orioai.insa-lyon.fr

- Institut National des Sciences Appliquées de Lyon -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number f5:60:3b:dc:81:71:1c:f3:1b:10:9c:df:94:0a:5a:53 was issued on by GEANT Vereniging.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Institut National des Sciences Appliquées de Lyon

Organization: Institut National des Sciences Appliquées de Lyon
Organization unit: API
State / Province: Auvergne-Rhône-Alpes
Country: FR

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): f5:60:3b:dc:81:71:1c:f3:1b:10:9c:df:94:0a:5a:53
Serial Number (int): 326160533598146412495821469230236850771
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 4a:6e:f4:95:17:33:dd:10:17:22:ef:ae:60:e4:49:9a:54:55:b2:e7
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 6d:bc:23:71:28:aa:1d:1b:c5:90:e8:8f:fd:21:aa:16:38:f7:2c:93
Fingerprint (sha256): 02:92:ff:bd:5d:8f:9e:fc:7f:f3:98:28:c5:c1:79:b4:b0:a4:90:a8:e2:af:2f:c8:03:e8:99:52:29:80:41:82

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate orioai.insa-lyon.fr

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for orioai.insa-lyon.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

orioai.insa-lyon.fr
orioai-harvester-pp.insa-lyon.fr
orioai-harvester.insa-lyon.fr
orioai-indexing-pp.insa-lyon.fr
orioai-indexing.insa-lyon.fr
orioai-mdeditor-pp.insa-lyon.fr
orioai-mdeditor.insa-lyon.fr
orioai-pp.insa-lyon.fr
orioai-repository-pp.insa-lyon.fr
orioai-repository.insa-lyon.fr
orioai-search-pp.insa-lyon.fr
orioai-search.insa-lyon.fr
orioai-vocabulary-pp.insa-lyon.fr
orioai-vocabulary.insa-lyon.fr
orioai-workflow-pp.insa-lyon.fr
orioai-workflow.insa-lyon.fr

Other certificates including the domain name insa-lyon.fr

(limited to 100 certificates)
insa-dpadsvil1-01.insa-lyon.fr
cocovn.insa-lyon.fr
www.insa-lyon.fr
reportserver.insa-lyon.fr
reve.insa-lyon.fr
mouvinsa.insa-lyon.fr
gofast.insa-lyon.fr
tc-net2.insa-lyon.fr
reve.insa-lyon.fr
orioai.insa-lyon.fr
telecom.insa-lyon.fr
insa-fd.insa-lyon.fr
svn.insa-lyon.fr
tux.creatis.insa-lyon.fr
jpo.insa-lyon.fr
exal.insa-lyon.fr
vk2000-v6.insa-lyon.fr
aip-primeca.insa-lyon.fr
insa-vcvil1-01.insa-lyon.fr
lamcosbao.insa-lyon.fr
ecole-ete.insa-lyon.fr
myriad.creatis.insa-lyon.fr
tux.creatis.insa-lyon.fr
neurosens.creatis.insa-lyon.fr
servif-cocktail.insa-lyon.fr
dsi.insa-lyon.fr
wiki-dsi.insa-lyon.fr
neurosens.creatis.insa-lyon.fr
desk.creatis.insa-lyon.fr
gtwresd.insa-lyon.fr
sgd.insa-lyon.fr
mediacenter.insa-lyon.fr
aip-foad-web.insa-lyon.fr
tux.creatis.insa-lyon.fr
gtwresc.insa-lyon.fr
vk2-gm-72.insa-lyon.fr
deep.insa-lyon.fr
cipcnet.insa-lyon.fr
fondation.insa-lyon.fr
insa-vxrmgrvil1-01.insa-lyon.fr
fimi2i.insa-lyon.fr
intranetgi.insa-lyon.fr
liris-ktbs01.insa-lyon.fr
humanheart-project.creatis.insa-lyon.fr
insa-vxrvil1-06.insa-lyon.fr
*.insa-lyon.fr
dsi-ipam.insa-lyon.fr
*.creatis.insa-lyon.fr
tux.creatis.insa-lyon.fr
webaedi.insa-lyon.fr
helpdesk.insa-lyon.fr
insa-rproxy-01.insa-lyon.fr
fex.insa-lyon.fr
tux.creatis.insa-lyon.fr
webaedi.insa-lyon.fr
*.docelec.insa-lyon.fr
tux.creatis.insa-lyon.fr
reportserver.insa-lyon.fr
humanheart-project.creatis.insa-lyon.fr
catalogue.insa-lyon.fr
biosciences.insa-lyon.fr
tux.creatis.insa-lyon.fr
dsi-esb.insa-lyon.fr
neurosens.creatis.insa-lyon.fr
gfc-services-test.insa-lyon.fr
biosciences.insa-lyon.fr
mandril.creatis.insa-lyon.fr
tux.creatis.insa-lyon.fr
gtwresh.insa-lyon.fr
phishing.insa-lyon.fr
cipcnet.insa-lyon.fr
insa-rproxypp-01.insa-lyon.fr
smtp6.insa-lyon.fr
rpmfind.creatis.insa-lyon.fr
lune.insa-lyon.fr
virtualstudyfair.insa-lyon.fr
humanheart-project.creatis.insa-lyon.fr
aris-connect.insa-lyon.fr
envue.insa-lyon.fr
acdc.creatis.insa-lyon.fr
intranetgi.insa-lyon.fr
desk.creatis.insa-lyon.fr
glpi.insa-lyon.fr
rpmfind.creatis.insa-lyon.fr
instrumentation.insa-lyon.fr
dsi-gitlab.insa-lyon.fr
phishing.insa-lyon.fr
lire-pp.insa-lyon.fr
envue.insa-lyon.fr
acdc.creatis.insa-lyon.fr
lire.insa-lyon.fr
redmine-pp.insa-lyon.fr
fex.insa-lyon.fr
insa-ppsympa.insa-lyon.fr
casi.insa-lyon.fr
acdc.creatis.insa-lyon.fr
openreports.insa-lyon.fr
*.docelec.insa-lyon.fr
camus.creatis.insa-lyon.fr
departements.insa-lyon.fr

