cert2.roche.com
- F. Hoffmann-La Roche AG -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 03:4b:e8:a8:78:b2:2b:47:ab:c1:9e:32:99:54:60:c6 was issued on by DigiCert Inc.
With 78 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
F. Hoffmann-La Roche AG
Organization:
F. Hoffmann-La Roche AG
State / Province:
Basel
Locality: Basel
Country: CH
Locality: Basel
Country: CH
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:4b:e8:a8:78:b2:2b:47:ab:c1:9e:32:99:54:60:c6Serial Number (int): 4381825118457803633105031942557163718
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 7d:96:e5:05:48:8b:79:1f:5a:74:2c:f5:9d:63:a6:72:e2:92:99:28
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): 4f:f5:d5:8d:10:ee:aa:62:fa:aa:f9:49:ef:bf:73:1d:e5:75:9e:ec
Fingerprint (sha256): a5:19:e3:ab:f0:df:b2:02:f9:d4:d6:14:00:5a:a3:ab:64:c7:ed:f1:63:24:f3:02:48:4b:ea:15:08:18:ce:f5
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl
Check the revocation status for certificate cert2.roche.com
78
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cert2.roche.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cert2.roche.com
rochefoundationmedicine.com
www.foundationmedicine.pe
foundationmedicine.pt
www.esbriet.eu
www.roche.ua
foundationmedicine.cz
www.roche.com.mx
www.foundationmedicine.fr
www.roche.ba
www.roche.lt
www.roche.com.pe
www.foundationmedicine.es
www.foundationmedicine.ro
foundationmedicine.bg
foundationmedicine.com.au
www.foundationmedicine.se
www.foundationmedicine-cac.com
foundationmedicine.se
foundationmedicine-cac.com
foundationmedicine.uk
www.roche.no
www.foundationmedicine.pt
roche.com.co
foundationmedicine.fr
www.foundationmedicine.lt
esbriet.eu
www.foundationmedicine.fi
foundationmedicine.it
roche-australia.com
foundationmedicine.lv
foundationmedicine.ch
www.roche.com.co
lymfominfo.se
foundationmedicine.fi
roche.co.id
foundationmedicine.sk
foundationmedicine.lt
foundationmedicine.de
www.foundationmedicine.sk
www.foundationmedicine.ch
www.foundationmedicine.no
www.roche.hr
www.roche-australia.com
www.forpatients.roche.com
aboutpv.roche.com
roche.com.pe
www.roche.co.id
foundationmedicine.nl
roche.ua
foundationmedicine.ec
roche.ba
www.lymfominfo.se
foundationmedicine.pe
www.aboutpv.roche.com
foundationmedicine.com.uy
www.foundationmedicine.lv
foundationmedicine.no
www.foundationmedicine.com.au
ean.ocrevus.global
roche.lt
roche.hr
forpatients.roche.com
www.foundationmedicine.bg
roche.com.mx
www.foundationmedicine.nl
www.foundationmedicine.cz
www.foundationmedicine.com.uy
www.foundationmedicine.uk
www.rochefoundationmedicine.com
www.foundationmedicine.it
roche.no
www.foundationmedicine.ec
foundationmedicine.ro
foundationmedicine.dk
www.foundationmedicine.dk
www.foundationmedicine.de
foundationmedicine.es
rochefoundationmedicine.com
www.foundationmedicine.pe
foundationmedicine.pt
www.esbriet.eu
www.roche.ua
foundationmedicine.cz
www.roche.com.mx
www.foundationmedicine.fr
www.roche.ba
www.roche.lt
www.roche.com.pe
www.foundationmedicine.es
www.foundationmedicine.ro
foundationmedicine.bg
