www.sipg.sante.fr

- Ministere en charge des affaires sanitaires et sociales -

Issued by AC Infrastructure

About this certificate

This digital certificate with serial number cc:9b:41:a9:ee:76:07:47:06:82:98:32:a0:c2:25:85:9f:2f:c8 was issued on by Ministere en charge des affaires sanitaires et sociales.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The Subject Alternate Name extension MUST contain only 'dnsName' and 'ipaddress' name types. (BRs: 7.1.4.2.1)
  • The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Ministere en charge des affaires sanitaires et sociales

Organization: Ministere en charge des affaires sanitaires et sociales
Organization unit: 0002 110 036 035 00019
Country: FR

Ministere en charge des affaires sanitaires et sociales

Organization: Ministere en charge des affaires sanitaires et sociales
Organization unit: 0002 110 036 035 00019
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): cc:9b:41:a9:ee:76:07:47:06:82:98:32:a0:c2:25:85:9f:2f:c8
Serial Number (int): 4562876769051211660997384312115870695795142600
Serial Number lenght: 152 bits, 19 octets

SubjectKeyId: 41:57:c0:5e:1a:eb:13:80:de:23:86:0d:32:e3:5e:d6:7a:37:de:b6
AuthorityKeyId: d4:91:c5:02:73:37:5a:16:62:0b:61:37:56:fe:21:df:81:f4:85:3a

Fingerprint (sha1): 65:b3:57:b1:6f:f4:cc:3c:a6:03:cd:ea:52:b0:64:d3:4f:d6:61:11
Fingerprint (sha256): 0a:33:25:c8:cc:61:49:ce:d2:2d:6b:53:20:a7:5d:75:1e:e9:79:39:31:0f:46:89:fd:26:06:af:0e:4f:49:5b


Revocation information

OCSP Server: http://igcocsp.sante.gouv.fr/AC_Infrastructure/ocsp
CRL Distribution Point: http://igccrl.sante.gouv.fr/AC_Infrastructure/crl/crl-1.crl

Check the revocation status for certificate www.sipg.sante.fr

0

DNS Names

1

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sipg.sante.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

[email protected]

