gazyva.com.au

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2f:cf:17:f5:b8:4d:54:19:0b:3b:cc:a6:68:2f:55:8c:b3 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gazyva.com.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2f:cf:17:f5:b8:4d:54:19:0b:3b:cc:a6:68:2f:55:8c:b3
Serial Number (int): 277605403642312338420452217761677654199475
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fe:1a:c2:8b:13:74:75:dd:56:c8:8a:5a:6f:67:1d:14:2c:0b:f9:ca
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3f:ee:39:bd:e1:57:79:66:bf:27:a3:98:29:03:66:40:f1:66:bd:19
Fingerprint (sha256): 86:94:c8:4b:13:d4:77:d9:f4:55:3e:4d:ab:e6:32:69:97:d5:42:c8:d2:c6:18:07:6b:b4:1e:36:c6:96:ac:d3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gazyva.com.au

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gazyva.com.au

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

atulado.com.ec
bitacoraparaenfermeras.com.pe
bitacoraparaenfermeras.pe
dialogoroche.cl
dialogoroche.com
dialogoroche.com.ar
dialogoroche.com.bo
dialogoroche.com.br
dialogoroche.com.co
dialogoroche.com.ec
dialogoroche.com.mx
dialogoroche.com.pe
dialogoroche.com.uy
dialogorochecac.com
emactiva.cl
ensemblecontrefpi.be
ensemblecontrefpi.fr
esbriet.com.au
esbriet.eu
fightipf.bg
fightipf.ca
fightipf.com
fightipf.de
fightipf.gr
fightipf.it
fightipf.si
fondationroche.org
foundationmedicine-cac.com
foundationmedicine-la.com
foundationmedicine.be
foundationmedicine.bg
foundationmedicine.cl
foundationmedicine.co
foundationmedicine.com.ar
foundationmedicine.com.au
foundationmedicine.com.br
foundationmedicine.com.uy
foundationmedicine.cz
foundationmedicine.de
foundationmedicine.dk
foundationmedicine.ec
foundationmedicine.fi
foundationmedicine.it
foundationmedicine.lt
foundationmedicine.lv
foundationmedicine.pl
foundationmedicine.ro
foundationmedicineasia.com
gazyva.com.au
ieepo.com
latamrochepressday.com
luchaporlafpi.es
medichanzo.com
medichanzo.net
medichanzo.org
mircera.com.au
nimblegen.com
ocrelizumabinfo.global
roche-cac.com
roche-diagnostics.fr
roche-infohub.co.za
roche-online.ch
roche.at
roche.ba
roche.bg
roche.by
roche.co.id
roche.co.uk
roche.co.za
roche.com.bd
roche.com.mx
roche.com.pe
roche.com.uy
roche.ee
roche.es
roche.ge
roche.ie
roche.it
roche.lt
roche.mk
roche.no
roche.pl
roche.ro
roche.si
roche.ua
rocheamericalatina.com
rochefoundationmedicine.com
rocheinteract.com.au
rochemd.bg
rochemed.gr
rocheonline.ch
rochepharmaprocurement.com
rocheplus.es
rochepro.be
tarceva.global
tiempodevivir.com.co
vechtentegenipf.be
walczzipf.pl
zelborafcotellic.com.au

Other certificates including the domain name gazyva.com.au

(limited to 100 certificates)
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
sni.cloudflaressl.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
gazyva.com.au
gazyva.com.au
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
careers.roche.com

