39-45.sncf.com
- SOCIÉTÉ NATIONALE SNCF SA -
Issued by GeoTrust TLS RSA CA G1
About this certificate
This digital certificate with serial number 0e:c2:1e:90:34:6a:46:52:c9:e8:05:a5:c9:42:db:1b was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
SOCIÉTÉ NATIONALE SNCF SA
Organization:
SOCIÉTÉ NATIONALE SNCF SA
State / Province:
Île-de-France
Locality: Saint-Denis
Country: FR
Locality: Saint-Denis
Country: FR
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0e:c2:1e:90:34:6a:46:52:c9:e8:05:a5:c9:42:db:1bSerial Number (int): 19617117428909789125190341011041344283
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 93:b6:5f:bd:c6:e0:85:74:b7:24:dd:60:b8:27:ea:6f:86:e1:b0:41
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57
Fingerprint (sha1): 5a:62:c2:a7:5c:33:b3:31:09:95:dc:13:88:1c:ff:6c:97:e4:54:1a
Fingerprint (sha256): 0a:2b:fe:3f:f0:8e:49:36:79:54:6f:e1:50:6d:ef:9a:90:ed:96:48:00:61:13:2d:b0:f6:d0:e6:b5:18:a1:8d
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl
Check the revocation status for certificate 39-45.sncf.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for 39-45.sncf.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
39-45.sncf.com
www.39-45.sncf.com
www.39-45.sncf.com
Other certificates including the domain name sncf.com
(limited to 100 certificates)
connect.sncf.com
*.carmen.sncf.fr
www.programme-voyageur.sncf.com
netkin.eu
evenements.sncf.com
tech.sncf.com
www.webresafret.sncf.com
lebartgv.sncf.com
r.connect.sncf.com
netkin.eu
netkin.eu
recette1.moncompte.sncf.com
mdmvsp.sncf.com
recette1.idpass.sncf.com
*.defi-ingenieurs.sncf.com
*.sncfconnect.com
mdc.sncf.com
acces-authentification.sncf.com
module-photo.sncf.com
candidat.emploi.sncf.com
netkin.eu
reactifs.sncf.com
akamai-san41.exacttarget.com
data.sncf.com
www.margo.sncf.com
www.recherche.sncf.com
piperi.sncf.com
sncf.com
*.fidelite-programme-voyageur.sncf.com
pmad.reseau.sncf.com
www.ter.sncf.com
ressources.data.sncf.com
sncf.com
epublimmo.sncf
tech.sncf.com
moncompte.sncf.com
netkin.eu
module-photo.sncf.com
accessibilite.sncf.com
collection80.sncf.com
www.nouveau.sncf.com
www.candidat.emploi.sncf.com
admins.voyages-sncf.com
emploi.sncf.com
*.collaboratif.sncf.com
espacesferroviaires.sncf.com
e-livre.sncf.com
s2if-gie.sncf.com
goodies.sncf.com
usine.idpass.sncf.com
netkin.eu
netkin.eu
info.portailentreprises.sncf.com
39-45.sncf.com
evenements.sncf.com
recette2.lesinfos.sncf.com
secure.analytics.voyages-sncf.com
e-livre.sncf.com
formulaire.vsct.fr
netkin.eu
*.fret.sncf.com
services.idpass.sncf.com
www.programmefid.com
recette1.info-voyageurs.sncf.com
pro-adhesion.sncf.com
www.portailentreprises.sncf.com
multimedia.sncf.com
int1-tictac.sncf.com