Certificate

The complete raw certificate details for orioai.insa-lyon.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKazCCCFOgAwIBAgIRAPVgO9yBcRzzGxCc35QKWlMwDQYJKoZIhvcNAQEMBQAw
RDELMAkGA1UEBhMCTkwxGTAXBgNVBAoTEEdFQU5UIFZlcmVuaWdpbmcxGjAYBgNV
BAMTEUdFQU5UIE9WIFJTQSBDQSA0MB4XDTIxMTIxNjAwMDAwMFoXDTIyMTIxNjIz
NTk1OVowgZYxCzAJBgNVBAYTAkZSMR4wHAYDVQQIDBVBdXZlcmduZS1SaMO0bmUt
QWxwZXMxOzA5BgNVBAoMMkluc3RpdHV0IE5hdGlvbmFsIGRlcyBTY2llbmNlcyBB
cHBsaXF1w6llcyBkZSBMeW9uMQwwCgYDVQQLEwNBUEkxHDAaBgNVBAMTE29yaW9h
aS5pbnNhLWx5b24uZnIwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCl
brcH+BLge59J8hxcp+WBh6Y2oD+Na8uqH5nA7vZg7NKu/6hX/R4NCnt5MWMUNTLU
At18SVuyVV6hH/bgorn40qMOxtXQsCb7nWCQDnl5FjpzWWw4GK5s3hb2LJjh2UyW
f3uP+EUGK5Wf6545h6fQXKiBwwGb6TdR0h3pzdm1XLDpd9RPKBfe1zbGhZR0PmIP
oaxchAfidQupbL4+XCP6sEZkf8wkUTyRvx/yMZCBzxa7OUXIOolmTveA5Mgd5Fje
y5gf6nFThgxEJt+mO4OozGUFdf6xkgDaaLwR31WvmJQMoE+iKT9/zt41G/TAg19I
f48+OUqQV0xDfAAsHPa1o/DoIwCK3ROHjpjLMo86E1Xe35XnK4m0GWtMyy7SnCu7
loZdUye2e2cfY+DiddQSTaiwqm3iGtronH687/mb7kwUiBbQQhkeQ1jejr7Sc5dz
Ez1RzHFC2xrsoguVa1thbW5AAuG/8qHYkjNVRqWQ236h+WiZbmctkw/WBkRQAh2c
XtOpYg8sOqXH7yr0C6tx7QYKFKI9bpG/dohSt1E2G8wCI1ETS9pQ+HF3mhjgX9/t
6Nbf06vP8UMqh6+VJQxLLBap1aXDvhU7H4v7rX2f2Axrj9IBZNAPFU+CF88WxqTF
qOqHYuIN5QnPmRi30ph/G9bxZoTeJai/3IImRzcTVQIDAQABo4IFAzCCBP8wHwYD
VR0jBBgwFoAUbx01SRBsMvpZoJ68iugflb5xegwwHQYDVR0OBBYEFEpu9JUXM90Q
FyLvrmDkSZpUVbLnMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBJBgNVHSAEQjBAMDQGCysGAQQBsjEB
AgJPMCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vc2VjdGlnby5jb20vQ1BTMAgGBmeB
DAECAjA/BgNVHR8EODA2MDSgMqAwhi5odHRwOi8vR0VBTlQuY3JsLnNlY3RpZ28u
Y29tL0dFQU5UT1ZSU0FDQTQuY3JsMHUGCCsGAQUFBwEBBGkwZzA6BggrBgEFBQcw
AoYuaHR0cDovL0dFQU5ULmNydC5zZWN0aWdvLmNvbS9HRUFOVE9WUlNBQ0E0LmNy
dDApBggrBgEFBQcwAYYdaHR0cDovL0dFQU5ULm9jc3Auc2VjdGlnby5jb20wggF+
BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2AEalVet1+pEgMLWiiWn0830RLEF0vv1J
uIWr8vxw/m1HAAABfcOw4rkAAAQDAEcwRQIhAI+oVnE5XJdjTtZbGHZupmyCzIOW
geKym4xRJy5oI0fUAiBQfnFjJyHmmVAvKDKF0zdqFLqHyiXlse8dBZ/Hh6KXNQB2
AEHIyrHfIkZKEMahOglCh15OMYsbA+vrS8do8JBilgb2AAABfcOw4oIAAAQDAEcw
RQIhALA7OhiNnumsLBK04VFl0z/4xY8SEua61JP7+YVIsY7AAiBtQiFymqu6kSEa
9fOssGe+6H2BsvSjiOD5K/Yd48ZtNgB2ACl5vvCeOTkh8FZzn2Old+W+V32cYAr4
+U1dJlwlXceEAAABfcOw4lkAAAQDAEcwRQIhALavmUOLo3ofNmxLaBn87VII8lh1