Other certificates including the domain name sante.fr

(limited to 100 certificates)
www.ocean-indien.paps.sante.fr
*.briques.sante.fr
*.briques.sante.fr
mon-rdv-dondesang.efs.sante.fr
auth.efs.sante.fr
actualites.wiztopic.com
atih.sante.fr
sni.cloudflaressl.com
coopps.ars.sante.fr
actualites.wiztopic.com
re7.efs.sante.fr
actualites.wiztopic.com
pdlo-mentor.efs.sante.fr
re7.donneurs.efs.sante.fr
cms.efs.sante.fr
ra.efs.sante.fr
ecars-ppc.ars.sante.fr
ecarsproxy-ppc.ars.sante.fr
applis.atih.sante.fr
qualhas.atih.sante.fr
www.hauts-de-france.paps.sante.fr
secours.sipg.sante.fr
*.asc.paca.sante.fr
mon-rdv-dondesang.efs.sante.fr
*.guichet-unique.paca.sante.fr
mail.atih.sante.fr
www.sipg.sante.fr
www.ocean-indien.ars.sante.fr
www.projet-regional-de-sante-pays-de-la-loire.ars.sante.fr
lesagoras.paca.ars.sante.fr
donneurs.efs.sante.fr
www.cls-bretagne.ars.sante.fr
sirec.ars.sante.fr
atih.sante.fr
www.democratie-sanitaire-pays-de-la-loire.ars.sante.fr
www.cng.sante.fr
mon-rdv-dondesang.efs.sante.fr
*.annuaire.sante.fr
re7.oudonner.api.efs.sante.fr
www.mini-site1.ars.sante.fr
cms.efs.sante.fr
www.mini-site1.ars.sante.fr
ecarsextranet.ars.sante.fr
ecarsproxy.ars.sante.fr
coopps.ars.sante.fr
mtsfp-vm-sante-ars-recette.accelance.net
ars.sante.fr
paps.sante.fr
inscriptions.cestanous.efs.sante.fr
sslcertificate2.queue-it.net
www.epmsi.atih.sante.fr
actualites.wiztopic.com
sslcertificate2.queue-it.net
mtsfp-sante-papsars-recette.accelance.net
webconf.intranet.atih.sante.fr
mtsfp-vm-sante-ars-preprod.accelance.net
www.epmsi.atih.sante.fr
cawi.esteban.invs.sante.fr
es-mayotte.ars.sante.fr
mtsfp-sante-papsars-recette.accelance.net
www.paps.pp.ars.sante.fr
sivss.sante.fr
www.guyane.paps.sante.fr
www.mini-site1.ars.sante.fr
*.inpes.sante.fr
sslcertificate2.queue-it.net
ecarsextranet.ars.sante.fr
applis.atih.sante.fr
actualites.wiztopic.com
actualites.wiztopic.com
arhgos.ars.sante.fr
mail.atih.sante.fr
donneurs.efs.sante.fr
ecars-frm.ars.sante.fr
tdb-esms.atih.sante.fr
www.cng.sante.fr
imotep.ars.sante.fr
paca-sport-sante.fr
www.corse.ars.sante.fr
www.efs.sante.fr
*.ansm.sante.fr
paca-sport-sante.fr
mti.efs.sante.fr
ecarsextranet-frm.ars.sante.fr
sslcertificate2.queue-it.net
www.ansm.sante.fr
imotep.ars.sante.fr
*.efs.sante.fr
actualites.wiztopic.com
dondesang.efs.sante.fr
arceidf.ars.sante.fr
ra.efs.sante.fr
partage.ars.sante.fr
www.epmsi.atih.sante.fr
www.efs.sante.fr
partenaires.annuaire.sante.fr
sni.cloudflaressl.com
form.api.efs.sante.fr
ecarsproxy-frm.ars.sante.fr
*.efs.sante.fr

