www.mfp.cnrs.fr
- Centre national de la recherche scientifique -
Issued by GEANT OV RSA CA 4
About this certificate
This digital certificate with serial number 1f:b3:2f:ec:23:cf:89:8a:2c:ea:92:b5:05:a4:47:e3 was issued on by GEANT Vereniging.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Centre national de la recherche scientifique
Organization:
Centre national de la recherche scientifique
State / Province:
Paris
Country: FR
Country: FR
GEANT Vereniging
Organization:
GEANT Vereniging
Country:
NL
This certificate will expire on
Certificate Details
Serial Number (hex): 1f:b3:2f:ec:23:cf:89:8a:2c:ea:92:b5:05:a4:47:e3Serial Number (int): 42136460989190723701921276855048226787
Serial Number lenght: 125 bits, 16 octets
SubjectKeyId: 6d:5f:c7:05:6a:4d:f5:3e:7c:ac:1c:8c:1e:59:76:b1:9f:3b:cd:e0
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c
Fingerprint (sha1): ad:0c:d1:a4:b6:5c:4e:59:6b:a6:34:e0:ef:cc:d1:7b:bb:da:c4:7d
Fingerprint (sha256): 03:da:55:d2:22:09:d7:da:cf:65:51:88:a7:90:a9:3d:d9:7b:5b:c2:e0:c0:62:22:99:fc:65:f7:c7:34:d9:4f
Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt
Revocation information
OCSP Server: http://GEANT.ocsp.sectigo.comCRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl
Check the revocation status for certificate www.mfp.cnrs.fr
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.mfp.cnrs.fr
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.mfp.cnrs.fr
mfp.cnrs.fr
mfp.cnrs.fr
Other certificates including the domain name cnrs.fr
(limited to 100 certificates)
*.ins2i.bib.cnrs.fr
www.ccsd.cnrs.fr
dmz-std-rec.dsi.cnrs.fr
*.ddl.cnrs.fr
bana.users.lmno.cnrs.fr
frenchbic.org
bosser.users.lmno.cnrs.fr
ecc-e7-bfc-new.dsi.cnrs.fr
www.pvm.cnrs.fr
dev-weimann.users.lmno.cnrs.fr
webmail.ipmc.cnrs.fr
www.iledefrance-villejuif.cnrs.fr
goudurix.placamat.cnrs.fr
asterics.lmno.cnrs.fr
WWW.MCSS.CNRS.FR
pedr.cnrs.fr
*.ibgc.cnrs.fr
reseda-master2-rec.cnrs.fr
echange.alpes.cnrs.fr
ls.caes.cnrs.fr
autodiscover.iphc.cnrs.fr
dev-users.lmno.cnrs.fr
12mail.dr12.cnrs.fr
clamm.irht.cnrs.fr
angles.users.lmno.cnrs.fr
wims-ufmi-bordeaux.math.cnrs.fr
cas-rec-ext.cnrs.fr
wordpress-php7.cnrs.fr
seism.cnrs.fr
reseda-master2-form.cnrs.fr
assocbs2.igh.cnrs.fr
test-emfleu.grenoble.cnrs.fr
journalbase.cnrs.fr
valo-rec.dsi.cnrs.fr
tixeo.cnrs.fr
nuxeo.msh-lse.fr
dev-taipe.users.lmno.cnrs.fr
ageron.users.lmno.cnrs.fr
reseda-dev.cnrs.fr
wart.igh.cnrs.fr
dev-users.lmno.cnrs.fr
dev-louaked.users.lmno.cnrs.fr
plmkan.math.cnrs.fr
fileznormandie.dr19.cnrs.fr
isqlient.cnrs.fr
dev-sesboue.users.lmno.cnrs.fr
intranet.neel.cnrs.fr
dialog.dsi.cnrs.fr
dev-users.lmno.cnrs.fr
enquete.grenoble.cnrs.fr
06papyrus.dr6.cnrs.fr
dev-wehrungf.users.lmno.cnrs.fr
mag.caes.cnrs.fr
files.lsce.ipsl.fr
portail.recore.cnrs.fr
objects.news.odyssey-messaging.com
barou.users.lmno.cnrs.fr
objects.news.odyssey-messaging.com
logic-rec.cnrs.fr
