intranet.cnrs.fr

- Centre national de la recherche scientifique -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number f1:7b:d5:bf:72:9c:77:a8:af:12:64:a3:8e:8d:76:c5 was issued on by GEANT Vereniging.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Centre national de la recherche scientifique

Organization: Centre national de la recherche scientifique
Organization unit: MOY1678
Address: 3, rue Michel-Ange
Postal code: 75016
State / Province: Ile-De-France
Locality: Paris
Country: FR

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): f1:7b:d5:bf:72:9c:77:a8:af:12:64:a3:8e:8d:76:c5
Serial Number (int): 320986934819059575819188475724192118469
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: a1:aa:9e:3a:22:3e:56:5d:1a:5e:40:30:ee:6d:1a:d5:03:5a:c9:60
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): b7:df:0d:d8:e0:81:37:1d:8c:2f:07:76:4d:69:93:a2:97:62:b2:9c
Fingerprint (sha256): 03:a1:83:fd:f5:00:60:76:14:a9:94:25:50:5a:f2:3b:4d:a0:a3:3a:31:cf:4d:3d:9c:3f:b6:cd:14:f3:21:b6

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate intranet.cnrs.fr

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for intranet.cnrs.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

intranet.cnrs.fr
intranet2.cnrs.fr
intranet2013.cnrs.fr
pwa.cnrs.fr

Other certificates including the domain name cnrs.fr

(limited to 100 certificates)
*.ins2i.bib.cnrs.fr
www.ccsd.cnrs.fr
dmz-std-rec.dsi.cnrs.fr
*.ddl.cnrs.fr
bana.users.lmno.cnrs.fr
frenchbic.org
bosser.users.lmno.cnrs.fr
ecc-e7-bfc-new.dsi.cnrs.fr
www.pvm.cnrs.fr
dev-weimann.users.lmno.cnrs.fr
webmail.ipmc.cnrs.fr
www.iledefrance-villejuif.cnrs.fr
goudurix.placamat.cnrs.fr
asterics.lmno.cnrs.fr
WWW.MCSS.CNRS.FR
pedr.cnrs.fr
*.ibgc.cnrs.fr
reseda-master2-rec.cnrs.fr
echange.alpes.cnrs.fr
ls.caes.cnrs.fr
autodiscover.iphc.cnrs.fr
dev-users.lmno.cnrs.fr
12mail.dr12.cnrs.fr
clamm.irht.cnrs.fr
angles.users.lmno.cnrs.fr
wims-ufmi-bordeaux.math.cnrs.fr
cas-rec-ext.cnrs.fr
wordpress-php7.cnrs.fr
seism.cnrs.fr
reseda-master2-form.cnrs.fr
assocbs2.igh.cnrs.fr
test-emfleu.grenoble.cnrs.fr
journalbase.cnrs.fr
valo-rec.dsi.cnrs.fr
tixeo.cnrs.fr
nuxeo.msh-lse.fr
dev-taipe.users.lmno.cnrs.fr
ageron.users.lmno.cnrs.fr
reseda-dev.cnrs.fr
wart.igh.cnrs.fr
dev-users.lmno.cnrs.fr
dev-louaked.users.lmno.cnrs.fr
plmkan.math.cnrs.fr
fileznormandie.dr19.cnrs.fr
isqlient.cnrs.fr
dev-sesboue.users.lmno.cnrs.fr
intranet.neel.cnrs.fr
dialog.dsi.cnrs.fr
dev-users.lmno.cnrs.fr
enquete.grenoble.cnrs.fr
06papyrus.dr6.cnrs.fr
dev-wehrungf.users.lmno.cnrs.fr
mag.caes.cnrs.fr
files.lsce.ipsl.fr
portail.recore.cnrs.fr
objects.news.odyssey-messaging.com
barou.users.lmno.cnrs.fr
objects.news.odyssey-messaging.com
logic-rec.cnrs.fr
migr-evrp.dsi.cnrs.fr
ds92c.dt.insu.cnrs.fr
lejournal.cnrs.fr
*.irht.cnrs.fr
www.celluleenergie.cnrs.fr
wiki.2rm.cnrs.fr
portail.math.cnrs.fr
gtc.srv.dr12.cnrs.fr
siki.ish-lyon.cnrs.fr
rapi.alpes.cnrs.fr
ftp.igh.cnrs.fr
nouba.dsi.cnrs.fr
dev-ngodac.users.lmno.cnrs.fr
*.iledefrance-est.cnrs.fr
reseda-dev.cnrs.fr
wayf-ds.dsi.cnrs.fr
conf.lmno.cnrs.fr
wordpress-php7.cnrs.fr
photo.caes.cnrs.fr
inscription.alpes.cnrs.fr
dmz-std-rec.dsi.cnrs.fr
grenoble-lanef.fr
pfsense.placamat.cnrs.fr
dev-godelle.users.lmno.cnrs.fr
intranet.cnrs.fr
dev-karamian.users.lmno.cnrs.fr
h2020qualitop.liris.cnrs.fr
docutiles-rec.dsi.cnrs.fr
dev-reyssat.users.lmno.cnrs.fr
participation.dsi.cnrs.fr
dev-wehrungf.users.lmno.cnrs.fr
ssi.dr18.cnrs.fr
frenchbic.org
dev-thiel.users.lmno.cnrs.fr
calendrier.math.cnrs.fr
geslab.dsi.cnrs.fr
imap.cnrs.fr
objects.news.odyssey-messaging.com
catadupe.catalyse.cnrs.fr
assocbs2.igh.cnrs.fr
dev-dogbe.users.lmno.cnrs.fr

Certificate

The complete raw certificate details for intranet.cnrs.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVNXadFHiApaUIxb1m+S
m3y8+H8NT400tcHcF3xH67xCmW+OG+3Hz98RNouTyJQcfjesR9NssKQDU1zLtBCF
Fz/5dwbBgoAYjpyutJbyiKLyY4kZ7ANJNaZUYFFFej6LLaAr/1bGwfwSc0YUcNo4
LdKs+FdsdkwqdBHKmSeqr0H9Axgfuz4R05MFiNNJZQ09PSrHF0AtPhuG2qCkBJWh
goDQEKz9Y5/MwpYpB2VW3KhWOxZmdQOzVsdzvCGWr5IbRYfqjeoW7/JJ4TLOTJYv
wSgbLa2CGUTXAbkin8XIEkaaPhJjRZ+WNE/xWNIw3uGUhClCXrMyXreaDBqFQdWT
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320986934819059575819188475724192118469
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '75016'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ile-De-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '3, rue Michel-Ange'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Centre national de la recherche scientifique'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MOY1678'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'intranet.cnrs.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23900136843434380581086169133123471198154511769831631830716743801406048727157086797559032792645255262387212378279439874635761380759648157117940836389011308518871045198975712895145533703461234088949046540712809135625602248186135915268620116106737686640830326522740743750416585208835760088931443402127490597900832791544156441247872055224005828269119679677114200941868370180952452520589742422358809372108115627206736398188818892145047517076989787785982263161038316292569086049932342505330166537692546034661835617167248532221155311947167010299198790532085251674670833674472279559198899349305553538982931138800465711829973
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a1aa9e3a223e565d1a5e4030ee6d1ad5035ac960
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet2.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet2013.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pwa.cnrs.fr'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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