Certificate

The complete raw certificate details for www.sipg.sante.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUAMybQanudgdHBoKYMqDCJYWfL8gwDQYJKoZIhvcNAQEF
BQAwgYwxCzAJBgNVBAYTAkZSMUAwPgYDVQQKDDdNaW5pc3RlcmUgZW4gY2hhcmdl
IGRlcyBhZmZhaXJlcyBzYW5pdGFpcmVzIGV0IHNvY2lhbGVzMR8wHQYDVQQLDBYw
MDAyIDExMCAwMzYgMDM1IDAwMDE5MRowGAYDVQQDDBFBQyBJbmZyYXN0cnVjdHVy
ZTAeFw0xMjExMjkxMjQzNTZaFw0xNTExMjkxMjQzNTZaMIGMMQswCQYDVQQGEwJG
UjFAMD4GA1UEChM3TWluaXN0ZXJlIGVuIGNoYXJnZSBkZXMgYWZmYWlyZXMgc2Fu
aXRhaXJlcyBldCBzb2NpYWxlczEfMB0GA1UECxMWMDAwMiAxMTAgMDM2IDAzNSAw
MDAxOTEaMBgGA1UEAxMRd3d3LnNpcGcuc2FudGUuZnIwggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQDBdUs0gcTB2zSa/GQ/joO6tfDa4lkRv+XJPq1l9PSz
bI4eV30Ny1NBhg4RG5A7EWnQxq0DOQwXPbJGOzGi05QHMmEQYITDoK+L99u6E/zF
2vYLcTbHuXFACAh4lMu+cJ0GuxdWLhX6XCi+cdcr7qjjyvssYVblNrn0Cv36BySE
n+SNk6kIl0Kz3MF6TQ9MqH5HfWvyM2JyiF95AtxeJpqCvkh/iHRjw5pLymyRmTd1
pV+OQCYVs8FHMGtpHE4CXvFKzgzpjhyVbN9WilCj9Z+nQPp6SQk13BcT9jMRuo7N
kn72PyA9H7/D9bjbwTLfLtV98SK4BQoFgkjfKwTOEe9TAgMBAAGjggFbMIIBVzAJ
BgNVHRMEAjAAMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAf
BgNVHSMEGDAWgBTUkcUCczdaFmILYTdW/iHfgfSFOjAdBgNVHQ4EFgQUQVfAXhrr
E4DeI4YNMuNe1no33rYwTwYIKwYBBQUHAQEEQzBBMD8GCCsGAQUFBzABhjNodHRw
Oi8vaWdjb2NzcC5zYW50ZS5nb3V2LmZyL0FDX0luZnJhc3RydWN0dXJlL29jc3Aw
TAYDVR0fBEUwQzBBoD+gPYY7aHR0cDovL2lnY2NybC5zYW50ZS5nb3V2LmZyL0FD
X0luZnJhc3RydWN0dXJlL2NybC9jcmwtMS5jcmwwLAYDVR0RBCUwI4EhdGhpZXJy
eS5jb3JuaWxsZWF1QGJpb21lZGVjaW5lLmZyMBgGA1UdIAQRMA8wDQYLKoF6AYEz
AQMBAQEwDQYJKoZIhvcNAQEFBQADggEBAM7EHKIqhehRIn7qvBRiU4a+xFTXC8B/
6UUe3O/fh5q/80pASIHan4L6CZQ96OsJc1KKpu2GA/t5uzlNYxQtTNcoJdypiY0b
9w3N9Tgih4fsZ/LzVhMOAfgO8KZlWPHaJwCD564GhAlYZGHM/8AnVIzDadG8p5d6
qpU0+ss1ItFQHensfWNSOv8sOwCSDnEX/x4EWDBimoiKPc3OThEZA4u2HqSUknzo
VZkJ0Fh+gehoHW8nry6DOCzJESmNE+rsIFI4iwhbjNhIJ286vSWlnC6T0bg3IWIK
fdMT2AsccLH28j8ohWuk+X8z2LtLLF8b5gX5RUF9PgCIhHyGOuwhJAk=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXVLNIHEwds0mvxkP46D
urXw2uJZEb/lyT6tZfT0s2yOHld9DctTQYYOERuQOxFp0MatAzkMFz2yRjsxotOU
BzJhEGCEw6Cvi/fbuhP8xdr2C3E2x7lxQAgIeJTLvnCdBrsXVi4V+lwovnHXK+6o
48r7LGFW5Ta59Ar9+gckhJ/kjZOpCJdCs9zBek0PTKh+R31r8jNicohfeQLcXiaa
gr5If4h0Y8OaS8pskZk3daVfjkAmFbPBRzBraRxOAl7xSs4M6Y4clWzfVopQo/Wf
p0D6ekkJNdwXE/YzEbqOzZJ+9j8gPR+/w/W428Ey3y7VffEiuAUKBYJI3ysEzhHv
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4562876769051211660997384312115870695795142600
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ministere en charge des affaires sanitaires et sociales'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '0002 110 036 035 00019'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'AC Infrastructure'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-11-29 12:43:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-29 12:43:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ministere en charge des affaires sanitaires et sociales'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '0002 110 036 035 00019'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sipg.sante.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24421832572123286413704772427674127746528466833020314795367284157894509673487806259176660764861639225367161057683807447858199506984474808021978934685867907074682266072620733025884111508557861552219428158339708626511247910781364224603116800666251131152618605183418576945639012860075784770198580908301025267615758759736689609316684112262688136832172892574899921790102356878782942569060572628054712671792957783450804710038457561964603182759424137336307043226483595895292804544716159929346116835153082655715900836232998646076252980288155723954155700110794871918452218640727143001427741853534168944300434993715058587070291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d491c50273375a16620b613756fe21df81f4853a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4157c05e1aeb1380de23860d32e35ed67a37deb6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://igcocsp.sante.gouv.fr/AC_Infrastructure/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://igccrl.sante.gouv.fr/AC_Infrastructure/crl/crl-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.250.1.179.1.3.1.1.1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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