migr-evrp.dsi.cnrs.fr
ds92c.dt.insu.cnrs.fr
lejournal.cnrs.fr
*.irht.cnrs.fr
www.celluleenergie.cnrs.fr
wiki.2rm.cnrs.fr
portail.math.cnrs.fr
gtc.srv.dr12.cnrs.fr
siki.ish-lyon.cnrs.fr
rapi.alpes.cnrs.fr
ftp.igh.cnrs.fr
nouba.dsi.cnrs.fr
dev-ngodac.users.lmno.cnrs.fr
*.iledefrance-est.cnrs.fr
reseda-dev.cnrs.fr
wayf-ds.dsi.cnrs.fr
conf.lmno.cnrs.fr
wordpress-php7.cnrs.fr
photo.caes.cnrs.fr
inscription.alpes.cnrs.fr
dmz-std-rec.dsi.cnrs.fr
grenoble-lanef.fr
pfsense.placamat.cnrs.fr
dev-godelle.users.lmno.cnrs.fr
intranet.cnrs.fr
dev-karamian.users.lmno.cnrs.fr
h2020qualitop.liris.cnrs.fr
docutiles-rec.dsi.cnrs.fr
www.mfp.cnrs.fr
dev-reyssat.users.lmno.cnrs.fr
participation.dsi.cnrs.fr
dev-wehrungf.users.lmno.cnrs.fr
ssi.dr18.cnrs.fr
frenchbic.org
dev-thiel.users.lmno.cnrs.fr
calendrier.math.cnrs.fr
geslab.dsi.cnrs.fr
imap.cnrs.fr
objects.news.odyssey-messaging.com
catadupe.catalyse.cnrs.fr
assocbs2.igh.cnrs.fr
www.ccsd.cnrs.fr
dmz-std-rec.dsi.cnrs.fr
*.ddl.cnrs.fr
bana.users.lmno.cnrs.fr
frenchbic.org
bosser.users.lmno.cnrs.fr
ecc-e7-bfc-new.dsi.cnrs.fr
www.pvm.cnrs.fr
dev-weimann.users.lmno.cnrs.fr
webmail.ipmc.cnrs.fr
www.iledefrance-villejuif.cnrs.fr
goudurix.placamat.cnrs.fr
asterics.lmno.cnrs.fr
WWW.MCSS.CNRS.FR
pedr.cnrs.fr
*.ibgc.cnrs.fr
reseda-master2-rec.cnrs.fr
echange.alpes.cnrs.fr
ls.caes.cnrs.fr
autodiscover.iphc.cnrs.fr
dev-users.lmno.cnrs.fr
12mail.dr12.cnrs.fr
clamm.irht.cnrs.fr
angles.users.lmno.cnrs.fr
wims-ufmi-bordeaux.math.cnrs.fr
cas-rec-ext.cnrs.fr
wordpress-php7.cnrs.fr
seism.cnrs.fr
reseda-master2-form.cnrs.fr
assocbs2.igh.cnrs.fr
test-emfleu.grenoble.cnrs.fr
journalbase.cnrs.fr
valo-rec.dsi.cnrs.fr
tixeo.cnrs.fr
nuxeo.msh-lse.fr
dev-taipe.users.lmno.cnrs.fr
ageron.users.lmno.cnrs.fr
reseda-dev.cnrs.fr
wart.igh.cnrs.fr
dev-users.lmno.cnrs.fr
dev-louaked.users.lmno.cnrs.fr
plmkan.math.cnrs.fr
fileznormandie.dr19.cnrs.fr
isqlient.cnrs.fr
dev-sesboue.users.lmno.cnrs.fr
intranet.neel.cnrs.fr
dialog.dsi.cnrs.fr
dev-users.lmno.cnrs.fr
enquete.grenoble.cnrs.fr
06papyrus.dr6.cnrs.fr
dev-wehrungf.users.lmno.cnrs.fr
mag.caes.cnrs.fr
files.lsce.ipsl.fr
portail.recore.cnrs.fr
objects.news.odyssey-messaging.com
barou.users.lmno.cnrs.fr
objects.news.odyssey-messaging.com
logic-rec.cnrs.fr
migr-evrp.dsi.cnrs.fr
ds92c.dt.insu.cnrs.fr
lejournal.cnrs.fr
*.irht.cnrs.fr
www.celluleenergie.cnrs.fr
wiki.2rm.cnrs.fr
portail.math.cnrs.fr
gtc.srv.dr12.cnrs.fr
siki.ish-lyon.cnrs.fr
rapi.alpes.cnrs.fr
ftp.igh.cnrs.fr
nouba.dsi.cnrs.fr
dev-ngodac.users.lmno.cnrs.fr
*.iledefrance-est.cnrs.fr
reseda-dev.cnrs.fr
wayf-ds.dsi.cnrs.fr
conf.lmno.cnrs.fr
wordpress-php7.cnrs.fr
photo.caes.cnrs.fr
inscription.alpes.cnrs.fr
dmz-std-rec.dsi.cnrs.fr
grenoble-lanef.fr
pfsense.placamat.cnrs.fr
dev-godelle.users.lmno.cnrs.fr
intranet.cnrs.fr
dev-karamian.users.lmno.cnrs.fr
h2020qualitop.liris.cnrs.fr
docutiles-rec.dsi.cnrs.fr
www.mfp.cnrs.fr
