egmaops.enedis.fr

- ELECTRICITE DE FRANCE SA -

Issued by DigiCert G2 TLS EU RSA4096 SHA384 2022 CA1

About this certificate

This digital certificate with serial number 0b:f7:5c:dd:0a:b4:da:27:3f:8f:3c:8e:d6:60:cd:d4 was issued on by DigiCert Ireland Limited.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

ELECTRICITE DE FRANCE SA

Organization: ELECTRICITE DE FRANCE SA
State / Province: Île-de-France
Locality: Paris
Country: FR

DigiCert Ireland Limited

Organization: DigiCert Ireland Limited
Country: IE

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:f7:5c:dd:0a:b4:da:27:3f:8f:3c:8e:d6:60:cd:d4
Serial Number (int): 15905888772113115577926835902995287508
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 68:72:ed:23:d9:9c:24:a4:e3:50:fc:4a:31:a2:f8:9d:31:d4:30:bd
AuthorityKeyId: 18:89:e7:af:f0:28:f6:7c:ca:68:05:52:e1:62:d8:91:d6:16:65:60

Fingerprint (sha1): 49:87:0f:96:e2:13:d3:b7:f6:f8:a0:63:54:f8:98:db:ea:ba:b9:cc
Fingerprint (sha256): 07:e0:95:92:39:5e:15:53:42:30:85:13:03:d8:af:81:0b:c4:d7:5a:53:9f:4a:42:fc:b7:36:63:8f:50:06:dd

Issuing Certificate URL: http://cacerts.digicert.eu/DigiCertG2TLSEURSA4096SHA3842022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.eu
CRL Distribution Point: http://crl.digicert.eu/DigiCertG2TLSEURSA4096SHA3842022CA1.crl

Check the revocation status for certificate egmaops.enedis.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for egmaops.enedis.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

egmaops.enedis.fr

Other certificates including the domain name enedis.fr

(limited to 100 certificates)
e-stock.enedis.fr
sikapa-iq.enedis.fr
ie-saas-test.enedis.fr
sge-perfi.enedis.fr
restheart.tmm.snatpool.f5ie.prd.lbp.enedis.fr
s02.noe.ldap.qualif.alpha.swb.enedis.fr
m02.noe.ldap.prod.alpha.swb.enedis.fr
espace-client-particuliers-rec-dmz.enedis.fr
intrapreneur.enedis.fr
infops.enedis.fr
zep304dg.enedis.fr
espace-client-collectivites.enedis.fr
startmeup.enedis.fr
deck-recette.enedis.fr
gate3196.enedis.fr
portail-osr-prestataires.enedis.fr
espace-client-entreprises-rec-dmz.enedis.fr
espace-client-pprod.enedis.fr
pcyintplypdi001.neoprod.edf.fr
ws.inforeseau.api.enedis.fr
espace-client-connexion-pprod.erdf.fr
int-myaccess.edf.fr
gate3360.enedis.fr
portail-osr-prestataires.enedis.fr
mooc.enedis.fr
microapps.enedis.fr
herakles.enedis.fr
zec304dk.enedis.fr
data.enedis.fr
api.public.cinke-evolution.perf.enedis.fr
archivage-disco.enedis.fr
pcydmzplywfe001.intranet.edf.com
board.qual.linky.enedis.fr
mooc.enedis.fr
noeintplypfe001.neoprod.edf.fr
laruche.enedis.fr
api-lincs-qualif.enedis.fr
meciteasy.enedis.fr
zhb-rest.tmm.f5ie.prd.lbp.enedis.fr
gw.hprd.api.enedis.fr
geosite.enedis.fr
sge-b2b.enedis.fr
sge-b2b.enedis.fr
collab.intranet.enedis.fr
gw.prd.b2b.enedis.fr
mooc.enedis.fr
ie-saas-test-ri.enedis.fr
espace-client-entreprises-pprod.enedis.fr
portail-osr-prestataires-rec1.enedis.fr
dataposte-sei.enedis.fr
moncompte-qualif-legacy.enedis.fr
datahub.enedis.fr
espace-client-particuliers.enedis.fr
bali.enedis.fr
alexv2-apipra-pprod.enedis.fr
zep3322a.enedis.fr
noeintplypfe002.neoprod.edf.fr
iq-caraibe.enedis.fr
alexv2api-prdn-pjv-02.enedis.fr
data.enedis.fr
noedmzplywdi001.intranet.edf.com
espace-client-particuliers-pprod.enedis.fr
egmaops.enedis.fr
distri-raccordement-mco.enedis.fr
intq.ecoflot.enedis.fr
prd.apigo.enedis.fr
data.enedis.fr
zed331b5.distribution.edf.fr
espace-client-qualif.enedis.fr
ecoflot.enedis.fr
alexv2api-recd-izi-01.enedis.fr
datahub.enedis.fr
moncompte-qualif.enedis.fr
moncompte.enedis.fr
s02.noe.ldap.qualif.alpha.swb.enedis.fr
brandcenter.enedis.fr
lincs-live-admin.enedis.fr
appamiante.enedis.fr
espace-client-collectivites-rec-dmz.enedis.fr
fournisseursdenedis.enedis.fr
facile-commune.enedis.fr
pp-smartpush.edf.fr
accueil-operateur.enedis.fr
smartgrid-solenn.enedis.fr
noeplyaccess01.edf.fr
times-services.enedis.fr
elan-service-iq.enedis.fr
apigile.prod.enedis.fr
deploisat.form.linky.enedis.fr
espace-client.enedis.fr
pki.microapplications.enedis.fr
posteclean.enedis.fr
agir.oi.enedis.fr
myaccess.myelectricnetwork.com
gw.prd.tmm.enedis.fr
arcam.enedis.fr
infoflex-partner-gateway-rec.enedis.fr
noedmzplywdi001.intranet.edf.com
moncompte.enedis.fr
ws.sikapa-RCC.enedis.fr

