gazyva.com.au

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:57:77:2b:10:e8:39:f6:87:88:f4:cd:89:46:a8:a9:0a:a1 was issued on by Let's Encrypt.

With 49 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gazyva.com.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:57:77:2b:10:e8:39:f6:87:88:f4:cd:89:46:a8:a9:0a:a1
Serial Number (int): 291099825460583134290742236465908498893473
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 66:d6:7b:ee:74:5f:cd:26:95:0f:43:71:b2:1b:d1:03:83:e3:53:b3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0d:7d:56:a1:e4:28:50:9f:a2:ce:e3:7f:71:91:ad:6a:2a:b7:d1:63
Fingerprint (sha256): 87:63:16:94:4d:af:97:64:79:4a:a5:cb:71:70:77:9c:3f:51:1e:6a:00:ba:1a:6c:b0:8d:61:f7:83:55:de:b9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gazyva.com.au

49

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gazyva.com.au

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

esbriet.com.au
foundationmedicine-cac.com
foundationmedicine.bg
foundationmedicine.com.au
foundationmedicine.dk
foundationmedicine.lv
gazyva.com.au
latamrochepressday.com
medichanzo.com
medichanzo.net
medichanzo.org
mircera.com.au
nimblegen.com
roche-cac.com
roche-diagnostics.fr
roche-infohub.co.za
roche-online.ch
roche.at
roche.ba
roche.bg
roche.by
roche.co.id
roche.co.uk
roche.co.za
roche.com.bd
roche.com.mx
roche.com.pe
roche.com.uy
roche.ee
roche.es
roche.ge
roche.ie
roche.it
roche.lt
roche.mk
roche.no
roche.pl
roche.ro
roche.si
roche.ua
rocheinteract.com.au
rochemd.bg
rochemed.gr
rocheonline.ch
rochepharmaprocurement.com
rocheplus.es
rochepro.be
tiempodevivir.com.co
zelborafcotellic.com.au

Other certificates including the domain name gazyva.com.au

(limited to 100 certificates)
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
sni.cloudflaressl.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
gazyva.com.au
gazyva.com.au
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
careers.roche.com