dev-reyssat.users.lmno.cnrs.fr
participation.dsi.cnrs.fr
dev-wehrungf.users.lmno.cnrs.fr
ssi.dr18.cnrs.fr
frenchbic.org
dev-thiel.users.lmno.cnrs.fr
calendrier.math.cnrs.fr
geslab.dsi.cnrs.fr
imap.cnrs.fr
objects.news.odyssey-messaging.com
catadupe.catalyse.cnrs.fr
assocbs2.igh.cnrs.fr
Certificate
The complete raw certificate details for www.mfp.cnrs.fr in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHbzCCBVegAwIBAgIQH7Mv7CPPiYos6pK1BaRH4zANBgkqhkiG9w0BAQwFADBE MQswCQYDVQQGEwJOTDEZMBcGA1UEChMQR0VBTlQgVmVyZW5pZ2luZzEaMBgGA1UE AxMRR0VBTlQgT1YgUlNBIENBIDQwHhcNMjQwMTE2MDAwMDAwWhcNMjUwMTE1MjM1 OTU5WjBuMQswCQYDVQQGEwJGUjEOMAwGA1UECBMFUGFyaXMxNTAzBgNVBAoTLENl bnRyZSBuYXRpb25hbCBkZSBsYSByZWNoZXJjaGUgc2NpZW50aWZpcXVlMRgwFgYD VQQDEw93d3cubWZwLmNucnMuZnIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCp+8x9rSZR2MK/J86YenAhJtmFL4xbU0VZ+fF5Aof0MqTgxwLV/oKAsbGF BGRvPHvpL1mh5UNHbaJjg0P2irjStHzkuKXijYnBxJUl5BsLvWUEpLDzau6hSDCX Gi+Orui0YNdlqTcpTWsNL6VNu66RkX00tmZcl/whm0iEP1qF/mFVoVvkg1cfjesj U+N5ceX2LanOy+GBq04MQjqpwg09exzE2i/8AxwCXRdPjtrUQXPTw1zeKWqJ6CKv VafVjBEUGHBkjAvb2xapQFMXYUCHccIFtWhPmvvMd/GJhrFl16rFbj5FuYRSEpH1 Y4NVAmMdLFm/fTaEZREIsApEKsnpAgMBAAGjggMxMIIDLTAfBgNVHSMEGDAWgBRv HTVJEGwy+lmgnryK6B+VvnF6DDAdBgNVHQ4EFgQUbV/HBWpN9T58rByMHll2sZ87 zeAwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMEkGA1UdIARCMEAwNAYLKwYBBAGyMQECAk8wJTAjBggr BgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMwCAYGZ4EMAQICMD8GA1Ud HwQ4MDYwNKAyoDCGLmh0dHA6Ly9HRUFOVC5jcmwuc2VjdGlnby5jb20vR0VBTlRP VlJTQUNBNC5jcmwwdQYIKwYBBQUHAQEEaTBnMDoGCCsGAQUFBzAChi5odHRwOi8v R0VBTlQuY3J0LnNlY3RpZ28uY29tL0dFQU5UT1ZSU0FDQTQuY3J0MCkGCCsGAQUF BzABhh1odHRwOi8vR0VBTlQub2NzcC5zZWN0aWdvLmNvbTCCAYAGCisGAQQB1nkC BAIEggFwBIIBbAFqAHcAzxFW7tUufK/zh1vZaS6b6RpxZ0qwF+ysAdJbd87MOwgA AAGNEvh75gAABAMASDBGAiEAwyk06zqko/oXHRhgYB92ua2+4z/nZH9qUpAWapHI PmMCIQDjsAm4+NETuk7uNJhqJ47kUWxcVtbTMpK4igY6z91FVAB3AKLjCuRF772t m3447Udnd1PXgluElNcrXhssxLlQpEfnAAABjRL4e7YAAAQDAEgwRgIhAOgwVQkW 62aE7KkDT7Jm6PATPKw+IU+ZPW/TMtYedw1UAiEA68VMphhnUcMomtfrWhc87yf3 4lGj2uyTIr4WOxg01RoAdgBOdaMnXJoQwzhbbNTfP1LrHfDgjhuNacCx+mSxYpo5 3wAAAY0S+HvGAAAEAwBHMEUCIGZGtkzhrFZROEpi0AhUuu1wiIk5yQZ7eS9Idwnx 3bRZAiEA2E85Y1F74uGDr7LF9uEC8ifybKEepoPLrmNrVwobbx0wJwYDVR0RBCAw HoIPd3d3Lm1mcC5jbnJzLmZyggttZnAuY25ycy5mcjANBgkqhkiG9w0BAQwFAAOC AgEAnlsBqQE+LyRYXuW6NcSnbCBAi+3VDDi8h89QcYLPXcA2w7FETwLqk6SuzhId svU/W+w0gzwBycYn43e6KqndaiQXqg0BO1QJI6zHQt6YpYmOd2slC9LMAPXH6xqR V041ehLRxROtsa1pK7mIBkWRwNGi1ylP4uaeUk+oNq/fZiu0P0/57oVhd+JU/1fY lHV00h5VKivuj7NjswJqzVBN5eYNMuIWBT8zRrOyT0zjDKQZXuN8pBeuccYVl4SB ekZ0xsrKvDH7cBSSNZlIEDwaL3F8xMYHcA4jhPjyeoS8KkeqwwHAJSS2Fiqk7RKt bNB0a7WffsbCvqVVNFgQqTYic3riN6VzBjY35p1ZBLlIiOQDNz4soPMHUtzkWvSP iPsj/XqY9KeMJXkEH0k1bWgWDWNXPPAk9AgTG2zixtemQaTheiYzi+fQGY5VhPHn TsEvzpFGsj5770d0RbkTy7C6DY2jNQg5jZ/JDd7NbH+sUVkMYdYbKLFFmgSwMYFO i5715KhDi0WQtoIZT0fN1v1Xq2VcByKhX1KxyDHaDpVUW339FNxMIrvjtZtSsBpV