Zk8IxWMe5qBP5xdbAiB2fX0+gi+tm/PlmaHAQSfvNLlBMCGZ6mYFi78MxmykUzCC
AfkGA1UdEQSCAfAwggHsghNvcmlvYWkuaW5zYS1seW9uLmZygiBvcmlvYWktaGFy
dmVzdGVyLXBwLmluc2EtbHlvbi5mcoIdb3Jpb2FpLWhhcnZlc3Rlci5pbnNhLWx5
b24uZnKCH29yaW9haS1pbmRleGluZy1wcC5pbnNhLWx5b24uZnKCHG9yaW9haS1p
bmRleGluZy5pbnNhLWx5b24uZnKCH29yaW9haS1tZGVkaXRvci1wcC5pbnNhLWx5
b24uZnKCHG9yaW9haS1tZGVkaXRvci5pbnNhLWx5b24uZnKCFm9yaW9haS1wcC5p
bnNhLWx5b24uZnKCIW9yaW9haS1yZXBvc2l0b3J5LXBwLmluc2EtbHlvbi5mcoIe
b3Jpb2FpLXJlcG9zaXRvcnkuaW5zYS1seW9uLmZygh1vcmlvYWktc2VhcmNoLXBw
Lmluc2EtbHlvbi5mcoIab3Jpb2FpLXNlYXJjaC5pbnNhLWx5b24uZnKCIW9yaW9h
aS12b2NhYnVsYXJ5LXBwLmluc2EtbHlvbi5mcoIeb3Jpb2FpLXZvY2FidWxhcnku
aW5zYS1seW9uLmZygh9vcmlvYWktd29ya2Zsb3ctcHAuaW5zYS1seW9uLmZyghxv
cmlvYWktd29ya2Zsb3cuaW5zYS1seW9uLmZyMA0GCSqGSIb3DQEBDAUAA4ICAQAQ
sk28Z5lQC6wZhpLs7rsr/yVLfQDkZICRSUINh0+dupkJ2MRjMgQy0jR2Lc68UMDQ
ZJMIzcFWIwwRZxvLblB1+qVnyTjc5DZ7irUnJPCP5jpuhuGV4cit9ZfXBaU1hy9i
9xKr7wRfGQFLJRf+wH9lg2qRaJgcGvn5D0KaYmehRS643HXv63LtJ7aV0/C0QOqu
mev4wMopLrSl2aXLQ7pdRottbrxcYOojGCmz2lADcV1UU3wkL1KzpMqZti7Z1eTE
0qaNRg2tOP2z7+lMDLZEiJhCOTofiu5icviSqqqCgiz/bveHxUw9LlFZMjQtMpcy
KlYsCwVS/NVTFH/IqF9bwknmleFUO6sgLoASM3KVLYZ4xCDxXB+0oMu1LZ0wF3ot
wwI1M6KH/sxRHy/Ln3bCu+4SSQJzhMzx6jmCT3LYkzmT5cdkvbQ93nSuwgwKMJSj
S9mnHnYP/xkcG5EvI9tH77apEENc1JErP6a2g/+spwOQbCY2Rvs6KproEAXmUCAs
VJYW9x53QziBsbUt6ubQn6A4ZY0KBcMNcyx+zeZOds9ghLaA1lMp8nw4QTlGYi0z
zjgFIGBaSNI8RFqhGOH1oAgkX4SJukvn9fEGYCtVoyiiVMUIs+cPMps/crl58tco
HiaeCFtexBpBfEJNoTJEUf4Y2FkiiwsNS3JSCV65yA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326160533598146412495821469230236850771
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Auvergne-Rhône-Alpes'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Institut National des Sciences Appliquées de Lyon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'API'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'orioai.insa-lyon.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 674905637049971317336073087182233534596931036922602892866279363170731003446149031784199013715459657015615426477639384796172053301921212875505344416851179428542472448398146778022678242417581358395697817874893818254225746426404529365479128708793677725535605636378106063233322787483058058936500976502420392817316565879685688241422644764086761967253048498221763415191251904956241032480948498379895002191783680768646508072997426607605898