foundationmedicine.com.au
www.foundationmedicine.se
www.foundationmedicine-cac.com
foundationmedicine.se
foundationmedicine-cac.com
foundationmedicine.uk
www.roche.no
www.foundationmedicine.pt
roche.com.co
foundationmedicine.fr
www.foundationmedicine.lt
esbriet.eu
www.foundationmedicine.fi
foundationmedicine.it
roche-australia.com
foundationmedicine.lv
foundationmedicine.ch
www.roche.com.co
lymfominfo.se
foundationmedicine.fi
roche.co.id
foundationmedicine.sk
foundationmedicine.lt
foundationmedicine.de
www.foundationmedicine.sk
www.foundationmedicine.ch
www.foundationmedicine.no
www.roche.hr
www.roche-australia.com
www.forpatients.roche.com
aboutpv.roche.com
roche.com.pe
www.roche.co.id
foundationmedicine.nl
roche.ua
foundationmedicine.ec
roche.ba
www.lymfominfo.se
foundationmedicine.pe
www.aboutpv.roche.com
foundationmedicine.com.uy
www.foundationmedicine.lv
foundationmedicine.no
www.foundationmedicine.com.au
ean.ocrevus.global
roche.lt
roche.hr
forpatients.roche.com
www.foundationmedicine.bg
roche.com.mx
www.foundationmedicine.nl
www.foundationmedicine.cz
www.foundationmedicine.com.uy
www.foundationmedicine.uk
www.rochefoundationmedicine.com
www.foundationmedicine.it
roche.no
www.foundationmedicine.ec
foundationmedicine.ro
foundationmedicine.dk
www.foundationmedicine.dk
www.foundationmedicine.de
foundationmedicine.es
Other certificates including the domain name roche.com
(limited to 100 certificates)
involve.roche.com
www.hpv16and18.com
easydrive-uat.roche.com
advancedanalytics.roche.com
main.rhelp.roche.com
sni.cloudflaressl.com
magentocloud28.map.fastly.net
rbalvprexd0.bas.roche.com
cieas01.roche.com
harmonytest.de
sequencing.roche.com
esource.roche.com
e-medical.roche.com
esource.roche.com
coaguchek.com
rsmsourcing.roche.com
deimos.roche.com
cert2.roche.com
sni.cloudflaressl.com
cdn.appstore.gene.com
shpivee1-01.roche.com
eews-dev.roche.com
myaccess.roche.com
ican.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
cert3.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
mrdivee2-02.netlab.roche.com
rodip.roche.com
nsrdcongresses.roche.com
rbavxsentry11.bas.roche.com
mobilesolution-dev.roche.com
wamua.roche.com
dialog-62-test.roche.com
rocheggcpac.roche.com
san-003.ceros.com
video.hive.roche.com
sni.cloudflaressl.com
rssg.roche.com
mftemeaext.roche.com
anadisuat01.sc1.roche.com
careers.roche.com
flow.roche.com
cert3.roche.com
sni.cloudflaressl.com
misp.roche.com
cert2.roche.com
careers.roche.com
api.rockwizz.roche.com
bitbucket-nala-qa.roche.com
careers.roche.com
wamdev.roche.com
sonar-dev-old.roche.com
diauxhub.roche.com
careers.roche.com
globalfms.roche.com
san-003.ceros.com
sc1lvflexq2.sc1.roche.com
easydrive-dev.roche.com
send-tst.roche.com
indigrow.roche.com
careers.roche.com
careers.roche.com
env5-remotedashboard.roche.com
mrd25.me
cert2.roche.com
*.esrv-hub-uat.roche.com
sb.eu.phcaa.science.roche.com
san-003.ceros.com
extaccess-nala.roche.com
magentocloud28.map.fastly.net
go.roche.com
magentocloud32.map.fastly.net
sni.cloudflaressl.com
ssl882748.cloudflaressl.com
sni.cloudflaressl.com
