*.montpellier.inrae.fr
- INRAE -
Issued by GEANT OV RSA CA 4
About this certificate
This digital certificate with serial number 07:db:1c:9d:96:33:80:c2:f1:7d:36:0d:42:ef:c2:7d was issued on by GEANT Vereniging.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
INRAE
Organization:
INRAE
State / Province:
Paris
Country: FR
Country: FR
GEANT Vereniging
Organization:
GEANT Vereniging
Country:
NL
This certificate has expire since
Certificate Details
Serial Number (hex): 07:db:1c:9d:96:33:80:c2:f1:7d:36:0d:42:ef:c2:7dSerial Number (int): 10442289375288970096229088804180312701
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 89:90:98:36:56:d8:50:f2:a5:07:1a:0b:a2:cb:c5:ca:d2:22:8c:72
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c
Fingerprint (sha1): 67:33:cc:b1:ea:85:dd:bd:b3:af:55:45:3c:ba:f2:2c:bf:d4:94:c3
Fingerprint (sha256): 04:e9:f6:6a:a0:18:5a:1f:44:e0:ac:d8:1c:c9:b4:b0:f6:e4:bf:13:16:40:5b:b5:9e:75:07:68:23:4b:b1:a7
Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt
Revocation information
OCSP Server: http://GEANT.ocsp.sectigo.comCRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl
Check the revocation status for certificate *.montpellier.inrae.fr
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.montpellier.inrae.fr
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.montpellier.inrae.fr
*.montpellier.inra.fr
*.montpellier.inra.fr
Other certificates including the domain name inrae.fr
(limited to 100 certificates)
org.hub.inrae.fr
colloque.inra.fr
*.montpellier.inra.fr
plateforme-alimentation.sae2.inra.fr
lix1.toulouse.inra.fr
vocabulaires.test.irstea.fr
vmi-dev.97.jouy.inra.fr
entretiens-evaluations-pre.inra.fr
ddi.dsi.inra.fr
gmd.irstea.fr
*.opens3r-tls-pprod.stockage.inrae.fr
great.colmar.inrae.fr
gestion.rpcas.inra.fr
xtms.micalis.inrae.fr
vmi-prod-312.dctlse.inra.fr
trs-gateway01.tours.inra.fr
energie-step-diagnostic.irstea.fr
bureau-distant.inra.fr
cas.inra.fr
w3.paca.inra.fr
ldap-preproduction-ndeite.inrae.fr
vm-metexplore-dev.toulouse.inra.fr
gitlab.irstea.fr
accesdistant.irstea.fr
vmi-dev-88.jouy.inra.fr
colloque.inra.fr
*.montpellier.inrae.fr
portail-invite.inra.fr
agirh.test.irstea.fr
sgadmin-elise.irstea.fr
restitutions-preproduction.intranet.inra.fr
team.forgemia.inra.fr
www.persyst.inra.fr
idp.test.irstea.fr
partage-fichiers.inra.fr
*.irstea.fr
pmad-preproduction.inra.fr
irsteadoc.dev.irstea.fr
temps-activites.inrae.fr
atcha.toulouse.inra.fr
*.umrh.clermont.inrae.fr
temps-activites.inra.fr
supervision.dcidf.inra.fr
evaluation-avis-cd-preproduction.intranet.inra.fr
*.s3-idf.stockage.inra.fr
phenoscope.versailles.inra.fr
org.hub.inrae.fr
heart.irstea.fr
*.montpellier.inra.fr
pshsrv6.paca.inrae.fr
