careers.roche.com

- F. Hoffmann-La Roche AG -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0f:a2:b7:2a:e7:35:ac:7e:6f:27:f3:5c:7b:df:56:0d was issued on by DigiCert Inc.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

F. Hoffmann-La Roche AG

Organization: F. Hoffmann-La Roche AG
Locality: Basel
Country: CH

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:a2:b7:2a:e7:35:ac:7e:6f:27:f3:5c:7b:df:56:0d
Serial Number (int): 20783287107952598940673538714276681229
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 13:72:6b:98:70:81:d1:55:a8:92:63:d5:25:17:1b:f1:65:ff:cf:32
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 90:f6:3a:77:8d:18:fe:b5:f2:8b:4d:ac:49:00:08:e0:27:6a:ba:e4
Fingerprint (sha256): 64:2f:90:eb:32:d5:60:ce:23:b6:1d:f8:a4:4c:b4:dd:d0:b6:ae:a7:a4:f9:c3:10:98:d5:da:5a:35:d7:e1:57

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate careers.roche.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for careers.roche.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

careers.roche.com
dialogoroche.com
ar.uat-rfm.preprod.opengarden.rch.cm
www.emactiva.cl.uat-msd.preprod.opengarden.rch.cm
ch.hcpnext.preprod.opengarden.rch.cm
www.foundationmedicine.com.ar
br.uat-rfm.prod.opengarden.rch.cm
www.latamrochepressday.com
www.dialogoroche.com
co.uat-rfm.preprod.opengarden.rch.cm
medically.roche.com
mx.uat-rfm.prod.opengarden.rch.cm
www.dialogoroche.com.ec.uat-dialogo.preprod.opengarden.rch.cm
mx.uat-rfm.preprod.opengarden.rch.cm
esbriet.com.au
emactiva.cl
www.dialogoroche.com.ec
www.esbriet.com.au
gazyva.uat-psp.prod.opengarden.rch.cm
ipfzone.com
www.msdiseaseactivity.com
www.ocrevus.global
pl.hcpnext.preprod.opengarden.rch.cm
rheumatology.publish.uat-pdmahub.preprod.opengarden.rch.cm
foundationmedicine-la.com
www.roche.ru
www.roche.at
www.ipfzone.com
gazyva.uat-psp.preprod.opengarden.rch.cm
www.dialogoroche.com.co
nl.hcpnext.preprod.opengarden.rch.cm
www.rocheplus.es
foundationmedicineasia.com
content.bioclinicien.fr
foundationmedicine.co
www.dialogoroche.com.mx
rheumatology.medically.roche.com
www.msdiseaseactivity.co.uk.uat-msd.preprod.opengarden.rch.cm
esbriet.uat-psp.prod.opengarden.rch.cm
rheumatology.publish.uat-pdmahub.prod.opengarden.rch.cm
respiratory.medically.roche.com
cl.uat-rfm.prod.opengarden.rch.cm
www.dialogoroche.com.pe
at.hcpnext.preprod.opengarden.rch.cm
publish.uat-pdmahub.preprod.opengarden.rch.cm
www.msdiseaseactivity.com.uat-msd.preprod.opengarden.rch.cm
foundationmedicine.com.sg
www.foundationmedicine.co
pt.hcpnext.preprod.opengarden.rch.cm
www.dialogoroche.com.uy
rocheinteract.com.au
www.dialogoroche.com.bo.uat-dialogo.preprod.opengarden.rch.cm
www.ipfzone.com.uat-esbriethub.preprod.opengarden.rch.cm
uk2.hcpnext.preprod.opengarden.rch.cm
www.dialogoroche.com.uat-dialogo.preprod.opengarden.rch.cm
www.roche.pl
www.foundationmedicineasia.com
www.dialogoroche.com.bo
fr.hcpnext.preprod.opengarden.rch.cm
www.foundationmedicineasia.com.uat-fmi.preprod.opengarden.rch.cm
esbriet.uat-psp.preprod.opengarden.rch.cm
www.foundationmedicine.cl
foundationmedicine.com.ar
fightipf.de
www.foundationmedicine-la.com
co.uat-rfm.prod.opengarden.rch.cm
www.roche.co.uk
www.foundationmedicine.com.sg
www.dialogorochecac.com
foundationmedicine.cl
msdiseaseactivity.com
www.gazyva.com.au
www.foundationmedicine.com.sg.fmi.preprod.opengarden.rch.cm
www.foundationmedicine.com.mx
gazyva.com.au
dialogoroche.com.bo.uat-dialogo.preprod.opengarden.rch.cm
www.dialogoroche.com.br
ocrevus.global
author.psp.dev.opengarden.rch.cm
www.rocheinteract.com.au
www.roche.fi
oncology.medically.roche.com
foundationmedicine.com.mx
cl.uat-rfm.preprod.opengarden.rch.cm
www.rocheinteract.com.au.uat-rocheinteract-pp.rch.cm
www.fightipf.de
www.emactiva.cl
mystudies.roche.com
www.dialogoroche.com.ar
www.dialogoroche.cl
www.dialogoroche.com.ve
ar.uat-rfm.prod.opengarden.rch.cm
foundationmedicine.com.br
www.foundationmedicine.com.br
br.uat-rfm.preprod.opengarden.rch.cm
es.hcpnext.preprod.opengarden.rch.cm
www.roche.ie

