundationmedicine.com.sg.fmi.preprod.opengarden.rch.cm
www.foundationmedicineasia.com.uat-fmi.preprod.opengarden.rch.cm
rheumatology.publish.uat-pdmahub.preprod.opengarden.rch.cm
www.mmomentum.br.uat-mmomentum.preprod.opengarden.rch.cm
fr.hcpnext.preprod.opengarden.rch.cm
www.dialogoroche.com.uat-dialogo.preprod.opengarden.rch.cm
www.melanoominfo.nl.uat-mmomentum.preprod.opengarden.rch.cm
ch.hcpnext.preprod.opengarden.rch.cm
at.hcpnext.preprod.opengarden.rch.cm
www.msdiseaseactivity.com.uat-msd.preprod.opengarden.rch.cm
publish.uat-pdmahub.preprod.opengarden.rch.cm
cl.uat-rfm.preprod.opengarden.rch.cm
www.dialogoroche.com.ec.uat-dialogo.preprod.opengarden.rch.cm
pl.hcpnext.preprod.opengarden.rch.cm
nl.hcpnext.preprod.opengarden.rch.cm
rheumatology.publish.uat-pdmahub.prod.opengarden.rch.cm
ar.uat-rfm.prod.opengarden.rch.cm
pt.hcpnext.preprod.opengarden.rch.cm
www.ipfzone.com.uat-esbriethub.prod.opengarden.rch.cm
ar.uat-rfm.preprod.opengarden.rch.cm
www.mmomentum.br.uat-mmomentum.prod.opengarden.rch.cm
co.uat-rfm.prod.opengarden.rch.cm
www.dialogoroche.com.uat-dialogo.prod.opengarden.rch.cm
www.licht-an-fuer-ms.de.uat-msd.preprod.opengarden.rch.cm
www.rocheinteract.com.au.uat-rocheinteract-pp.rch.cm
www.mmomentumexample.com.uat-mmomentum.prod.opengarden.rch.cm
www.foundationmedicineasia.com.uat-fmi.prod.opengarden.rch.cm
www.fightipf.de.uat-mmomentum.preprod.opengarden.rch.cm
uk2.hcpnext.preprod.opengarden.rch.cm
cl.uat-rfm.prod.opengarden.rch.cm
mx.uat-rfm.preprod.opengarden.rch.cm
es.hcpnext.preprod.opengarden.rch.cm
br.uat-rfm.preprod.opengarden.rch.cm
gazyva.com.au
www.gazyva.com.au
www.dialogorochecac.com
www.fightipf.de
fightipf.de
live.digitalfactory.roche.com
rheumatology.medically.roche.com
oncology.medically.roche.com
mystudies.roche.com
respiratory.medically.roche.com
medically.roche.com
careers.roche.com

Other certificates including the domain name roche.com

(limited to 100 certificates)
involve.roche.com
www.hpv16and18.com
easydrive-uat.roche.com
advancedanalytics.roche.com
main.rhelp.roche.com
sni.cloudflaressl.com
magentocloud28.map.fastly.net
rbalvprexd0.bas.roche.com
cieas01.roche.com
harmonytest.de
sequencing.roche.com
esource.roche.com
e-medical.roche.com
esource.roche.com
coaguchek.com
rsmsourcing.roche.com
deimos.roche.com
cert2.roche.com
sni.cloudflaressl.com
cdn.appstore.gene.com
shpivee1-01.roche.com
eews-dev.roche.com
myaccess.roche.com
ican.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
cert3.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
mrdivee2-02.netlab.roche.com
rodip.roche.com
nsrdcongresses.roche.com
rbavxsentry11.bas.roche.com
mobilesolution-dev.roche.com
wamua.roche.com
dialog-62-test.roche.com
rocheggcpac.roche.com
san-003.ceros.com
video.hive.roche.com
sni.cloudflaressl.com
rssg.roche.com
mftemeaext.roche.com
anadisuat01.sc1.roche.com
careers.roche.com
flow.roche.com
cert3.roche.com
sni.cloudflaressl.com