Certificate

The complete raw certificate details for gazyva.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJOjCCCCKgAwIBAgISA1d3KxDoOfaHiPTNiUaoqQqhMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MDIwNzUwNDRaFw0x
OTEwMzEwNzUwNDRaMBgxFjAUBgNVBAMTDWdhenl2YS5jb20uYXUwggIiMA0GCSqG
SIb3DQEBAQUAA4ICDwAwggIKAoICAQDRHJvtXlo7VhcjAHc7BVidcmYUSINyLP6M
3j0Z60aXnwk42wyyUaSyUMgRz7FnD2TB6+40hNWgym4r1YOw2aDvQl/kWLU5P9Un
/a1kiIwVZB5zm2ymXWuqn1B7mRpzNRZ9c0iQin/0s0TyH1a5h7DN/E213j+1iCUb
9kgPb7bfgCcgeBiMaclXI1W1J/q/MowTw8n5AQTF0XzApO47mZuJrZbDyZN+xStN
zQUXE/AJAG1uvnbJ8H5BtT+MIZvdCvRxXXCSdxO/RGRI3utycycpfsCTNGBlmp2P
pGjJP8lVrq9t9tC+kfMlX59GQfTCclqQRAmA8v/pl10SizbiX2bSpU0zfSoDU4KD
rDfmjIn/DpftbYFay77H+cC9Ll1K57se+Q62hjZFmBsnx/D7KIbvsh1Vf8WGe0jm
QX2sdDJZgYWrE/lveFc09Sbtg8Qko5rTbSXqO5KTEavrvrhtpXkZdW4e5tqiuRPb
lsVEf43u00/oWeOiHQFCEZI8eHlQnG0kdD/IJUv1ZU7OASiO0h420/nKRUDMIilp
/2oU1fLhbDJLvgBoib0tnOgNXuRDKgbqy1zQ3o3ZUyBsyw5gmgNP1xdCbJ5du21D
IVTWbEfMEfAgZpry8Q1b+3SmbiFowofKh2H+SecrQx+TGB18nM3Qh5gCgfdWefoM
8YdCnDBNxwIDAQABo4IFSjCCBUYwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRm1nvu
dF/NJpUPQ3GyG9EDg+NTszAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js
oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14
My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14
My5sZXRzZW5jcnlwdC5vcmcvMIIC/gYDVR0RBIIC9TCCAvGCDmVzYnJpZXQuY29t
LmF1ghpmb3VuZGF0aW9ubWVkaWNpbmUtY2FjLmNvbYIVZm91bmRhdGlvbm1lZGlj
aW5lLmJnghlmb3VuZGF0aW9ubWVkaWNpbmUuY29tLmF1ghVmb3VuZGF0aW9ubWVk
aWNpbmUuZGuCFWZvdW5kYXRpb25tZWRpY2luZS5sdoINZ2F6eXZhLmNvbS5hdYIW
bGF0YW1yb2NoZXByZXNzZGF5LmNvbYIObWVkaWNoYW56by5jb22CDm1lZGljaGFu
em8ubmV0gg5tZWRpY2hhbnpvLm9yZ4IObWlyY2VyYS5jb20uYXWCDW5pbWJsZWdl
bi5jb22CDXJvY2hlLWNhYy5jb22CFHJvY2hlLWRpYWdub3N0aWNzLmZyghNyb2No
ZS1pbmZvaHViLmNvLnphgg9yb2NoZS1vbmxpbmUuY2iCCHJvY2hlLmF0gghyb2No
ZS5iYYIIcm9jaGUuYmeCCHJvY2hlLmJ5ggtyb2NoZS5jby5pZIILcm9jaGUuY28u
dWuCC3JvY2hlLmNvLnphggxyb2NoZS5jb20uYmSCDHJvY2hlLmNvbS5teIIMcm9j
aGUuY29tLnBlggxyb2NoZS5jb20udXmCCHJvY2hlLmVlgghyb2NoZS5lc4IIcm9j
aGUuZ2WCCHJvY2hlLmllgghyb2NoZS5pdIIIcm9jaGUubHSCCHJvY2hlLm1rgghy
b2NoZS5ub4IIcm9jaGUucGyCCHJvY2hlLnJvgghyb2NoZS5zaYIIcm9jaGUudWGC
FHJvY2hlaW50ZXJhY3QuY29tLmF1ggpyb2NoZW1kLmJnggtyb2NoZW1lZC5ncoIO
cm9jaGVvbmxpbmUuY2iCGnJvY2hlcGhhcm1hcHJvY3VyZW1lbnQuY29tggxyb2No
ZXBsdXMuZXOCC3JvY2hlcHJvLmJlghR0aWVtcG9kZXZpdmlyLmNvbS5jb4IXemVs
Ym9yYWZjb3RlbGxpYy5jb20uYXUwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYB
BAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5v
cmcwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgB0ftqDMa0zEJEhnM4lT0Jwwr/9
XkIgCMY3NXnmEHvMVgAAAWxRhi/yAAAEAwBHMEUCIQD6zCzrEeC2OkZ3FWV9lzn7
/SYatvTWmTIBgdjMuPA9sAIgNHao73mAr96Hdjk1ODlyDUBA2EpLgKxlCLSx3Fep
yXIAdgBj8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAWxRhjHeAAAE
AwBHMEUCIFsV3tMktqrwnUMwdqPA+gZKn+ah1sJZauOeic5mIx6ZAiEA7Yzq51Kf
R1aOFxH1swh5dcrPmHV3D+Fn/5ox+KimjokwDQYJKoZIhvcNAQELBQADggEBAEPK
Zemmk166OwJN5JEuu3hd97T8mvS9vYmBOJBjLj7OvDhDKqmeXHccLnHB54wWh4ws
Kgh5vq3USAVVorWvH2J6hGw7JNJtRmLWDxlQoeREz4F+yen3hUs44LstK9cD4ult
dfMed+iJe6avS8hPDOQvMzgatdhI/E1I7xQbssk5EaI5k77vNxnEw3qr0NaCWRNH
Fdpukzl88gJOXx1nHuIFwybZGx/7qnnqmX9f8q3rxeif5iHj+aDYJ7tTa8YT+OXe
wSE6tNyutaThEEiEOoS6WQzxKKvoZV5IUVQ+QnlYs3lq8eCNrv7jAMlRI7idU/F5
THajbDlFJ6r2LipQuOE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0Ryb7V5aO1YXIwB3OwVY
nXJmFEiDciz+jN49GetGl58JONsMslGkslDIEc+xZw9kwevuNITVoMpuK9WDsNmg
70Jf5Fi1OT/VJ/2tZIiMFWQec5tspl1rqp9Qe5kaczUWfXNIkIp/9LNE8h9WuYew
zfxNtd4/tYglG/ZID2+234AnIHgYjGnJVyNVtSf6vzKME8PJ+QEExdF8wKTuO5mb
ia2Ww8mTfsUrTc0FFxPwCQBtbr52yfB+QbU/jCGb3Qr0cV1wkncTv0RkSN7rcnMn
KX7AkzRgZZqdj6RoyT/JVa6vbfbQvpHzJV+fRkH0wnJakEQJgPL/6ZddEos24l9m
0qVNM30qA1OCg6w35oyJ/w6X7W2BWsu+x/nAvS5dSue7HvkOtoY2RZgbJ8fw+yiG
77IdVX/FhntI5kF9rHQyWYGFqxP5b3hXNPUm7YPEJKOa020l6juSkxGr6764baV5
GXVuHubaorkT25bFRH+N7tNP6Fnjoh0BQhGSPHh5UJxtJHQ/yCVL9WVOzgEojtIe
NtP5ykVAzCIpaf9qFNXy4WwyS74AaIm9LZzoDV7kQyoG6stc0N6N2VMgbMsOYJoD