QnuHioxyphPJjYgPgU7pea+iqf99xq8zq69OWmDEDRmHOeTKn6nKoGmIhD+Kk+zZ cQrKNTjuCkhJmu8XfgqgsJh4bxnMtqbkUiMNHQl3qCvNsBk= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfvMfa0mUdjCvyfOmHpw ISbZhS+MW1NFWfnxeQKH9DKk4McC1f6CgLGxhQRkbzx76S9ZoeVDR22iY4ND9oq4 0rR85Lil4o2JwcSVJeQbC71lBKSw82ruoUgwlxovjq7otGDXZak3KU1rDS+lTbuu kZF9NLZmXJf8IZtIhD9ahf5hVaFb5INXH43rI1PjeXHl9i2pzsvhgatODEI6qcIN PXscxNov/AMcAl0XT47a1EFz08Nc3ilqiegir1Wn1YwRFBhwZIwL29sWqUBTF2FA h3HCBbVoT5r7zHfxiYaxZdeqxW4+RbmEUhKR9WODVQJjHSxZv302hGURCLAKRCrJ 6QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 42136460989190723701921276855048226787 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-16 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-15 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Centre national de la recherche scientifique' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.mfp.cnrs.fr' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21458440151682089114511281752279193826613931488125480944994130769856931102569232337346463335506807304404144350480195430476647159180999676621844665606219504991191220566741198961483127916972352207812137519383723327073980617337177989516667670579275786604983361684951596775396371620118019562569213528720779542455797506312642101906083916981401438122624241381282248877536378457022072903597574626256029816427983796016188837689102540638844910145900789041975847859885347435802050202673322517049906227122700775504683229270476703957411404712160335089437028659907048800615608427762419111158776176287334720043391713591430027594217 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6d5fc7056a4df53e7cac1c8c1e5976b19f3bcde0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mfp.cnrs.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfp.cnrs.fr' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 009e5b01a9013e2f24585ee5ba35c4a76c20408bedd50c38bc87cf507182cf5dc036c3b1444f02ea93a4aece121db2f53f5bec34833c01c9c627e377ba2aa9dd6a2417aa0d013b540923acc742de98a5898e776b250bd2cc00f5c7eb1a91574e357a12d1c513adb1ad692bb988064591c0d1a2d7294fe2e69e524fa836afdf662bb43f4ff9ee856177e254ff57d8947574d21e552a2bee8fb363b3026acd504de5e60d32e216053f3346b3b24f4ce30ca4195ee37ca417ae71c6159784817a4674c6cacabc31fb701492359948103c1a2f717cc4c607700e2384f8f27a84bc2a47aac301c02524b6162aa4ed12ad6cd0746bb59f7ec6c2bea555345810a93622737ae237a573063637e69d5904b94888e403373e2ca0f30752dce45af48f88fb23fd7a98f4a78c2579041f49356d68160d63573cf024f408131b6ce2c6d7a641a4e17a26338be7d0198e5584f1e74ec12fce9146b23e7bef477445b913cbb0ba0d8da33508398d9fc90ddecd6c7fac51590c61d61b28b1459a04b031814e8b9ef5e4a8438b4590b682194f47cdd6fd57ab655c0722a15f52b1c831da0e95545b7dfd14dc4c22bbe3b59b52b01a55427b878a8c72a613c98d880f814ee979afa2a9ff7dc6af33abaf4e5a60c40d198739e4ca9fa9caa06988843f8a93ecd9710aca3538ee0a48499aef177e0aa0b098786f19ccb6a6e452230d1d0977a82bcdb019