misp.roche.com
cert2.roche.com
careers.roche.com
api.rockwizz.roche.com
bitbucket-nala-qa.roche.com
careers.roche.com
wamdev.roche.com
sonar-dev-old.roche.com
diauxhub.roche.com
careers.roche.com
globalfms.roche.com
san-003.ceros.com
sc1lvflexq2.sc1.roche.com
easydrive-dev.roche.com
send-tst.roche.com
indigrow.roche.com
careers.roche.com
careers.roche.com
env5-remotedashboard.roche.com
mrd25.me
cert2.roche.com
*.esrv-hub-uat.roche.com
sb.eu.phcaa.science.roche.com
san-003.ceros.com
extaccess-nala.roche.com
magentocloud28.map.fastly.net
go.roche.com
magentocloud32.map.fastly.net
sni.cloudflaressl.com
ssl882748.cloudflaressl.com
sni.cloudflaressl.com
esrv-marketplace-dev.roche.com
careers.roche.com
imcore.roche.com
booster.roche.com
sni.cloudflaressl.com
akamai-san195.exacttarget.com
raumbuch.roche.com
pitas01.roche.com
sni.cloudflaressl.com
c1edb.roche.com
magentocloud45.map.fastly.net
shpivee1-01.roche.com
hpv16and18.com
hivemind.roche.com
searchsquad.roche.com
cferondanetrochedia-qa.roche.com
esign.roche.com
diaitsupport.roche.com
sni.cloudflaressl.com
magentocloud32.map.fastly.net
r32web.sap.roche.com
apis.cwp.roche.com

Certificate

The complete raw certificate details for careers.roche.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIISLzCCERegAwIBAgIQbIZRoiXHIVP+KfQSV5M6UjANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU
R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTcxMTE0MDAwMDAwWhcNMTgxMjIwMjM1
OTU5WjBxMQswCQYDVQQGEwJDSDEUMBIGA1UECAwLQmFzZWwtU3RhZHQxDjAMBgNV
BAcMBUJhc2VsMSAwHgYDVQQKDBdGLiBIb2ZmbWFubi1MYSBSb2NoZSBBRzEaMBgG
A1UEAwwRY2FyZWVycy5yb2NoZS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQCwrDrgCmcqddUWAS2D8rNFsIjefSbezVh/jHrR00eANLQI8vDhV2oV
2/G/OLoBU4fpX1nCdA3ohhio52NJYtNzwNrD2MEQExsMcgZGZ4JnPFmT/SzTmt0q
kwg75gAe92PmRd54VjYdvYGEPRZV91KK359w6nf0VRZh7iji18y1E+ZXlMPnJEUP
o40O1Qj5ps1jwS5gtDMlEnfK8fNmg/VZeKa8yH1C0oDpLuiwn+MAK75WdVMbdilU
DU20bjLgxkepEK6fYUKmzUo+fLZI4IBerG4bY4Mh1WWvJzi1xvTYxe+YknU1i5WI
xEhCDn6XKor/YxrImMo1mr3fCX9qAe/5AgMBAAGjgg7uMIIO6jCCDVAGA1UdEQSC
DUcwgg1DghV3d3cucm9jaGUtb25jb2xvZ3kuY2iCDHd3dy5yb2NoZS5hdIIXd3d3
LmRpYWxvZ29yb2NoZS5jb20ubXiCDHd3dy5yb2NoZS5pZYIPd3d3LnJvY2hlbWVk
LmdyghR3d3cucm9jaGV0dWRhc3Rhci5odYIXd3d3LmRpYWxvZ29yb2NoZS5jb20u
YXKCGmZvdW5kYXRpb25tZWRpY2luZWFzaWEuY29tgh53d3cuZm91bmRhdGlvbm1l
ZGljaW5lYXNpYS5jb22CF3d3dy5kaWFsb2dvcm9jaGUuY29tLnV5ghB3d3cucm9j
aGVwbHVzLmVzgg93d3cucm9jaGUuY28udWuCFHJvY2hlaW50ZXJhY3QuY29tLmF1
ghh3d3cucm9jaGVpbnRlcmFjdC5jb20uYXWCF3d3dy5saWNodC1hbi1mdWVyLW1z
LmRlgh13d3cuZm91bmRhdGlvbm1lZGljaW5lLmNvbS5zZ4IZZm91bmRhdGlvbm1l
ZGljaW5lLmNvbS5zZ4Iad3d3LmxhdGFtcm9jaGVwcmVzc2RheS5jb22CD3d3dy5p
cGZ6b25lLmNvbYILaXBmem9uZS5jb22CFHd3dy5kaWFsb2dvcm9jaGUuY29tghBk
aWFsb2dvcm9jaGUuY29tghF3d3cuaW5mb21lZGljcy5pdIIbd3d3Lm1zZGlzZWFz
ZWFjdGl2aXR5LmNvLnVrghd3d3cuZGlhbG9nb3JvY2hlLmNvbS5icoITb25jb2xv
Z3kubWVkaWNhbC5seYIWcmVzcGlyYXRvcnkubWVkaWNhbC5seYIOd3d3Lm1lZGlj
