ecole-ete.insa-lyon.fr

- Institut National des Sciences Appliquées de Lyon -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number f8:5d:e6:3e:90:e3:9d:6e:1f:95:b9:73:a5:27:5a:50 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Institut National des Sciences Appliquées de Lyon

Organization: Institut National des Sciences Appliquées de Lyon
State / Province: Auvergne-Rhône-Alpes
Country: FR

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): f8:5d:e6:3e:90:e3:9d:6e:1f:95:b9:73:a5:27:5a:50
Serial Number (int): 330136096473698802236465724230088481360
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: eb:73:55:2a:53:13:81:4c:b2:fa:f4:91:74:17:c8:bc:9d:db:e1:b6
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 86:19:65:68:98:4c:63:aa:5e:5b:a2:18:e6:da:32:0b:dc:27:ed:48
Fingerprint (sha256): 06:23:02:42:5a:ea:d5:f8:b6:ff:1c:f4:f3:30:58:1b:de:b5:83:a4:09:2b:45:6b:0a:8c:7f:26:25:3c:e3:80

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate ecole-ete.insa-lyon.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ecole-ete.insa-lyon.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ecole-ete.insa-lyon.fr
www.ecole-ete.insa-lyon.fr

Other certificates including the domain name insa-lyon.fr

(limited to 100 certificates)
insa-dpadsvil1-01.insa-lyon.fr
cocovn.insa-lyon.fr
www.insa-lyon.fr
reportserver.insa-lyon.fr
reve.insa-lyon.fr
mouvinsa.insa-lyon.fr
gofast.insa-lyon.fr
tc-net2.insa-lyon.fr
reve.insa-lyon.fr
orioai.insa-lyon.fr
telecom.insa-lyon.fr
insa-fd.insa-lyon.fr
svn.insa-lyon.fr
tux.creatis.insa-lyon.fr
jpo.insa-lyon.fr
exal.insa-lyon.fr
vk2000-v6.insa-lyon.fr
aip-primeca.insa-lyon.fr
insa-vcvil1-01.insa-lyon.fr
lamcosbao.insa-lyon.fr
ecole-ete.insa-lyon.fr
myriad.creatis.insa-lyon.fr
tux.creatis.insa-lyon.fr
neurosens.creatis.insa-lyon.fr
servif-cocktail.insa-lyon.fr
dsi.insa-lyon.fr
wiki-dsi.insa-lyon.fr
neurosens.creatis.insa-lyon.fr
desk.creatis.insa-lyon.fr
gtwresd.insa-lyon.fr
sgd.insa-lyon.fr
mediacenter.insa-lyon.fr
aip-foad-web.insa-lyon.fr
tux.creatis.insa-lyon.fr
gtwresc.insa-lyon.fr
vk2-gm-72.insa-lyon.fr
deep.insa-lyon.fr
cipcnet.insa-lyon.fr
fondation.insa-lyon.fr
insa-vxrmgrvil1-01.insa-lyon.fr
fimi2i.insa-lyon.fr
intranetgi.insa-lyon.fr
liris-ktbs01.insa-lyon.fr
humanheart-project.creatis.insa-lyon.fr
insa-vxrvil1-06.insa-lyon.fr
*.insa-lyon.fr
dsi-ipam.insa-lyon.fr
*.creatis.insa-lyon.fr
tux.creatis.insa-lyon.fr
webaedi.insa-lyon.fr
helpdesk.insa-lyon.fr
insa-rproxy-01.insa-lyon.fr
fex.insa-lyon.fr
tux.creatis.insa-lyon.fr
webaedi.insa-lyon.fr
*.docelec.insa-lyon.fr
tux.creatis.insa-lyon.fr
reportserver.insa-lyon.fr
humanheart-project.creatis.insa-lyon.fr
catalogue.insa-lyon.fr
biosciences.insa-lyon.fr
tux.creatis.insa-lyon.fr
dsi-esb.insa-lyon.fr
neurosens.creatis.insa-lyon.fr
gfc-services-test.insa-lyon.fr
biosciences.insa-lyon.fr
mandril.creatis.insa-lyon.fr
tux.creatis.insa-lyon.fr
gtwresh.insa-lyon.fr
phishing.insa-lyon.fr
cipcnet.insa-lyon.fr
insa-rproxypp-01.insa-lyon.fr
smtp6.insa-lyon.fr
rpmfind.creatis.insa-lyon.fr
lune.insa-lyon.fr
virtualstudyfair.insa-lyon.fr
humanheart-project.creatis.insa-lyon.fr
aris-connect.insa-lyon.fr
envue.insa-lyon.fr
acdc.creatis.insa-lyon.fr
intranetgi.insa-lyon.fr
desk.creatis.insa-lyon.fr
glpi.insa-lyon.fr
rpmfind.creatis.insa-lyon.fr
instrumentation.insa-lyon.fr
dsi-gitlab.insa-lyon.fr
phishing.insa-lyon.fr
lire-pp.insa-lyon.fr
envue.insa-lyon.fr
acdc.creatis.insa-lyon.fr
lire.insa-lyon.fr
redmine-pp.insa-lyon.fr
fex.insa-lyon.fr
insa-ppsympa.insa-lyon.fr
casi.insa-lyon.fr
acdc.creatis.insa-lyon.fr
openreports.insa-lyon.fr
*.docelec.insa-lyon.fr
camus.creatis.insa-lyon.fr
departements.insa-lyon.fr