T9cXQmyeXbttQyFU1mxHzBHwIGaa8vENW/t0pm4haMKHyodh/knnK0MfkxgdfJzN
0IeYAoH3Vnn6DPGHQpwwTccCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291099825460583134290742236465908498893473
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-02 07:50:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-31 07:50:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gazyva.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 853101527822431785447485757024225360794555969507147771466910008656473141241225555150350132881399708743515027044710311410512914293031463480426357372068178420027402776702147702586811296620979901441341870071106629557666140498885173348840843430473762874556006542029614644825962865155647532762765954982995155261503497931732822419657474488856922856622250535333245147399300645232250106694376461742761926957069703632201961002655913405650411123632649685127892464739731605693803093384373721885228043728071734450674211849108450226858966140576182601662325895838030947001623269190012053330630639878778193337010456458857760726961528068580324497582331892328196902342280617406291653566397129479018414256285162800062084577096404097603507021466776421515889704250192936849328622748959427392321257529598821654802175021760420410286893828576754487472123236561265421704281543461238896826654469163298218408346565960262751229757518886196212633447091179991796780289050714491840687183400670270708954626971195227424029812938840424981018265332606239702444029115641537553069627391379325208853611320200156565617830267466189859388331213837433183467348139069660642675436130956116119078003715875883111203940111730023448138556778902266221946732206356728185307167477191
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							66d67bee745fcd26950f4371b21bd10383e353b3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (757 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esbriet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine-cac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gazyva.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latamrochepressday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medichanzo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medichanzo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medichanzo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mircera.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nimblegen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-cac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-diagnostics.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-infohub.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-online.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.by'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.com.bd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ge'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocheinteract.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochemd.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochemed.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocheonline.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochepharmaprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocheplus.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochepro.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiempodevivir.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zelborafcotellic.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c51862ff20000040300473045022100facc2ceb11e0b63a467715657d9739fbfd261ab6f4d699320181d8ccb8f03db002203476a8ef7980afde877639353839720d4040d84a4b80ac6508b4b1dc57a9c97200760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c518631de000004030047304502205b15ded324b6aaf09d433076a3c0fa064a9fe6a1d6c2596ae39e89ce66231e99022100ed8ceae7529f47568e1711f5b3087975cacf9875770fe167ff9a31f8a8a68e89
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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