node-test.dctlse.rpcas.inra.fr
uefp.pierroton.inra.fr
gedeop.cati.inrae.fr
logs.cirrus.cloud.inrae.fr
agirh.irstea.fr
*.bordeaux.inra.fr
enquetes-preproduction.intranet.inra.fr
piwik.irstea.fr
portail-eduspot.inra.fr
ldap.irstea.fr
ng6.toulouse.inra.fr
radius.dcidf.inra.fr
sturwild.irstea.fr
url.inrae.fr
agirh.dev.irstea.fr
css-evaluation-preproduction.intranet.inra.fr
acces-rds.inra.fr
lix1.toulouse.inra.fr
analyses.migale.inra.fr
data-preproduction-v3.inra.fr
acces.intranet.inra.fr
gmao.intranet.inra.fr
biofora-nas.orleans.inra.fr
consultation-structures-integration.jouy.inra.fr
nextcloud-pprod.stockage.inra.fr
orediapfc.inra.fr
resa.irstea.fr
wiki.irstea.fr
sygade.inrae.fr
*.sk8.inrae.fr
*.s3-tls.stockage.inra.fr
agirh.irstea.fr
*.hub.inrae.fr
plastic-apps.transform.inrae.fr
vm-chemflow.toulouse.inra.fr
bdoh.irstea.fr
partage-fichiers-preproduction.extranet.inra.fr
deas.irstea.fr
*.rosetta.irstea.fr
text-mining.inra.fr
aff.roazhon.inra.fr
xylofront.pierroton.inra.fr
regulweb-preproduction.intranet.inra.fr
*.sgbd.inra.fr
supervision.clermont.inra.fr
dcim.dcidf.inra.fr
mediatheque.inrae.fr
colloque-mdv-preproduction.inra.fr
wiki.dijon.inra.fr
base-des-conventions.irstea.fr
colloque.inra.fr
*.montpellier.inra.fr
plateforme-alimentation.sae2.inra.fr
lix1.toulouse.inra.fr
vocabulaires.test.irstea.fr
vmi-dev.97.jouy.inra.fr
entretiens-evaluations-pre.inra.fr
ddi.dsi.inra.fr
gmd.irstea.fr
*.opens3r-tls-pprod.stockage.inrae.fr
great.colmar.inrae.fr
gestion.rpcas.inra.fr
xtms.micalis.inrae.fr
vmi-prod-312.dctlse.inra.fr
trs-gateway01.tours.inra.fr
energie-step-diagnostic.irstea.fr
bureau-distant.inra.fr
cas.inra.fr
w3.paca.inra.fr
ldap-preproduction-ndeite.inrae.fr
vm-metexplore-dev.toulouse.inra.fr
gitlab.irstea.fr
accesdistant.irstea.fr
vmi-dev-88.jouy.inra.fr
colloque.inra.fr
*.montpellier.inrae.fr
portail-invite.inra.fr
agirh.test.irstea.fr
sgadmin-elise.irstea.fr
restitutions-preproduction.intranet.inra.fr
team.forgemia.inra.fr
www.persyst.inra.fr
idp.test.irstea.fr
partage-fichiers.inra.fr
*.irstea.fr
pmad-preproduction.inra.fr
irsteadoc.dev.irstea.fr
temps-activites.inrae.fr
atcha.toulouse.inra.fr
*.umrh.clermont.inrae.fr
temps-activites.inra.fr
supervision.dcidf.inra.fr
evaluation-avis-cd-preproduction.intranet.inra.fr
*.s3-idf.stockage.inra.fr
phenoscope.versailles.inra.fr
org.hub.inrae.fr
heart.irstea.fr
*.montpellier.inra.fr
pshsrv6.paca.inrae.fr
node-test.dctlse.rpcas.inra.fr
uefp.pierroton.inra.fr
gedeop.cati.inrae.fr
logs.cirrus.cloud.inrae.fr
agirh.irstea.fr
*.bordeaux.inra.fr
enquetes-preproduction.intranet.inra.fr
piwik.irstea.fr
portail-eduspot.inra.fr
ldap.irstea.fr
ng6.toulouse.inra.fr
radius.dcidf.inra.fr
sturwild.irstea.fr
url.inrae.fr
agirh.dev.irstea.fr