esrv-marketplace-dev.roche.com
careers.roche.com
imcore.roche.com
booster.roche.com
sni.cloudflaressl.com
akamai-san195.exacttarget.com
raumbuch.roche.com
pitas01.roche.com
sni.cloudflaressl.com
c1edb.roche.com
magentocloud45.map.fastly.net
shpivee1-01.roche.com
hpv16and18.com
hivemind.roche.com
searchsquad.roche.com
cferondanetrochedia-qa.roche.com
esign.roche.com
diaitsupport.roche.com
sni.cloudflaressl.com
magentocloud32.map.fastly.net
r32web.sap.roche.com
apis.cwp.roche.com
www.hpv16and18.com
easydrive-uat.roche.com
advancedanalytics.roche.com
main.rhelp.roche.com
sni.cloudflaressl.com
magentocloud28.map.fastly.net
rbalvprexd0.bas.roche.com
cieas01.roche.com
harmonytest.de
sequencing.roche.com
esource.roche.com
e-medical.roche.com
esource.roche.com
coaguchek.com
rsmsourcing.roche.com
deimos.roche.com
cert2.roche.com
sni.cloudflaressl.com
cdn.appstore.gene.com
shpivee1-01.roche.com
eews-dev.roche.com
myaccess.roche.com
ican.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
cert3.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
mrdivee2-02.netlab.roche.com
rodip.roche.com
nsrdcongresses.roche.com
rbavxsentry11.bas.roche.com
mobilesolution-dev.roche.com
wamua.roche.com
dialog-62-test.roche.com
rocheggcpac.roche.com
san-003.ceros.com
video.hive.roche.com
sni.cloudflaressl.com
rssg.roche.com
mftemeaext.roche.com
anadisuat01.sc1.roche.com
careers.roche.com
flow.roche.com
cert3.roche.com
sni.cloudflaressl.com
misp.roche.com
cert2.roche.com
careers.roche.com
api.rockwizz.roche.com
bitbucket-nala-qa.roche.com
careers.roche.com
wamdev.roche.com
sonar-dev-old.roche.com
diauxhub.roche.com
careers.roche.com
globalfms.roche.com
san-003.ceros.com
sc1lvflexq2.sc1.roche.com
easydrive-dev.roche.com
send-tst.roche.com
indigrow.roche.com
careers.roche.com
careers.roche.com
env5-remotedashboard.roche.com
mrd25.me
cert2.roche.com
*.esrv-hub-uat.roche.com
sb.eu.phcaa.science.roche.com
san-003.ceros.com
extaccess-nala.roche.com
magentocloud28.map.fastly.net
go.roche.com
magentocloud32.map.fastly.net
sni.cloudflaressl.com
ssl882748.cloudflaressl.com
sni.cloudflaressl.com
esrv-marketplace-dev.roche.com
careers.roche.com
imcore.roche.com
booster.roche.com
sni.cloudflaressl.com
akamai-san195.exacttarget.com
raumbuch.roche.com
pitas01.roche.com
sni.cloudflaressl.com
c1edb.roche.com
magentocloud45.map.fastly.net
shpivee1-01.roche.com
hpv16and18.com
hivemind.roche.com
searchsquad.roche.com
cferondanetrochedia-qa.roche.com
esign.roche.com
diaitsupport.roche.com
sni.cloudflaressl.com
magentocloud32.map.fastly.net
r32web.sap.roche.com
apis.cwp.roche.com
Certificate
The complete raw certificate details for cert2.roche.