careers.roche.com

- F. Hoffmann-La Roche AG -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 28:6e:60:5f:0f:f6:7a:08:98:76:e9:06:6f:80:a5:a2 was issued on by GeoTrust Inc..

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

F. Hoffmann-La Roche AG

Organization: F. Hoffmann-La Roche AG
State / Province: Basel-Stadt
Locality: Basel
Country: CH

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 28:6e:60:5f:0f:f6:7a:08:98:76:e9:06:6f:80:a5:a2
Serial Number (int): 53742227128773102556979869379335333282
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): b3:09:40:eb:99:c2:1e:5e:4c:16:f8:54:07:fe:2f:88:9f:2d:a4:8c
Fingerprint (sha256): 88:33:a4:c2:78:93:91:2b:ba:63:c2:fc:25:54:8e:b2:e6:73:e2:df:9d:00:32:cd:53:5f:a4:64:70:05:37:81

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate careers.roche.com

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for careers.roche.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.dialogoroche.com.ec.uat-dialogo.preprod.opengarden.rch.cm
www.dialogoroche.com.co
www.ipfzone.com.uat-esbriethub.preprod.opengarden.rch.cm
www.rocheinteract.com.au
www.dialogorochecac.com
rheumatology.medical.ly
author.psp.dev.opengarden.rch.cm
ch.hcpnext.preprod.opengarden.rch.cm
rheumatology.publish.uat-pdmahub.prod.opengarden.rch.cm
www.fightipf.de
publish.uat-pdmahub.preprod.opengarden.rch.cm
www.dialogoroche.com.uat-dialogo.prod.opengarden.rch.cm
www.rochetudastar.hu
www.dialogoroche.com.uy
www.licht-an-fuer-ms.de
www.ipfzone.com
www.infomedics.it
pl.hcpnext.preprod.opengarden.rch.cm
www.dialogoroche.com.mx
fr.hcpnext.preprod.opengarden.rch.cm
www.rocheonline.se
pt.hcpnext.preprod.opengarden.rch.cm
www.melanoominfo.nl.uat-mmomentum.preprod.opengarden.rch.cm
rocheinteract.com.au
content.bioclinicien.fr
rheumatology.medically.roche.com
www.mmomentumexample.com.uat-mmomentum.prod.opengarden.rch.cm
www.foundationmedicine.com.sg.fmi.preprod.opengarden.rch.cm
www.emactiva.cl
www.melanoominfo.nl.uat-mmomentum.prod.opengarden.rch.cm
www.roche.fi
www.msdiseaseactivity.com.uat-msd.preprod.opengarden.rch.cm
mystudies.roche.com
www.foundationmedicineasia.com.uat-fmi.preprod.opengarden.rch.cm
emactiva.cl
www.foundationmedicine.com.sg
fightipf.de
www.dialogoroche.com.br
www.rochemed.gr
www.msdiseaseactivity.com
dialogoroche.com
oncology.medically.roche.com
www.foundationmedicineasia.com
www.msdiseaseactivity.co.uk
msdiseaseactivity.com
www.roche.at
respiratory.medical.ly
ipfzone.com
www.latamrochepressday.com
www.ipfzone.com.uat-esbriethub.prod.opengarden.rch.cm
www.mmomentum.br.uat-mmomentum.prod.opengarden.rch.cm
www.dialogoroche.com.ve
www.roche-oncology.ch
nl.hcpnext.preprod.opengarden.rch.cm
foundationmedicineasia.com
www.dialogoroche.com.pe
www.melanoominfo.nl
www.licht-an-fuer-ms.de.uat-msd.preprod.opengarden.rch.cm
www.dialogoroche.com
www.mmomentum.br.uat-mmomentum.preprod.opengarden.rch.cm
medically.roche.com
es.hcpnext.preprod.opengarden.rch.cm
www.medical.ly
www.gazyva.com.au
www.fightipf.de.uat-mmomentum.preprod.opengarden.rch.cm
www.foundationmedicine.com.sg.uat-fmi.preprod.opengarden.rch.cm
gazyva.com.au
www.roche.co.uk
publish.uat-pdmahub.prod.opengarden.rch.cm
www.mmomentum.net.uat-mmomentum.prod.opengarden.rch.cm
www.rocheinteract.com.au.uat-rocheinteract-pp.rch.cm
foundationmedicine.com.sg
respiratory.medically.roche.com
www.roche.ie
live.digitalfactory.roche.com
at.hcpnext.preprod.opengarden.rch.cm
www.dialogoroche.com.ar
www.dialogoroche.com.uat-dialogo.preprod.opengarden.rch.cm
medical.ly
rheumatology.publish.uat-pdmahub.preprod.opengarden.rch.cm
www.mmomentumexample.com.uat-mmomentum.preprod.opengarden.rch.cm
www.emactiva.cl.uat-msd.preprod.opengarden.rch.cm
www.foundationmedicineasia.com.uat-fmi.prod.opengarden.rch.cm
oncology.medical.ly
uk2.hcpnext.preprod.opengarden.rch.cm
www.rocheplus.es
www.msdiseaseactivity.co.uk.uat-msd.preprod.opengarden.rch.cm
careers.roche.com

