careers.roche.com

- F. Hoffmann-La Roche AG -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 38:41:f2:56:2e:9c:4d:d9:80:c4:08:56:92:45:66:e9 was issued on by GeoTrust Inc..

With 67 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

F. Hoffmann-La Roche AG

Organization: F. Hoffmann-La Roche AG
State / Province: Basel-Stadt
Locality: Basel
Country: CH

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 38:41:f2:56:2e:9c:4d:d9:80:c4:08:56:92:45:66:e9
Serial Number (int): 74779182230931383123526256487142090473
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 9d:29:e0:78:cb:f5:83:00:2b:bd:7d:64:d0:21:5d:09:3f:e6:d0:be
Fingerprint (sha256): 44:d9:f7:96:19:b5:dc:a8:e4:46:88:7d:5d:78:27:08:3b:45:71:8c:25:a3:bd:16:4c:fa:4c:75:34:9b:0a:89

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate careers.roche.com

67

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for careers.roche.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.dialogoroche.com.uy
www.fibrosisquistica.co
www.roche.fi
www.foundationmedicine.com.sg
www.dialogoroche.com.ar
www.rocheplus.es
www.infomedics.it
www.roche.at
fightipf.de
www.fightipf.de
www.roche.ie
www.licht-an-fuer-ms.de
www.dialogoroche.com.ve
www.msdiseaseactivity.co.uk
www.roche.co.uk
www.dialogoroche.com
dialogoroche.com
www.rocheinteract.com.au
www.foundationmedicineasia.com
www.melanoominfo.nl
www.dialogorochecac.com
www.dialogoroche.com.br
www.dialogoroche.com.mx
www.emactiva.cl
www.dialogoroche.com.co
www.msdiseaseactivity.com
www.roche-oncology.ch
www.rochetudastar.hu
www.latamrochepressday.com
content.bioclinicien.fr
www.rochemed.gr
www.dialogoroche.com.pe
www.rocheonline.se
www.rocheinteract.com.au.uat-rocheinteract-pp.rch.cm
pl.hcpnext.preprod.opengarden.rch.cm
www.mmomentum.br.uat-mmomentum.prod.opengarden.rch.cm
fr.hcpnext.preprod.opengarden.rch.cm
uk2.hcpnext.preprod.opengarden.rch.cm
www.foundationmedicine.com.sg.fmi.preprod.opengarden.rch.cm
www.mmomentumexample.com.uat-mmomentum.preprod.opengarden.rch.cm
www.fightipf.de.uat-mmomentum.preprod.opengarden.rch.cm
www.foundationmedicine.com.sg.uat-fmi.preprod.opengarden.rch.cm
www.foundationmedicineasia.com.uat-fmi.prod.opengarden.rch.cm
author.psp.dev.opengarden.rch.cm
www.mmomentum.net.uat-mmomentum.prod.opengarden.rch.cm
www.melanoominfo.nl.uat-mmomentum.preprod.opengarden.rch.cm
www.dialogoroche.com.ec.uat-dialogo.preprod.opengarden.rch.cm
at.hcpnext.preprod.opengarden.rch.cm
publish.uat-pdmahub.preprod.opengarden.rch.cm
www.mmomentum.br.uat-mmomentum.preprod.opengarden.rch.cm
www.emactiva.cl.uat-msd.preprod.opengarden.rch.cm
es.hcpnext.preprod.opengarden.rch.cm
www.licht-an-fuer-ms.de.uat-msd.preprod.opengarden.rch.cm
www.msdiseaseactivity.com.uat-msd.preprod.opengarden.rch.cm
www.melanoominfo.nl.uat-mmomentum.prod.opengarden.rch.cm
www.msdiseaseactivity.co.uk.uat-msd.preprod.opengarden.rch.cm
ch.hcpnext.preprod.opengarden.rch.cm
www.ipfzone.com.uat-esbriethub.preprod.opengarden.rch.cm
www.mmomentumexample.com.uat-mmomentum.prod.opengarden.rch.cm
pt.hcpnext.preprod.opengarden.rch.cm
www.dialogoroche.com.uat-dialogo.preprod.opengarden.rch.cm
nl.hcpnext.preprod.opengarden.rch.cm
www.foundationmedicineasia.com.uat-fmi.preprod.opengarden.rch.cm
www.dialogoroche.com.uat-dialogo.prod.opengarden.rch.cm
live.digitalfactory.roche.com
mystudies.roche.com
careers.roche.com