YWwubHmCCm1lZGljYWwubHmCF3JoZXVtYXRvbG9neS5tZWRpY2FsLmx5ghN3d3cu
bWVsYW5vb21pbmZvLm5sggtlbWFjdGl2YS5jbIIPd3d3LmVtYWN0aXZhLmNsghd3
d3cuZGlhbG9nb3JvY2hlLmNvbS52ZYIXY29udGVudC5iaW9jbGluaWNpZW4uZnKC
F3d3dy5kaWFsb2dvcm9jaGUuY29tLmNvghd3d3cuZGlhbG9nb3JvY2hlLmNvbS5w
ZYIMd3d3LnJvY2hlLmZpghVtc2Rpc2Vhc2VhY3Rpdml0eS5jb22CGXd3dy5tc2Rp
c2Vhc2VhY3Rpdml0eS5jb22CEnd3dy5yb2NoZW9ubGluZS5zZYI9d3d3Lm1zZGlz
ZWFzZWFjdGl2aXR5LmNvLnVrLnVhdC1tc2QucHJlcHJvZC5vcGVuZ2FyZGVuLnJj
aC5jbYI/d3d3LmZvdW5kYXRpb25tZWRpY2luZS5jb20uc2cudWF0LWZtaS5wcmVw
cm9kLm9wZW5nYXJkZW4ucmNoLmNtgkB3d3cubW1vbWVudHVtZXhhbXBsZS5jb20u
dWF0LW1tb21lbnR1bS5wcmVwcm9kLm9wZW5nYXJkZW4ucmNoLmNtgjh3d3cuaXBm
em9uZS5jb20udWF0LWVzYnJpZXRodWIucHJlcHJvZC5vcGVuZ2FyZGVuLnJjaC5j
bYIhYnIudWF0LXJmbS5wcm9kLm9wZW5nYXJkZW4ucmNoLmNtgjF3d3cuZW1hY3Rp
dmEuY2wudWF0LW1zZC5wcmVwcm9kLm9wZW5nYXJkZW4ucmNoLmNtgjZ3d3cubW1v
bWVudHVtLm5ldC51YXQtbW1vbWVudHVtLnByb2Qub3BlbmdhcmRlbi5yY2guY22C
IW14LnVhdC1yZm0ucHJvZC5vcGVuZ2FyZGVuLnJjaC5jbYIgYXV0aG9yLnBzcC5k
ZXYub3BlbmdhcmRlbi5yY2guY22COHd3dy5tZWxhbm9vbWluZm8ubmwudWF0LW1t
b21lbnR1bS5wcm9kLm9wZW5nYXJkZW4ucmNoLmNtgipwdWJsaXNoLnVhdC1wZG1h
aHViLnByb2Qub3BlbmdhcmRlbi5yY2guY22CJGNvLnVhdC1yZm0ucHJlcHJvZC5v
cGVuZ2FyZGVuLnJjaC5jbYI7d3d3LmZvdW5kYXRpb25tZWRpY2luZS5jb20uc2cu
Zm1pLnByZXByb2Qub3BlbmdhcmRlbi5yY2guY22CQHd3dy5mb3VuZGF0aW9ubWVk
aWNpbmVhc2lhLmNvbS51YXQtZm1pLnByZXByb2Qub3BlbmdhcmRlbi5yY2guY22C
OnJoZXVtYXRvbG9neS5wdWJsaXNoLnVhdC1wZG1haHViLnByZXByb2Qub3Blbmdh
cmRlbi5yY2guY22COHd3dy5tbW9tZW50dW0uYnIudWF0LW1tb21lbnR1bS5wcmVw
cm9kLm9wZW5nYXJkZW4ucmNoLmNtgiRmci5oY3BuZXh0LnByZXByb2Qub3Blbmdh
cmRlbi5yY2guY22COnd3dy5kaWFsb2dvcm9jaGUuY29tLnVhdC1kaWFsb2dvLnBy
ZXByb2Qub3BlbmdhcmRlbi5yY2guY22CO3d3dy5tZWxhbm9vbWluZm8ubmwudWF0
LW1tb21lbnR1bS5wcmVwcm9kLm9wZW5nYXJkZW4ucmNoLmNtgiRjaC5oY3BuZXh0
LnByZXByb2Qub3BlbmdhcmRlbi5yY2guY22CJGF0LmhjcG5leHQucHJlcHJvZC5v
cGVuZ2FyZGVuLnJjaC5jbYI7d3d3Lm1zZGlzZWFzZWFjdGl2aXR5LmNvbS51YXQt
bXNkLnByZXByb2Qub3BlbmdhcmRlbi5yY2guY22CLXB1Ymxpc2gudWF0LXBkbWFo
dWIucHJlcHJvZC5vcGVuZ2FyZGVuLnJjaC5jbYIkY2wudWF0LXJmbS5wcmVwcm9k
Lm9wZW5nYXJkZW4ucmNoLmNtgj13d3cuZGlhbG9nb3JvY2hlLmNvbS5lYy51YXQt
ZGlhbG9nby5wcmVwcm9kLm9wZW5nYXJkZW4ucmNoLmNtgiRwbC5oY3BuZXh0LnBy
ZXByb2Qub3BlbmdhcmRlbi5yY2guY22CJG5sLmhjcG5leHQucHJlcHJvZC5vcGVu
Z2FyZGVuLnJjaC5jbYI3cmhldW1hdG9sb2d5LnB1Ymxpc2gudWF0LXBkbWFodWIu
cHJvZC5vcGVuZ2FyZGVuLnJjaC5jbYIhYXIudWF0LXJmbS5wcm9kLm9wZW5nYXJk
ZW4ucmNoLmNtgiRwdC5oY3BuZXh0LnByZXByb2Qub3BlbmdhcmRlbi5yY2guY22C
NXd3dy5pcGZ6b25lLmNvbS51YXQtZXNicmlldGh1Yi5wcm9kLm9wZW5nYXJkZW4u
cmNoLmNtgiRhci51YXQtcmZtLnByZXByb2Qub3BlbmdhcmRlbi5yY2guY22CNXd3
dy5tbW9tZW50dW0uYnIudWF0LW1tb21lbnR1bS5wcm9kLm9wZW5nYXJkZW4ucmNo
LmNtgiFjby51YXQtcmZtLnByb2Qub3BlbmdhcmRlbi5yY2guY22CN3d3dy5kaWFs
b2dvcm9jaGUuY29tLnVhdC1kaWFsb2dvLnByb2Qub3BlbmdhcmRlbi5yY2guY22C
OXd3dy5saWNodC1hbi1mdWVyLW1zLmRlLnVhdC1tc2QucHJlcHJvZC5vcGVuZ2Fy
ZGVuLnJjaC5jbYI0d3d3LnJvY2hlaW50ZXJhY3QuY29tLmF1LnVhdC1yb2NoZWlu
dGVyYWN0LXBwLnJjaC5jbYI9d3d3Lm1tb21lbnR1bWV4YW1wbGUuY29tLnVhdC1t