Certificate

The complete raw certificate details for ecole-ete.insa-lyon.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIojCCBoqgAwIBAgIRAPhd5j6Q451uH5W5c6UnWlAwDQYJKoZIhvcNAQEMBQAw
RDELMAkGA1UEBhMCTkwxGTAXBgNVBAoTEEdFQU5UIFZlcmVuaWdpbmcxGjAYBgNV
BAMTEUdFQU5UIE9WIFJTQSBDQSA0MB4XDTIzMTIxMTAwMDAwMFoXDTI0MTIxMDIz
NTk1OVowgYsxCzAJBgNVBAYTAkZSMR4wHAYDVQQIDBVBdXZlcmduZS1SaMO0bmUt
QWxwZXMxOzA5BgNVBAoMMkluc3RpdHV0IE5hdGlvbmFsIGRlcyBTY2llbmNlcyBB
cHBsaXF1w6llcyBkZSBMeW9uMR8wHQYDVQQDExZlY29sZS1ldGUuaW5zYS1seW9u
LmZyMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvQ6mrOH+FElcsleE
+Nzgod0QFJ7CWBNrNbb+gJDsbeIpx3SdnoJFw0J6LyouqY3gqjLndwYmdJQFCnEw
qg8iVd6tu1K/3s2FXwhq9qBLES0XIxZ3w8hlm1LDCK4+J/3RdArXXSnyEgVGUXBM
AoTfTNiKQoVw+auJGWVhjLucYwvRQKZE6Fmtf4XE95P6gbhdgYKZrZge9jgDadl3
P2RzpK9hSVpYXxUfWmrekkTKKhX77/qsNvwgd2/JSh65kSpkv8G3OKKo0YrF0ixn
a7RF6v25nolP/IMhRBhEjtMY1Q5SOOd+CfOLb/5MtTaQlZcFFKvrFoW7rK0SSLYU
KqKua3WB9CBVViCTcahrZHgrOIDrlxQCOXtGi016UfGJjid3lVSD1WxM/p+uqXbl
INh6PT5UHewZlGEyD0B/R5R/qCzWMbe6V1DgBcYKZD2m6XlvlQEN5XQUbSVmcq4t
GCVj9JwpzvBGcwiAKiRaNXxMxzQdykCgXEvHlsnGxkKIlAO30ehIFoLDJGS+KUy/
VvmMtX1FjBBAUcd4Y7Vibpal042vx+TyWXkF7pbRyYyuCPilqy1JUlkjMChYFEty
k7ezNGcJf3er0o738OhNAJOj/Q+jWGTFWe5b8NP7U7zKvoHxSeXHalIbqHJ5+wWQ
YSsxTEKE3rYccdIuqmI0gvaqbesCAwEAAaOCA0UwggNBMB8GA1UdIwQYMBaAFG8d
NUkQbDL6WaCevIroH5W+cXoMMB0GA1UdDgQWBBTrc1UqUxOBTLL69JF0F8i8ndvh
tjAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwSQYDVR0gBEIwQDA0BgsrBgEEAbIxAQICTzAlMCMGCCsG
AQUFBwIBFhdodHRwczovL3NlY3RpZ28uY29tL0NQUzAIBgZngQwBAgIwPwYDVR0f
BDgwNjA0oDKgMIYuaHR0cDovL0dFQU5ULmNybC5zZWN0aWdvLmNvbS9HRUFOVE9W
UlNBQ0E0LmNybDB1BggrBgEFBQcBAQRpMGcwOgYIKwYBBQUHMAKGLmh0dHA6Ly9H
RUFOVC5jcnQuc2VjdGlnby5jb20vR0VBTlRPVlJTQUNBNC5jcnQwKQYIKwYBBQUH
MAGGHWh0dHA6Ly9HRUFOVC5vY3NwLnNlY3RpZ28uY29tMD0GA1UdEQQ2MDSCFmVj
b2xlLWV0ZS5pbnNhLWx5b24uZnKCGnd3dy5lY29sZS1ldGUuaW5zYS1seW9uLmZy
MIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgB2/4g/Crb7lVHCYcz1h7o0tKTN
