pp-smartpush.edf.fr

- ELECTRICITE DE FRANCE SA -

Issued by DigiCert G2 TLS EU RSA4096 SHA384 2022 CA1

About this certificate

This digital certificate with serial number 07:64:e5:37:21:cb:c4:af:7e:e1:8d:c7:7f:95:b9:0f was issued on by DigiCert Ireland Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

ELECTRICITE DE FRANCE SA

Organization: ELECTRICITE DE FRANCE SA
State / Province: Île-de-France
Locality: Paris
Country: FR

DigiCert Ireland Limited

Organization: DigiCert Ireland Limited
Country: IE

This certificate will expire on

Certificate Details

Serial Number (hex): 07:64:e5:37:21:cb:c4:af:7e:e1:8d:c7:7f:95:b9:0f
Serial Number (int): 9828474696155414476885107566880078095
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 52:80:1b:30:bb:5c:6a:69:04:fc:01:7f:ea:82:6f:4b:6a:0a:63:4c
AuthorityKeyId: 18:89:e7:af:f0:28:f6:7c:ca:68:05:52:e1:62:d8:91:d6:16:65:60

Fingerprint (sha1): ac:68:b6:3a:b5:31:35:6e:06:d3:1d:07:48:28:40:a9:ae:8f:17:3e
Fingerprint (sha256): 0c:1b:68:f0:54:ce:bd:75:8a:1d:2b:2e:96:9f:9f:0f:63:ff:1a:b9:b6:55:8f:b2:c9:e1:9d:c2:f8:f9:c6:8c

Issuing Certificate URL: http://cacerts.digicert.eu/DigiCertG2TLSEURSA4096SHA3842022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.eu
CRL Distribution Point: http://crl.digicert.eu/DigiCertG2TLSEURSA4096SHA3842022CA1.crl

Check the revocation status for certificate pp-smartpush.edf.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pp-smartpush.edf.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pp-smartpush.edf.fr
pp-smartpush.enedis.fr

Other certificates including the domain name edf.fr

(limited to 100 certificates)
mypgi-recette.edf.fr
s02.noe.ldap.qualif.alpha.swb.enedis.fr
VDI1380023.atlas.edf.fr
m02.noe.ldap.prod.alpha.swb.enedis.fr
monagencepart.edf.fr
zep304di.distribution.edf.fr
pwa-sso-rbb.edf.fr
portail-osr-prestataires.enedis.fr
sso.edf.fr
zer331b7.distribution.edf.fr
ldap-part-interne-a-rbb.edf.fr
pblock-dev.edf.fr
ldap-part-interne-a-perf.edf.fr
publish-rcc-siterc.cie.edf.fr
commerce-ottawa-rbb.edf.fr
pcyintplypdi001.neoprod.edf.fr
emm-iq.edf.fr
test-websso-gardian.edf.fr
paas-pp.edf.fr
services-mobiles-iq.edf.fr
distri-vermeer.edf.fr
bo-preprod-travaux.cie.edf.fr
int-myaccess.edf.fr
sei-raccordement.edf.fr
one-module.edf.fr
websso-gardian.myelectricnetwork.com
odicee.edf.fr
portail-osr-prestataires.enedis.fr
preiq-websso-gardian.edf.fr
iceua.edf.fr
intranetetendu.edf.fr
acces-1.a2i.edf.fr
appli-ssa-qual-fhm.edf.fr
publish-rf2-siterc.cie.edf.fr
mypaas-r7.edf.fr
ELECTRICITE DE FRANCE
hydrovigie-int.edf.fr
*.usine-stg2.edf.fr
hydro-doctopus-rec.edf.fr
prod-sdin-passerelle-partenaire.edf.fr
paas-data-r7.edf.fr
icesb.edf.fr
mrbot-edf-entreprises-prd.edf.fr
pcydmzplywfe001.intranet.edf.com
opendata-martinique.edf.fr
noefy8jc.noe.edf.fr
noeintplypfe001.neoprod.edf.fr
cws.edf.fr
appli-ssa-prod-web2.edf.fr
icecp.edf.fr
equilibre.corse.edf.fr
eboard-recette-r1.edf.fr
pwb-sso.edf.fr
opendata-guadeloupe.edf.fr
collab.intranet.enedis.fr
opendata-reunion.edf.fr
si-devops-repository.edf.fr
sso-perf.edf.fr
noea06te.noe.edf.fr
remit.cie.edf.fr
rh-olimp-distributeur.edf.fr
owapcy.extranet.edf.fr
iceua.edf.fr
projet-piscine.edf.fr
no2fyb45.noe.edf.fr
autoconsommation.dn.edf.fr
travaux.edf.fr
partenaires.edf.fr
eboard-recette-r2.edf.fr
commerce-smoothie.edf.fr
ldap-part-b-perf.edf.fr
vote-pulse.cie.edf.fr
portail-osr-prestataires-rec1.enedis.fr
emm-iq.edf.fr
immoconforme.edf.fr
proto-b-prod.edf.fr
rh-gama.edf.fr
itzmirecette.edf.fr
partenaires.edf.fr
pcyintpirgw001-mopieurs.edf.fr
panel-particuliers.dn.edf.fr
eboard.edf.fr
www.paiement-particulier.edf.fr
edfrecrute.edf.fr
edf.fr
iasvi-recette.edf.fr
opendata-guadeloupe.edf.fr
prod.sfdb.edf.fr
noeintplypfe002.neoprod.edf.fr
owa.extranet.ppmccu.fr
opendata-corse.edf.fr
pc2fy72t.pcy.edf.fr
zep3321n.distribution.edf.fr
api-r7.edf.fr
opendata-reunion.edf.fr
mrbot-edf-entreprises-prd.edf.fr
publish-pp2-siterc.cie.edf.fr
dbi-dev.edf.fr
noedmzplywdi001.intranet.edf.com
pilotimmo.edf.fr

