renk.roazhon.inra.fr

- INRAE -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 6e:cb:f0:6a:b1:67:af:2e:2a:31:81:eb:f6:82:6f:33 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

INRAE

Organization: INRAE
State / Province: Paris
Country: FR

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 6e:cb:f0:6a:b1:67:af:2e:2a:31:81:eb:f6:82:6f:33
Serial Number (int): 147273992030017612304455467263374552883
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: d7:29:92:73:b4:83:ad:e0:a7:87:76:fd:12:38:47:7b:b4:33:77:d7
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 91:1f:06:f1:73:1f:92:f2:8d:14:14:52:a5:fb:7a:f8:9b:8e:69:43
Fingerprint (sha256): 04:5f:ef:f8:48:fd:4e:b2:b2:6e:f7:bf:f7:89:88:ac:cf:25:fa:16:58:e7:ed:d3:1c:25:2d:82:15:1e:99:32

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate renk.roazhon.inra.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for renk.roazhon.inra.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

renk.roazhon.inra.fr
renk.roazhon.inrae.fr

Other certificates including the domain name inra.fr

(limited to 100 certificates)
lovinra.inra.fr
activite-plateforme-lait.intranet.inra.fr
vmi-prod-90.jouy.inra.fr
colloque.inra.fr
*.montpellier.inra.fr
cartes.cesaer.inra.fr
demo.sig.inra.fr
plateforme-alimentation.sae2.inra.fr
plateformedevappweb-preproduction.inra.fr
*.supagro.inra.fr
lix1.toulouse.inra.fr
admin-bioinfo.angers-nantes.inra.fr
partage-fichiers.extranet.inra.fr
vmi-dev.97.jouy.inra.fr
wiki.siirgo.inra.fr
entretiens-evaluations-pre.inra.fr
vmi-preprod-344.dcidf.inra.fr
catisae2.toulouse.inra.fr
ddi.dsi.inra.fr
*.toulouse.inra.fr
partage-fichiers.inra.fr
symbiose.toulouse.inra.fr
vmi-preprod-311.dcidf.inra.fr
messagerie.inra.fr
cas.inra.fr
gestion.rpcas.inra.fr
gestion-test.dsi.inra.fr
vmi-prod-312.dctlse.inra.fr
reco.inra.fr
trs-gateway01.tours.inra.fr
bureau-distant.inra.fr
cas.inra.fr
vm-galaxy-prod.toulouse.inra.fr
w3.paca.inra.fr
ldap-preproduction-ndeite.inrae.fr
vm-metexplore-dev.toulouse.inra.fr
*.poitou-charentes.inra.fr
lovinra.inra.fr
renk.roazhon.inra.fr
cas-preprod.inra.fr
vmi-dev-88.jouy.inra.fr
colloque.inra.fr
*.montpellier.inrae.fr
appli.poitou-charentes.inra.fr
portail-invite.inra.fr
*.corse.inra.fr
dcimneo.inra.fr
www2.versailles-grignon.inra.fr
wsus-theix.clermont.inra.fr
*.paris.inra.fr
genome.jouy.inra.fr
messagerie.jouy.inra.fr
nextcloud-preprod.dctlse.inra.fr
restitutions-preproduction.intranet.inra.fr
team.forgemia.inra.fr
www.persyst.inra.fr
usine-logicielle.inra.fr
data-preproduction.inra.fr
partage-fichiers.inra.fr
usine-logicielle.inra.fr
vega.toulouse.inra.fr
pmad-preproduction.inra.fr
temps-activites.inrae.fr
enquetes-preproduction.intranet.inra.fr
hn-preproduction-hnqua.s2i.inra.fr
atcha.toulouse.inra.fr
intranet5-bck1.inra.fr
temps-activites.inra.fr
supervision.dcidf.inra.fr
evaluation-avis-cd-preproduction.intranet.inra.fr
*.s3-idf.stockage.inra.fr
vmi-preprod-345.dcidf.inra.fr
phenoscope.versailles.inra.fr
mycor.nancy.inra.fr
*.montpellier.inra.fr
pshsrv6.paca.inrae.fr
node-test.dctlse.rpcas.inra.fr
uefp.pierroton.inra.fr
intranet.centre.inra.fr
demo.sig.inra.fr
www2.versailles-grignon.inra.fr
dcavptmgr.dsi.inra.fr
webmail.jouy.inra.fr
vmi-prod-90.jouy.inra.fr
*.bordeaux.inra.fr
enquetes-preproduction.intranet.inra.fr
colloque6.inra.fr
portail-eduspot.inra.fr
ng6.toulouse.inra.fr
radius.dcidf.inra.fr
didacticiels.si.inra.fr
mulcyber.toulouse.inra.fr
css-evaluation-preproduction.intranet.inra.fr
acces-rds.inra.fr
lix1.toulouse.inra.fr
analyses.migale.inra.fr
data-preproduction-v3.inra.fr
eivp.inra.fr
usine-logicielle.inra.fr
sig.inra.fr

