diagnostics.roche.com

Issued by COMODO RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 56:51:9e:f1:c9:66:70:f9:dc:a9:44:42:61:f3:8f:92 was issued on by COMODO CA Limited.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=diagnostics.roche.com

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 56:51:9e:f1:c9:66:70:f9:dc:a9:44:42:61:f3:8f:92
Serial Number (int): 114737407460078959931147442851325120402
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 48:8f:d6:e8:ca:5c:21:ac:fb:de:43:a1:f9:ca:ab:cc:5e:76:e1:d3
AuthorityKeyId: 90:af:6a:3a:94:5a:0b:d8:90:ea:12:56:73:df:43:b4:3a:28:da:e7

Fingerprint (sha1): 6e:05:09:44:99:05:d9:03:a6:88:e8:be:46:d7:89:0b:47:a6:4b:67
Fingerprint (sha256): 60:8b:e7:07:c5:f3:6c:9b:57:86:46:77:76:a1:8a:cd:e0:6e:76:99:5f:53:42:82:1a:bf:d0:15:52:73:ad:e1

Issuing Certificate URL: http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl

Check the revocation status for certificate diagnostics.roche.com

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for diagnostics.roche.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

diagnostics.roche.com
author-eu-SuppDev2.roche.com
author-eu-Train.roche.com
author-eu-dev.roche.com
author-eu-owpdev.roche.com
author-eu-prod.roche.com
author-eu-qa.roche.com
author-eu-stage.roche.com
biotinfacts.roche.com
brand.cobas.com
campaigns-test.roche.com
campaigns.roche.com
cobas.com
diagnostics-dev.roche.com
diagnostics-owp-dev.roche.com
diagnostics-qa.roche.com
diagnostics-test.roche.com
diagnosticsChina-perf.roche.com
diagnosticschina-perf-dev.roche.com
dialog-dev.roche.com
dialog-prod.roche.com
dialog-qa.roche.com
dialog-test.roche.com
dialog.roche.com
dialogChina-perf.roche.com
dialogchina-perf-dev.roche.com
dual-target.com
e-labdoc.roche.com
elabdoc.roche.com
eservices-test.roche.com
flow.roche.com
hcvdualprobe.com
hivdualtarget.com
hpv16and18.com
hpvactnow.com
insights-test.roche.com
lableaders.roche.com
ldtsolutions.roche.com
magnapure.com
magnapure24.com
magnapure96.com
molecular.roche.com
multichannel-dev.roche.com
multichannel-qa.roche.com
multichannel-qa64.roche.com
multichannel-test.roche.com
multichannel.roche.com
origin-diagnostics-owp-dev.roche.com
origin-diagnostics-qa.roche.com
origin-diagnostics-test.roche.com
origin-diagnostics.roche.com
preview-owp.dev.roche.com
preview-owp.qa.roche.com
preview-owp.roche.com
preview-owp.test.roche.com
rms-affiliate-resource-stage.roche.com
rms-affiliate-resource.roche.com
roche-eu-stage-2-owp.roche.com
roche-eu-stage-2.roche.com
roche-eu-supp-dev-2-owp.roche.com
roche-eu-supp-dev-2.roche.com
roche-eu-supp-dev-64-multichannel.roche.com
roche-eu-supp-dev-64-owp.roche.com
roche-eu-supp-dev-64.roche.com
roche-eu-train-owp.roche.com
roche-eu-train.roche.com
rocheflowcommunity.com
showpad.roche.com
supportrequest.roche.com
usdiagnostics.roche.com
www.biotinfacts.roche.com
www.cobas.com
www.diagnostics-test.roche.com
www.diagnostics.roche.com
www.dialog.roche.com
www.e-labdoc.roche.com
www.elabdoc.roche.com
www.eservices-test.roche.com
www.hcvdualprobe.com
www.hivdualtarget.com
www.hpvactnow.com
www.lableaders.roche.com
www.ldtsolutions.roche.com
www.magnapure.com
www.magnapure24.com
www.magnapure96.com
www.supportrequest.roche.com
www.xlab.roche.com
xlab.roche.com