Certificate

The complete raw certificate details for gazyva.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINOjCCDCKgAwIBAgISAy/PF/W4TVQZCzvMpmgvVYyzMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAxMzExMjQ1MzFaFw0x
OTA1MDExMjQ1MzFaMBgxFjAUBgNVBAMTDWdhenl2YS5jb20uYXUwggIiMA0GCSqG
SIb3DQEBAQUAA4ICDwAwggIKAoICAQDR+kc8DVHX4Ac6sxQim0tyhGLxNdc0XcbE
VHyTK5rR5avMrMXgp3ES1fdbSscZv0QE5tR8r9CgD5K1Cg2zbDmTUL4O0TQm5kuP
tbH+/+gE3nH4AqyrGx99/h7h1FZQI3llA7wYoyOJIKXWKH8KGOGrucqhOvf9BOmE
//rdMEHMUadaeZDb5C3w/rGaqLJ7Fzqle9QqEZ4fBCreegYeNPStZy1uzgdJ/cfS
pJJSOyewy4V7rPBQ23ZACR0j8DOAZqfIr5jmtZ7NjWcnmGLnFxjtQn4w2QX++J/0
kZwcGTerGPSwumsZrOjbAPoVvFlJGDDLEWxted8p1s2jtfI9jdhAJ7wJuHsffWEH
l9z5waMFPRvsMvmREUf33NzM6gkJQVn2lmRIOie/lx+FGoM+IgM111n3l9I3waWE
2qQ6JC+KYlqV8RfgMaHzhrpFusNryPKJ9NW6ezliIf+Ys/r2MYVpUbIQ8/KmvS0V
lNN8ptHR9C8ETHZ0HkBWIDtU7qmCRFQxh0hUY5xCEWXTjUdJ/M8yaSPgMqoqwMWm
rS7rj6n4ixVst+Z3UoThfy1lWfe01/Pjqju557zvQLaO2hXzjNuuWYKvstK4ezKW
hrxAKZ+QQobs6/RFuYKjh+vtDic0vVWEp00RxxY41T5Wy4ZxL3NgN4RAja8SmYcU
mc+QMRxwTQIDAQABo4IJSjCCCUYwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBT+GsKL
E3R13VbIilpvZx0ULAv5yjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js
oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14
My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14
My5sZXRzZW5jcnlwdC5vcmcvMIIG/gYDVR0RBIIG9TCCBvGCDmF0dWxhZG8uY29t
LmVjgh1iaXRhY29yYXBhcmFlbmZlcm1lcmFzLmNvbS5wZYIZYml0YWNvcmFwYXJh
ZW5mZXJtZXJhcy5wZYIPZGlhbG9nb3JvY2hlLmNsghBkaWFsb2dvcm9jaGUuY29t
ghNkaWFsb2dvcm9jaGUuY29tLmFyghNkaWFsb2dvcm9jaGUuY29tLmJvghNkaWFs
b2dvcm9jaGUuY29tLmJyghNkaWFsb2dvcm9jaGUuY29tLmNvghNkaWFsb2dvcm9j
aGUuY29tLmVjghNkaWFsb2dvcm9jaGUuY29tLm14ghNkaWFsb2dvcm9jaGUuY29t
LnBlghNkaWFsb2dvcm9jaGUuY29tLnV5ghNkaWFsb2dvcm9jaGVjYWMuY29tggtl
bWFjdGl2YS5jbIIUZW5zZW1ibGVjb250cmVmcGkuYmWCFGVuc2VtYmxlY29udHJl
ZnBpLmZygg5lc2JyaWV0LmNvbS5hdYIKZXNicmlldC5ldYILZmlnaHRpcGYuYmeC
C2ZpZ2h0aXBmLmNhggxmaWdodGlwZi5jb22CC2ZpZ2h0aXBmLmRlggtmaWdodGlw
Zi5ncoILZmlnaHRpcGYuaXSCC2ZpZ2h0aXBmLnNpghJmb25kYXRpb25yb2NoZS5v
cmeCGmZvdW5kYXRpb25tZWRpY2luZS1jYWMuY29tghlmb3VuZGF0aW9ubWVkaWNp
bmUtbGEuY29tghVmb3VuZGF0aW9ubWVkaWNpbmUuYmWCFWZvdW5kYXRpb25tZWRp
Y2luZS5iZ4IVZm91bmRhdGlvbm1lZGljaW5lLmNsghVmb3VuZGF0aW9ubWVkaWNp
bmUuY2+CGWZvdW5kYXRpb25tZWRpY2luZS5jb20uYXKCGWZvdW5kYXRpb25tZWRp
Y2luZS5jb20uYXWCGWZvdW5kYXRpb25tZWRpY2luZS5jb20uYnKCGWZvdW5kYXRp
b25tZWRpY2luZS5jb20udXmCFWZvdW5kYXRpb25tZWRpY2luZS5jeoIVZm91bmRh
dGlvbm1lZGljaW5lLmRlghVmb3VuZGF0aW9ubWVkaWNpbmUuZGuCFWZvdW5kYXRp
b25tZWRpY2luZS5lY4IVZm91bmRhdGlvbm1lZGljaW5lLmZpghVmb3VuZGF0aW9u
bWVkaWNpbmUuaXSCFWZvdW5kYXRpb25tZWRpY2luZS5sdIIVZm91bmRhdGlvbm1l
ZGljaW5lLmx2ghVmb3VuZGF0aW9ubWVkaWNpbmUucGyCFWZvdW5kYXRpb25tZWRp
Y2luZS5yb4IaZm91bmRhdGlvbm1lZGljaW5lYXNpYS5jb22CDWdhenl2YS5jb20u
YXWCCWllZXBvLmNvbYIWbGF0YW1yb2NoZXByZXNzZGF5LmNvbYIQbHVjaGFwb3Js
YWZwaS5lc4IObWVkaWNoYW56by5jb22CDm1lZGljaGFuem8ubmV0gg5tZWRpY2hh
bnpvLm9yZ4IObWlyY2VyYS5jb20uYXWCDW5pbWJsZWdlbi5jb22CFm9jcmVsaXp1
bWFiaW5mby5nbG9iYWyCDXJvY2hlLWNhYy5jb22CFHJvY2hlLWRpYWdub3N0aWNz
LmZyghNyb2NoZS1pbmZvaHViLmNvLnphgg9yb2NoZS1vbmxpbmUuY2iCCHJvY2hl
LmF0gghyb2NoZS5iYYIIcm9jaGUuYmeCCHJvY2hlLmJ5ggtyb2NoZS5jby5pZIIL
cm9jaGUuY28udWuCC3JvY2hlLmNvLnphggxyb2NoZS5jb20uYmSCDHJvY2hlLmNv
bS5teIIMcm9jaGUuY29tLnBlggxyb2NoZS5jb20udXmCCHJvY2hlLmVlgghyb2No
ZS5lc4IIcm9jaGUuZ2WCCHJvY2hlLmllgghyb2NoZS5pdIIIcm9jaGUubHSCCHJv
Y2hlLm1rgghyb2NoZS5ub4IIcm9jaGUucGyCCHJvY2hlLnJvgghyb2NoZS5zaYII
cm9jaGUudWGCFnJvY2hlYW1lcmljYWxhdGluYS5jb22CG3JvY2hlZm91bmRhdGlv
bm1lZGljaW5lLmNvbYIUcm9jaGVpbnRlcmFjdC5jb20uYXWCCnJvY2hlbWQuYmeC
C3JvY2hlbWVkLmdygg5yb2NoZW9ubGluZS5jaIIacm9jaGVwaGFybWFwcm9jdXJl
