roche.no
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:46:2e:db:33:04:3f:f3:d7:37:50:4c:b6:f6:9a:a5:a1:20 was issued on by Let's Encrypt.
With 35 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=roche.no
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:46:2e:db:33:04:3f:f3:d7:37:50:4c:b6:f6:9a:a5:a1:20Serial Number (int): 285218906115304152416926455339013145731360
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: e6:9c:d8:41:a7:35:9f:b9:e4:1f:7c:36:16:57:a0:c9:f5:88:b9:b5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 71:92:fd:0c:25:20:a6:d5:06:2f:c2:ae:ce:d4:49:8f:29:da:b3:d4
Fingerprint (sha256): 60:84:a9:32:b2:70:58:62:2b:31:6a:d0:81:94:eb:ea:f9:d9:7f:8e:99:8a:b6:af:ed:5c:ed:ac:36:be:41:3c
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate roche.no
35
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for roche.no
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
foundationmedicine-cac.com
foundationmedicine.bg
foundationmedicine.com.au
foundationmedicine.dk
foundationmedicine.lv
latamrochepressday.com
nimblegen.com
roche-cac.com
roche-diagnostics.fr
roche.at
roche.ba
roche.bg
roche.by
roche.co.id
roche.co.uk
roche.co.za
roche.com.bd
roche.com.mx
roche.com.pe
roche.com.uy
roche.ee
roche.es
roche.ge
roche.ie
roche.it
roche.lt
roche.mk
roche.no
roche.pl
roche.ro
roche.si
roche.ua
rocheinteract.com.au
rochepharmaprocurement.com
tiempodevivir.com.co
foundationmedicine.bg
foundationmedicine.com.au
foundationmedicine.dk
foundationmedicine.lv
latamrochepressday.com
nimblegen.com
roche-cac.com
roche-diagnostics.fr
roche.at
roche.ba
roche.bg
roche.by
roche.co.id
roche.co.uk
roche.co.za
roche.com.bd
roche.com.mx
roche.com.pe
roche.com.uy
roche.ee
roche.es
roche.ge
roche.ie
roche.it
roche.lt
roche.mk
roche.no
roche.pl
roche.ro
roche.si
roche.ua
rocheinteract.com.au
rochepharmaprocurement.com
tiempodevivir.com.co
Other certificates including the domain name roche.no
(limited to 100 certificates)
cert2.roche.com
cert2.roche.com
sni.cloudflaressl.com
roche.no
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
roche.no
cert2.roche.com
cert2.roche.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
roche.no
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
sni.cloudflaressl.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
roche.no
cert2.roche.com
roche.no
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
sni.cloudflaressl.com
cert2.roche.com
cert2.roche.com
gazyva.com.au
cert2.roche.com
roche.no
cert2.roche.com
cert2.roche.com
sni.cloudflaressl.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
gazyva.com.au
gazyva.com.au
cert2.roche.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
roche.no
cert2.roche.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
gazyva.com.au
cert2.roche.com
sni.cloudflaressl.com
gazyva.com.au
roche.no
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
roche.no
cert2.roche.com
gazyva.com.au
cert2.roche.com
sni.cloudflaressl.com
roche.no
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
roche.no
cert2.roche.com
cert2.roche.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
roche.no
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
sni.cloudflaressl.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
roche.no
cert2.roche.com
roche.no
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
sni.cloudflaressl.com
cert2.roche.com
cert2.roche.com
gazyva.com.au
cert2.roche.com
roche.no
cert2.roche.com
cert2.roche.com
sni.cloudflaressl.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
gazyva.com.au
gazyva.com.au
cert2.roche.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
roche.no
cert2.roche.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
gazyva.com.au
cert2.roche.com
sni.cloudflaressl.com
gazyva.com.au
roche.no
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