Other certificates including the domain name roche.com

(limited to 100 certificates)
involve.roche.com
www.hpv16and18.com
easydrive-uat.roche.com
advancedanalytics.roche.com
main.rhelp.roche.com
sni.cloudflaressl.com
magentocloud28.map.fastly.net
rbalvprexd0.bas.roche.com
cieas01.roche.com
harmonytest.de
sequencing.roche.com
esource.roche.com
e-medical.roche.com
esource.roche.com
coaguchek.com
rsmsourcing.roche.com
deimos.roche.com
cert2.roche.com
sni.cloudflaressl.com
cdn.appstore.gene.com
shpivee1-01.roche.com
eews-dev.roche.com
myaccess.roche.com
ican.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
cert3.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
mrdivee2-02.netlab.roche.com
rodip.roche.com
nsrdcongresses.roche.com
rbavxsentry11.bas.roche.com
mobilesolution-dev.roche.com
wamua.roche.com
dialog-62-test.roche.com
rocheggcpac.roche.com
san-003.ceros.com
video.hive.roche.com
sni.cloudflaressl.com
rssg.roche.com
mftemeaext.roche.com
anadisuat01.sc1.roche.com
careers.roche.com
flow.roche.com
cert3.roche.com
sni.cloudflaressl.com
misp.roche.com
cert2.roche.com
careers.roche.com
api.rockwizz.roche.com
bitbucket-nala-qa.roche.com
careers.roche.com
wamdev.roche.com
sonar-dev-old.roche.com
diauxhub.roche.com
careers.roche.com
globalfms.roche.com
san-003.ceros.com
sc1lvflexq2.sc1.roche.com
easydrive-dev.roche.com
send-tst.roche.com
indigrow.roche.com
careers.roche.com
careers.roche.com
env5-remotedashboard.roche.com
mrd25.me
cert2.roche.com
*.esrv-hub-uat.roche.com
sb.eu.phcaa.science.roche.com
san-003.ceros.com
extaccess-nala.roche.com
magentocloud28.map.fastly.net
go.roche.com
magentocloud32.map.fastly.net
sni.cloudflaressl.com
ssl882748.cloudflaressl.com
sni.cloudflaressl.com
esrv-marketplace-dev.roche.com
careers.roche.com
imcore.roche.com
booster.roche.com
sni.cloudflaressl.com
akamai-san195.exacttarget.com
raumbuch.roche.com
pitas01.roche.com
sni.cloudflaressl.com
c1edb.roche.com
magentocloud45.map.fastly.net
shpivee1-01.roche.com
hpv16and18.com
hivemind.roche.com
searchsquad.roche.com
cferondanetrochedia-qa.roche.com
esign.roche.com
diaitsupport.roche.com
sni.cloudflaressl.com
magentocloud32.map.fastly.net
r32web.sap.roche.com
apis.cwp.roche.com

