www.iledefrance-villejuif.cnrs.fr

- Centre national de la recherche scientifique -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 9f:6a:19:06:7a:0e:fd:5d:75:03:de:b5:11:fc:fc:a9 was issued on by GEANT Vereniging.

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Centre national de la recherche scientifique

Organization: Centre national de la recherche scientifique
State / Province: Île-de-France
Country: FR

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 9f:6a:19:06:7a:0e:fd:5d:75:03:de:b5:11:fc:fc:a9
Serial Number (int): 211898142370190674540054075302754450601
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 33:5b:99:df:7d:31:0e:1f:99:12:50:18:34:0a:6e:bd:5c:35:e7:60
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 1e:78:1b:2b:1c:8b:05:6c:81:2e:da:a2:d6:22:57:c9:78:05:3a:b6
Fingerprint (sha256): 00:8a:f9:70:40:58:c8:9c:65:36:99:15:cb:1b:eb:1b:28:c6:cf:31:1a:86:65:06:28:00:15:64:2c:60:61:58

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate www.iledefrance-villejuif.cnrs.fr

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.iledefrance-villejuif.cnrs.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.iledefrance-villejuif.cnrs.fr
alsace.cnrs.fr
centre-est.cnrs.fr
centre-limousin-poitou-charente.cnrs.fr
centre-limousin-poitou-charentes.cnrs.fr
cote-azur.cnrs.fr
hauts-de-france.cnrs.fr
iledefrance-meudon.cnrs.fr
iledefrance-villejuif.cnrs.fr
normandie.cnrs.fr
occitanie-est.cnrs.fr
occitanie-ouest.cnrs.fr
paris-michelange.cnrs.fr
paris-normandie.cnrs.fr
provence-corse.cnrs.fr
www.alsace.cnrs.fr
www.centre-est.cnrs.fr
www.centre-limousin-poitou-charente.cnrs.fr
www.centre-limousin-poitou-charentes.cnrs.fr
www.cote-azur.cnrs.fr
www.hauts-de-france.cnrs.fr
www.iledefrance-meudon.cnrs.fr
www.normandie.cnrs.fr
www.occitanie-est.cnrs.fr
www.occitanie-ouest.cnrs.fr
www.paris-michelange.cnrs.fr
www.paris-normandie.cnrs.fr
www.provence-corse.cnrs.fr