Certificate

The complete raw certificate details for renk.roazhon.inra.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF7TCCA9WgAwIBAgIQbsvwarFnry4qMYHr9oJvMzANBgkqhkiG9w0BAQwFADBE
MQswCQYDVQQGEwJOTDEZMBcGA1UEChMQR0VBTlQgVmVyZW5pZ2luZzEaMBgGA1UE
AxMRR0VBTlQgT1YgUlNBIENBIDQwHhcNMjMwMTA5MDAwMDAwWhcNMjQwMTA5MjM1
OTU5WjBMMQswCQYDVQQGEwJGUjEOMAwGA1UECBMFUGFyaXMxDjAMBgNVBAoTBUlO
UkFFMR0wGwYDVQQDExRyZW5rLnJvYXpob24uaW5yYS5mcjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMJ56q/oVTSq/l2NXJxQhvpacb5PN3WGWxSgFboZ
SPQcbTQB1tAsDrMBCiLn2hxuXv0PHQ3P8DljsOtIeR+WSzUgJ70btcHAF4yI2aYp
qK9q5IIGwa9qGADYloVHNBIxF+2TFh/4+Qqt/uNfkaw7VcjM3HzkLoyenCfOlG7C
H+ezB78HsZq2FLizdFNIYJOorZ3JGFleiktju4AtdPuVty7iscmo0ctQr+dgnPjl
+Ivp2plPKiRsgla0ZmR0A45cwaVFFdu0oQZB2gK6QUnQsog/sIyWV02GXQZ2EAcv
KCA5h3lue2JTNd/DWlkLg/F2bNlcG1qauI54aczUfbZSi30CAwEAAaOCAdEwggHN
MB8GA1UdIwQYMBaAFG8dNUkQbDL6WaCevIroH5W+cXoMMB0GA1UdDgQWBBTXKZJz
tIOt4KeHdv0SOEd7tDN31zAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSQYDVR0gBEIwQDA0BgsrBgEE
AbIxAQICTzAlMCMGCCsGAQUFBwIBFhdodHRwczovL3NlY3RpZ28uY29tL0NQUzAI
BgZngQwBAgIwPwYDVR0fBDgwNjA0oDKgMIYuaHR0cDovL0dFQU5ULmNybC5zZWN0
aWdvLmNvbS9HRUFOVE9WUlNBQ0E0LmNybDB1BggrBgEFBQcBAQRpMGcwOgYIKwYB
BQUHMAKGLmh0dHA6Ly9HRUFOVC5jcnQuc2VjdGlnby5jb20vR0VBTlRPVlJTQUNB
NC5jcnQwKQYIKwYBBQUHMAGGHWh0dHA6Ly9HRUFOVC5vY3NwLnNlY3RpZ28uY29t
MBMGCisGAQQB1nkCBAMBAf8EAgUAMDYGA1UdEQQvMC2CFHJlbmsucm9hemhvbi5p
bnJhLmZyghVyZW5rLnJvYXpob24uaW5yYWUuZnIwDQYJKoZIhvcNAQEMBQADggIB
AAoI58Yp2tvPjPkyqhJXlFuaB6DWTpQ/EonQk00ut/K8TCvXvo3iUOjUZI9dNBTc
ftXQKPdzTREThizwDq6MeRepbIY7rgZzFJx/JkmPzw9HJe2JGmJYXUBDg1QQ2TeI
Xk/Pd9sDL1Fg7LNeu/edNL/+X5151ttpeuoEdtdOjGIOPpB9htHtcrn6gci4hglT
wtvDQrVhIAe5oHMaFBoBVvi1lA3Oxy8vTVWIRwWNo04KQwz6nmLJdp5vKI+C6ADJ
OzSJE3i9O0S4Rjo3iPCFWrJ1z+j8xR8fcfIjh+sg1m417Yc0/NBnzkn64wLGSy8J
7V2y1PSYRAcMDbQg8bPVBZxbFXfR3+Jrf1fEoBMcu60xFBwJBnisEuhsSYSzwV4z
Tl1uk8A+zpxDo/wjgVuYOmL+Lsk4C9ZeIUgHUxqSLZJ8jxHWPfsjJ9CLR/cOCUJT
jN09yagKRCosKnm1Pc4kClTCY64B1nVCJ0xeUqXoRQ+Z8sAgNyCwKLJAw4vExO4P
INwo3FsLuLa9Qcq7eULGs69hg0YRP3W7rNTlKrx2NE+ZNtKQ4TT7xfAWSQRaiV/r
qczunlJVH74bqiCIc1haLGPUqS+zA9WzhtUsJGDzONCVERTLvX2morZ57TTYmYpJ
y7i2tjc4wcSwa50ou2kfZ6Y2LXkznnVWjAgP3CQek5Kg
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnnqr+hVNKr+XY1cnFCG
+lpxvk83dYZbFKAVuhlI9BxtNAHW0CwOswEKIufaHG5e/Q8dDc/wOWOw60h5H5ZL
NSAnvRu1wcAXjIjZpimor2rkggbBr2oYANiWhUc0EjEX7ZMWH/j5Cq3+41+RrDtV
yMzcfOQujJ6cJ86UbsIf57MHvwexmrYUuLN0U0hgk6itnckYWV6KS2O7gC10+5W3
LuKxyajRy1Cv52Cc+OX4i+namU8qJGyCVrRmZHQDjlzBpUUV27ShBkHaArpBSdCy
iD+wjJZXTYZdBnYQBy8oIDmHeW57YlM138NaWQuD8XZs2VwbWpq4jnhpzNR9tlKL
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 147273992030017612304455467263374552883
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'INRAE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'renk.roazhon.inra.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24550350551861976523673134958031525415762002227165242931232984383131446716853679281427641278548472634175779304762803554265669424638602058331780276261928377397523908700604873392556309267351451182877431419795539872554168868432198383892191711678638914109408177603039847770121888672434921203483105481659620688873497126672089863920710975009624814801109492324111877879458508550995185248604627429398925514195706279057255866591200560989854750778148599515228832955017422623575617881486396974311075073620037106247353153913545918040223133267362374755941484233691332883088209438269522013902976555163203178742822966993831951764349
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d7299273b483ade0a78776fd1238477bb43377d7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renk.roazhon.inra.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renk.roazhon.inrae.fr'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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