roche.no
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:d4:25:0e:14:5a:05:49:54:a9:9e:b9:ff:d7:51:54:e6:ec was issued on by Let's Encrypt.
With 37 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=roche.no
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:d4:25:0e:14:5a:05:49:54:a9:9e:b9:ff:d7:51:54:e6:ecSerial Number (int): 333525974123300118344750214790485231593196
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 76:5e:47:c8:91:f1:7c:33:ad:ac:03:db:6f:32:fa:0a:2c:63:bd:b9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 58:3b:c1:df:55:c1:00:7d:09:7a:ca:11:f7:bc:5a:69:94:85:ed:bf
Fingerprint (sha256): 5d:31:ca:a6:72:f2:b5:7a:ef:5b:ed:7a:75:1e:a8:fd:c3:be:13:4a:97:a4:97:18:63:c0:a9:cd:bc:5c:bf:b9
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate roche.no
37
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for roche.no
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
forpatients.roche.co.za
foundationmedicine-cac.com
foundationmedicine.bg
foundationmedicine.com.au
foundationmedicine.dk
foundationmedicine.lv
latamrochepressday.com
nimblegen.com
roche-cac.com
roche-diagnostics.fr
roche.at
roche.ba
roche.bg
roche.by
roche.co.id
roche.co.il
roche.co.uk
roche.co.za
roche.com.bd
roche.com.mx
roche.com.pe
roche.com.uy
roche.ee
roche.es
roche.ge
roche.ie
roche.it
roche.lt
roche.mk
roche.no
roche.pl
roche.ro
roche.si
roche.ua
rocheinteract.com.au
rochepharmaprocurement.com
tiempodevivir.com.co
foundationmedicine-cac.com
foundationmedicine.bg
foundationmedicine.com.au
foundationmedicine.dk
foundationmedicine.lv
latamrochepressday.com
nimblegen.com
roche-cac.com
roche-diagnostics.fr
roche.at
roche.ba
roche.bg
roche.by
roche.co.id
roche.co.il
roche.co.uk
roche.co.za
roche.com.bd
roche.com.mx
roche.com.pe
roche.com.uy
roche.ee
roche.es
roche.ge
roche.ie
roche.it
roche.lt
roche.mk
roche.no
roche.pl
roche.ro
roche.si
roche.ua
rocheinteract.com.au
rochepharmaprocurement.com
tiempodevivir.com.co
Other certificates including the domain name roche.no
(limited to 100 certificates)
cert2.roche.com
cert2.roche.com
sni.cloudflaressl.com
roche.no
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
roche.no
cert2.roche.com
cert2.roche.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
roche.no
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
sni.cloudflaressl.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
roche.no
cert2.roche.com
roche.no
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
sni.cloudflaressl.com
cert2.roche.com
cert2.roche.com
gazyva.com.au
cert2.roche.com
roche.no
cert2.roche.com
cert2.roche.com
sni.cloudflaressl.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
gazyva.com.au
gazyva.com.au
cert2.roche.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
roche.no
cert2.roche.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
gazyva.com.au
cert2.roche.com
sni.cloudflaressl.com
gazyva.com.au
roche.no
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
roche.no
cert2.roche.com
gazyva.com.au
cert2.roche.com
sni.cloudflaressl.com
roche.no
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
roche.no
cert2.roche.com
cert2.roche.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
roche.no
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
sni.cloudflaressl.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
roche.no
cert2.roche.com
roche.no
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
sni.cloudflaressl.com
cert2.roche.com
cert2.roche.com
gazyva.com.au
cert2.roche.com
roche.no
cert2.roche.com
cert2.roche.com
sni.cloudflaressl.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
gazyva.com.au
gazyva.com.au
cert2.roche.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
roche.no
cert2.roche.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
gazyva.com.au
cert2.roche.com
sni.cloudflaressl.com
gazyva.com.au
roche.no
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
roche.no
