www-centre-saclay.cea.fr
- COMMISSARIAT A L'ENERGIE ATOMIQUE ET AUX ENERGIES ALTERNATIVES -
Issued by GEANT OV RSA CA 4
About this certificate
This digital certificate with serial number 1e:2e:f6:17:20:25:5a:ee:19:0d:f0:da:8a:57:05:5f was issued on by GEANT Vereniging.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
COMMISSARIAT A L'ENERGIE ATOMIQUE ET AUX ENERGIES ALTERNATIVES
Organization:
COMMISSARIAT A L'ENERGIE ATOMIQUE ET AUX ENERGIES ALTERNATIVES
State / Province:
Paris
Country: FR
Country: FR
GEANT Vereniging
Organization:
GEANT Vereniging
Country:
NL
This certificate will expire on
Certificate Details
Serial Number (hex): 1e:2e:f6:17:20:25:5a:ee:19:0d:f0:da:8a:57:05:5fSerial Number (int): 40120676833998994371753365451541251423
Serial Number lenght: 125 bits, 16 octets
SubjectKeyId: a0:4f:b7:a2:f9:ef:31:36:e3:21:25:60:08:4b:5c:5c:67:ba:eb:9d
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c
Fingerprint (sha1): da:1a:7e:61:d2:be:d6:68:aa:1d:ab:77:6e:1e:23:67:7b:ff:bf:b4
Fingerprint (sha256): 05:d1:4d:05:37:6c:9d:e0:2a:82:c9:8c:ef:e0:89:93:e4:8f:19:83:b7:4e:60:8e:31:5d:3e:05:d5:45:3e:be
Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt
Revocation information
OCSP Server: http://GEANT.ocsp.sectigo.comCRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl
Check the revocation status for certificate www-centre-saclay.cea.fr
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www-centre-saclay.cea.fr
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www-centre-saclay.cea.fr
Other certificates including the domain name cea.fr
(limited to 100 certificates)
joliot.cea.fr
projet-si-map.cea.fr
projet-sip.cea.fr
drf-internet.extra.cea.fr
p-shfj-gera-bdd.partenaires.cea.fr
sogreen-project.cea.fr
veille-dem.cea.fr
compta-dev.admin.ccc.cea.fr
lha-dmt2.cea.fr
projet-thermacem.cea.fr
infos-salaries.cea.fr
www-centre-saclay.cea.fr
agueil.eole.ccc.cea.fr
naiades-project.cea.fr
maintenance-digiteo.cea.fr
irig.cea.fr
q4-hilumi.cea.fr
www.mobilite-interne.cea.fr
afh.cea.fr
ged-extra-sacm.cea.fr
eu-aims.cea.fr
vpn.cea.fr
drf-upsac.cea.fr
hg2epx.cea.fr
vpn.cea.fr
projet-li2cem.cea.fr
montchretien02.admin.ccc.cea.fr
www.theses-postdocs.cea.fr
baudelaire02.admin.ccc.cea.fr
sarmenti-proposal-project.cea.fr
letsense.cea.fr
qflag.cea.fr
vpn.cea.fr
cirse-smtp-out.extra.cea.fr
talk3.extra.cea.fr
afh.cea.fr
events-list.partenaires.cea.fr
lotus.cea.fr
activage-intervention.cea.fr
communaute-lacrs.cea.fr
www-plat4m.cea.fr
anastasia2-project.cea.fr
instn.cea.fr
modsecaero.cea.fr
talents.cea.fr
e-i2ir-test.cea.fr
www-ged-demeterres.cea.fr