bWVudC5jb22CDHJvY2hlcGx1cy5lc4ILcm9jaGVwcm8uYmWCDnRhcmNldmEuZ2xv
YmFsghR0aWVtcG9kZXZpdmlyLmNvbS5jb4ISdmVjaHRlbnRlZ2VuaXBmLmJlggx3
YWxjenppcGYucGyCF3plbGJvcmFmY290ZWxsaWMuY29tLmF1MEwGA1UdIARFMEMw
CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j
cHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHUAY/Lb
zeg7zCzPC3KEJ1drM6SNYXePvXWmOLHHaFRL2I0AAAFopChOuQAABAMARjBEAiA4
kQ4UK+lYpNfK0Cltj1b5M1YzULfEFC/2NYJYZtPY2gIgeSZ0FQFq89IwsvO+AKKn
4Zzy54AtXaoH4in678q3YzsAdwB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnm
EHvMVgAAAWikKFCpAAAEAwBIMEYCIQCfdJiHAzFZoaRZ2kfOXVU3O5WHOb/EHPQQ
7g4VnLsNvgIhANjuVp0tAWBQ6BkUgwTdmNaeFT97imw7Ldhk4tt1vySSMA0GCSqG
SIb3DQEBCwUAA4IBAQA59Hg4v0r/yizPLkINuMbxi+J6bdoAlbadcRpKW1TCfPoo
dZtLp3UuGHjW22XQxRS5PRsIIoiao2RPlVpz+O0/DPYA+h6yvXisYbUOglmLrRYF
3igavPM+YDlkzPfIBdyvb+60uavZMNypbe06RFmUXTcvovX9qTR75xyFGqOWCFpU
u/uJ4w4w4cOV96MPqo4i0e8gjzkrL3hpx10OwK3RwGTcabzvl0l9EwFwaIlt2lOZ
7bdfMNr8X9UhPcRgQtI0mvMWUrefTg99i3dfx3TPyXxdX1YB1RN2jCco8xt0hPCp
yQabLB0q36ORnPxepcQJ1yiHADCPW6Ga2TJaF45C
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277605403642312338420452217761677654199475
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-31 12:45:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-01 12:45:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gazyva.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 856634072009386669321720948713267508042711604064984700830855887682193310595331406045250271204605838634165535889551811809835722467451103704457701040952709237383535109553332357572046132210630181505998440449184050762353789983287419966730421586278116921588512043226907477601389997456320611577131281553968379142833510633384160766145488749446624807087039798842543214894181756307783933347464809342345763097174008319645306360039576596707840149439512080072537576922905360306293905710149162917627356797335994158140362789055965726158244640621601685352871788834797535813868859589066004966775341890444155584029047417762509196370619110715214547963421949818168305011050442588697853015728463721332548357925556393320824108054493093275898073907741110540154084816747917867246451338685542346246755687312303202460449739605903010496614571241585880867833485728833728289394764334083574764340709519631444217786856357280918004256343628352540509918400259066947284669396946539892770399815982220722024832866984643209888040031252948022261779731543629158041334572258506848991774722382555357018510084507448197993619795005540629098801182401042791350340004824622042509390820733909583816582351709677927084022859840396594236286366673773923275019153756647310931800125517
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fe1ac28b137475dd56c88a5a6f671d142c0bf9ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1781 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atulado.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitacoraparaenfermeras.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitacoraparaenfermeras.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com.bo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogorochecac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emactiva.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ensemblecontrefpi.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ensemblecontrefpi.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esbriet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esbriet.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fightipf.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fightipf.