Certificate

The complete raw certificate details for diagnostics.roche.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocGeN5GF143542Y95epx
9vkkaTDY0hcNJsd2ylg4tWNMhZIDnm4uEE704267VknVIc1YcR/fj5OO81pNGl6Y
TK1jNBdwoOpGz0lkYkse13KrUgVgL0cQBghIoSySVYitrLzRlHv0jWnWSZbp8luq
8kJFvn3q/O36/3lRqanZOuI/tjFztR5t5mDXbq1jcDgqozjebjXnork4qBg/DT5p
3++7bv5XTDMP37uI9mTv/64vjk+41ymKhwNRP7VbWiXxMIEq1OJe4OCsnxMzAOMc
JfMs2gmn5FuDj1OnE81TUBqkIY8wCgzYarqCJYshxD6tHnjhM8hgG1vJMf14/Al6
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 114737407460078959931147442851325120402
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'diagnostics.roche.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20419843711256795993786263938625718620199100822925640185586776345840061942936704981823009288630469862659054919609457388324911300310629391425660852137077628660553718362386267906899149930717871538900862393182600751354768749911549905783826343250939479100944988345569281393879170061230399198347646164841490860203654124459995467087078328841097997336548857869233979300591978795466502712369415850499417668280024687282541077699246971148452125198043164805103964164771239951015674379241888284320430235684279251355207006771317882669459465648422222613011694868977557989087209727603768952630405501692981643189651835780782476589641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 90af6a3a945a0bd890ea125673df43b43a28dae7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							488fd6e8ca5c21acfbde43a1f9caabcc5e76e1d3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000171317860040000040300473045022100e95ea500f9686d7e7cf14b6ffd21bb822a5d41e3aff6b23fade5edcfb0406a2702203aada84f54c995543fd5199391d33e1661661644c344fdc9b468d1ae7e648972007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000171317860400000040300473045022050606a3500d501e00d0aeafa68f162677ba965eb4bddc7cce938b78b42b6fbac022100b8a31f4107028be7527aa598251be4b64eff7ddfc0008802f0308b50a1ca122a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2253 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diagnostics.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author-eu-SuppDev2.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author-eu-Train.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author-eu-dev.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author-eu-owpdev.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author-eu-prod.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author-eu-qa.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author-eu-stage.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biotinfacts.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brand.cobas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaigns-test.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaigns.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cobas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diagnostics-dev.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diagnostics-owp-dev.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diagnostics-qa.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diagnostics-test.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diagnosticsChina-perf.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diagnosticschina-perf-dev.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialog-dev.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialog-prod.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialog-qa.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialog-test.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialog.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogChina-perf.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogchina-perf-dev.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dual-target.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-labdoc.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elabdoc.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eservices-test.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flow.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcvdualprobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hivdualtarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpv16and18.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpvactnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insights-test.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lableaders.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ldtsolutions.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magnapure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magnapure24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magnapure96.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'molecular.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multichannel-dev.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multichannel-qa.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multichannel-qa64.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multichannel-test.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multichannel.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-diagnostics-owp-dev.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-diagnostics-qa.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-diagnostics-test.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-diagnostics.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview-owp.dev.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview-owp.qa.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview-owp.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview-owp.test.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rms-affiliate-resource-stage.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rms-affiliate-resource.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-eu-stage-2-owp.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-eu-stage-2.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-eu-supp-dev-2-owp.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-eu-supp-dev-2.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-eu-supp-dev-64-multichannel.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-eu-supp-dev-64-owp.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-eu-supp-dev-64.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-eu-train-owp.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-eu-train.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocheflowcommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showpad.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportrequest.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdiagnostics.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biotinfacts.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cobas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diagnostics-test.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diagnostics.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialog.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.e-labdoc.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elabdoc.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eservices-test.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hcvdualprobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hivdualtarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hpvactnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lableaders.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ldtsolutions.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magnapure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magnapure24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magnapure96.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supportrequest.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xlab.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xlab.roche.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0071fa2b690fd54f73b447768ff4771a008999d7bec846ce021a9b2aadb6060fba4f4cdd4b9f3711bfd071129b5a00924e69a20748be6d1a219d8cb60c8d2a4f1719d9f621f7f4dd27268f200030d51515f8e30d28dfa4ab8e0b3c605af3f498aecf24841d400f8f06d461aa86ddf09e5012541dcbd29b2cc9351485ac29627402f3a8c35752a00744b8ab695ea084084eb137d131c18b2f19ddf76b35f1599e3c0b51855158288070d73b990925c6a652adc32f632ad1f69173134feda18649be1d8306e1bbd3178be52ac1fb2c8c2067ccac7b60300d536b1b5855d0ae5ffa7b90a4da0caeba4ca6048eab16fffb72941b2f1d9a8608a07cf7ff99492c4960b7