careers.roche.com

- F. Hoffmann-La Roche AG -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 71:85:33:16:f4:54:55:7c:be:19:2d:59:bd:fc:78:28 was issued on by GeoTrust Inc..

With 42 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

F. Hoffmann-La Roche AG

Organization: F. Hoffmann-La Roche AG
State / Province: Basel-Stadt
Locality: Basel
Country: CH

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 71:85:33:16:f4:54:55:7c:be:19:2d:59:bd:fc:78:28
Serial Number (int): 150894375227406283129232966475684018216
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 57:00:94:ff:33:8b:92:41:df:00:d5:f2:e2:c3:7a:93:d6:0b:8e:5b
Fingerprint (sha256): 35:5a:07:97:81:5a:70:b6:1a:c7:68:73:62:23:59:f0:b3:07:46:41:d5:46:bc:13:c1:71:22:5d:a0:9f:96:d2

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate careers.roche.com

42

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for careers.roche.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.rochemed.gr
content.bioclinicien.fr
www.foundationmedicine.com.sg
www.dialogoroche.com.mx
www.dialogoroche.com
www.licht-an-fuer-ms.de
www.fibrosisquistica.co
www.dialogoroche.com.ve
www.infomedics.it
www.dialogoroche.com.br
www.dialogoroche.com.uat-dialogo.preprod.opengarden.rch.cm
www.rocheonline.se
www.dialogoroche.com.uat-dialogo.prod.opengarden.rch.cm
www.cotelliczelboraf.nl.uat-mmomentum.preprod.opengarden.rch.cm
www.dialogoroche.com.pe
www.dialogoroche.com.ar
www.foundationmedicine.com.sg.fmi.preprod.opengarden.rch.cm
www.licht-an-fuer-ms.de.msd.prod.opengarden.rch.cm
mmomentum-mappings-www.mmomentum.br.uat-mmomentum.preprod.opengarden.rch.cm
www.dialogorochecac.com
www.msdiseaseactivity.co.uk
www.latamrochepressday.com
www.dialogoroche.com.uy
www.mmomentum.net.uat-mmomentum.preprod.opengarden.rch.cm
www.mmomentum.net.uat-mmomentum.prod.opengarden.rch.cm
mystudies.roche.com
www.mmomentumexample.com.uat-mmomentum.prod.opengarden.rch.cm
www.roche.ie
www.roche.co.uk
www.dialogoroche.com.co
www.msdiseaseactivity.co.uk.uat-msd.preprod.opengarden.rch.cm
www.licht-an-fuer-ms.de.uat-msd.preprod.opengarden.rch.cm
www.mmomentum.net
www.roche-oncology.ch
www.mmomentumexample.com.uat-mmomentum.preprod.opengarden.rch.cm
www.msdiseaseactivity.com.uat-msd.preprod.opengarden.rch.cm
www.foundationmedicine.com.sg.uat-fmi.preprod.opengarden.rch.cm
www.msdiseaseactivity.com
www.rocheplus.es
www.rochetudastar.hu
live.digitalfactory.roche.com
careers.roche.com