bW9tZW50dW0ucHJvZC5vcGVuZ2FyZGVuLnJjaC5jbYI9d3d3LmZvdW5kYXRpb25t
ZWRpY2luZWFzaWEuY29tLnVhdC1mbWkucHJvZC5vcGVuZ2FyZGVuLnJjaC5jbYI3
d3d3LmZpZ2h0aXBmLmRlLnVhdC1tbW9tZW50dW0ucHJlcHJvZC5vcGVuZ2FyZGVu
LnJjaC5jbYIldWsyLmhjcG5leHQucHJlcHJvZC5vcGVuZ2FyZGVuLnJjaC5jbYIh
Y2wudWF0LXJmbS5wcm9kLm9wZW5nYXJkZW4ucmNoLmNtgiRteC51YXQtcmZtLnBy
ZXByb2Qub3BlbmdhcmRlbi5yY2guY22CJGVzLmhjcG5leHQucHJlcHJvZC5vcGVu
Z2FyZGVuLnJjaC5jbYIkYnIudWF0LXJmbS5wcmVwcm9kLm9wZW5nYXJkZW4ucmNo
LmNtgg1nYXp5dmEuY29tLmF1ghF3d3cuZ2F6eXZhLmNvbS5hdYIXd3d3LmRpYWxv
Z29yb2NoZWNhYy5jb22CD3d3dy5maWdodGlwZi5kZYILZmlnaHRpcGYuZGWCHWxp
dmUuZGlnaXRhbGZhY3Rvcnkucm9jaGUuY29tgiByaGV1bWF0b2xvZ3kubWVkaWNh
bGx5LnJvY2hlLmNvbYIcb25jb2xvZ3kubWVkaWNhbGx5LnJvY2hlLmNvbYITbXlz
dHVkaWVzLnJvY2hlLmNvbYIfcmVzcGlyYXRvcnkubWVkaWNhbGx5LnJvY2hlLmNv
bYITbWVkaWNhbGx5LnJvY2hlLmNvbYIRY2FyZWVycy5yb2NoZS5jb20wCQYDVR0T
BAIwADAOBgNVHQ8BAf8EBAMCBaAwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL2du
LnN5bWNiLmNvbS9nbi5jcmwwgZ0GA1UdIASBlTCBkjCBjwYGZ4EMAQICMIGEMD8G
CCsGAQUFBwIBFjNodHRwczovL3d3dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL3Jl
cG9zaXRvcnkvbGVnYWwwQQYIKwYBBQUHAgIwNQwzaHR0cHM6Ly93d3cuZ2VvdHJ1
c3QuY29tL3Jlc291cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBTSb/eW9IU/cjwwfSPahXibo3xa
fDBXBggrBgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9nbi5zeW1jZC5j
b20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9nbi5zeW1jYi5jb20vZ24uY3J0MBMGCisG
AQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAc9pt4Rq140/ye2VoZ
7lQnoaeZUgw8/ADs+hUqq/s+7UjiwNB0rVcqbGEU9y/H1OeAmUHAVpZmB3zQAPfe
lQkGpXZIrIeI2WjBDVbQebhALOlcm54s/qGqPaQIN6z4ziOcTTBeuUwUDUCJXiPN
Y0zFDGjglJ4/dkV44QHTUiy+psY9bV1YoO8na7O9Pxl8pfHSulsTZlL4B+ykETeE
mVFkPnitpa3+yKcvHnSsslRV889ApoX1V1FplV2oNo6vw0ZYTMI2B8YePZLnNwAE
yd1U1EIxlqaJWkYaWyhiH4Upf6478F1GygrvJUMngdBdbS+oTb//HEn3QvufJHHT
CdDk
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKw64ApnKnXVFgEtg/Kz
RbCI3n0m3s1Yf4x60dNHgDS0CPLw4VdqFdvxvzi6AVOH6V9ZwnQN6IYYqOdjSWLT
c8Daw9jBEBMbDHIGRmeCZzxZk/0s05rdKpMIO+YAHvdj5kXeeFY2Hb2BhD0WVfdS
it+fcOp39FUWYe4o4tfMtRPmV5TD5yRFD6ONDtUI+abNY8EuYLQzJRJ3yvHzZoP1
WXimvMh9QtKA6S7osJ/jACu+VnVTG3YpVA1NtG4y4MZHqRCun2FCps1KPny2SOCA
XqxuG2ODIdVlryc4tcb02MXvmJJ1NYuViMRIQg5+lyqK/2MayJjKNZq93wl/agHv
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 144254047045646483260942488183929780818
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Basel-Stadt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Basel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'F. Hoffmann-La Roche AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'careers.roche.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22302871443077054011050609317668178263868304514642980841680654706261925558340752507131354286577855082907452047474234873678366435590900727391858031739762995154692637806884257801489055566542914398431583494727272149003878080787437688249081107818914754477001320763567776795543258875637394329238063149063865177629942962255772471898027433270394226307661084370195152085917301049432061125805066878868670245459952423000810361404757617275442415440782077666191801808025853082292238444559217511142589487085094975113433015253274452086148957523038543466087926098939601520743942910013639312260581432727036800416987852433479822340089