801508730499806233438430547639300372040612798434871433934815232631833920704233981331248623871615105094836235380021584394642961948858108443287371263059628805809390806721871355782984358381495455220078357160363796112415558402293731524933856449622633834535809368746989769375421143697854630047987342000246566508452494527737616832646308713552256143694560485672689440480971039009904495604513838743113702096585791546370122724455886624174651094536285684019386452198414523733860805310891225431565709174301631629624246842846840291664459385759298820604141968837645267416917170293524950961169698319517676608300628190235217545102577029103994803634570116246877213117699512754090285805443967546924687110175139684572129751759891644250815928532552325252044734496575565881743448465947978667808260403395008328427019637589
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4a6ef4951733dd101722efae60e4499a5455b2e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (496 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orioai.insa-lyon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orioai-harvester-pp.insa-lyon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orioai-harvester.insa-lyon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orioai-indexing-pp.insa-lyon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orioai-indexing.insa-lyon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orioai-mdeditor-pp.insa-lyon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orioai-mdeditor.insa-lyon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orioai-pp.insa-lyon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orioai-repository-pp.insa-lyon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orioai-repository.insa-lyon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orioai-search-pp.insa-lyon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orioai-search.insa-lyon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orioai-vocabulary-pp.insa-lyon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orioai-vocabulary.insa-lyon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orioai-workflow-pp.insa-lyon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orioai-workflow.insa-lyon.fr'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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