Certificate

The complete raw certificate details for egmaops.enedis.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHnTCCBYWgAwIBAgIQC/dc3Qq02ic/jzyO1mDN1DANBgkqhkiG9w0BAQsFADBl
MQswCQYDVQQGEwJJRTEhMB8GA1UEChMYRGlnaUNlcnQgSXJlbGFuZCBMaW1pdGVk
MTMwMQYDVQQDEypEaWdpQ2VydCBHMiBUTFMgRVUgUlNBNDA5NiBTSEEzODQgMjAy
MiBDQTEwHhcNMjMxMTA4MDAwMDAwWhcNMjQxMTA3MjM1OTU5WjB1MQswCQYDVQQG
EwJGUjEXMBUGA1UECAwOw45sZS1kZS1GcmFuY2UxDjAMBgNVBAcTBVBhcmlzMSEw
HwYDVQQKExhFTEVDVFJJQ0lURSBERSBGUkFOQ0UgU0ExGjAYBgNVBAMTEWVnbWFv
cHMuZW5lZGlzLmZyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrFC
NGmz+WBzxx3IlT0MwLpqS6E536IE+HhoePoMbg1/ICPqwxVS0OdL7u5O/ckHT+1F
geVS7Ow3v+nafmpP/mp8CMNjO2llfcZ0gQM+mnMSHs8ZqFb0t6qC5ZiTkvogLyDj
87FhILZqbPKdxMSmbego9dhjNHyk4Oh2Nt3SmW5HzUTSWyYWks9YkqPigpyV4sNB
yZBLQOR2wAc5vq/W22iiOgr8fvdWYBTo7IeZUdTcnmTR3PlfLJy/XObudjKi5ng7
zR2KN6yWJvDXXqLkAFQgx9bTkzaAXrtKOpylH3YhiJd9gQDgJCc9Xa3HN7A7Q5oR
lmM/qzp7/LFiC7vk/wIDAQABo4IDNzCCAzMwHwYDVR0jBBgwFoAUGInnr/Ao9nzK
aAVS4WLYkdYWZWAwHQYDVR0OBBYEFGhy7SPZnCSk41D8SjGi+J0x1DC9MBwGA1Ud
EQQVMBOCEWVnbWFvcHMuZW5lZGlzLmZyMD4GA1UdIAQ3MDUwMwYGZ4EMAQICMCkw
JwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCME8GA1UdHwRI
MEYwRKBCoECGPmh0dHA6Ly9jcmwuZGlnaWNlcnQuZXUvRGlnaUNlcnRHMlRMU0VV
UlNBNDA5NlNIQTM4NDIwMjJDQTEuY3JsMIGDBggrBgEFBQcBAQR3MHUwIwYIKwYB
BQUHMAGGF2h0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmV1ME4GCCsGAQUFBzAChkJodHRw
Oi8vY2FjZXJ0cy5kaWdpY2VydC5ldS9EaWdpQ2VydEcyVExTRVVSU0E0MDk2U0hB
Mzg0MjAyMkNBMS5jcnQwDAYDVR0TAQH/BAIwADCCAX0GCisGAQQB1nkCBAIEggFt
BIIBaQFnAHYAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGLrmp1
XwAABAMARzBFAiEAwZpQ2rESp1P97w1lN2NmfXcHGrfEGW3qBo1if/RyH7cCIEGW
a8NN1A1yEnhlzl0IWOMxtHMrDbYzQNXHuhz65ywwAHYASLDja9qmRzQP5WoC+p0w
6xxSActW3SyB2bu/qznYhHMAAAGLrmp3DAAABAMARzBFAiEArfibVf04Ub2R0p3x
5AW42wE/BbZwEyemAJDf7Ymux8ECIHIlLxyHfnJNxHAXqfMH/ArJ1GR29vzSvcgm
YsrQf7pwAHUAPxdLT9ciR1iUHWUchL4NEu2QN38fhWrrwb8ohez4ZG4AAAGLrmp2
cQAABAMARjBEAiBlNGOtkDuxKDzzNUtFE+XXY09Gc2kZROgbM17fa6Jg4AIgGmRG
uy7wb5PjL5yZUwiuwJacQnCwP/eqB+SHVvb7yYswDQYJKoZIhvcNAQELBQADggIB
AEcP1iucb02VM29ZnPsoZwPuKLYFU7ine6gQAptQntoMWRM4mf7TOOu2yeQDfPuq
hK4+sTQpd4tgoXHOJhi9CK8SOAuITmihiyQh2rwOsYwzy4uzw96oPl7W6fbA0Gdr
D5/5NV2QCQUt3Usi8yBlYbtYYajxOaTjVqdKIkuHuIO0R34JW1dhvrK+9C0oJuWy
hU+drDcwkpggRW7gsOLxV473qqRD777Lr3PxD7zn6RqwoZOuXfd2DHbJHVp0W+pW
9y4iij1RyT0zxcAQ6ygFIKkH31ZN6pTz9IGKzsJq8Y+IGOnzaaUF0dw+x4rqv0dv
ilIh5MNfc5JAfpsncUu4HjwEwMsNN3lhV1woHw3S2EyFZ3AkYVzxX+MfVbPWkkpC
dK6WxV71NpSedB6diVKScZvGa+yqtPPsVAXjgyZmRvK8v1cbnl9yZFY88eFo6JW7
HwyfcVOvEoU67KOSPQWNjrGfWOFN8Guub6MTydWMfNjLzKeInLGBNUBmz5SwLWqU
QOyX0DCK6EvoELsA6BWywJAIrO/t8ZsOFu5Cg9dfN1gkU9y0i8jkOGrODAm+38sd
PVHWkgfSEHSnUYEbk3rowg2RzJj0eW/p+kETfwAhpuYExCHfbFEKgUoctC0xhJ+W
Fw53KT4XsutSt/xogYlBa97CMmNIaZYo9777WPOxjJPY
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrFCNGmz+WBzxx3IlT0M
wLpqS6E536IE+HhoePoMbg1/ICPqwxVS0OdL7u5O/ckHT+1FgeVS7Ow3v+nafmpP
