cert3.roche.com

- F. Hoffmann-La Roche AG -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 02:e9:fe:f3:76:d5:ff:9f:9b:60:6c:fb:1e:73:26:b9 was issued on by DigiCert Inc.

With 74 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

F. Hoffmann-La Roche AG

Organization: F. Hoffmann-La Roche AG
State / Province: Basel
Locality: Basel
Country: CH

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:e9:fe:f3:76:d5:ff:9f:9b:60:6c:fb:1e:73:26:b9
Serial Number (int): 3873432180869204579955079700806837945
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 70:a9:3a:3e:e1:a5:83:35:11:5d:c9:81:33:da:8f:db:78:f6:8a:f5
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): ce:67:a4:44:63:5c:f5:44:56:e7:df:88:a4:98:0d:39:cb:d4:ba:2c
Fingerprint (sha256): 52:93:94:e4:59:6a:e2:0f:8e:02:6b:10:65:1e:08:83:7a:16:d3:72:5d:d5:e9:c8:16:4e:fc:f0:33:f9:3b:be

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate cert3.roche.com

74

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cert3.roche.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cert3.roche.com
www.fibrosis.ru.uat-esbriet.preprod.opengarden.rch.cm
www.roche.mk
www.roche.co.il
www.levenmetipf.nl
www.roche.cz
www.jornadaparapacientes.pe
www.medichanzo.com
www.levenmetipf.nl.uat-esbriet.preprod.opengarden.rch.cm
www.roche-online.ch
www.lutarcontraafpi.pt
www.rochemd.bg
www.ensemblecontrefpi.be.uat-esbriet.preprod.opengarden.rch.cm
www.fightipf.gr.uat-esbriet.preprod.opengarden.rch.cm
www.luchaporlafpi.es.uat-esbriet.preprod.opengarden.rch.cm
www.fightipf.ca.uat-esbriet.preprod.opengarden.rch.cm
www.medichanzo.org
www.roche.com.cn
www.walczzipf.pl
www.roche-middleeast.com
www.medichanzo.net
www.roche.com.br
www.erivedge.net
unaopcionparati.roche.com.mx
www.forpatients.roche.be
www.fightipf.bg
www.roche.com.tw
www.fightipf.it.uat-esbriet.preprod.opengarden.rch.cm
investigoxvos.roche.com.ar
www.ensemblecontrefpi.be
www.fightipf.ca
www.vechtentegenipf.be
www.ensemblecontrefpi.fr
www.roche.hu
www.fibrosis.ru
www.atulado.com.ec
www.rochemed.gr
www.ocrelizumabinfo.global
www.fightipf.com
www.ensemblecontrefpi.fr.uat-esbriet.preprod.opengarden.rch.cm
www.fightipf.de.uat-esbriet.preprod.opengarden.rch.cm
www.vechtentegenipf.be.uat-esbriet.preprod.opengarden.rch.cm
www.kohtaaipf.fi
www.roche-infohub.co.za
www.rochepro.be
www.fightipf.si
www.roche.com.sg
forpatients.roche.be
www.luchaporlafpi.es
www.roche-cac.com
www.roche.bg
www.fightipf.co.uk.uat-esbriet.preprod.opengarden.rch.cm
www.fightipf.co.uk
www.roche.com.pk
www.managingcysticfibrosis.com
www.lutarcontraafpi.pt.uat-esbriet.preprod.opengarden.rch.cm
www.fightipf.ie
www.fightipf.gr
www.iroche.com.tw
www.roche.gr
www.pulmozyme.global
www.fightipf.it
www.fightipf.bg.uat-esbriet.preprod.opengarden.rch.cm
www.kohtaaipf.fi.uat-esbriet.preprod.opengarden.rch.cm
www.roche.by
www.roche.si
www.roche.it
www.ensemblecontrefpi.ca.uat-esbriet.preprod.opengarden.rch.cm
www.tarceva.global
www.rocheonline.ch
www.roche.com.ve
www.ensemblecontrefpi.ca
www.fightipf.ie.uat-esbriet.preprod.opengarden.rch.cm
www.fightipf.si.uat-esbriet.preprod.opengarden.rch.cm

