cert2.roche.com
- F. Hoffmann-La Roche AG -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 0f:2a:33:e2:22:a1:50:6f:82:79:a9:d1:1c:e7:ee:b1 was issued on by DigiCert Inc.
With 64 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
F. Hoffmann-La Roche AG
Organization:
F. Hoffmann-La Roche AG
State / Province:
Basel
Locality: Basel
Country: CH
Locality: Basel
Country: CH
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0f:2a:33:e2:22:a1:50:6f:82:79:a9:d1:1c:e7:ee:b1Serial Number (int): 20157548724004222550079946000639192753
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: df:96:a7:dd:c3:e5:01:94:c5:c0:1c:62:19:fa:7f:cf:10:c5:ac:b6
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): d5:f2:bf:31:35:d9:c4:64:23:55:35:e5:6c:24:68:06:04:bc:1b:95
Fingerprint (sha256): a5:d8:00:de:39:ef:43:15:a3:cd:7e:42:0f:1e:f1:41:e2:f0:87:c5:f4:59:2b:a8:74:56:85:c0:64:d5:5d:91
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl
Check the revocation status for certificate cert2.roche.com
64
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cert2.roche.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cert2.roche.com
www.foundationmedicine.lv
www.roche.kz
www.roche.se
www.roche.lt
www.roche.com.co
ean.ocrevus.global
www.foundationmedicine.sk
www.roche.com.pe
www.pairs-paaform.roche.com
www.roche.ee
www.foundationmedicine.ro
www.foundationmedicine.se
www.foundationmedicine.com.au
www.roche.co.th
www.rochefoundationmedicine.com
www.foundationmedicine.no
www.rochecanada.com
www.foundationmedicine.pe
www.hemlibra.com.au
wiedzapacjenta.roche.pl
www.myhemlibra.com.au
www.foundationmedicine.com.uy
www.foundationmedicine.cz
www.roche.hr
www.foundationmedicine.pt
www.roche.be
www.roche.cl
www.roche.com.ec
www.roche.nl
www.roche.co.id
www.aboutpv.roche.com
www.rocheindia.com
www.foundationmedicine-cac.com
www.foundationmedicine.lt
www.roche.dk
www.foundationmedicine.dk
www.roche.ba
www.actemra.com.au
www.foundationmedicine.ch
www.foundationmedicine.it
www.foundationmedicine.fi
www.foundationmedicine.es
www.roche.ge
www.tecentriq.com.au
www.lymfominfo.se
www.roche.no
www.esbriet.eu
www.roche.com.hk
pairs-paaform.roche.com
www.roche.com.tr
www.foundationmedicine.ec
www.roche.com.mx
www.roche-australia.com
peripazienti.roche.it
www.foundationmedicine.fr
www.foundationmedicine.nl
aboutpv.roche.com
www.foundationmedicine.de
www.foundationmedicine.uk
www.rochesrbija.rs
www.roche.ua
www.foundationmedicine.bg
www.viataculimfom.ro
www.foundationmedicine.lv
www.roche.kz
www.roche.se
www.roche.lt
www.roche.com.co
ean.ocrevus.global
www.foundationmedicine.sk
www.roche.com.pe
www.pairs-paaform.roche.com
www.roche.ee
www.foundationmedicine.ro
www.foundationmedicine.se
www.foundationmedicine.com.au
www.roche.co.th
www.rochefoundationmedicine.com
www.foundationmedicine.no
www.rochecanada.com
www.foundationmedicine.pe
www.hemlibra.com.au
wiedzapacjenta.roche.pl
www.myhemlibra.com.au
www.foundationmedicine.com.uy
www.foundationmedicine.cz
www.roche.hr
www.foundationmedicine.pt
www.roche.be
www.roche.cl
www.roche.com.ec
www.roche.nl
www.roche.co.id
www.aboutpv.roche.com
www.rocheindia.com
www.foundationmedicine-cac.com
www.foundationmedicine.lt
www.roche.dk
www.foundationmedicine.dk
www.roche.ba
www.actemra.com.au
www.foundationmedicine.ch
www.foundationmedicine.it
www.foundationmedicine.fi
www.foundationmedicine.es
www.roche.ge
www.tecentriq.com.au
www.lymfominfo.se
www.roche.no
www.esbriet.eu
www.roche.com.hk