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIMzTCCC7WgAwIBAgIQA0voqHiyK0erwZ4ymVRgxjANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTgwODAzMDAwMDAwWhcN MTkwNjA3MTIwMDAwWjBpMQswCQYDVQQGEwJDSDEOMAwGA1UECBMFQmFzZWwxDjAM BgNVBAcTBUJhc2VsMSAwHgYDVQQKExdGLiBIb2ZmbWFubi1MYSBSb2NoZSBBRzEY MBYGA1UEAxMPY2VydDIucm9jaGUuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEA7OimR5RzGs7IbmXx393MTar6HPCLBN8VYx7hjSh1fcDpiTPjvDA+ fpbIE7f/R5YDE2mpN9rk5YucDMnB/CeftUcIJEdE1AGaA8MCibG1GLEgKRZGTEC+ VbYfXipcP/VuSE9tiq3rj0SsO2RrhT6S8GJwoa5EXFOhICH8hSMwq3k0VZlVROCJ 6HGT04x/rFiq6XasdQ4Xy6VVfiuOKEEPLh2v2znP4zmFNu4XQMbUkZiL14WmB4hR Lgbtnit6vOQ51gshIJVTqfjOtSZaGqqbKdWlu9ijy2ciIbJXBRZMbbVfkThxB5X8 YpkFm6BE8yedawvoNrsRG4XokF2U+0cVwwIDAQABo4IJizCCCYcwHwYDVR0jBBgw FoAUD4BhHIIxYdUvKOeNRji0LOHG2eIwHQYDVR0OBBYEFH2W5QVIi3kfWnQs9Z1j pnLikpkoMIIGxgYDVR0RBIIGvTCCBrmCD2NlcnQyLnJvY2hlLmNvbYIbcm9jaGVm b3VuZGF0aW9ubWVkaWNpbmUuY29tghl3d3cuZm91bmRhdGlvbm1lZGljaW5lLnBl ghVmb3VuZGF0aW9ubWVkaWNpbmUucHSCDnd3dy5lc2JyaWV0LmV1ggx3d3cucm9j aGUudWGCFWZvdW5kYXRpb25tZWRpY2luZS5jeoIQd3d3LnJvY2hlLmNvbS5teIIZ d3d3LmZvdW5kYXRpb25tZWRpY2luZS5mcoIMd3d3LnJvY2hlLmJhggx3d3cucm9j aGUubHSCEHd3dy5yb2NoZS5jb20ucGWCGXd3dy5mb3VuZGF0aW9ubWVkaWNpbmUu ZXOCGXd3dy5mb3VuZGF0aW9ubWVkaWNpbmUucm+CFWZvdW5kYXRpb25tZWRpY2lu ZS5iZ4IZZm91bmRhdGlvbm1lZGljaW5lLmNvbS5hdYIZd3d3LmZvdW5kYXRpb25t ZWRpY2luZS5zZYIed3d3LmZvdW5kYXRpb25tZWRpY2luZS1jYWMuY29tghVmb3Vu ZGF0aW9ubWVkaWNpbmUuc2WCGmZvdW5kYXRpb25tZWRpY2luZS1jYWMuY29tghVm b3VuZGF0aW9ubWVkaWNpbmUudWuCDHd3dy5yb2NoZS5ub4IZd3d3LmZvdW5kYXRp b25tZWRpY2luZS5wdIIMcm9jaGUuY29tLmNvghVmb3VuZGF0aW9ubWVkaWNpbmUu ZnKCGXd3dy5mb3VuZGF0aW9ubWVkaWNpbmUubHSCCmVzYnJpZXQuZXWCGXd3dy5m b3VuZGF0aW9ubWVkaWNpbmUuZmmCFWZvdW5kYXRpb25tZWRpY2luZS5pdIITcm9j aGUtYXVzdHJhbGlhLmNvbYIVZm91bmRhdGlvbm1lZGljaW5lLmx2ghVmb3VuZGF0 aW9ubWVkaWNpbmUuY2iCEHd3dy5yb2NoZS5jb20uY2+CDWx5bWZvbWluZm8uc2WC FWZvdW5kYXRpb25tZWRpY2luZS5maYILcm9jaGUuY28uaWSCFWZvdW5kYXRpb25t ZWRpY2luZS5za4IVZm91bmRhdGlvbm1lZGljaW5lLmx0ghVmb3VuZGF0aW9ubWVk aWNpbmUuZGWCGXd3dy5mb3VuZGF0aW9ubWVkaWNpbmUuc2uCGXd3dy5mb3VuZGF0 aW9ubWVkaWNpbmUuY2iCGXd3dy5mb3VuZGF0aW9ubWVkaWNpbmUubm+CDHd3dy5y b2NoZS5ocoIXd3d3LnJvY2hlLWF1c3RyYWxpYS5jb22CGXd3dy5mb3JwYXRpZW50 cy5yb2NoZS5jb22CEWFib3V0cHYucm9jaGUuY29tggxyb2NoZS5jb20ucGWCD3d3 dy5yb2NoZS5jby5pZIIVZm91bmRhdGlvbm1lZGljaW5lLm5sgghyb2NoZS51YYIV Zm91bmRhdGlvbm1lZGljaW5lLmVjgghyb2NoZS5iYYIRd3d3Lmx5bWZvbWluZm8u c2WCFWZvdW5kYXRpb25tZWRpY2luZS5wZYIVd3d3LmFib3V0cHYucm9jaGUuY29t ghlmb3VuZGF0aW9ubWVkaWNpbmUuY29tLnV5ghl3d3cuZm91bmRhdGlvbm1lZGlj aW5lLmx2ghVmb3VuZGF0aW9ubWVkaWNpbmUubm+CHXd3dy5mb3VuZGF0aW9ubWVk aWNpbmUuY29tLmF1ghJlYW4ub2NyZXZ1cy5nbG9iYWyCCHJvY2hlLmx0gghyb2No ZS5ocoIVZm9ycGF0aWVudHMucm9jaGUuY29tghl3d3cuZm91bmRhdGlvbm1lZGlj aW5lLmJnggxyb2NoZS5jb20ubXiCGXd3dy5mb3VuZGF0aW9ubWVkaWNpbmUubmyC GXd3dy5mb3VuZGF0aW9ubWVkaWNpbmUuY3qCHXd3dy5mb3VuZGF0aW9ubWVkaWNp bmUuY29tLnV5ghl3d3cuZm91bmRhdGlvbm1lZGljaW5lLnVrgh93d3cucm9jaGVm b3VuZGF0aW9ubWVkaWNpbmUuY29tghl3d3cuZm91bmRhdGlvbm1lZGljaW5lLml0 gghyb2NoZS5ub4IZd3d3LmZvdW5kYXRpb25tZWRpY2luZS5lY4IVZm91bmRhdGlv bm1lZGljaW5lLnJvghVmb3VuZGF0aW9ubWVkaWNpbmUuZGuCGXd3dy5mb3VuZGF0 aW9ubWVkaWNpbmUuZGuCGXd3dy5mb3VuZGF0aW9ubWVkaWNpbmUuZGWCFWZvdW5k YXRpb25tZWRpY2luZS5lczAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMGsGA1UdHwRkMGIwL6AtoCuGKWh0dHA6Ly9jcmwzLmRp Z2ljZXJ0LmNvbS9zc2NhLXNoYTItZzYuY3JsMC+gLaArhilodHRwOi8vY3JsNC5k aWdpY2VydC5jb20vc3NjYS1zaGEyLWc2LmNybDBMBgNVHSAERTBDMDcGCWCGSAGG /WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BT