Other certificates including the domain name cnrs.fr

(limited to 100 certificates)
*.ins2i.bib.cnrs.fr
www.ccsd.cnrs.fr
dmz-std-rec.dsi.cnrs.fr
*.ddl.cnrs.fr
bana.users.lmno.cnrs.fr
frenchbic.org
bosser.users.lmno.cnrs.fr
ecc-e7-bfc-new.dsi.cnrs.fr
www.pvm.cnrs.fr
dev-weimann.users.lmno.cnrs.fr
webmail.ipmc.cnrs.fr
www.iledefrance-villejuif.cnrs.fr
goudurix.placamat.cnrs.fr
asterics.lmno.cnrs.fr
WWW.MCSS.CNRS.FR
pedr.cnrs.fr
*.ibgc.cnrs.fr
reseda-master2-rec.cnrs.fr
echange.alpes.cnrs.fr
ls.caes.cnrs.fr
autodiscover.iphc.cnrs.fr
dev-users.lmno.cnrs.fr
12mail.dr12.cnrs.fr
clamm.irht.cnrs.fr
angles.users.lmno.cnrs.fr
wims-ufmi-bordeaux.math.cnrs.fr
cas-rec-ext.cnrs.fr
wordpress-php7.cnrs.fr
seism.cnrs.fr
reseda-master2-form.cnrs.fr
assocbs2.igh.cnrs.fr
test-emfleu.grenoble.cnrs.fr
journalbase.cnrs.fr
valo-rec.dsi.cnrs.fr
tixeo.cnrs.fr
nuxeo.msh-lse.fr
dev-taipe.users.lmno.cnrs.fr
ageron.users.lmno.cnrs.fr
reseda-dev.cnrs.fr
wart.igh.cnrs.fr
dev-users.lmno.cnrs.fr
dev-louaked.users.lmno.cnrs.fr
plmkan.math.cnrs.fr
fileznormandie.dr19.cnrs.fr
isqlient.cnrs.fr
dev-sesboue.users.lmno.cnrs.fr
intranet.neel.cnrs.fr
dialog.dsi.cnrs.fr
dev-users.lmno.cnrs.fr
enquete.grenoble.cnrs.fr
06papyrus.dr6.cnrs.fr
dev-wehrungf.users.lmno.cnrs.fr
mag.caes.cnrs.fr
files.lsce.ipsl.fr
portail.recore.cnrs.fr
objects.news.odyssey-messaging.com
barou.users.lmno.cnrs.fr
objects.news.odyssey-messaging.com
logic-rec.cnrs.fr
migr-evrp.dsi.cnrs.fr
ds92c.dt.insu.cnrs.fr
lejournal.cnrs.fr
*.irht.cnrs.fr
www.celluleenergie.cnrs.fr
wiki.2rm.cnrs.fr
portail.math.cnrs.fr
gtc.srv.dr12.cnrs.fr
siki.ish-lyon.cnrs.fr
rapi.alpes.cnrs.fr
ftp.igh.cnrs.fr
nouba.dsi.cnrs.fr
dev-ngodac.users.lmno.cnrs.fr
*.iledefrance-est.cnrs.fr
reseda-dev.cnrs.fr
wayf-ds.dsi.cnrs.fr
conf.lmno.cnrs.fr
wordpress-php7.cnrs.fr
photo.caes.cnrs.fr
inscription.alpes.cnrs.fr
dmz-std-rec.dsi.cnrs.fr
grenoble-lanef.fr
pfsense.placamat.cnrs.fr
dev-godelle.users.lmno.cnrs.fr
intranet.cnrs.fr
dev-karamian.users.lmno.cnrs.fr
h2020qualitop.liris.cnrs.fr
docutiles-rec.dsi.cnrs.fr
dev-reyssat.users.lmno.cnrs.fr
participation.dsi.cnrs.fr
dev-wehrungf.users.lmno.cnrs.fr
ssi.dr18.cnrs.fr
frenchbic.org
dev-thiel.users.lmno.cnrs.fr
calendrier.math.cnrs.fr
geslab.dsi.cnrs.fr
imap.cnrs.fr
objects.news.odyssey-messaging.com
catadupe.catalyse.cnrs.fr
assocbs2.igh.cnrs.fr
dev-dogbe.users.lmno.cnrs.fr

Certificate

The complete raw certificate details for www.iledefrance-villejuif.cnrs.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+dFI740X5SUFFMkBPv7y
f6GwgnQJxyAQn3o1/U8ZtFLM29rGn7PH5umHMJUPX7pMGQ8OZ9tcUiilnfjlEOWK
60wSrns+2+v9rSLMw7/20tkiDNCZvm7yJgMFZkhRnxG1wBM89qz/BFuE704d0eS/
SIkPTu5qQa01oixI4BHx84MNMjmyQpRD/Nl02K+F0L946YFQi5P4CgpQV4h+E8NT
9PK13u34prTib9jQz3q1kyJj8045L0/0LpfqEwyys4ZpuM6zYQJCKIkpDv/9Wi5n
GGNipSsb1zKhYvN9OVDfr1ALXBXYR3FdFpbX4SyaxT2YkIHjYZ7tCMYjIYXF84fc
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 211898142370190674540054075302754450601
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Centre national de la recherche scientifique'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.iledefrance-villejuif.cnrs.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31536540169732407929914280037032634685096468603487907401351293227350489333146783976779613702420927233275256797491469551014540941986756563941141907025767829879543596953581867181709910060826178448627277085720848884614884276110684759669083193114943041576824700744000895577189955678592823017377089485944243180126309729829547026939716424922625259242963035186864767755715405310370092345472469467326458799730086777797313867104427139016664100585574608052299691433363621648305991950781541289968396067265920233066651609701184923705210855863294940689965291688183612242492261575296507402180923825609581444099373175660124918242433
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							335b99df7d310e1f99125018340a6ebd5c35e760
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (788 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iledefrance-villejuif.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alsace.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centre-est.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centre-limousin-poitou-charente.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centre-limousin-poitou-charentes.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cote-azur.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hauts-de-france.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iledefrance-meudon.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iledefrance-villejuif.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'normandie.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'occitanie-est.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'occitanie-ouest.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paris-michelange.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paris-normandie.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'provence-corse.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alsace.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centre-est.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centre-limousin-poitou-charente.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centre-limousin-poitou-charentes.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cote-azur.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hauts-de-france.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iledefrance-meudon.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.normandie.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.occitanie-est.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.occitanie-ouest.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paris-michelange.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paris-normandie.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.provence-corse.cnrs.fr'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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