pairs-paaform.roche.com
www.roche.com.tr
www.foundationmedicine.ec
www.roche.com.mx
www.roche-australia.com
peripazienti.roche.it
www.foundationmedicine.fr
www.foundationmedicine.nl
aboutpv.roche.com
www.foundationmedicine.de
www.foundationmedicine.uk
www.rochesrbija.rs
www.roche.ua
www.foundationmedicine.bg
www.viataculimfom.ro
Other certificates including the domain name roche.com
(limited to 100 certificates)
involve.roche.com
www.hpv16and18.com
easydrive-uat.roche.com
advancedanalytics.roche.com
main.rhelp.roche.com
sni.cloudflaressl.com
magentocloud28.map.fastly.net
rbalvprexd0.bas.roche.com
cieas01.roche.com
harmonytest.de
sequencing.roche.com
esource.roche.com
e-medical.roche.com
esource.roche.com
coaguchek.com
rsmsourcing.roche.com
deimos.roche.com
cert2.roche.com
sni.cloudflaressl.com
cdn.appstore.gene.com
shpivee1-01.roche.com
eews-dev.roche.com
myaccess.roche.com
ican.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
cert3.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
mrdivee2-02.netlab.roche.com
rodip.roche.com
nsrdcongresses.roche.com
rbavxsentry11.bas.roche.com
mobilesolution-dev.roche.com
wamua.roche.com
dialog-62-test.roche.com
rocheggcpac.roche.com
san-003.ceros.com
video.hive.roche.com
sni.cloudflaressl.com
rssg.roche.com
mftemeaext.roche.com
anadisuat01.sc1.roche.com
careers.roche.com
flow.roche.com
cert3.roche.com
sni.cloudflaressl.com
misp.roche.com
cert2.roche.com
careers.roche.com
api.rockwizz.roche.com
bitbucket-nala-qa.roche.com
careers.roche.com
wamdev.roche.com
sonar-dev-old.roche.com
diauxhub.roche.com
careers.roche.com
globalfms.roche.com
san-003.ceros.com
sc1lvflexq2.sc1.roche.com
easydrive-dev.roche.com
send-tst.roche.com
indigrow.roche.com
careers.roche.com
careers.roche.com
env5-remotedashboard.roche.com
mrd25.me
cert2.roche.com
*.esrv-hub-uat.roche.com
sb.eu.phcaa.science.roche.com
san-003.ceros.com
extaccess-nala.roche.com
magentocloud28.map.fastly.net
go.roche.com
magentocloud32.map.fastly.net
sni.cloudflaressl.com
ssl882748.cloudflaressl.com
sni.cloudflaressl.com
esrv-marketplace-dev.roche.com
careers.roche.com
imcore.roche.com
booster.roche.com
sni.cloudflaressl.com
akamai-san195.exacttarget.com
raumbuch.roche.com
pitas01.roche.com
sni.cloudflaressl.com
c1edb.roche.com
magentocloud45.map.fastly.net
shpivee1-01.roche.com
hpv16and18.com
hivemind.roche.com
searchsquad.roche.com
cferondanetrochedia-qa.roche.com
esign.roche.com
diaitsupport.roche.com
sni.cloudflaressl.com
magentocloud32.map.fastly.net
r32web.sap.roche.com
apis.cwp.roche.com
www.hpv16and18.com
easydrive-uat.roche.com
advancedanalytics.roche.com
main.rhelp.roche.com
sni.cloudflaressl.com
magentocloud28.map.fastly.net
rbalvprexd0.bas.roche.com
cieas01.roche.com
harmonytest.de
sequencing.roche.com
esource.roche.com
e-medical.roche.com
esource.roche.com
coaguchek.com
rsmsourcing.roche.com
deimos.roche.com
cert2.roche.com
sni.cloudflaressl.com
cdn.appstore.gene.com
shpivee1-01.roche.com
eews-dev.roche.com
myaccess.roche.com
ican.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
cert3.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
mrdivee2-02.netlab.roche.com
rodip.roche.com
nsrdcongresses.roche.com
rbavxsentry11.bas.roche.com
mobilesolution-dev.roche.com
wamua.roche.com
dialog-62-test.roche.com
rocheggcpac.roche.com
san-003.ceros.com
video.hive.roche.com
sni.cloudflaressl.com
rssg.roche.com
mftemeaext.roche.com
anadisuat01.sc1.roche.com
careers.roche.com
flow.roche.com
cert3.roche.com