cert2.roche.com
gazyva.com.au
Certificate
The complete raw certificate details for roche.no in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIejCCB2KgAwIBAgISA9QlDhRaBUlUqZ65/9dRVObsMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MDIwNzM3MTlaFw0x OTEyMDEwNzM3MTlaMBMxETAPBgNVBAMTCHJvY2hlLm5vMIICIjANBgkqhkiG9w0B AQEFAAOCAg8AMIICCgKCAgEAz9I3v9PoeDLZZkSVusV7ezHeJrwkmA+Mt9DLbSmh keXT8eeQoQBBOl374uk6EqpVyBw4D9l5+T1BfNO05oDwyFeQIP4Ial7c+iOvr4AZ scYZXXQhUSw4czHopHhqScMwhJY9e+OQngFIHqIifya0zpy0elKilZxSoTHaTegQ NwZFgcuXgnIxfdep94KJn6zC4ZK6pM96c8Q8Q1IV1pzC1ZiZ7t7HtkOYfQXYvgkM 6tPHRl/6BVPl6iC812PCx1aV786jdq5GTFyqpMsdRBY5NazAeJTDdhXM1a5Peg4u RHCJBpqzrEdiA7Gzg+iSdlwMdqWQwxycMCQUOcEl5iKfLwCwP9AIWLVeEGBhm58i dHcyL/uBZYPh4cKqhJVbPTSk1mcxaRfgrgkimsJFNkBeplwneaLydXfDSq859KzQ KyGjP7lPJpSf75VWiIudS0nRzMEhI3jPRQyCo6EZLzMsGgT4SzFrHWmXDRtzDp+c mrsnEc/WfusK9WFdEcIe9w8xn4cBH+9cP/zrFjI78cOxbOExbfff6FAPvHX8k4DX LGSusCYamBbB4lNGfoIfS+qG0AYc4NISbweSIkjomoPrZLUEjCUpWQ0UZ6qgVtXs JNlCzpKY5eTkAf4O8/EUBnjEoWc0qN2PLL+2JJ/HzX8+Ah2yuiYuCGqCuCxkSZxc tGUCAwEAAaOCBI8wggSLMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUdl5HyJHxfDOt rAPbbzL6CixjvbkwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYI KwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0 c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0 c2VuY3J5cHQub3JnLzCCAkIGA1UdEQSCAjkwggI1ghdmb3JwYXRpZW50cy5yb2No ZS5jby56YYIaZm91bmRhdGlvbm1lZGljaW5lLWNhYy5jb22CFWZvdW5kYXRpb25t ZWRpY2luZS5iZ4IZZm91bmRhdGlvbm1lZGljaW5lLmNvbS5hdYIVZm91bmRhdGlv bm1lZGljaW5lLmRrghVmb3VuZGF0aW9ubWVkaWNpbmUubHaCFmxhdGFtcm9jaGVw cmVzc2RheS5jb22CDW5pbWJsZWdlbi5jb22CDXJvY2hlLWNhYy5jb22CFHJvY2hl LWRpYWdub3N0aWNzLmZygghyb2NoZS5hdIIIcm9jaGUuYmGCCHJvY2hlLmJngghy b2NoZS5ieYILcm9jaGUuY28uaWSCC3JvY2hlLmNvLmlsggtyb2NoZS5jby51a4IL cm9jaGUuY28uemGCDHJvY2hlLmNvbS5iZIIMcm9jaGUuY29tLm14ggxyb2NoZS5j b20ucGWCDHJvY2hlLmNvbS51eYIIcm9jaGUuZWWCCHJvY2hlLmVzgghyb2NoZS5n ZYIIcm9jaGUuaWWCCHJvY2hlLml0gghyb2NoZS5sdIIIcm9jaGUubWuCCHJvY2hl Lm5vgghyb2NoZS5wbIIIcm9jaGUucm+CCHJvY2hlLnNpgghyb2NoZS51YYIUcm9j aGVpbnRlcmFjdC5jb20uYXWCGnJvY2hlcGhhcm1hcHJvY3VyZW1lbnQuY29tghR0 aWVtcG9kZXZpdmlyLmNvbS5jbzBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEE AYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9y ZzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2AHR+2oMxrTMQkSGcziVPQnDCv/1e QiAIxjc1eeYQe8xWAAABbPEfDG4AAAQDAEcwRQIgars4ctvn5H02lqQRrcDJZ7gU uQ8iV+CS1TCwxfJUvMcCIQCFKjx9/5vboMUZVJJMMdeu31GGD0YAx/GrZUq+CO13 ewB3AGPy283oO8wszwtyhCdXazOkjWF3j711pjixx2hUS9iNAAABbPEfCpsAAAQD AEgwRgIhANvrvA/q331WL06GmJK2aAwOvGfSRz5dJ4sy8O1q9sLtAiEA2SaneDwg LfO5DKhCm7jCpB0MqTKTh6gBeSHWxdU2pZ4wDQYJKoZIhvcNAQELBQADggEBAJv7 RHaM+JVYSG8CyzyynW+iCWPM02pyF0q3vnN5t7402uDpTNsqeRlvCvgD4yZmdOt1 C/zagWJ6ETO3N+RcPrM5UqNnijUoXrWE5R3FkfdasTrEhE08rPAPctsopzn+hM/P yj6mUg9Y4CYP51PTaOVlqV35GDjm4e07SGHca2bhYKuqTv7bR+SGEIN6Rem+sn8z 05m+cvWkv6fG5FdnxzV0sQGdqDiWd20I+vxd73phANPYFZy6k8X9mQ4WFCZS/p6X MhCQkxiLwAnxi3/Ep18O7xd7xZ9q2JSNib+NWk+vZe9u0zGTi38FhXIpyMtF/Ply /ReJa1m0HobVqIWyqp8= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAz9I3v9PoeDLZZkSVusV7 ezHeJrwkmA+Mt9DLbSmhkeXT8eeQoQBBOl374uk6EqpVyBw4D9l5+T1BfNO05oDw yFeQIP4Ial7c+iOvr4AZscYZXXQhUSw4czHopHhqScMwhJY9e+OQngFIHqIifya0 zpy0elKilZxSoTHaTegQNwZFgcuXgnIxfdep94KJn6zC4ZK6pM96c8Q8Q1IV1pzC 1ZiZ7t7HtkOYfQXYvgkM6tPHRl/6BVPl6iC812PCx1aV786jdq5GTFyqpMsdRBY5 NazAeJTDdhXM1a5Peg4uRHCJBpqzrEdiA7Gzg+iSdlwMdqWQwxycMCQUOcEl5iKf LwCwP9AIWLVeEGBhm58idHcyL/uBZYPh4cKqhJVbPTSk1mcxaRfgrgkimsJFNkBe plwneaLydXfDSq859KzQKyGjP7lPJpSf75VWiIudS0nRzMEhI3jPRQyCo6EZLzMs GgT4SzFrHWmXDRtzDp+cmrsnEc/WfusK9WFdEcIe9w8xn4cBH+9cP/zrFjI78cOx bOExbfff6FAPvHX8k4DXLGSusCYamBbB4lNGfoIfS+qG0AYc4NISbweSIkjomoPr ZLUEjCUpWQ0UZ6qgVtXsJNlCzpKY5eTkAf4O8/EUBnjEoWc0qN2PLL+2JJ/HzX8+ Ah2yuiYuCGqCuCxkSZxctGUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 333525974123300118344750214790485231593196 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-02 07:37:19 