herschel-project.cea.fr
wiki.admin.ccc.cea.fr
bioproj.cea.fr
madmax.cea.fr
partage-dpad.cea.fr
chat.admin.ccc.cea.fr
gopv-project.cea.fr
www.emploi.cea.fr
webmail-e.cea.fr
transmil-project.cea.fr
integral-project.cea.fr
projet-li2cem.cea.fr
webmail-ext.qualif.cea.fr
sfcg-nuvia.cea.fr
spica-b-bop.cea.fr
rapport-scientifique-leti.cea.fr
projet-optifroid.cea.fr
integral-project.cea.fr
p-i2ipp-racine-collab.qualif-p.cea.fr
bts-frama-c.cea.fr
datadrf.cea.fr
webconfgre.cea.fr
p-i2i-test.partenaires.cea.fr
imagen2.cea.fr
garbin.eole.ccc.cea.fr
modsecaero.cea.fr
nectarcam-irfu.cea.fr
eu-aims.cea.fr
projet-labo-commun-masen.cea.fr
jobs.eurotalents.cea.fr
gouvernance-ca.cea.fr
www-cad.cea.fr
these-is.cea.fr
projet-entech-se.cea.fr
p-i2i-personnes.partenaires.cea.fr
www-leti.cea.fr
qgp-admin.cea.fr
solhyshare-project.cea.fr
compta-rct.admin.ccc.cea.fr
codev-tuleap.cea.fr
jacob.cea.fr
www-fr.ccc.cea.fr
projet-altess.cea.fr
i-id.cea.fr
farou.eole.ccc.cea.fr
com-mar-collab.cea.fr
projet-comepos.cea.fr
cbrn.partenaires.cea.fr
www-cadarache.cea.fr
oaasis.cea.fr
s2lam.cea.fr
www-dmt-rm2-far.cea.fr
phoenix.cea.fr
projet-si-map.cea.fr
projet-sip.cea.fr
drf-internet.extra.cea.fr
p-shfj-gera-bdd.partenaires.cea.fr
sogreen-project.cea.fr
veille-dem.cea.fr
compta-dev.admin.ccc.cea.fr
lha-dmt2.cea.fr
projet-thermacem.cea.fr
infos-salaries.cea.fr
www-centre-saclay.cea.fr
agueil.eole.ccc.cea.fr
naiades-project.cea.fr
maintenance-digiteo.cea.fr
irig.cea.fr
q4-hilumi.cea.fr
www.mobilite-interne.cea.fr
afh.cea.fr
ged-extra-sacm.cea.fr
eu-aims.cea.fr
vpn.cea.fr
drf-upsac.cea.fr
hg2epx.cea.fr
vpn.cea.fr
projet-li2cem.cea.fr
montchretien02.admin.ccc.cea.fr
www.theses-postdocs.cea.fr
baudelaire02.admin.ccc.cea.fr
sarmenti-proposal-project.cea.fr
letsense.cea.fr
qflag.cea.fr
vpn.cea.fr
cirse-smtp-out.extra.cea.fr
talk3.extra.cea.fr
afh.cea.fr
events-list.partenaires.cea.fr
lotus.cea.fr
activage-intervention.cea.fr
communaute-lacrs.cea.fr
www-plat4m.cea.fr
anastasia2-project.cea.fr
instn.cea.fr
modsecaero.cea.fr
talents.cea.fr
e-i2ir-test.cea.fr
www-ged-demeterres.cea.fr
herschel-project.cea.fr
wiki.admin.ccc.cea.fr
bioproj.cea.fr
madmax.cea.fr
partage-dpad.cea.fr
chat.admin.ccc.cea.fr
gopv-project.cea.fr
www.emploi.cea.fr
webmail-e.cea.fr
transmil-project.cea.fr
integral-project.cea.fr
projet-li2cem.cea.fr
webmail-ext.qualif.cea.fr
sfcg-nuvia.cea.fr
spica-b-bop.cea.fr
rapport-scientifique-leti.cea.fr
projet-optifroid.cea.fr
integral-project.cea.fr
p-i2ipp-racine-collab.qualif-p.cea.fr
bts-frama-c.cea.fr
datadrf.cea.fr
webconfgre.cea.fr
p-i2i-test.partenaires.cea.fr