sni.cloudflaressl.com
misp.roche.com
cert2.roche.com
careers.roche.com
api.rockwizz.roche.com
bitbucket-nala-qa.roche.com
careers.roche.com
wamdev.roche.com
sonar-dev-old.roche.com
diauxhub.roche.com
careers.roche.com
globalfms.roche.com
san-003.ceros.com
sc1lvflexq2.sc1.roche.com
easydrive-dev.roche.com
send-tst.roche.com
indigrow.roche.com
careers.roche.com
careers.roche.com
env5-remotedashboard.roche.com
mrd25.me
cert2.roche.com
*.esrv-hub-uat.roche.com
sb.eu.phcaa.science.roche.com
san-003.ceros.com
extaccess-nala.roche.com
magentocloud28.map.fastly.net
go.roche.com
magentocloud32.map.fastly.net
sni.cloudflaressl.com
ssl882748.cloudflaressl.com
sni.cloudflaressl.com
esrv-marketplace-dev.roche.com
careers.roche.com
imcore.roche.com
booster.roche.com
sni.cloudflaressl.com
akamai-san195.exacttarget.com
raumbuch.roche.com
pitas01.roche.com
sni.cloudflaressl.com
c1edb.roche.com
magentocloud45.map.fastly.net
shpivee1-01.roche.com
hpv16and18.com
hivemind.roche.com
searchsquad.roche.com
cferondanetrochedia-qa.roche.com
esign.roche.com
diaitsupport.roche.com
sni.cloudflaressl.com
magentocloud32.map.fastly.net
r32web.sap.roche.com
apis.cwp.roche.com
Certificate
The complete raw certificate details for cert2.roche.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIILizCCCnOgAwIBAgIQDyoz4iKhUG+CeanRHOfusTANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTkwNDA5MDAwMDAwWhcN MjAwNzA3MTIwMDAwWjBpMQswCQYDVQQGEwJDSDEOMAwGA1UECBMFQmFzZWwxDjAM BgNVBAcTBUJhc2VsMSAwHgYDVQQKExdGLiBIb2ZmbWFubi1MYSBSb2NoZSBBRzEY MBYGA1UEAxMPY2VydDIucm9jaGUuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAtcNbUqbgB1zAOWZw7lITbndoeyvnIe6RB8JxwD/kq1Js4o9oyUT+ IMg0KZez/s4xUsjd+p7gYKtLF8qQQSR4t4FPr0RkG7XF7GKVZLP6reXTwfDl7vr5 lk3krY7Ij/uvPC3BXzsvkpcDNNqcl3X5rkZF/NG7VAUfnVTSqhG2oeW/QLCP0CbU txAICFwzYCSLcSYee19msVXT32cYR5U9R66t85NdPXi7jr9iw56agyKxBRbjIqom 7MDoGCtYskKeHIJNzScNAjPZxWkZpoHPgyiM857UY3wH8xOgDQGP2MF5GHb8hfdc ookFDFGyRCKTXhC0cjaXPqmlTWdkp8F4rwIDAQABo4IISTCCCEUwHwYDVR0jBBgw FoAUD4BhHIIxYdUvKOeNRji0LOHG2eIwHQYDVR0OBBYEFN+Wp93D5QGUxcAcYhn6 f88Qxay2MIIFhgYDVR0RBIIFfTCCBXmCD2NlcnQyLnJvY2hlLmNvbYIZd3d3LmZv dW5kYXRpb25tZWRpY2luZS5sdoIMd3d3LnJvY2hlLmt6ggx3d3cucm9jaGUuc2WC DHd3dy5yb2NoZS5sdIIQd3d3LnJvY2hlLmNvbS5jb4ISZWFuLm9jcmV2dXMuZ2xv YmFsghl3d3cuZm91bmRhdGlvbm1lZGljaW5lLnNrghB3d3cucm9jaGUuY29tLnBl ght3d3cucGFpcnMtcGFhZm9ybS5yb2NoZS5jb22CDHd3dy5yb2NoZS5lZYIZd3d3 LmZvdW5kYXRpb25tZWRpY2luZS5yb4IZd3d3LmZvdW5kYXRpb25tZWRpY2luZS5z ZYIdd3d3LmZvdW5kYXRpb25tZWRpY2luZS5jb20uYXWCD3d3dy5yb2NoZS5jby50 aIIfd3d3LnJvY2hlZm91bmRhdGlvbm1lZGljaW5lLmNvbYIZd3d3LmZvdW5kYXRp b25tZWRpY2luZS5ub4ITd3d3LnJvY2hlY2FuYWRhLmNvbYIZd3d3LmZvdW5kYXRp b25tZWRpY2luZS5wZYITd3d3LmhlbWxpYnJhLmNvbS5hdYIXd2llZHphcGFjamVu dGEucm9jaGUucGyCFXd3dy5teWhlbWxpYnJhLmNvbS5hdYIdd3d3LmZvdW5kYXRp b25tZWRpY2luZS5jb20udXmCGXd3dy5mb3VuZGF0aW9ubWVkaWNpbmUuY3qCDHd3 dy5yb2NoZS5ocoIZd3d3LmZvdW5kYXRpb25tZWRpY2luZS5wdIIMd3d3LnJvY2hl LmJlggx3d3cucm9jaGUuY2yCEHd3dy5yb2NoZS5jb20uZWOCDHd3dy5yb2NoZS5u bIIPd3d3LnJvY2hlLmNvLmlkghV3d3cuYWJvdXRwdi5yb2NoZS5jb22CEnd3dy5y b2NoZWluZGlhLmNvbYIed3d3LmZvdW5kYXRpb25tZWRpY2luZS1jYWMuY29tghl3 d3cuZm91bmRhdGlvbm1lZGljaW5lLmx0ggx3d3cucm9jaGUuZGuCGXd3dy5mb3Vu ZGF0aW9ubWVkaWNpbmUuZGuCDHd3dy5yb2NoZS5iYYISd3d3LmFjdGVtcmEuY29t LmF1ghl3d3cuZm91bmRhdGlvbm1lZGljaW5lLmNoghl3d3cuZm91bmRhdGlvbm1l ZGljaW5lLml0ghl3d3cuZm91bmRhdGlvbm1lZGljaW5lLmZpghl3d3cuZm91bmRh dGlvbm1lZGljaW5lLmVzggx3d3cucm9jaGUuZ2WCFHd3dy50ZWNlbnRyaXEuY29t LmF1ghF3d3cubHltZm9taW5mby5zZYIMd3d3LnJvY2hlLm5vgg53d3cuZXNicmll