info.portailentreprises.sncf.com
www.candidat.emploi.sncf.com
trophees.sncf.com
abonnement.voyages-sncf.com
tech.sncf.com
netkin.eu
www.programme-voyageur.sncf.com
recette1.info-voyageurs.sncf.com
e-livre.sncf.com
publimmo.sncf.com
netkin.eu
prosynapses.sncf.com
idpass.sncf.com
e-consultations.sncf.com
accessibilite.sncf.com
www.budget.sncf.com
mdmsentry.sncf.com
goodies.sncf.com
netkin.eu
*.ter.sncf.com
info.portailentreprises.sncf.com
preprod.digipass.sncf.com
netkin.eu
recette1.ticketing-sncf.vsct.fr
www.srtpf.fr
netkin.eu
recette1.acces-client.sncf.com
www.feria.sncf.com
hapi.sncf.com
lebar.sncf.com
usine.idpass.sncf.com
www.cv.emploi.sncf.com
*.carmen.sncf.fr
www.programme-voyageur.sncf.com
netkin.eu
evenements.sncf.com
tech.sncf.com
www.webresafret.sncf.com
lebartgv.sncf.com
r.connect.sncf.com
netkin.eu
netkin.eu
recette1.moncompte.sncf.com
mdmvsp.sncf.com
recette1.idpass.sncf.com
*.defi-ingenieurs.sncf.com
*.sncfconnect.com
mdc.sncf.com
acces-authentification.sncf.com
module-photo.sncf.com
candidat.emploi.sncf.com
netkin.eu
reactifs.sncf.com
akamai-san41.exacttarget.com
data.sncf.com
www.margo.sncf.com
www.recherche.sncf.com
piperi.sncf.com
sncf.com
*.fidelite-programme-voyageur.sncf.com
pmad.reseau.sncf.com
www.ter.sncf.com
ressources.data.sncf.com
sncf.com
epublimmo.sncf
tech.sncf.com
moncompte.sncf.com
netkin.eu
module-photo.sncf.com
accessibilite.sncf.com
collection80.sncf.com
www.nouveau.sncf.com
www.candidat.emploi.sncf.com
admins.voyages-sncf.com
emploi.sncf.com
*.collaboratif.sncf.com
espacesferroviaires.sncf.com
e-livre.sncf.com
s2if-gie.sncf.com
goodies.sncf.com
usine.idpass.sncf.com
netkin.eu
netkin.eu
info.portailentreprises.sncf.com
39-45.sncf.com
evenements.sncf.com
recette2.lesinfos.sncf.com
secure.analytics.voyages-sncf.com
e-livre.sncf.com
formulaire.vsct.fr
netkin.eu
*.fret.sncf.com
services.idpass.sncf.com
www.programmefid.com
recette1.info-voyageurs.sncf.com
pro-adhesion.sncf.com
www.portailentreprises.sncf.com
multimedia.sncf.com
int1-tictac.sncf.com
info.portailentreprises.sncf.com
www.candidat.emploi.sncf.com
trophees.sncf.com
abonnement.voyages-sncf.com
tech.sncf.com
netkin.eu
www.programme-voyageur.sncf.com
recette1.info-voyageurs.sncf.com
e-livre.sncf.com
publimmo.sncf.com
netkin.eu
prosynapses.sncf.com
idpass.sncf.com
e-consultations.sncf.com
accessibilite.sncf.com
www.budget.sncf.com
mdmsentry.sncf.com
goodies.sncf.com
netkin.eu
*.ter.sncf.com
info.portailentreprises.sncf.com
preprod.digipass.sncf.com
netkin.eu
recette1.ticketing-sncf.vsct.fr
www.srtpf.fr
netkin.eu
recette1.acces-client.sncf.com
www.feria.sncf.com
hapi.sncf.com
lebar.sncf.com
usine.idpass.sncf.com
www.cv.emploi.sncf.com
Certificate
