gazyva.com.au

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9c:95:46:8d:ec:16:1e:ea:8f:8b:90:47:b3:e5:36:d0:4d was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gazyva.com.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9c:95:46:8d:ec:16:1e:ea:8f:8b:90:47:b3:e5:36:d0:4d
Serial Number (int): 314619328345623636657079071143547968606285
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 22:b0:7b:da:d3:ae:87:2f:e2:82:d9:02:40:e7:b9:30:80:1f:c8:6b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 04:a8:0d:61:83:7f:c7:9c:99:2b:18:28:3e:b7:42:5d:3a:66:97:f5
Fingerprint (sha256): 51:75:22:27:d1:fd:1a:0a:d4:ff:8d:15:6c:d4:1c:68:4a:41:7e:b3:67:99:2e:8b:2e:17:0d:c5:23:03:5b:2e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gazyva.com.au

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gazyva.com.au

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apoyoapacientes.com.uy
atulado.com.ec
bitacoraparaenfermeras.com.pe
bitacoraparaenfermeras.pe
dialogoroche.cl
dialogoroche.com
dialogoroche.com.ar
dialogoroche.com.bo
dialogoroche.com.br
dialogoroche.com.co
dialogoroche.com.ec
dialogoroche.com.mx
dialogoroche.com.pe
dialogoroche.com.uy
dialogorochecac.com
emactiva.cl
ensemblecontrefpi.be
ensemblecontrefpi.fr
esbriet.com.au
esbriet.eu
fightipf.bg
fightipf.ca
fightipf.com
fightipf.de
fightipf.gr
fightipf.it
fightipf.si
fondationroche.org
foundationmedicine-cac.com
foundationmedicine-la.com
foundationmedicine.be
foundationmedicine.bg
foundationmedicine.cl
foundationmedicine.co
foundationmedicine.com.ar
foundationmedicine.com.au
foundationmedicine.com.br
foundationmedicine.com.uy
foundationmedicine.cz
foundationmedicine.de
foundationmedicine.dk
foundationmedicine.ec
foundationmedicine.fi
foundationmedicine.it
foundationmedicine.lv
foundationmedicine.pl
foundationmedicine.ro
foundationmedicineasia.com
gazyva.com.au
ieepo.com
ipfzone.com
latamrochepressday.com
luchaporlafpi.es
medichanzo.com
medichanzo.net
medichanzo.org
mircera.com.au
nimblegen.com
ocrelizumabinfo.global
pulmozyme.global
roche-cac.com
roche-diagnostics.fr
roche-infohub.co.za
roche-online.ch
roche.at
roche.ba
roche.bg
roche.by
roche.co.id
roche.co.uk
roche.co.za
roche.com.bd
roche.com.mx
roche.com.pe
roche.com.uy
roche.ee
roche.es
roche.ge
roche.ie
roche.it
roche.lt
roche.mk
roche.no
roche.ro
roche.si
roche.ua
rocheamericalatina.com
rochefoundationmedicine.com
rocheinteract.com.au
rochemd.bg
rochemed.gr
rocheonline.ch
rochepharmaprocurement.com
rocheplus.es
rochepro.be
tarceva.global
tiempodevivir.com.co
vechtentegenipf.be
walczzipf.pl
zelborafcotellic.com.au

Other certificates including the domain name gazyva.com.au

(limited to 100 certificates)
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
sni.cloudflaressl.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
gazyva.com.au
gazyva.com.au
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
careers.roche.com

Certificate

The complete raw certificate details for gazyva.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314619328345623636657079071143547968606285
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-20 08:36:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-20 08:36:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gazyva.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 990174643983618786645820204108984152217072419349324801423350390757292610784260506131495231465755734326379417570621963486345233624067689690114395485385846654585106717480661236459685813122175948621869306359204829479650543738440712068148642295195041315591728882447193432642974779874362729149731170213593091627805297029380169713609982999771802388328847773179291083489068118716988245921605590814170389207637675893416927177818816237887067470333020152317449604645853391581295176305831505019401161353441289170652679471696530633570037280018406284715821193369469827603081762491559352811684924360552764553906202087676049212410606477009132112288968904906354916319672161644970628694481667102633057188943495032943834856018717430702732986660593535575575263258113956340149141948666192492739152601683190513787133518047736376612999218885577646004581623013875687074812935710314497067265576539973588291335601312238815286088356682482894706581390344127961228603719432161718629188626979062513195135744406539281662826243552365703378161669935821826267759329553406249474331677750767494786838997568260022062514618410146489516330557266925891676269298126707433048323410991381535587582836385507960989428124287935607475994140089631733702204590513718986786347325391
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							22b07bdad3ae872fe282d90240e7b930801fc86b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1803 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apoyoapacientes.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atulado.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitacoraparaenfermeras.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitacoraparaenfermeras.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com.bo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogorochecac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emactiva.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ensemblecontrefpi.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ensemblecontrefpi.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esbriet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esbriet.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fightipf.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fightipf.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fightipf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fightipf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fightipf.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fightipf.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fightipf.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fondationroche.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine-cac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine-la.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicineasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gazyva.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ieepo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipfzone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latamrochepressday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luchaporlafpi.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medichanzo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medichanzo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medichanzo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mircera.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nimblegen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocrelizumabinfo.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulmozyme.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-cac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-diagnostics.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-infohub.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-online.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.by'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.com.bd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ge'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocheamericalatina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochefoundationmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocheinteract.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochemd.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochemed.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocheonline.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochepharmaprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocheplus.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochepro.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tarceva.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiempodevivir.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vechtentegenipf.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walczzipf.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zelborafcotellic.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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