Other certificates including the domain name roche.com

(limited to 100 certificates)
involve.roche.com
www.hpv16and18.com
easydrive-uat.roche.com
advancedanalytics.roche.com
main.rhelp.roche.com
api.fido.tst.pdaa.science.roche.com
sni.cloudflaressl.com
magentocloud28.map.fastly.net
rbalvprexd0.bas.roche.com
cieas01.roche.com
harmonytest.de
sequencing.roche.com
esource.roche.com
e-medical.roche.com
esource.roche.com
maps-uat.roche.com
coaguchek.com
rsmsourcing.roche.com
deimos.roche.com
cert2.roche.com
sni.cloudflaressl.com
cdn.appstore.gene.com
shpivee1-01.roche.com
eews-dev.roche.com
myaccess.roche.com
ican.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
albecsinternaltest.aws.cloud.roche.com
cert3.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
mrdivee2-02.netlab.roche.com
rodip.roche.com
nsrdcongresses.roche.com
rbavxsentry11.bas.roche.com
mobilesolution-dev.roche.com
wamua.roche.com
dialog-62-test.roche.com
identity-hu.login.digitalidentity.roche.com
rocheggcpac.roche.com
san-003.ceros.com
video.hive.roche.com
sni.cloudflaressl.com
rssg.roche.com
usdiagnostics.roche.com
mftemeaext.roche.com
anadisuat01.sc1.roche.com
careers.roche.com
flow.roche.com
cert3.roche.com
sni.cloudflaressl.com
misp.roche.com
cert2.roche.com
careers.roche.com
api.rockwizz.roche.com
bitbucket-nala-qa.roche.com
careers.roche.com
wamdev.roche.com
sonar-dev-old.roche.com
diauxhub.roche.com
careers.roche.com
globalfms.roche.com
rexis-dialog-dev.roche.com
san-003.ceros.com
sc1lvflexq2.sc1.roche.com
easydrive-dev.roche.com
send-tst.roche.com
indigrow.roche.com
careers.roche.com
careers.roche.com
env5-remotedashboard.roche.com
mrd25.me
cert2.roche.com
*.esrv-hub-uat.roche.com
sb.eu.phcaa.science.roche.com
san-003.ceros.com
extaccess-nala.roche.com
magentocloud28.map.fastly.net
go.roche.com
magentocloud32.map.fastly.net
sni.cloudflaressl.com
status.repository.roche.com
itot.roche.com
ssl882748.cloudflaressl.com
sni.cloudflaressl.com
esrv-marketplace-dev.roche.com
careers.roche.com
gispeopledev.roche.com
imcore.roche.com
booster.roche.com
sni.cloudflaressl.com
akamai-san195.exacttarget.com
raumbuch.roche.com
pitas01.roche.com
sni.cloudflaressl.com
c1edb.roche.com
magentocloud45.map.fastly.net
shpivee1-01.roche.com
hpv16and18.com

Certificate

The complete raw certificate details for careers.roche.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt55RiD+SUy+fF9Yb5uHY
GsjVoENy0TzoUwPvj/B2JMKL7M/KXYh5xHKkb7dQGmJWHz6IZIFTm47qX5jy4Yzo
noct8J0JJW00iOvoOONoWjM6seNUHfFxxj1kaOhIZb5zM0sBJ55D4LyBo4fNU554
3YquBWWMXlz+a1HyqytQeg71ZoC2EAyBA8VGJONo4RpVcXDbCCEd+8exv8E3iErJ
sBS+EGXCVRMD6Nzu3ljn2dYZQsd7U+o6541atfFXsh8t7YoqC+ObkcRUzapHrn3O
QExdqgi9Tely1iMnIJUNXigR7849NzXYwzGcFE1UE1yVaTmdLoB4v9sYfG62rU12
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 150894375227406283129232966475684018216
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Basel-Stadt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Basel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'F. Hoffmann-La Roche AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'careers.roche.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23179679563557454376645409170721428281521414401260387017305827947950127071012630358124531877806465146134153568445813194530460519827836694457462463106609567726575056237616809104349249947762382384854644483215355405498665472452006643026761646354990716773278881769934433095201876242851694551211123931768077161200167893984382882059864265358575840117088258904973767152634680989834442191881677267244036635249423939004850424726329849419946846587256019900586879403677550775550432117481390866213301258293116282530192230849190892924850143623205939510663672627899351212629219156885938314822614726691786773261376542932857367918163
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1520 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochemed.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.bioclinicien.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.licht-an-fuer-ms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fibrosisquistica.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.infomedics.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.uat-dialogo.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheonline.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.uat-dialogo.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cotelliczelboraf.nl.uat-mmomentum.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.sg.fmi.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.licht-an-fuer-ms.de.msd.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmomentum-mappings-www.mmomentum.br.uat-mmomentum.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogorochecac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.latamrochepressday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentum.net.uat-mmomentum.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentum.net.uat-mmomentum.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mystudies.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentumexample.com.uat-mmomentum.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.co.uk.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.licht-an-fuer-ms.de.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche-oncology.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentumexample.com.uat-mmomentum.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.com.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.sg.uat-fmi.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheplus.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochetudastar.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.digitalfactory.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.roche.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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