gazyva.com.au

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8e:92:85:35:55:9e:f6:01:3a:73:d2:d7:ca:9a:a8:d0:95 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gazyva.com.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8e:92:85:35:55:9e:f6:01:3a:73:d2:d7:ca:9a:a8:d0:95
Serial Number (int): 309851712842672083441544465643482284347541
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6f:06:3d:6a:7c:b0:98:be:56:6b:0e:c1:86:23:79:02:c1:d7:70:86
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d9:83:30:69:bf:8b:06:b3:f6:2c:34:d8:79:12:32:5e:a6:7d:44:b9
Fingerprint (sha256): ad:11:5d:d8:2c:f4:99:a3:f3:91:32:60:8f:6d:91:49:48:32:96:f9:67:00:2c:be:ce:c0:9e:74:b9:2c:b8:74

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gazyva.com.au

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gazyva.com.au

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apoyoapacientes.com.uy
atulado.com.ec
bitacoraparaenfermeras.com.pe
bitacoraparaenfermeras.pe
dialogoroche.cl
dialogoroche.com
dialogoroche.com.ar
dialogoroche.com.bo
dialogoroche.com.br
dialogoroche.com.co
dialogoroche.com.ec
dialogoroche.com.mx
dialogoroche.com.pe
dialogoroche.com.uy
dialogorochecac.com
emactiva.cl
ensemblecontrefpi.be
ensemblecontrefpi.fr
esbriet.com.au
esbriet.eu
fightipf.bg
fightipf.ca
fightipf.com
fightipf.de
fightipf.gr
fightipf.it
fightipf.si
fondationroche.org
foundationmedicine-cac.com
foundationmedicine-la.com
foundationmedicine.be
foundationmedicine.bg
foundationmedicine.cl
foundationmedicine.co
foundationmedicine.com.ar
foundationmedicine.com.au
foundationmedicine.com.br
foundationmedicine.com.uy
foundationmedicine.cz
foundationmedicine.de
foundationmedicine.dk
foundationmedicine.ec
foundationmedicine.fi
foundationmedicine.it
foundationmedicine.lv
foundationmedicine.pl
foundationmedicine.ro
foundationmedicineasia.com
gazyva.com.au
ieepo.com
ipfzone.com
latamrochepressday.com
luchaporlafpi.es
medichanzo.com
medichanzo.net
medichanzo.org
mircera.com.au
nimblegen.com
ocrelizumabinfo.global
pulmozyme.global
roche-cac.com
roche-diagnostics.fr
roche-infohub.co.za
roche-online.ch
roche.at
roche.ba
roche.bg
roche.by
roche.co.id
roche.co.uk
roche.co.za
roche.com.mx
roche.com.pe
roche.com.uy
roche.ee
roche.es
roche.ge
roche.ie
roche.it
roche.lt
roche.mk
roche.no
roche.ro
roche.si
roche.ua
rocheamericalatina.com
rochefoundationmedicine.com
rocheinteract.com.au
rochemd.bg
rochemed.gr
rocheonline.ch
rochepharmaprocurement.com
rocheplus.es
rochepro.be
tarceva.global
tiempodevivir.com.co
vechtentegenipf.be
walczzipf.pl
zelborafcotellic.com.au

Other certificates including the domain name gazyva.com.au

(limited to 100 certificates)
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
sni.cloudflaressl.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
careers.roche.com
gazyva.com.au
gazyva.com.au
careers.roche.com
careers.roche.com
gazyva.com.au
careers.roche.com
careers.roche.com
careers.roche.com

Certificate

The complete raw certificate details for gazyva.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309851712842672083441544465643482284347541
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-07 20:33:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-07 20:33:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gazyva.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 915799560278078793410883534224450523962921196745592549335440434600305425459316679497124798858199926141958927222200070344075703706395592547492923918587531621014366555827597384092782204408764514709534167284511546023218776667137553637423558248801745964169292267398829776647439970730471541328684217441915110961468788486471429879925695032950778580151912230653845860379628152320310633315350288152488179024417149641222713547318812786466927682057531765292755869210012356305565260332592097264978915809288367116941206110208802120679066525298452998784201438418466412992967702553820778557576156342475766737140273967509657508656949260518364502311107361473065197657963774390085385774291170737987280869617548516457633255469793887721269163171823372185713880109095210103611643423234042505907988503526157166030813266155773011417962602424814981360783972090445189157939012249348914563684921519371174471512591701068126188754911169654673027314000197302415716172861637370576893306341338524430985208373133484380493294500103827034162368357116937094356477618955912117174579974121986207202601227854573925819915928693803025232427238233537040224937308112288020214512190488810312749105217346883760561517660894456845955633271360690613059692012171111797265296075489
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6f063d6a7cb098be566b0ec186237902c1d77086
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1789 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apoyoapacientes.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atulado.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitacoraparaenfermeras.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitacoraparaenfermeras.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com.bo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogoroche.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogorochecac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emactiva.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ensemblecontrefpi.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ensemblecontrefpi.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esbriet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esbriet.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fightipf.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fightipf.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fightipf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fightipf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fightipf.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fightipf.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fightipf.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fondationroche.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine-cac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine-la.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicineasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gazyva.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ieepo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipfzone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latamrochepressday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luchaporlafpi.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medichanzo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medichanzo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medichanzo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mircera.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nimblegen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocrelizumabinfo.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulmozyme.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-cac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-diagnostics.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-infohub.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-online.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.by'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ge'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocheamericalatina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochefoundationmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocheinteract.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochemd.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochemed.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocheonline.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochepharmaprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocheplus.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochepro.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tarceva.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiempodevivir.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vechtentegenipf.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walczzipf.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zelborafcotellic.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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