roche.no
cert2.roche.com
gazyva.com.au
Certificate
The complete raw certificate details for roche.no in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIUjCCBzqgAwIBAgISA0Yu2zMEP/PXN1BMtvaapaEgMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MjcwODAxNDRaFw0x OTExMjUwODAxNDRaMBMxETAPBgNVBAMTCHJvY2hlLm5vMIICIjANBgkqhkiG9w0B AQEFAAOCAg8AMIICCgKCAgEA5VReiBNQMeNa5LFz03jcG0lmWbdJVB9suD18KWl3 vIQ7u5vqOUTTXu8ueYMUdYda6N4ajv9B88t4g7UK8FKMiCjjiFwT7yRrhCNJB2AN YUJke4dvWNTeeJbY4UpCKQfSuGl59Il/bPC4EJKJlxZhJv4Z8fsmMNu5igdioEq2 HSGtKNT40QyExMyU16HZY7JHMsyricPb8A8sgC82hcJaanl83rJkhpXGz8b2Y0xg HEHJC0//w89iXnEdnGkiVryXLBUXRVEjeRdcpEwYD+ScYWhqR/qgfxcOXpOIDHuG T0umrcfQKZWIqEARo70DQVYf4A1MxRNM4IqTfcKj0r/IGimRUag80SuzTChwufGq uNeU2cLjPPN1yyOKvzQpcDuxCn/TOYSjjFwVzlJ2RoHKipaLs1rgnPUoAEUbTh6C R58oG893STMDBIXOwjbaqgoxhLMMkUrPzleUeqfDz2UREFX+42zZ1Vh2HJGcqlpG ql5hLxYpl2/QIkxsWVVOAwthHAx087oKXU4Naq79UG3vgJHEDXxWfOEltEvMaoDK 2a8SmDhji0lt/jMm43dPLyKsDSOX0Qn0rOmL8+yEWh8OsDmqg1et4p6PVx9OzlFO DnKUOHK4FO/gdvUlynaGWUNuNaXBxS9vskFN1y/msIC5+nPk/CXBpN32MkDi2iJR BrcCAwEAAaOCBGcwggRjMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU5pzYQac1n7nk H3w2FlegyfWIubUwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYI KwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0 c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0 c2VuY3J5cHQub3JnLzCCAhwGA1UdEQSCAhMwggIPghpmb3VuZGF0aW9ubWVkaWNp bmUtY2FjLmNvbYIVZm91bmRhdGlvbm1lZGljaW5lLmJnghlmb3VuZGF0aW9ubWVk aWNpbmUuY29tLmF1ghVmb3VuZGF0aW9ubWVkaWNpbmUuZGuCFWZvdW5kYXRpb25t ZWRpY2luZS5sdoIWbGF0YW1yb2NoZXByZXNzZGF5LmNvbYINbmltYmxlZ2VuLmNv bYINcm9jaGUtY2FjLmNvbYIUcm9jaGUtZGlhZ25vc3RpY3MuZnKCCHJvY2hlLmF0 gghyb2NoZS5iYYIIcm9jaGUuYmeCCHJvY2hlLmJ5ggtyb2NoZS5jby5pZIILcm9j aGUuY28udWuCC3JvY2hlLmNvLnphggxyb2NoZS5jb20uYmSCDHJvY2hlLmNvbS5t eIIMcm9jaGUuY29tLnBlggxyb2NoZS5jb20udXmCCHJvY2hlLmVlgghyb2NoZS5l c4IIcm9jaGUuZ2WCCHJvY2hlLmllgghyb2NoZS5pdIIIcm9jaGUubHSCCHJvY2hl Lm1rgghyb2NoZS5ub4IIcm9jaGUucGyCCHJvY2hlLnJvgghyb2NoZS5zaYIIcm9j aGUudWGCFHJvY2hlaW50ZXJhY3QuY29tLmF1ghpyb2NoZXBoYXJtYXByb2N1cmVt ZW50LmNvbYIUdGllbXBvZGV2aXZpci5jb20uY28wTAYDVR0gBEUwQzAIBgZngQwB AgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRz ZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQApPFGWVMg5Zbqq UPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWzSTz6dAAAEAwBGMEQCIH6jmU/FbH2h F6xwvef6eAVH01wMyqzGnct3C83iw5mgAiBFbPk/0pumOV6ab+bx1ApJUvW5vv0R PMsb+9S/htRCWAB2AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQe8xWAAAB bNJPQHMAAAQDAEcwRQIhAOAQiIQ8mImfi4h6agLRGAfP3bX0zOX5DdLGew6uEXla AiA6smuEa0uVAoODCmENOl9zsw6M5ZTMiw0cNXBrbrIzzzANBgkqhkiG9w0BAQsF AAOCAQEAYG2T0Va5biVNq37tXnSx208K1XKc9TrX4lgH/dqqRjgNhUU95/VjZecZ KMaNnfthX+FjQRIaG3zQIeCudJkQ8zxsfDmsTSKJN+iQhmRsy1G0MaqGw/XXcJ7H wA/F9eO52c3B5838zp0MfzaD+OiUGhtcK6b4NGTsVO+RFliO/d/7S3TQVt3uLmKn detsgRTt05rRhbUOIW6kzl/cAgMGjn7XV2DLfq9TogqF/Ur8F75jRgij2dJiMhTI LxxlX7piBNdeQ1/CR9nOlKaI2RFWe4McottmKPktZCrz4rUXMoI0t0CXYfipb8D0 tGSAcppRFu5VQO4uYOQ6QfD+nUWd6w== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5VReiBNQMeNa5LFz03jc G0lmWbdJVB9suD18KWl3vIQ7u5vqOUTTXu8ueYMUdYda6N4ajv9B88t4g7UK8FKM iCjjiFwT7yRrhCNJB2ANYUJke4dvWNTeeJbY4UpCKQfSuGl59Il/bPC4EJKJlxZh Jv4Z8fsmMNu5igdioEq2HSGtKNT40QyExMyU16HZY7JHMsyricPb8A8sgC82hcJa anl83rJkhpXGz8b2Y0xgHEHJC0//w89iXnEdnGkiVryXLBUXRVEjeRdcpEwYD+Sc YWhqR/qgfxcOXpOIDHuGT0umrcfQKZWIqEARo70DQVYf4A1MxRNM4IqTfcKj0r/I GimRUag80SuzTChwufGquNeU2cLjPPN1yyOKvzQpcDuxCn/TOYSjjFwVzlJ2RoHK ipaLs1rgnPUoAEUbTh6CR58oG893STMDBIXOwjbaqgoxhLMMkUrPzleUeqfDz2UR EFX+42zZ1Vh2HJGcqlpGql5hLxYpl2/QIkxsWVVOAwthHAx087oKXU4Naq79UG3v gJHEDXxWfOEltEvMaoDK2a8SmDhji0lt/jMm43dPLyKsDSOX0Qn0rOmL8+yEWh8O sDmqg1et4p6PVx9OzlFODnKUOHK4FO/gdvUlynaGWUNuNaXBxS9vskFN1y/msIC5 +nPk/CXBpN32MkDi2iJRBrcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 285218906115304152416926455339013145731360 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-27 