The complete raw certificate details for 39-45.sncf.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHjzCCBnegAwIBAgIQDsIekDRqRlLJ6AWlyULbGzANBgkqhkiG9w0BAQsFADBg MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZHZW9UcnVzdCBUTFMgUlNBIENBIEcx MB4XDTIzMTAyMDAwMDAwMFoXDTI0MTAyMjIzNTk1OVowezELMAkGA1UEBhMCRlIx FzAVBgNVBAgMDsOObGUtZGUtRnJhbmNlMRQwEgYDVQQHEwtTYWludC1EZW5pczEk MCIGA1UECgwbU09DScOJVMOJIE5BVElPTkFMRSBTTkNGIFNBMRcwFQYDVQQDEw4z OS00NS5zbmNmLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKZk SCWOv49NRCll3exwLnI6MupZW5mjnQXga9ZZIKY4RpYUVoukJYH8hcv6HBfeJNa0 3520pJJokBgqvz4rm64s/zpnX4FDXYuuY2rY0xe4z1aV12eu/xTVjrZH3J4pY8dp nqxGEZijFlFVZ6iiwxe/Td3tk5O/pIP/4ib77wVore6Mbwn0c7ZOR0Yy3K9SJ/po aWAWnA0MO2sdTG5HIFtjPzQu3eOaAK/RQ4GChM82mqYkn7WoaHC/WfRTwrnZQIJ9 h5IUJxQmKag/RkqwiNaMkafeM6U9IGdDHqn+SYKgYCnWLyE8fATaY931d4ZFoZQA +1GedeR4f0s/Hk7CO7fiyxXzmDNDedUSUNI4FlvOSlmYUOBGYLysOci+5xYLVfIR Yl5F34pEuCkiqDHbkwhTC/N3Ulw7e9f8bKn+BQfLXiAlf27zVaxVv7JBeUDHaLMH /JbWdmwhIR7NbHOquEd1AEpqHO3jKE6iVsavMk1kzo42sqiFQFk8EVV3PNzwI3sF FtsKBCoJLpOXg5YeZLyVzcCpg73ku3rRLTmhbLfeTLVCVy7p90QRilKjRfwBX0bn uIty8mJfD86IPtaqsKALZxpv/YD0gB2t2jisCcvxpyH+z8MyuhOA4g/ok1MOOjPK jVH0eBK3QklJqofGd188u2EFtaQmQMW4YmkxxO8ZAgMBAAGjggMoMIIDJDAfBgNV HSMEGDAWgBSUT9Rdi+Sk4qaA/v3Y+QDvo74CVzAdBgNVHQ4EFgQUk7ZfvcbghXS3 JN1guCfqb4bhsEEwLQYDVR0RBCYwJIIOMzktNDUuc25jZi5jb22CEnd3dy4zOS00 NS5zbmNmLmNvbTA+BgNVHSAENzA1MDMGBmeBDAECAjApMCcGCCsGAQUFBwIBFhto dHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA/BgNVHR8EODA2MDSgMqAwhi5odHRw Oi8vY2RwLmdlb3RydXN0LmNvbS9HZW9UcnVzdFRMU1JTQUNBRzEuY3JsMHYGCCsG AQUFBwEBBGowaDAmBggrBgEFBQcwAYYaaHR0cDovL3N0YXR1cy5nZW90cnVzdC5j b20wPgYIKwYBBQUHMAKGMmh0dHA6Ly9jYWNlcnRzLmdlb3RydXN0LmNvbS9HZW9U cnVzdFRMU1JTQUNBRzEuY3J0MAwGA1UdEwEB/wQCMAAwggF7BgorBgEEAdZ5AgQC BIIBawSCAWcBZQB1AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAAB i00sr1gAAAQDAEYwRAIgB5uwcpKq1VgFm0OinS5wzzeiNciPwgZjmg0Y9TjIUt8C IEP6mfs1m/WAdS6usXdT6neK2fEvMs0Yso00lTy5uMCwAHUASLDja9qmRzQP5WoC +p0w6xxSActW3SyB2bu/qznYhHMAAAGLTSyvGgAABAMARjBEAiACi2amfc+L3FKf 50TygIi/68OV5eoVeZQ8rbFDpowynQIgL4OI0y69FToast+czDxEs0b7nmwvFpaS xGO2xVaptvwAdQDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYtN LK9hAAAEAwBGMEQCIH8rCqjw0oay6DUSNBqIRvOWq1E17LIhI0lt1ArdI5qjAiAl 9PNmzta5DYYKpEowkb0+z15VeHQovb8X2NxX2GasnDANBgkqhkiG9w0BAQsFAAOC AQEAD3vq2JXri2DLuSvtJEZVJSMjIG+M1CFCrgBeanQB2Dyf5NYwj0BPSAhanpMJ Z8Ksdd53OKhkKg2XvuG2WcD4QXyTNoarhhsrfutqIXboe9QyUmeVUdFhX7uRiX4Y bOK4uchx8q9t+jPbY8xoxZNp0m7q7Z6/erX//wmqqmnbmc1DXaLAoLYvDOBt9WIk t8e85/hdtl20ICJpNtLD9JIdTWXpWu8MsniJJ0LARRx8lAXQl3UPJvwk3bdI4yH5 A7BCAdNqpV6/MPobo9f7Jmspx3HU+0PbObfERUBa0H7R8NJHElA58W4Vt5uTfc0E 8eYa846GyWIs2WoFc0SQKl14Wg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApmRIJY6/j01EKWXd7HAu