uyncaEIKn+ZnTFo6dAAAAYxZaT9aAAAEAwBHMEUCIQD7riQlI2G2KEl0jx3dBJFb
H3+uJkx+8UT6eKxs6raXzgIgDZw+3Xm7/9lDIHaVrDrATsSTMyPB1zq+vwfoZeqX
MJYAdgA/F0tP1yJHWJQdZRyEvg0S7ZA3fx+FauvBvyiF7PhkbgAAAYxZaT98AAAE
AwBHMEUCIQDxXgvlPF1MXphSzeOcxH2Y0qLmXy/2GK4p4tAgxKwuVQIgAaLDkSx2
067yBJI7mH2frhRq2i9xAil2oSMYe3IWC9UAdgDuzdBk1dsazsVct520zROiModG
fLzs3sNRSFlGcR+1mwAAAYxZaT/MAAAEAwBHMEUCIG9E3JJfghgn41I+jJVkOV4t
ublIazlJ8Nlt+ptoVYfZAiEA5DqusqHjjpqu/3mmcMb0/QwMTUmc9QgnT5fSTw4V
0RIwDQYJKoZIhvcNAQEMBQADggIBAJsy9dM5vExyLzwP8T7XVwHSu7YE1lmgg5IY
HSzKMRRjLN8wGyq5F3UmHwLYM1VlNDVHAB1TN8h5FCtDBdSfzAloqXBqPyPXOQ9r
iKNbOa7xzkwLb9jZfC7uctmVKnv63Nse3JoXPPpyka0rUQ3fUtq5BwmHUGfzacUn
1Vqw2budnffiEUPXbD4PAfzHQY0Vw7Adi13xwqgOGTrxUBY9Y3fgNtsmeX5l1HXD
1tWCHT67QUCn4wQ+viC2v0ddqUWOvf1lblIQ67L8lGxUDoSJ1bn8zrpwSSQ8t8uC
rwLsqjgweXIYiXP5SmSOBrrLabw6IFUNNxIf/zZGhpvCfCRIlsQU84q8IzGSNVC2
WmOQ0j82xJsNThhloPh99G/kzmDN3q1eSAFoE76AuomuoEtFA4wVV03RA+A9ggdH
W+dxjAlUDekmzkRQQLhDfSBiDTAOEidX2Dbu4Eajp6ekPkqfgJiu79p+VISMttTY
4BtUOwiSnlWNNvZY4nDKxVJSJK5+SkTLJngwjeVV4AzV0oBaOTv/zAlYQScgHrmn
XGJSkmlFWuk+YuPLk0CDLkzlGOcE9seQ4s8PlI3Wyy7RdXOXDUHIbFg1EFCfrt60
7uQvWQsSlYVzDc+ogz1ZkjAx6MUle1VwUecSjDqguJeWShPGh+IxqwbxfPsSTydU
1HQwXBMl
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvQ6mrOH+FElcsleE+Nzg
od0QFJ7CWBNrNbb+gJDsbeIpx3SdnoJFw0J6LyouqY3gqjLndwYmdJQFCnEwqg8i
Vd6tu1K/3s2FXwhq9qBLES0XIxZ3w8hlm1LDCK4+J/3RdArXXSnyEgVGUXBMAoTf
TNiKQoVw+auJGWVhjLucYwvRQKZE6Fmtf4XE95P6gbhdgYKZrZge9jgDadl3P2Rz
pK9hSVpYXxUfWmrekkTKKhX77/qsNvwgd2/JSh65kSpkv8G3OKKo0YrF0ixna7RF
6v25nolP/IMhRBhEjtMY1Q5SOOd+CfOLb/5MtTaQlZcFFKvrFoW7rK0SSLYUKqKu
a3WB9CBVViCTcahrZHgrOIDrlxQCOXtGi016UfGJjid3lVSD1WxM/p+uqXblINh6
PT5UHewZlGEyD0B/R5R/qCzWMbe6V1DgBcYKZD2m6XlvlQEN5XQUbSVmcq4tGCVj
9JwpzvBGcwiAKiRaNXxMxzQdykCgXEvHlsnGxkKIlAO30ehIFoLDJGS+KUy/VvmM
tX1FjBBAUcd4Y7Vibpal042vx+TyWXkF7pbRyYyuCPilqy1JUlkjMChYFEtyk7ez
NGcJf3er0o738OhNAJOj/Q+jWGTFWe5b8NP7U7zKvoHxSeXHalIbqHJ5+wWQYSsx