css-evaluation-preproduction.intranet.inra.fr
acces-rds.inra.fr
lix1.toulouse.inra.fr
analyses.migale.inra.fr
data-preproduction-v3.inra.fr
acces.intranet.inra.fr
gmao.intranet.inra.fr
biofora-nas.orleans.inra.fr
consultation-structures-integration.jouy.inra.fr
nextcloud-pprod.stockage.inra.fr
orediapfc.inra.fr
resa.irstea.fr
wiki.irstea.fr
sygade.inrae.fr
*.sk8.inrae.fr
*.s3-tls.stockage.inra.fr
agirh.irstea.fr
*.hub.inrae.fr
plastic-apps.transform.inrae.fr
vm-chemflow.toulouse.inra.fr
bdoh.irstea.fr
partage-fichiers-preproduction.extranet.inra.fr
deas.irstea.fr
*.rosetta.irstea.fr
text-mining.inra.fr
aff.roazhon.inra.fr
xylofront.pierroton.inra.fr
regulweb-preproduction.intranet.inra.fr
*.sgbd.inra.fr
supervision.clermont.inra.fr
dcim.dcidf.inra.fr
mediatheque.inrae.fr
colloque-mdv-preproduction.inra.fr
wiki.dijon.inra.fr
base-des-conventions.irstea.fr
Certificate
The complete raw certificate details for *.montpellier.inrae.fr in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHXjCCBUagAwIBAgIQB9scnZYzgMLxfTYNQu/CfTANBgkqhkiG9w0BAQwFADBE MQswCQYDVQQGEwJOTDEZMBcGA1UEChMQR0VBTlQgVmVyZW5pZ2luZzEaMBgGA1UE AxMRR0VBTlQgT1YgUlNBIENBIDQwHhcNMjIwOTE1MDAwMDAwWhcNMjMwOTE1MjM1 OTU5WjBOMQswCQYDVQQGEwJGUjEOMAwGA1UECBMFUGFyaXMxDjAMBgNVBAoTBUlO UkFFMR8wHQYDVQQDDBYqLm1vbnRwZWxsaWVyLmlucmFlLmZyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHNvI4fzZ+r/yLUcwxU9oY1i6MJ5Wqs6TFX+ xCmJ3pslGuv44MpmoIhsyKomdqs1OfkuSoLhzYsCKC/3LsPZs6JvDvbpnrrT39K9 AIDQu972vclVxhNyP/85fW0kdTOPd8usaLFp9hbeilBH6tCiTyKm2OSLAGghKJtH NJyaAuQalPsmOInuaB1ilgXo/uMdGKc2KAPxgyf/FDQNbAtybFdTfITLCbM00PN7 +FXTtDAW691YtAcSPGZM0y+yGRm7TUcMX0yUWjt4cY9PXTR9RlVnc/RJjTIWKW+x ndifXNGIHDODnNr7cds58tfxh/fU1dOg0F+j1ZuVF9rpxcCOJwIDAQABo4IDQDCC AzwwHwYDVR0jBBgwFoAUbx01SRBsMvpZoJ68iugflb5xegwwHQYDVR0OBBYEFImQ mDZW2FDypQcaC6LLxcrSIoxyMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAA MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBJBgNVHSAEQjBAMDQGCysG AQQBsjEBAgJPMCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vc2VjdGlnby5jb20vQ1BT MAgGBmeBDAECAjA/BgNVHR8EODA2MDSgMqAwhi5odHRwOi8vR0VBTlQuY3JsLnNl Y3RpZ28uY29tL0dFQU5UT1ZSU0FDQTQuY3JsMHUGCCsGAQUFBwEBBGkwZzA6Bggr BgEFBQcwAoYuaHR0cDovL0dFQU5ULmNydC5zZWN0aWdvLmNvbS9HRUFOVE9WUlNB Q0E0LmNydDApBggrBgEFBQcwAYYdaHR0cDovL0dFQU5ULm9jc3Auc2VjdGlnby5j b20wggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB1AK33vvp8/xDIi509nB4+GGq0 Zyldz7EMJMqFhjTr3IKKAAABg0F8ybUAAAQDAEYwRAIgNqBCrTvyPcWM3uDyfujr fdirDM8LmwlDFUw+45uVPRsCIHm2Ru2+EvWS9QgH+ykgv/kAIfn0lu4+TWlAM8JU DsT5AHcAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGDQXzJjAAA BAMASDBGAiEAgtBKGaOyn/vHPptg2A2xUEygYqfIKIS9aBzwunD3eVcCIQD7fPCX DGz1u5LuDICeHAekqZ7D3oa+hokKRMUQiJ1vhwB2AOg+0No+9QY1MudXKLyJa8kD 