Other certificates including the domain name roche.com

(limited to 100 certificates)
involve.roche.com
www.hpv16and18.com
easydrive-uat.roche.com
advancedanalytics.roche.com
main.rhelp.roche.com
api.fido.tst.pdaa.science.roche.com
sni.cloudflaressl.com
magentocloud28.map.fastly.net
rbalvprexd0.bas.roche.com
cieas01.roche.com
harmonytest.de
sequencing.roche.com
esource.roche.com
e-medical.roche.com
esource.roche.com
maps-uat.roche.com
coaguchek.com
rsmsourcing.roche.com
deimos.roche.com
cert2.roche.com
sni.cloudflaressl.com
cdn.appstore.gene.com
shpivee1-01.roche.com
eews-dev.roche.com
myaccess.roche.com
ican.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
albecsinternaltest.aws.cloud.roche.com
cert3.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
mrdivee2-02.netlab.roche.com
rodip.roche.com
nsrdcongresses.roche.com
rbavxsentry11.bas.roche.com
mobilesolution-dev.roche.com
wamua.roche.com
dialog-62-test.roche.com
identity-hu.login.digitalidentity.roche.com
rocheggcpac.roche.com
san-003.ceros.com
video.hive.roche.com
sni.cloudflaressl.com
rssg.roche.com
usdiagnostics.roche.com
mftemeaext.roche.com
anadisuat01.sc1.roche.com
careers.roche.com
flow.roche.com
cert3.roche.com
sni.cloudflaressl.com
misp.roche.com
cert2.roche.com
careers.roche.com
api.rockwizz.roche.com
bitbucket-nala-qa.roche.com
careers.roche.com
wamdev.roche.com
sonar-dev-old.roche.com
diauxhub.roche.com
careers.roche.com
globalfms.roche.com
rexis-dialog-dev.roche.com
san-003.ceros.com
sc1lvflexq2.sc1.roche.com
easydrive-dev.roche.com
send-tst.roche.com
indigrow.roche.com
careers.roche.com
careers.roche.com
env5-remotedashboard.roche.com
mrd25.me
cert2.roche.com
*.esrv-hub-uat.roche.com
sb.eu.phcaa.science.roche.com
san-003.ceros.com
extaccess-nala.roche.com
magentocloud28.map.fastly.net
go.roche.com
magentocloud32.map.fastly.net
sni.cloudflaressl.com
status.repository.roche.com
itot.roche.com
ssl882748.cloudflaressl.com
sni.cloudflaressl.com
esrv-marketplace-dev.roche.com
careers.roche.com
gispeopledev.roche.com
imcore.roche.com
booster.roche.com
sni.cloudflaressl.com
akamai-san195.exacttarget.com
raumbuch.roche.com
pitas01.roche.com
sni.cloudflaressl.com
c1edb.roche.com
magentocloud45.map.fastly.net
shpivee1-01.roche.com
hpv16and18.com

Certificate

The complete raw certificate details for careers.roche.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxBDeCOCx1yN/1sjM6/k
meqLKweLCY4LzjqV/UsEuLy/92sAwt7hEzX6jB5uYHk3KfM/1f/4XHfWT5OGNaxj
C3r+hITEUZXxSXSeK3E846TWOA41VbwJNYg9kypyy09Cs6wDRwy3iCXpRXMgvDcK
mninUZEesKzwC3YUYa2F9UIgzOZ1R6ncUcjXrFcYh+dHFP3ga5ECtkh3WoVIOeHf
ajDpqOYTCWwY3Pi2kWEkYWKxXoq9haSlumk7W2bPrHXXNUwY7FqnQiVBt6zvo8nb
Qcn2nTTSr7m4UPqzjkNZWcjsw+ZrHb9O9Qt6ro+ILnauqwyllAhpKw9RDcno6Cy7
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 74779182230931383123526256487142090473
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Basel-Stadt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Basel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'F. Hoffmann-La Roche AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'careers.roche.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23109629665145260368835867818465495447767492007336661127305884295495329061812327360008480892903221016245290026040088666714893520735586663418585658855274238336727120207105732566274827801715700138691458874424124963659925881522676250475922710614586782323922338897263644142190151293694142385685387170984740318300100060860571552443514151038425653613506650267915420356748851232259776614799118300079713769105029100794227410221830969352734781498566480329061322774293933250582600768951135190180119025198123836594352578112901255581655272870548801476515276416725097449697510034868799734236705623951853012954796521566803092880343
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2450 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fibrosisquistica.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheplus.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.infomedics.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fightipf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fightipf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.licht-an-fuer-ms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheinteract.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicineasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melanoominfo.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogorochecac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emactiva.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche-oncology.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochetudastar.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.latamrochepressday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.bioclinicien.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochemed.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheonline.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheinteract.com.au.uat-rocheinteract-pp.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentum.br.uat-mmomentum.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk2.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.sg.fmi.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentumexample.com.uat-mmomentum.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fightipf.de.uat-mmomentum.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.sg.uat-fmi.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicineasia.com.uat-fmi.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author.psp.dev.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentum.net.uat-mmomentum.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melanoominfo.nl.uat-mmomentum.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.ec.uat-dialogo.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'at.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publish.uat-pdmahub.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentum.br.uat-mmomentum.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emactiva.cl.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.licht-an-fuer-ms.de.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.com.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melanoominfo.nl.uat-mmomentum.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.co.uk.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ch.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipfzone.com.uat-esbriethub.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentumexample.com.uat-mmomentum.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pt.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.uat-dialogo.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nl.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicineasia.com.uat-fmi.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.uat-dialogo.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.digitalfactory.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mystudies.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.roche.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015dc229de4d0000040300473045022029be9ca8b70d21d8163ee5a090639553694001aeaf27b4565bbd5bc9043e1d7f022100c591bef77c19d7bebe3c5ef447b1bdcb8429fda2433f615c5638df7b3b776ce0007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015dc229de890000040300483046022100c97fac5c720deee084acadf323d8227f497282dce31dbfdf8b44efb267634cdd022100921e21de2b1ceb58faca8fb13e3e9a44293ad21c9e29fdc372c6d22880b65866
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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