Other certificates including the domain name roche.com

(limited to 100 certificates)
involve.roche.com
www.hpv16and18.com
easydrive-uat.roche.com
advancedanalytics.roche.com
main.rhelp.roche.com
sni.cloudflaressl.com
magentocloud28.map.fastly.net
rbalvprexd0.bas.roche.com
cieas01.roche.com
harmonytest.de
sequencing.roche.com
esource.roche.com
e-medical.roche.com
esource.roche.com
coaguchek.com
rsmsourcing.roche.com
deimos.roche.com
cert2.roche.com
sni.cloudflaressl.com
cdn.appstore.gene.com
shpivee1-01.roche.com
eews-dev.roche.com
myaccess.roche.com
ican.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
cert3.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
mrdivee2-02.netlab.roche.com
rodip.roche.com
nsrdcongresses.roche.com
rbavxsentry11.bas.roche.com
mobilesolution-dev.roche.com
wamua.roche.com
dialog-62-test.roche.com
rocheggcpac.roche.com
san-003.ceros.com
video.hive.roche.com
sni.cloudflaressl.com
rssg.roche.com
mftemeaext.roche.com
anadisuat01.sc1.roche.com
careers.roche.com
flow.roche.com
cert3.roche.com
sni.cloudflaressl.com
misp.roche.com
cert2.roche.com
careers.roche.com
api.rockwizz.roche.com
bitbucket-nala-qa.roche.com
careers.roche.com
wamdev.roche.com
sonar-dev-old.roche.com
diauxhub.roche.com
careers.roche.com
globalfms.roche.com
san-003.ceros.com
sc1lvflexq2.sc1.roche.com
easydrive-dev.roche.com
send-tst.roche.com
indigrow.roche.com
careers.roche.com
careers.roche.com
env5-remotedashboard.roche.com
mrd25.me
cert2.roche.com
*.esrv-hub-uat.roche.com
sb.eu.phcaa.science.roche.com
san-003.ceros.com
extaccess-nala.roche.com
magentocloud28.map.fastly.net
go.roche.com
magentocloud32.map.fastly.net
sni.cloudflaressl.com
ssl882748.cloudflaressl.com
sni.cloudflaressl.com
esrv-marketplace-dev.roche.com
careers.roche.com
imcore.roche.com
booster.roche.com
sni.cloudflaressl.com
akamai-san195.exacttarget.com
raumbuch.roche.com
pitas01.roche.com
sni.cloudflaressl.com
c1edb.roche.com
magentocloud45.map.fastly.net
shpivee1-01.roche.com
hpv16and18.com
hivemind.roche.com
searchsquad.roche.com
cferondanetrochedia-qa.roche.com
esign.roche.com
diaitsupport.roche.com
sni.cloudflaressl.com
magentocloud32.map.fastly.net
r32web.sap.roche.com
apis.cwp.roche.com