Other certificates including the domain name roche.com

(limited to 100 certificates)
involve.roche.com
www.hpv16and18.com
easydrive-uat.roche.com
advancedanalytics.roche.com
main.rhelp.roche.com
sni.cloudflaressl.com
magentocloud28.map.fastly.net
rbalvprexd0.bas.roche.com
cieas01.roche.com
harmonytest.de
sequencing.roche.com
esource.roche.com
e-medical.roche.com
esource.roche.com
coaguchek.com
rsmsourcing.roche.com
deimos.roche.com
cert2.roche.com
sni.cloudflaressl.com
cdn.appstore.gene.com
shpivee1-01.roche.com
eews-dev.roche.com
myaccess.roche.com
ican.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
cert3.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
mrdivee2-02.netlab.roche.com
rodip.roche.com
nsrdcongresses.roche.com
rbavxsentry11.bas.roche.com
mobilesolution-dev.roche.com
wamua.roche.com
dialog-62-test.roche.com
rocheggcpac.roche.com
san-003.ceros.com
video.hive.roche.com
sni.cloudflaressl.com
rssg.roche.com
mftemeaext.roche.com
anadisuat01.sc1.roche.com
careers.roche.com
flow.roche.com
cert3.roche.com
sni.cloudflaressl.com
misp.roche.com
cert2.roche.com
careers.roche.com
api.rockwizz.roche.com
bitbucket-nala-qa.roche.com
careers.roche.com
wamdev.roche.com
sonar-dev-old.roche.com
diauxhub.roche.com
careers.roche.com
globalfms.roche.com
san-003.ceros.com
sc1lvflexq2.sc1.roche.com
easydrive-dev.roche.com
send-tst.roche.com
indigrow.roche.com
careers.roche.com
careers.roche.com
env5-remotedashboard.roche.com
mrd25.me
cert2.roche.com
*.esrv-hub-uat.roche.com
sb.eu.phcaa.science.roche.com
san-003.ceros.com
extaccess-nala.roche.com
magentocloud28.map.fastly.net
go.roche.com
magentocloud32.map.fastly.net
sni.cloudflaressl.com
ssl882748.cloudflaressl.com
sni.cloudflaressl.com
esrv-marketplace-dev.roche.com
careers.roche.com
imcore.roche.com
booster.roche.com
sni.cloudflaressl.com
akamai-san195.exacttarget.com
raumbuch.roche.com
pitas01.roche.com
sni.cloudflaressl.com
c1edb.roche.com
magentocloud45.map.fastly.net
shpivee1-01.roche.com
hpv16and18.com
hivemind.roche.com
searchsquad.roche.com
cferondanetrochedia-qa.roche.com
esign.roche.com
diaitsupport.roche.com
sni.cloudflaressl.com
magentocloud32.map.fastly.net
r32web.sap.roche.com
apis.cwp.roche.com