cjoy6llbmaOdBeBr1lkgpjhGlhRWi6QlgfyFy/ocF94k1rTfnbSkkmiQGCq/Piub riz/OmdfgUNdi65jatjTF7jPVpXXZ67/FNWOtkfcniljx2merEYRmKMWUVVnqKLD F79N3e2Tk7+kg//iJvvvBWit7oxvCfRztk5HRjLcr1In+mhpYBacDQw7ax1Mbkcg W2M/NC7d45oAr9FDgYKEzzaapiSftahocL9Z9FPCudlAgn2HkhQnFCYpqD9GSrCI 1oyRp94zpT0gZ0Meqf5JgqBgKdYvITx8BNpj3fV3hkWhlAD7UZ515Hh/Sz8eTsI7 t+LLFfOYM0N51RJQ0jgWW85KWZhQ4EZgvKw5yL7nFgtV8hFiXkXfikS4KSKoMduT CFML83dSXDt71/xsqf4FB8teICV/bvNVrFW/skF5QMdoswf8ltZ2bCEhHs1sc6q4 R3UASmoc7eMoTqJWxq8yTWTOjjayqIVAWTwRVXc83PAjewUW2woEKgkuk5eDlh5k vJXNwKmDveS7etEtOaFst95MtUJXLun3RBGKUqNF/AFfRue4i3LyYl8Pzog+1qqw oAtnGm/9gPSAHa3aOKwJy/GnIf7PwzK6E4DiD+iTUw46M8qNUfR4ErdCSUmqh8Z3 Xzy7YQW1pCZAxbhiaTHE7xkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 19617117428909789125190341011041344283 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-20 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-22 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Saint-Denis' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SOCIÉTÉ NATIONALE SNCF SA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '39-45.sncf.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 678819017418971861565759199790207959478326925422850803477213631469781464040036616677489054632926441557047529772574806527535838398533118856507012767653342774123053051163019473740138343161614382429743255918373430017567090534284540226562593608870610324408722155865612239817961541048740160595776108142493084231651614769150589356459156466943538223637247863942099752702297350331234542934073992938964600193640919312519425579077950645175682055353217526956633629780878218020615883467545204379783713789709206316108109628468302081823929727460297283028876550121266287036926137770474647866013542045959083920268900938121647076973935982782600813803629939701815338367712268461074199626551510287460889263522688382012977156445238930144391362780915904609845374489058883281031148897646523802737358391299745353203793731147954145230549987794561041508939910835110639126971050577526624095014592591696382002784052851887367790610462912329096668754267479163653663463737995083680805318143574304840479842396770193201302499041590419641747296085844992927184694888278567822113447107094019015234096933908217710721782356113041935423648806535759542781997648414396130015816719641771714264436813999703757981923604903090493287147958312939876229013111005772494663359721241 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 93b65fbdc6e08574b724dd60b827ea6f86e1b041 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '39-45.sncf.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.39-45.sncf.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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