Certificate

The complete raw certificate details for careers.roche.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2E2XxipJj0G0iDtVvlvD
ZGNdOY62y7MsO83dPEk3TkWX7yAHrAfWOEGFQxtH8sqN4P5XRcdC4uiUR3ERpgar
mydD8f1dBNGbqzfZ3LviuKj2ZADdNl4dMfRNgHd+7o8BuNJcNPYxcJi3xSGt45sJ
fJPvt7OHKChC01FBIT6A+eVLw8FYIinEzuewOiqkmubeI07QpesfGP1Mt40ZF/R7
cJt6rlvvrI8vrcnw8wbcM9v7uTMe5zngg2wJKRZD6/TEy2r+Dv/nGjR8m3OudMw8
ix/fJQukvFBRxhNLBeAm3qMFte94QsA52Cn4z0wK6ep9/0fLDpikdoSBkh3UwNEu
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 53742227128773102556979869379335333282
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Basel-Stadt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Basel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'F. Hoffmann-La Roche AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'careers.roche.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27305736341699966497182086257229996450365148925461725449021834973078444161171466402095828554047880189442349747238033833827042215037959513579949140436739643288438337705031442158427086694619234052187524941899674032609702035037383739608190575787362901906035028208170775549813550479769942416931873026305071250815215448567888480499483243385878074643049754838731569407949395591618568852970468540138009130870561658891840867699498943867452792061830274193939823187081312470065046900914490027777936079054099267114390732146924902121871058962459369623685671222530617806766569043407149315997965180194683052273387173783431124430467
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3034 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.ec.uat-dialogo.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipfzone.com.uat-esbriethub.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheinteract.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogorochecac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rheumatology.medical.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author.psp.dev.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ch.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rheumatology.publish.uat-pdmahub.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fightipf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publish.uat-pdmahub.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.uat-dialogo.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochetudastar.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.licht-an-fuer-ms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipfzone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.infomedics.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheonline.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pt.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melanoominfo.nl.uat-mmomentum.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocheinteract.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.bioclinicien.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rheumatology.medically.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentumexample.com.uat-mmomentum.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.sg.fmi.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emactiva.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melanoominfo.nl.uat-mmomentum.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.com.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mystudies.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicineasia.com.uat-fmi.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emactiva.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fightipf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochemed.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oncology.medically.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicineasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msdiseaseactivity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'respiratory.medical.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipfzone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.latamrochepressday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipfzone.com.uat-esbriethub.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentum.br.uat-mmomentum.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche-oncology.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nl.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicineasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melanoominfo.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.licht-an-fuer-ms.de.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentum.br.uat-mmomentum.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medically.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medical.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gazyva.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fightipf.de.uat-mmomentum.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.sg.uat-fmi.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gazyva.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publish.uat-pdmahub.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentum.net.uat-mmomentum.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheinteract.com.au.uat-rocheinteract-pp.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'respiratory.medically.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.digitalfactory.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'at.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialogoroche.com.uat-dialogo.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medical.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rheumatology.publish.uat-pdmahub.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmomentumexample.com.uat-mmomentum.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emactiva.cl.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicineasia.com.uat-fmi.prod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oncology.medical.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk2.hcpnext.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheplus.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdiseaseactivity.co.uk.uat-msd.preprod.opengarden.rch.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.roche.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015f9aa9c7080000040300463044022016bb08cb4e687766b810b6699eaea94501b662628df718bcc6ce1c9a57fb2a4f022036dd216f7fc09920bb1aaf7416a7058405baf112fece99f48b0d1917a6cb6df9007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015f9aa9c740000004030046304402204903b1b5711d2f3e9a6eb3e2b756011a60eefa5f52dc069f5a3190bdc138d2a302204e8ade07c8fe28b8f796cfcc01291a64c8b5f0be4de77e85c2fd20b65b804911
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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