MAgGBmeBDAECAjB8BggrBgEFBQcBAQRwMG4wJAYIKwYBBQUHMAGGGGh0dHA6Ly9v Y3NwLmRpZ2ljZXJ0LmNvbTBGBggrBgEFBQcwAoY6aHR0cDovL2NhY2VydHMuZGln aWNlcnQuY29tL0RpZ2lDZXJ0U0hBMlNlY3VyZVNlcnZlckNBLmNydDAJBgNVHRME AjAAMIIBBgYKKwYBBAHWeQIEAgSB9wSB9ADyAHcApLkJkLQYWBSHuxOizGdwCjw1 mAT5G9+443fNDsgN3BAAAAFk/yAkjQAABAMASDBGAiEAxDWlQDtWB+wnjHi3Eo3t K0mNSqUZMO2qtwDNH/o65hACIQC6jcEcmH2P5dCcZPw7vIL+pSM1IBAedI+FedUx EBQKvwB3AId1v+dZfPiMQ5lfvfNu/1aNR1Y2/0q1YMG06v9eoIMPAAABZP8gJV4A AAQDAEgwRgIhANo6DgCHF5zTgcNRrGhMZ3XMpgCTb0oXgUx5T4dbCQbSAiEA7Dvb 3g5bP1NzysosAuN80cJrsMTYMocm+j2NHAVXzlowDQYJKoZIhvcNAQELBQADggEB AJ3AAiy6F9AJhDlqNVGIUdmXgsgojqc9hoZU0Ob0/J0yufzzvxxIDfFzHdcHsSj0 ht+JYCH744XYFl+7wuyqryMAZ+4VN9jQlrofQjGAa7pfdPQEkp9hAAqEvNxE7WtA Q7/wfeOX8o74Eat3PX/Xer/uHsPOoUkHyhDVqQd6WMeoBv+n4sJQevkGumGlmavH sQ7XRON+gUTVqjDa8P2xFCTnWDW3UamYXPu1WDFTg7uCWfk9pIK2PSvA5q8O7oj0 y77oADbxZOM8DRPIHY3MK0KtNyr2W+3wZtBTOF96xUm3LGmyrGjQGvbk2T1q7nB+ 77xK264pRZWXGKEv4lF+BiI= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7OimR5RzGs7IbmXx393M Tar6HPCLBN8VYx7hjSh1fcDpiTPjvDA+fpbIE7f/R5YDE2mpN9rk5YucDMnB/Cef tUcIJEdE1AGaA8MCibG1GLEgKRZGTEC+VbYfXipcP/VuSE9tiq3rj0SsO2RrhT6S 8GJwoa5EXFOhICH8hSMwq3k0VZlVROCJ6HGT04x/rFiq6XasdQ4Xy6VVfiuOKEEP Lh2v2znP4zmFNu4XQMbUkZiL14WmB4hRLgbtnit6vOQ51gshIJVTqfjOtSZaGqqb KdWlu9ijy2ciIbJXBRZMbbVfkThxB5X8YpkFm6BE8yedawvoNrsRG4XokF2U+0cV wwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 4381825118457803633105031942557163718 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-03 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-07 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Basel' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Basel' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'F. Hoffmann-La Roche AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cert2.roche.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29906963730908956678366039290965972378086193567403951760428223548659534925043077027770374826344588649749479865085435076864380150850235872679623739010634117635988457540944757855982547453597498987168459256142751900273806926104176728009676914671469786949380569483676862703718282688176520311777186066709043947299999170362852495276025854961640344727846113303219853103599356536342020198670196833948413944101481404816667149500533518507713401076030160299994805638970249629828155259966008736131178354500789184976867471637664849257399695898232361400693244237252234656792111329150568939384473199870985867675411213683353887118787 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7d96e505488b791f5a742cf59d63a672e2929928 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1725 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert2.roche.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochefoundationmedicine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.pe' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esbriet.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.ua' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.com.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.ba' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.lt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.com.pe' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.ro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.bg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine-cac.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine-cac.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.com.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.lt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esbriet.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-australia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.lv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.com.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lymfominfo.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.co.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.sk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.lt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.sk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.hr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche-australia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.forpatients.roche.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboutpv.roche.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.com.pe' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.co.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ua' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.ec' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ba' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lymfominfo.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.pe' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aboutpv.roche.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.com.uy' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.lv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ean.ocrevus.global' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.lt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.hr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forpatients.roche.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.bg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.com.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.uy' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochefoundationmedicine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.ec' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.ro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.es' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000164ff20248d0000040300483046022100c435a5403b5607ec278c78b7128ded2b498d4aa51930edaab700cd1ffa3ae610022100ba8dc11c987d8fe5d09c64fc3bbc82fea5233520101e748f8579d53110140abf0077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000164ff20255e0000040300483046022100da3a0e0087179cd381c351ac684c6775cca600936f4a17814c794f875b0906d2022100ec3bdbde0e5b3f5373caca2c02e37cd1c26bb0c4d8328726fa3d8d1c0557ce5a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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