gazyva.com.au

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e2:9b:8f:8b:0d:03:fc:a6:07:96:8c:1f:1d:71:d2:8e:8a was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gazyva.com.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e2:9b:8f:8b:0d:03:fc:a6:07:96:8c:1f:1d:71:d2:8e:8a
Serial Number (int): 338447448377496400031901773426329159634570
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 70:bb:51:a4:18:df:85:31:9f:80:41:f2:eb:99:a5:3f:d4:3a:ac:67
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 12:5b:a8:59:8f:c0:00:5e:b3:4c:c2:ce:66:fb:34:c4:82:93:21:81
Fingerprint (sha256): 32:02:8c:9c:d0:bb:18:af:32:8c:91:6a:ce:98:08:15:a6:af:f6:f7:66:71:65:f4:90:b3:7a:85:0e:c1:75:5d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gazyva.com.au

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gazyva.com.au

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apoyoapacientes.com.uy
atulado.com.ec
bitacoraparaenfermeras.com.pe
bitacoraparaenfermeras.pe
dialogoroche.cl
dialogoroche.com
dialogoroche.com.ar
dialogoroche.com.bo
dialogoroche.com.br
dialogoroche.com.co
dialogoroche.com.ec
dialogoroche.com.mx
dialogoroche.com.pe
dialogoroche.com.uy
dialogorochecac.com
emactiva.cl
ensemblecontrefpi.be
ensemblecontrefpi.fr
esbriet.com.au
esbriet.eu
fightipf.bg
fightipf.ca
fightipf.com
fightipf.de
fightipf.gr
fightipf.it
fightipf.si
fondationroche.org
foundationmedicine-cac.com
foundationmedicine-la.com
foundationmedicine.be
foundationmedicine.bg
foundationmedicine.cl
foundationmedicine.co
foundationmedicine.com.ar
foundationmedicine.com.au
foundationmedicine.com.br
foundationmedicine.com.uy
foundationmedicine.cz
foundationmedicine.de
foundationmedicine.dk
foundationmedicine.ec
foundationmedicine.fi
foundationmedicine.it
foundationmedicine.lv
foundationmedicine.pl
foundationmedicine.ro
foundationmedicineasia.com
gazyva.com.au
ieepo.com
ipfzone.com
latamrochepressday.com
luchaporlafpi.es
medichanzo.com
medichanzo.net
medichanzo.org
mircera.com.au
nimblegen.com
ocrelizumabinfo.global
pulmozyme.global
roche-cac.com
roche-infohub.co.za
roche-online.ch
roche.at
roche.ba
roche.bg
roche.by
roche.co.id
roche.co.uk
roche.co.za
roche.com.mx
roche.com.pe
roche.com.uy
roche.ee
roche.es
roche.ge
roche.ie
roche.it
roche.lt
roche.mk
roche.no
roche.ro
roche.si
roche.ua
rocheamericalatina.com
rochefoundationmedicine.com
rocheinteract.com.au
rochemd.bg
rochemed.gr
rocheonline.ch
rochepharmaprocurement.com
rocheplus.es
rochepro.be
tarceva.global
tiempodevivir.com.co
vechtentegenipf.be
walczzipf.pl
xeloda.com.au
zelborafcotellic.com.au

Other certificates including the domain name gazyva.com.au

(limited to 100 certificates)
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
sni.cloudflaressl.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
gazyva.com.au
gazyva.com.au
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
careers.roche.com

Certificate

The complete raw certificate details for gazyva.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 338447448377496400031901773426329159634570
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-13 08:06:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-11 08:06:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gazyva.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 761296280739595664397591778941116317952275160555531292051442579576803653968563277046097496801656327477381459693268234484710842065375760652273039217336843224511544284192697995481445449090864605311496393648075534078386723075869732744967382873847683149939381943037592398313776073810136318339440548285802647671420522866086708676548194380891904956159203140806470375965700565353288848518627242418325445756995607644194717608116597605017189375872433971158539830425124066362976837470734793458993918587846753358801614665841305750885790328227672948450091100313907338050437450388874533918480965840422218723894653296717869850870362261208294230859834830862822632766070843136293363807065956288557167518816369762048763353063087667352809525134076999192623488610602775608619967108619599917450032881678170339926468870959668321448183365432752199741932112213555411729226298705689308874518417173961395692278394513802116217079493193441103663216416762974700101814287182087345388089754997684956009511700410086538174888284842112812274306731797198859541506224608070125097136871236101304280228442630332289070508086179211293441641718854883142329449340882455019640963104403383125945083575285356649226880814739662729238862081744392165390082192971179594893523002527
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							70bb51a418df85319f8041f2eb99a53fd43aac67
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1782 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apoyoapacientes.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atulado.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitacoraparaenfermeras.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitacoraparaenfermeras.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com.bo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogorochecac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emactiva.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ensemblecontrefpi.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ensemblecontrefpi.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esbriet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esbriet.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fightipf.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fightipf.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fightipf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fightipf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fightipf.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fightipf.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fightipf.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fondationroche.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine-cac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine-la.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicineasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gazyva.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ieepo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipfzone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latamrochepressday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luchaporlafpi.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medichanzo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medichanzo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medichanzo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mircera.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nimblegen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocrelizumabinfo.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulmozyme.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-cac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-infohub.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-online.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.by'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ge'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocheamericalatina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochefoundationmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocheinteract.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochemd.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochemed.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocheonline.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochepharmaprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocheplus.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochepro.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tarceva.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiempodevivir.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vechtentegenipf.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walczzipf.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xeloda.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zelborafcotellic.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001670c522c7e0000040300483046022100bd72d249fd9679e971d4dd605929c5de1f2cc7b361eb6395ef5b2924e3fbf285022100ee04cc1c8ca3d37ba8b9c58b3e6867a247a3dcecce831a8bc1890bf3d97b19de007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001670c522ca0000004030047304502206149d97af52f088dea9c1fd73aaa74b9cbf9bedc2f20c8fc6c53432efcff8a26022100b1fca131f99d61a5a438820737d793d73ca69a40f0b59da201156a5404c26ca6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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