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3399 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche-oncology.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochemed.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochetudastar.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicineasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicineasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheplus.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocheinteract.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheinteract.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.licht-an-fuer-ms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.latamrochepressday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipfzone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipfzone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.infomedics.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oncology.medical.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'respiratory.medical.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medical.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medical.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rheumatology.medical.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melanoominfo.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emactiva.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emactiva.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.bioclinicien.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msdiseaseactivity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheonline.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.co.uk.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.sg.uat-fmi.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentumexample.com.uat-mmomentum.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipfzone.com.uat-esbriethub.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'br.uat-rfm.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emactiva.cl.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentum.net.uat-mmomentum.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx.uat-rfm.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author.psp.dev.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melanoominfo.nl.uat-mmomentum.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publish.uat-pdmahub.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'co.uat-rfm.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.sg.fmi.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicineasia.com.uat-fmi.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rheumatology.publish.uat-pdmahub.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentum.br.uat-mmomentum.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.uat-dialogo.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melanoominfo.nl.uat-mmomentum.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ch.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'at.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.com.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publish.uat-pdmahub.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cl.uat-rfm.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.ec.uat-dialogo.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nl.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rheumatology.publish.uat-pdmahub.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.uat-rfm.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pt.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipfzone.com.uat-esbriethub.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.uat-rfm.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentum.br.uat-mmomentum.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'co.uat-rfm.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.uat-dialogo.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.licht-an-fuer-ms.de.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheinteract.com.au.uat-rocheinteract-pp.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentumexample.com.uat-mmomentum.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicineasia.com.uat-fmi.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fightipf.de.uat-mmomentum.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk2.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cl.uat-rfm.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx.uat-rfm.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'br.uat-rfm.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gazyva.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gazyva.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogorochecac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fightipf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fightipf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.digitalfactory.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rheumatology.medically.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oncology.medically.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mystudies.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'respiratory.medically.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medically.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.roche.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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