/mp8CMNjO2llfcZ0gQM+mnMSHs8ZqFb0t6qC5ZiTkvogLyDj87FhILZqbPKdxMSm
bego9dhjNHyk4Oh2Nt3SmW5HzUTSWyYWks9YkqPigpyV4sNByZBLQOR2wAc5vq/W
22iiOgr8fvdWYBTo7IeZUdTcnmTR3PlfLJy/XObudjKi5ng7zR2KN6yWJvDXXqLk
AFQgx9bTkzaAXrtKOpylH3YhiJd9gQDgJCc9Xa3HN7A7Q5oRlmM/qzp7/LFiC7vk
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15905888772113115577926835902995287508
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Ireland Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert G2 TLS EU RSA4096 SHA384 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ELECTRICITE DE FRANCE SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'egmaops.enedis.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26092500302508126310023777223639471952126103140064265663978400778028566285930217174471040465612263631415914383936338682054730385123540206341772541507440059652527383897913544268952584249713684578473921006251034158019270177100404786836603113409863844338495903301645319375943540434419368616896642957962621580178204372675230853118873332452711598241418380488171282024987941894784990114708669102942288382566969849581223398393696212391308155009490572451764139262135814082582184903796677596493210992029495493242647298708921973341355870754817493272563206793273974418350220748527325311408005660910766138420140172544584995038463
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1889e7aff028f67cca680552e162d891d6166560
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6872ed23d99c24a4e350fc4a31a2f89d31d430bd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egmaops.enedis.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.digicert.eu/DigiCertG2TLSEURSA4096SHA3842022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.eu/DigiCertG2TLSEURSA4096SHA3842022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00470fd62b9c6f4d95336f599cfb286703ee28b60553b8a77ba810029b509eda0c59133899fed338ebb6c9e4037cfbaa84ae3eb13429778b60a171ce2618bd08af12380b884e68a18b2421dabc0eb18c33cb8bb3c3dea83e5ed6e9f6c0d0676b0f9ff9355d9009052ddd4b22f3206561bb5861a8f139a4e356a74a224b87b883b4477e095b5761beb2bef42d2826e5b2854f9dac3730929820456ee0b0e2f1578ef7aaa443efbecbaf73f10fbce7e91ab0a193ae5df7760c76c91d5a745bea56f72e228a3d51c93d33c5c010eb280520a907df564dea94f3f4818acec26af18f8818e9f369a505d1dc3ec78aeabf476f8a5221e4c35f7392407e9b27714bb81e3c04c0cb0d377961575c281f0dd2d84c85677024615cf15fe31f55b3d6924a4274ae96c55ef536949e741e9d895292719bc66becaab4f3ec5405e383266646f2bcbf571b9e5f7264563cf1e168e895bb1f0c9f7153af12853aeca3923d058d8eb19f58e14df06bae6fa313c9d58c7cd8cbcca7889cb181354066cf94b02d6a9440ec97d0308ae84be810bb00e815b2c09008acefedf19b0e16ee4283d75f37582453dcb48bc8e4386ace0c09bedfcb1d3d51d69207d21074a751811b937ae8c20d91cc98f4796fe9fa41137f0021a6e604c421df6c510a814a1cb42d31849f96170e77293e17b2eb52b7fc688189416bdec2326348699628f7befb58f3b18c93d8