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fightipf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fightipf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fightipf.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fightipf.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fightipf.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fondationroche.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine-cac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine-la.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicineasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gazyva.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ieepo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latamrochepressday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luchaporlafpi.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medichanzo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medichanzo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medichanzo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mircera.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nimblegen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocrelizumabinfo.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-cac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-diagnostics.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-infohub.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-online.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.by'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.com.bd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ge'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocheamericalatina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochefoundationmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocheinteract.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochemd.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochemed.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocheonline.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochepharmaprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocheplus.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochepro.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tarceva.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiempodevivir.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vechtentegenipf.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walczzipf.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zelborafcotellic.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000168a4284eb90000040300463044022038910e142be958a4d7cad0296d8f56f933563350b7c4142ff635825866d3d8da022079267415016af3d230b2f3be00a2a7e19cf2e7802d5daa07e229faefcab7633b007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000168a42850a900000403004830460221009f749887033159a1a459da47ce5d55373b958739bfc41cf410ee0e159cbb0dbe022100d8ee569d2d016050e819148304dd98d69e153f7b8a6c3b2dd864e2db75bf2492
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0039f47838bf4affca2ccf2e420db8c6f18be27a6dda0095b69d711a4a5b54c27cfa28759b4ba7752e1878d6db65d0c514b93d1b0822889aa3644f955a73f8ed3f0cf600fa1eb2bd78ac61b50e82598bad1605de281abcf33e603964ccf7c805dcaf6feeb4b9abd930dca96ded3a4459945d372fa2f5fda9347be71c851aa396085a54bbfb89e30e30e1c395f7a30faa8e22d1ef208f392b2f7869c75d0ec0add1c064dc69bcef97497d13017068896dda5399edb75f30dafc5fd5213dc46042d2349af31652b79f4e0f7d8b775fc774cfc97c5d5f5601d513768c2728f31b7484f0a9c9069b2c1d2adfa3919cfc5ea5c409d7288700308f5ba19ad9325a178e42