Other certificates including the domain name roche.com

(limited to 100 certificates)
involve.roche.com
www.hpv16and18.com
easydrive-uat.roche.com
advancedanalytics.roche.com
main.rhelp.roche.com
sni.cloudflaressl.com
magentocloud28.map.fastly.net
rbalvprexd0.bas.roche.com
cieas01.roche.com
harmonytest.de
sequencing.roche.com
esource.roche.com
e-medical.roche.com
esource.roche.com
coaguchek.com
rsmsourcing.roche.com
deimos.roche.com
cert2.roche.com
sni.cloudflaressl.com
cdn.appstore.gene.com
shpivee1-01.roche.com
eews-dev.roche.com
myaccess.roche.com
ican.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
cert3.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
mrdivee2-02.netlab.roche.com
rodip.roche.com
nsrdcongresses.roche.com
rbavxsentry11.bas.roche.com
mobilesolution-dev.roche.com
wamua.roche.com
dialog-62-test.roche.com
rocheggcpac.roche.com
san-003.ceros.com
video.hive.roche.com
sni.cloudflaressl.com
rssg.roche.com
mftemeaext.roche.com
anadisuat01.sc1.roche.com
careers.roche.com
flow.roche.com
cert3.roche.com
sni.cloudflaressl.com
misp.roche.com
cert2.roche.com
careers.roche.com
api.rockwizz.roche.com
bitbucket-nala-qa.roche.com
careers.roche.com
wamdev.roche.com
sonar-dev-old.roche.com
diauxhub.roche.com
careers.roche.com
globalfms.roche.com
san-003.ceros.com
sc1lvflexq2.sc1.roche.com
easydrive-dev.roche.com
send-tst.roche.com
indigrow.roche.com
careers.roche.com
careers.roche.com
env5-remotedashboard.roche.com
mrd25.me
cert2.roche.com
*.esrv-hub-uat.roche.com
sb.eu.phcaa.science.roche.com
san-003.ceros.com
extaccess-nala.roche.com
magentocloud28.map.fastly.net
go.roche.com
magentocloud32.map.fastly.net
sni.cloudflaressl.com
ssl882748.cloudflaressl.com
sni.cloudflaressl.com
esrv-marketplace-dev.roche.com
careers.roche.com
imcore.roche.com
booster.roche.com
sni.cloudflaressl.com
akamai-san195.exacttarget.com
raumbuch.roche.com
pitas01.roche.com
sni.cloudflaressl.com
c1edb.roche.com
magentocloud45.map.fastly.net
shpivee1-01.roche.com
hpv16and18.com
hivemind.roche.com
searchsquad.roche.com
cferondanetrochedia-qa.roche.com
esign.roche.com
diaitsupport.roche.com
sni.cloudflaressl.com
magentocloud32.map.fastly.net
r32web.sap.roche.com
apis.cwp.roche.com

Certificate

The complete raw certificate details for cert3.roche.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1QkY/KF/nCKH4f09alQ
yAOU1o65PusdaJr1oNVDzqvh7EwQ2qLvU1IJN4DsYvylxOuuzbRKDd6tlyrhra4D
8HcJrZciAZKhrK3zjt/nyYO8t3cX2mByXWQJZSB7rRqmCVcsBOqKUZpKrnY8Oo10
Hm8StOHcT05xmg/f1lHKvFaZdeTbZE9CtR6peVCgqQPiNOYUTZGIxmAmh+C3Uu9o
6CNvw6DzalMFBCMpXtEnv7zEePrKuVaE77KcVfJbkR4ymCeHHKjkQExGPtnhaf4y
0nDCH3Qm5fpVPCk6TM2WtTN7MT/8rpYaKpAEufwhferskuK9c5pgSCQsoPhFsOWn
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3873432180869204579955079700806837945
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-11 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Basel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Basel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'F. Hoffmann-La Roche AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cert3.roche.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22638148629556323083576860377348120239751396935162123084230329713961566948115277997774260138071147331812733295030628601232949799035405221812067705571009613850034480795524994303635570635231551658366444616834211131244190247837836745912445738565433101546532001118173750167211890296435501839529131098850953096044785572735269330279834109283216085279330520252571669741195701920818314097889663840080060905724258409034263308106330815897378484513003217842891746997661886519597316694488726461757065214575625472524471871471153843375483473133079156231571189547604116595955430529159892647117060988093857425506854554836129108305919
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							70a93a3ee1a58335115dc98133da8fdb78f68af5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert3.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fibrosis.ru.uat-esbriet.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.levenmetipf.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jornadaparapacientes.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medichanzo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.levenmetipf.nl.uat-esbriet.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche-online.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lutarcontraafpi.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochemd.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ensemblecontrefpi.be.uat-esbriet.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fightipf.gr.uat-esbriet.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luchaporlafpi.es.uat-esbriet.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fightipf.ca.uat-esbriet.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medichanzo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.walczzipf.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche-middleeast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medichanzo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.erivedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unaopcionparati.roche.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.forpatients.roche.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fightipf.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fightipf.it.uat-esbriet.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investigoxvos.roche.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ensemblecontrefpi.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fightipf.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vechtentegenipf.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ensemblecontrefpi.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fibrosis.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atulado.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochemed.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ocrelizumabinfo.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fightipf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ensemblecontrefpi.fr.uat-esbriet.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fightipf.de.uat-esbriet.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vechtentegenipf.be.uat-esbriet.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kohtaaipf.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche-infohub.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochepro.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fightipf.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forpatients.roche.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luchaporlafpi.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche-cac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fightipf.co.uk.uat-esbriet.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fightipf.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.com.pk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.managingcysticfibrosis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lutarcontraafpi.pt.uat-esbriet.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fightipf.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fightipf.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iroche.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pulmozyme.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fightipf.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fightipf.bg.uat-esbriet.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kohtaaipf.fi.uat-esbriet.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.by'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ensemblecontrefpi.ca.uat-esbriet.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tarceva.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheonline.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ensemblecontrefpi.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fightipf.ie.uat-esbriet.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fightipf.si.uat-esbriet.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016a7835adb30000040300473045022100c29e92a10be4ee98ca107f482b7fb80944fdea71451323c2d62745027c0a384302205e9312c6922644a85d619e838155eb94375597431d6a655503872756b529fab80076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016a7835aed30000040300473045022100db6e885e12e88faea3ae1b38e8cb6e0cc6ee65191375ef6e313bde9ff7cb945502203dd4138bfc5a8b254aa1e85db22bc53b9cecf63ea40fc24659201867be96d01a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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