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-01 07:37:19 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'roche.no' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 847836375524209459435369106598806228123073364182966584278393979879955765449733399504299541395961534736083701974254451517903992521476117251423165703831231604758077782740813276768735663548166517980889314045211287553576188112885742434716871815937356587546527589799897282483496001463631123299136276596573502444448945055050826104022180115698168857527365315744351370995976000543493660551086957075562368182283037404706822559985777085327834758073795813825063568977167852655752465274378561037090204067938836376645164632820410874171157318810921465451578935198040489170859487605139277796774488890304782838012260467208805777143918646938249781729417051973678943192871895499307193966930997563648836363042529369667537395689601474526692885681139405814831013954449421914147851370184539254736524261761827344820463747973253632516016891396803199194957608781698046625169866772952520299542368044741571944068979321556546171857377155388250301053396873396400594580227986642423295183455159269238799234354255440996435845530419343916215691825487419458755469125092266486198297360638202944057872191059099753038433558649772507493384907012987391333440791932995457679255563719803571194307793206598980847678422534183558826209865840684496708905528553990064067401528421 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 765e47c891f17c33adac03db6f32fa0a2c63bdb9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (569 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forpatients.roche.co.za' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine-cac.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.bg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.lv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latamrochepressday.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nimblegen.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-cac.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-diagnostics.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.at' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ba' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.bg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.by' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.co.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.co.il' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.co.za' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.com.bd' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.com.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.com.pe' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.com.uy' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ee' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ge' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ie' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.lt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.mk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.pl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.si' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ua' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocheinteract.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochepharmaprocurement.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiempodevivir.com.co' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016cf11f0c6e000004030047304502206abb3872dbe7e47d3696a411adc0c967b814b90f2257e092d530b0c5f254bcc7022100852a3c7dff9bdba0c51954924c31d7aedf51860f4600c7f1ab654abe08ed777b00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016cf11f0a9b0000040300483046022100dbebbc0feadf7d562f4e869892b6680c0ebc67d2473e5d278b32f0ed6af6c2ed022100d926a7783c202df3b90ca8429bb8c2a41d0ca9329387a8017921d6c5d536a59e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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