dC5ldYIQd3d3LnJvY2hlLmNvbS5oa4IXcGFpcnMtcGFhZm9ybS5yb2NoZS5jb22C EHd3dy5yb2NoZS5jb20udHKCGXd3dy5mb3VuZGF0aW9ubWVkaWNpbmUuZWOCEHd3 dy5yb2NoZS5jb20ubXiCF3d3dy5yb2NoZS1hdXN0cmFsaWEuY29tghVwZXJpcGF6 aWVudGkucm9jaGUuaXSCGXd3dy5mb3VuZGF0aW9ubWVkaWNpbmUuZnKCGXd3dy5m b3VuZGF0aW9ubWVkaWNpbmUubmyCEWFib3V0cHYucm9jaGUuY29tghl3d3cuZm91 bmRhdGlvbm1lZGljaW5lLmRlghl3d3cuZm91bmRhdGlvbm1lZGljaW5lLnVrghJ3 d3cucm9jaGVzcmJpamEucnOCDHd3dy5yb2NoZS51YYIZd3d3LmZvdW5kYXRpb25t ZWRpY2luZS5iZ4IUd3d3LnZpYXRhY3VsaW1mb20ucm8wDgYDVR0PAQH/BAQDAgWg MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBrBgNVHR8EZDBiMC+gLaAr hilodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vc3NjYS1zaGEyLWc2LmNybDAvoC2g K4YpaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNi5jcmwwTAYD VR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cu ZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwfAYIKwYBBQUHAQEEcDBuMCQGCCsG AQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wRgYIKwYBBQUHMAKGOmh0 dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJTZWN1cmVTZXJ2 ZXJDQS5jcnQwCQYDVR0TBAIwADCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AKS5 CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABagF/2OcAAAQDAEcwRQIh AOQGEAXlNeKTHH34cYA+4weh2UFQ5jvTge6BDbUfXXQ9AiAK+OAa6ntDDQgF+ak2 E1Bk8eGtkxBCVgGVwXI2MAT9nAB2AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQY dZaBcUVYAAABagF/2L0AAAQDAEcwRQIhAINmlKum6+QYSTss6y6onaPpWb1AxIZt t7jxdnqjT8ffAiApIACW1PdBb795uZ0kZInecw4vkgZXgCN/OE9FOxfnyzANBgkq hkiG9w0BAQsFAAOCAQEA2dQ1YWlV9BDfEZRrpFQHGm9KC2NYWQTu6I1JDehPiFKf k0PWSsvIC1rv++HrRUyOSIjHUTF/YD6VZjJhvzF4fWZUkOPK6o903nBikub2LwUd E+XP8pPKwlefBRAHT9VaJI0i6KBdAO3x0NEBnItHWHKuJOhFCowMHV2uqrR7A0U/ 9dVP6QzJ03dp3JSQGUivp4a8s9+BAgEsN2I6xXP4ongdET7E2Ulyj4dxEFXh98nF pPrTDFR0TuocpBfqnh6YlPC91GY3Go0MdRM7w8XXI++/M6hXhQrq205LG4QhabNv buGzMkVvgurXaiuaf9BRwxPYnnK5S4LNRAGxfngjWA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcNbUqbgB1zAOWZw7lIT bndoeyvnIe6RB8JxwD/kq1Js4o9oyUT+IMg0KZez/s4xUsjd+p7gYKtLF8qQQSR4 t4FPr0RkG7XF7GKVZLP6reXTwfDl7vr5lk3krY7Ij/uvPC3BXzsvkpcDNNqcl3X5 rkZF/NG7VAUfnVTSqhG2oeW/QLCP0CbUtxAICFwzYCSLcSYee19msVXT32cYR5U9 R66t85NdPXi7jr9iw56agyKxBRbjIqom7MDoGCtYskKeHIJNzScNAjPZxWkZpoHP gyiM857UY3wH8xOgDQGP2MF5GHb8hfdcookFDFGyRCKTXhC0cjaXPqmlTWdkp8F4 rwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 20157548724004222550079946000639192753 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-09 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-07 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Basel' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Basel' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'F. Hoffmann-La Roche AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cert2.roche.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22945467192795922543695443302736939040988892359818421490300419964270574527565503381292008331269046893878231126541373614396386737463643876108236046486677661004042519060542639269045600018242183481997996759179472955205145387192893974557083178796751320309621438321225266401577884668219978547292886694294666295121036410499791979556784038668111229492936771795872348187403265133061831326692987188944945973070529191188005931717078447375941466132834629541886286955605711047958909433337865254748880613836414190392685084979926870288017073466119657085319483990841894473092060407774912885505325722951988682029534326062257266587823 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) df96a7ddc3e50194c5c01c6219fa7fcf10c5acb6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1405 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert2.roche.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.lv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.kz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.lt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.com.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ean.ocrevus.global' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.sk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.com.pe' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pairs-paaform.roche.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.ee' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.ro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.co.th' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochefoundationmedicine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochecanada.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.pe' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hemlibra.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiedzapacjenta.roche.pl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myhemlibra.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.com.uy' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.hr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.cl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.com.ec' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.co.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aboutpv.roche.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocheindia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine-cac.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.lt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.ba' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.actemra.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.ge' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tecentriq.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lymfominfo.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esbriet.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.com.hk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pairs-paaform.roche.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.com.tr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.ec' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.com.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche-australia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peripazienti.roche.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboutpv.roche.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochesrbija.rs' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche.ua' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundationmedicine.bg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viataculimfom.ro' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016a017fd8e70000040300473045022100e4061005e535e2931c7df871803ee307a1d94150e63bd381ee810db51f5d743d02200af8e01aea7b430d0805f9a936135064f1e1ad931042560195c172363004fd9c0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016a017fd8bd0000040300473045022100836694aba6ebe418493b2ceb2ea89da3e959bd40c4866db7b8f1767aa34fc7df022029200096d4f7416fbf79b99d246489de730e2f92065780237f384f453b17e7cb . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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