08:01:44 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-25 08:01:44 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'roche.no' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 935583009415571917324000932565099482941132170923508398132954782816990244094204783222139784151655486088161220500552188408960420686804862197427511807013790799134594845838249328276713497316386554281553369511386093336204727241540255513959800757882575929016425686966052832169620961753472422362296711571579768227453799931690946148839802203393596583976186202191434427989383975681363751220159664832047144413970498668226652738857125558817837454005659950667349142458677495071630856734915696674175723931998196775812088829916967584883076726964347753493178156062678998756315171873415835704820836735213677990202541083227960209137459467350907692331877419047185701731667216690329003334030008242626027856186137852971536246863093397014616684656696425281853855038151726004593967314471680269523780864844847498916148153409100861244321042662316564094595424645702568996574944709468131218630287611524016768188732870502320961550052692262116225633503555149618149382824641128504991207524334154893696740979480493720328145855089826800009248602682734544144536740801909153771187608978345215358401145403850412869760734711664924763259857829362244918746202616657038073507628307177052298230389765010318988614753087538507656239179130116598465726793001377926706688493239 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e69cd841a7359fb9e41f7c361657a0c9f588b9b5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (531 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine-cac.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.bg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.lv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latamrochepressday.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nimblegen.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-cac.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-diagnostics.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.at' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ba' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.bg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.by' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.co.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.co.za' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.com.bd' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.com.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.com.pe' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.com.uy' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ee' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ge' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ie' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.lt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.mk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.pl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.si' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ua' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocheinteract.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochepharmaprocurement.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiempodevivir.com.co' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016cd24f3e9d000004030046304402207ea3994fc56c7da117ac70bde7fa780547d35c0ccaacc69dcb770bcde2c399a00220456cf93fd29ba6395e9a6fe6f1d40a4952f5b9befd113ccb1bfbd4bf86d44258007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016cd24f40730000040300473045022100e01088843c98899f8b887a6a02d11807cfddb5f4cce5f90dd2c67b0eae11795a02203ab26b846b4b950283830a610d3a5f73b30e8ce594cc8b0d1c35706b6eb233cf . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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