08vREWvs62nhd31tBr1uAAABg0F8yWAAAAQDAEcwRQIhAKVVq4kJOeHU/6GfsoBN 1vZX8pne/zbvL+rPle0BAmDSAiBJ9ozjvU7EQ/WioPBcV7+LFCRIEGYEGf24HRZJ /8WfQDA4BgNVHREEMTAvghYqLm1vbnRwZWxsaWVyLmlucmFlLmZyghUqLm1vbnRw ZWxsaWVyLmlucmEuZnIwDQYJKoZIhvcNAQEMBQADggIBAJ5ynb/PN/uHFtbU0kU4 MyQxVEEPy+yrY6kd48uyomJoXeC9jWaAFvl/F/ytyET6qctWGpKz5NlPYZfUJr4b mlbQiXoWF0CB+PU9cqm8DeA3T0SiNU4mavBtx+ryOJlWuLgTXEhgvwnzB1I8cuQ9 ReVsMGEoAr/XJmxT9KM79kJrpXf+oUMt4Ngiu+JHHv9pk34zPumh3NCcXJkYn3d0 4DZy5/nqtgLYwmRit0YjkCOx5b5JEFiGp49Dtr9BAHQp+TK5dD6djl+TY1Xwjw9H yvTYr44GJyO7q/lSdtwaBf5dfqtFspsUhmvcQ58AjNSb/ME7IcU+Y06EYghZudoG 3YTC4gESO4oGYq+KLXlHfKR8mfK6rmkuQrA8iP/yxC+mK3vgdEQ+q9zbHl8mkw+H c9SDQXGJg+rWZe9E+x13iOozrKtMfv9FdIivpuEOdIMcM6qrkt/rO5D7eE9VpYLB aQuojs/+0xuGSNNc2HtwB6RBaa06wIv0okWvc1BAtGVv0cUgof48elNzsj3FEVrE GRNMK9wXi+7FcAK12y/kgWGLthgHEORITaUxhLeFS9wpH9Ka74M6TH8IEPguLtP3 vcig6Cwo2W0QXjBjZFemQAlYLxWicomyykGCfjFuEjNr2xRS/+rTVafKeNSJhY+M S5L66G4D05tDVg5xkEKWAM49 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHNvI4fzZ+r/yLUcwxU9 oY1i6MJ5Wqs6TFX+xCmJ3pslGuv44MpmoIhsyKomdqs1OfkuSoLhzYsCKC/3LsPZ s6JvDvbpnrrT39K9AIDQu972vclVxhNyP/85fW0kdTOPd8usaLFp9hbeilBH6tCi TyKm2OSLAGghKJtHNJyaAuQalPsmOInuaB1ilgXo/uMdGKc2KAPxgyf/FDQNbAty bFdTfITLCbM00PN7+FXTtDAW691YtAcSPGZM0y+yGRm7TUcMX0yUWjt4cY9PXTR9 RlVnc/RJjTIWKW+xndifXNGIHDODnNr7cds58tfxh/fU1dOg0F+j1ZuVF9rpxcCO JwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10442289375288970096229088804180312701 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-15 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-15 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'INRAE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.montpellier.inrae.fr' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22274864367981847784428004548342777046304138920851597141308299791583549404342987199924681109797178683746956561704973272489273935425373501799388344227786282849387092763358565652452701646049871736994607904873156496379594611784794428428178526835443125628860927726586889683563710217465623885538878766668497627707718269471991857321143643838193976077807832486097676315597169908715245223356389955789047098327806234177818787672393009609107640357772551671287036632074800742872679004863128369878776068511782265763159189740133252241989903980075967960521451342402031456486274085336062891835673950800425372590706652431851607592487 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8990983656d850f2a5071a0ba2cbc5cad2228c72 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.montpellier.inrae.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.montpellier.inra.fr' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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