imagen2.cea.fr
garbin.eole.ccc.cea.fr
modsecaero.cea.fr
nectarcam-irfu.cea.fr
eu-aims.cea.fr
projet-labo-commun-masen.cea.fr
jobs.eurotalents.cea.fr
gouvernance-ca.cea.fr
www-cad.cea.fr
these-is.cea.fr
projet-entech-se.cea.fr
p-i2i-personnes.partenaires.cea.fr
www-leti.cea.fr
qgp-admin.cea.fr
solhyshare-project.cea.fr
compta-rct.admin.ccc.cea.fr
codev-tuleap.cea.fr
jacob.cea.fr
www-fr.ccc.cea.fr
projet-altess.cea.fr
i-id.cea.fr
farou.eole.ccc.cea.fr
com-mar-collab.cea.fr
projet-comepos.cea.fr
cbrn.partenaires.cea.fr
www-cadarache.cea.fr
oaasis.cea.fr
s2lam.cea.fr
www-dmt-rm2-far.cea.fr
phoenix.cea.fr
Certificate
The complete raw certificate details for www-centre-saclay.cea.fr in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHgzCCBWugAwIBAgIQHi72FyAlWu4ZDfDailcFXzANBgkqhkiG9w0BAQwFADBE MQswCQYDVQQGEwJOTDEZMBcGA1UEChMQR0VBTlQgVmVyZW5pZ2luZzEaMBgGA1UE AxMRR0VBTlQgT1YgUlNBIENBIDQwHhcNMjMwNjIxMDAwMDAwWhcNMjQwNjIwMjM1 OTU5WjCBiTELMAkGA1UEBhMCRlIxDjAMBgNVBAgTBVBhcmlzMUcwRQYDVQQKEz5D T01NSVNTQVJJQVQgQSBMJ0VORVJHSUUgQVRPTUlRVUUgRVQgQVVYIEVORVJHSUVT IEFMVEVSTkFUSVZFUzEhMB8GA1UEAxMYd3d3LWNlbnRyZS1zYWNsYXkuY2VhLmZy MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmx2/ne9rxu2LKXoN2lq pGeDgVQOm3JEYLhc/efOX4SzPkzyhIqixJgLqJinBe2uunnFhgc3Zrt1G6svMrZV 4D+mLiUcLUB553+Ern1Mtpw3GjRlRFbAn7yw0XkoBwljKf+8zWqIT4TRH7E9fe9V VzkqxN4uu1L4IZQ75kYJCUCDNktvg1iI19nDVsb2/NnNeloctxtIKBrvYSWwCL+7 6HY3A3IVX6Y09ZiVJpLwVDOu7usvdyyX96n6CAhoSSsAG1hpA1KwPIFS8ndK7Dqv SzbLZNy742EFw9SZIblSQPME75Bnjt+91SAZFOiR5haypYB6fCaJXz/2/sHZXW/R sQIDAQABo4IDKTCCAyUwHwYDVR0jBBgwFoAUbx01SRBsMvpZoJ68iugflb5xegww HQYDVR0OBBYEFKBPt6L57zE24yElYAhLXFxnuuudMA4GA1UdDwEB/wQEAwIFoDAM BgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBJBgNV HSAEQjBAMDQGCysGAQQBsjEBAgJPMCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vc2Vj dGlnby5jb20vQ1BTMAgGBmeBDAECAjA/BgNVHR8EODA2MDSgMqAwhi5odHRwOi8v R0VBTlQuY3JsLnNlY3RpZ28uY29tL0dFQU5UT1ZSU0FDQTQuY3JsMHUGCCsGAQUF BwEBBGkwZzA6BggrBgEFBQcwAoYuaHR0cDovL0dFQU5ULmNydC5zZWN0aWdvLmNv bS9HRUFOVE9WUlNBQ0E0LmNydDApBggrBgEFBQcwAYYdaHR0cDovL0dFQU5ULm9j c3Auc2VjdGlnby5jb20wggF8BgorBgEEAdZ5AgQCBIIBbASCAWgBZgB2AHb/iD8K tvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABiNtS+H8AAAQDAEcwRQIgBlNR NnzTmg/0+4789yRSleFEA137iJPsCLAk8rCU+JwCIQDxTOvGZS1O/Od+ctmU0OlQ JUPz+TjGvw+i1PNDIn1pdAB1ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI 1/urAAABiNtS+O4AAAQDAEYwRAIgdwoWqeHoCsHc4AZlNVvFJH5DKmaywXpjK56y kFmkJtoCIFMuNdRDxanhtVlm7wW3JoxVGwuQ68C7O+H4BrlqO2ziAHUA7s3QZNXb Gs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGI21L47AAABAMARjBEAiBo/QUq