TEKE3rYccdIuqmI0gvaqbesCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330136096473698802236465724230088481360
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Auvergne-Rhône-Alpes'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Institut National des Sciences Appliquées de Lyon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ecole-ete.insa-lyon.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 771286210001038120898565660375448043263007523752868705134317768209968760188635543479088811157468204192201444466790236242227076906484979275911923953908527005749745522472908975258381406484100023684802488754319336432712147432786522096204578987629068850297384642305481179172352167990110202858998798261831063504872066611472111928182520899919146422160340439828668095791217860588345381920839615530024445685283335843677939073041474040171195215510774058079332303298962149030385589213122974522233536689851842457000317547773349504223395795976899437827478725601890262733262965725453385985275120057409248242404023083680517194609379501871439346341093418249185813794238540960081464317057099230841001129663697889580492730743744063021342544027818965363198884777427730601002333323877542539457847279837893262427226956251108411069999947963108369102769622177191720466265430368686096646242455931751023288199600422250696561496355161429447309138531386994889514543726711788198638205491703020646345218063437026435765118772779749004450454318021115047500151210953496169230010849858894639746273022646141827431559096986714363169204385831288436046748113497798046738271141404157496290000884623341998481810279568706364934137266742559571421007099414560674073807580651
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eb73552a5313814cb2faf4917417c8bc9ddbe1b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecole-ete.insa-lyon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecole-ete.insa-lyon.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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