Certificate

The complete raw certificate details for careers.roche.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8HeYKURPO793qo2DiQbm
2OukhpGQMRWaDRNuEeWlNOgXCMsrSxLeS4dq9xXyYg+TT5LBd8EWMSwVPBOo1+n4
PgRRpExMmhxQoefzLPU3vaLgJ4uCrzRK+b9LLnIVFlDl2rROv9E/1bYzBxwo+qhd
yjqWGkzKB22Am+PBHz8HpWADCK7oG42aBeT6ipUfRZKwOoZ/7fpbx4aqOvZLAnRc
XJQR8KjBPfcYYE97gqjO6l6zwAVsOAw51zxsm+1f0fqbszhYsAmT+lfkbsl4BtE6
p2VkJOHgbyV72NydNvRUaDctJ9HFtCq6gEoFjvTL3DTgAMgZyBwW/Mr+2qIBNRwT
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20783287107952598940673538714276681229
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-19 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Basel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'F. Hoffmann-La Roche AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'careers.roche.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30356167378473257771203308564819799304047023461201858599694605247552333320035124425734139828008245674336323496510850597415941511519253079033189494042286992374191214306463439331282529909065539432780519108765581826760435819365728870566659978767610159718591868100577137012804453122173084103027371742949660198946150361101745318230350284665046016013746891337106337189986960429227917073663552918340604714856202860261311248220748418082124946851185844824801440214806811925079057702636188006743911105995639588486026439983589009363378452452124324940874050867459538742676956261628278538424340107359710345248104264056781410145209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							13726b987081d155a89263d525171bf165ffcf32
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3066 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.uat-rfm.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emactiva.cl.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ch.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'br.uat-rfm.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.latamrochepressday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'co.uat-rfm.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medically.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx.uat-rfm.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.ec.uat-dialogo.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx.uat-rfm.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esbriet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emactiva.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esbriet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gazyva.uat-psp.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipfzone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ocrevus.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rheumatology.publish.uat-pdmahub.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine-la.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipfzone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gazyva.uat-psp.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nl.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheplus.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicineasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.bioclinicien.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rheumatology.medically.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.co.uk.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esbriet.uat-psp.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rheumatology.publish.uat-pdmahub.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'respiratory.medically.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cl.uat-rfm.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'at.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publish.uat-pdmahub.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.com.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pt.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocheinteract.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.bo.uat-dialogo.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipfzone.com.uat-esbriethub.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk2.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.uat-dialogo.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicineasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.bo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicineasia.com.uat-fmi.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esbriet.uat-psp.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fightipf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine-la.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'co.uat-rfm.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogorochecac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msdiseaseactivity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gazyva.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.sg.fmi.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gazyva.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com.bo.uat-dialogo.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocrevus.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author.psp.dev.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheinteract.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oncology.medically.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cl.uat-rfm.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheinteract.com.au.uat-rocheinteract-pp.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fightipf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emactiva.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mystudies.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.uat-rfm.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'br.uat-rfm.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.ie'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002870e931248c2559796fecbeafe305129ac9db6eb2380d375213964beecbdb026b9378df5fbfc1e8105353e3aabd9827ab8e56a6645ca6f645a48101de969b7784ea8585d6fae9b70d7ce048a550b4fcd4769b86c97f886748b425d1b1492df7b1439b6703b659a9f71e5ae14c41f1dae7a162e67918fe1b972c3b9c05f3a3a170f8a5c51cb6d520b41511c199cca132183be14f00a9fbe21c4137122a6a9d55b70ac645fe8f4257dbb4588709b5add651babb0c064d7f178f4adb6863c122c55aa32825f4fe9c9485380462d247ccb3ef60710430d15de02272f52e4a51fe622396eb8b5e562f0c41f385b36b305434aa2f69541a660a57f247f3db50ab36a9