S2L/9cLp10A+JORfL2vjP2mlS5m5A/SNe5dcMQIgG+P5qk4iq0hC7IbvvaYNtl/e 7i36+6B32xB6kXTV+howIwYDVR0RBBwwGoIYd3d3LWNlbnRyZS1zYWNsYXkuY2Vh LmZyMA0GCSqGSIb3DQEBDAUAA4ICAQBkcZsN4SaxMGL0x3KI7L8ynN7xRLo6YTbh ck8kXDxQFl156brfsL7J3BR5ZN6pv87f/odSFQ0MZ1eITwfJmVBSTEHjtKtNyFlX wHnZ3cMpvpMXUnWGQmDZ45QDz64mxMfTyRJxXz1x0eji4h4f5z/QJeJKKZYHzY2B LWGbq2WLM6b/fKa3WG8bEWQHyG/mYx/qFNceXWdM2eerUUPBK6xm4zIi5Hd7dt4P 360bwem64QM3ckYnJ8QFxtmGXKdZ3xC+2jjCQw8ecfOfQTcqvyKIWnEQbdtRZVOZ qwFifnbLX3TliRolsSSiC2iynqdIMqTthERhF/dH9F1mmbrTV1BWDcBZQHW/BVh1 1G3n7zLL9I2JWnAOZehfNVVH0ctQPwTkejdH5bCeDo63UYTjFr2WoNR9jJTGmUJK aI6shkQZlfHlzhh+Mv8NN9M+6odWsH74hf5GboHEIYBjcoCs4PZGM5v/x8UUmV1B FAb61Yw1fnFH4cWK+4aCwMgkQR8kUF7ljp0qBKIIFj9KNWxFXX6RZ+V+ovbq/ufJ zbwkdxTsiDGW3+5orQI/TIdAMZHK6lDL9jySJBBxBhQbpx96HLKmsTd+nMM4U6SC 3PLofra2RF/fGBRymLjxcCFgbYw5ulEQPirtRf6h7NBX9aHHKnd4DVZJgZ9wdPrx n8TB3MH2bQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmx2/ne9rxu2LKXoN2lq pGeDgVQOm3JEYLhc/efOX4SzPkzyhIqixJgLqJinBe2uunnFhgc3Zrt1G6svMrZV 4D+mLiUcLUB553+Ern1Mtpw3GjRlRFbAn7yw0XkoBwljKf+8zWqIT4TRH7E9fe9V VzkqxN4uu1L4IZQ75kYJCUCDNktvg1iI19nDVsb2/NnNeloctxtIKBrvYSWwCL+7 6HY3A3IVX6Y09ZiVJpLwVDOu7usvdyyX96n6CAhoSSsAG1hpA1KwPIFS8ndK7Dqv SzbLZNy742EFw9SZIblSQPME75Bnjt+91SAZFOiR5haypYB6fCaJXz/2/sHZXW/R sQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 40120676833998994371753365451541251423 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-21 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-20 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMMISSARIAT A L'ENERGIE ATOMIQUE ET AUX ENERGIES ALTERNATIVES' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www-centre-saclay.cea.fr' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23028857500197273210825865179158320960079304212481737658376758989913791893162316774999921807307015836690686720185309657926383380836779342373458471475895139372830237523677147101620855541997391107169434836086229570436317566584829808457419753413351494343873978357431242808845572653769164850803982228575920134620679166124698590148123306699619853501121583216526492058221905758143822685115248265811021689239499860526021466078782806263756346273789145692358422333283711927123380136458241608449730997597446698779925789428755472511884272338054935031548871200938045907490654563271015791061443998318890224060357554488240002552241 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a04fb7a2f9ef3136e3212560084b5c5c67baeb9d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-centre-saclay.cea.fr' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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