Certificate

The complete raw certificate details for pp-smartpush.edf.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHuDCCBaCgAwIBAgIQB2TlNyHLxK9+4Y3Hf5W5DzANBgkqhkiG9w0BAQsFADBl
MQswCQYDVQQGEwJJRTEhMB8GA1UEChMYRGlnaUNlcnQgSXJlbGFuZCBMaW1pdGVk
MTMwMQYDVQQDEypEaWdpQ2VydCBHMiBUTFMgRVUgUlNBNDA5NiBTSEEzODQgMjAy
MiBDQTEwHhcNMjMwOTIxMDAwMDAwWhcNMjQwOTIwMjM1OTU5WjB3MQswCQYDVQQG
EwJGUjEXMBUGA1UECAwOw45sZS1kZS1GcmFuY2UxDjAMBgNVBAcTBVBhcmlzMSEw
HwYDVQQKExhFTEVDVFJJQ0lURSBERSBGUkFOQ0UgU0ExHDAaBgNVBAMTE3BwLXNt
YXJ0cHVzaC5lZGYuZnIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe
Gj38siqW4qlVC1ml+WZo/1/zqv+ZC6SCtIZrTxAUd3/RRgIxME548Bnkbq/pYCda
63ZlpKXpdRT7q/aAZeD2OqjdUN4N6zFJ9kMvQnzOw6uIMgYZVRPgXg9BHCuh/mx6
p5XPEQ4Zmbi/aPyrj+FCqoSCf+KUz8SYsR0p3hze6hwWL/EZ1VkScAtHc+W0mWhv
X2LsQezJxLUs6LEjmfwzoc37Cl4VpvUMxbJSbKZuxp/cbRJmb5JuYEVXeGR5/rKj
yJS3g6CMh2LwgLPRWhFPLtGC4lKiDrdmTXLDtgnd5tcACjc8OzEuo1IRUfEccBmv
pCi4j0SqLa8aaKFzNL+3AgMBAAGjggNQMIIDTDAfBgNVHSMEGDAWgBQYieev8Cj2
fMpoBVLhYtiR1hZlYDAdBgNVHQ4EFgQUUoAbMLtcamkE/AF/6oJvS2oKY0wwNgYD
VR0RBC8wLYITcHAtc21hcnRwdXNoLmVkZi5mcoIWcHAtc21hcnRwdXNoLmVuZWRp
cy5mcjA+BgNVHSAENzA1MDMGBmeBDAECAjApMCcGCCsGAQUFBwIBFhtodHRwOi8v
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjBPBgNVHR8ESDBGMESgQqBAhj5odHRwOi8vY3Js
LmRpZ2ljZXJ0LmV1L0RpZ2lDZXJ0RzJUTFNFVVJTQTQwOTZTSEEzODQyMDIyQ0Ex
LmNybDCBgwYIKwYBBQUHAQEEdzB1MCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5k
aWdpY2VydC5ldTBOBggrBgEFBQcwAoZCaHR0cDovL2NhY2VydHMuZGlnaWNlcnQu
ZXUvRGlnaUNlcnRHMlRMU0VVUlNBNDA5NlNIQTM4NDIwMjJDQTEuY3J0MAwGA1Ud
EwEB/wQCMAAwggF8BgorBgEEAdZ5AgQCBIIBbASCAWgBZgB1AO7N0GTV2xrOxVy3
nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABirfR/CIAAAQDAEYwRAIgPpBnGYAoGPTe
YKJiU9TF/qKFJgZA7k/cbSTU77l9Hc4CIFFm1wITVYIz6Rj4uOQdFY5giK+Xvh2n
pGYCMe8powx3AHUA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGK
t9H8HQAABAMARjBEAiBlp7lUHjT5p/KdSYqBwnOiLK3kZ6wHmkGw8CU5w3FzaAIg
KEu/GeEtDyEStebNq9m1NsSHvAb5G1DGBKSGgiqUkiwAdgB2/4g/Crb7lVHCYcz1
h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYq30fuVAAAEAwBHMEUCIQD/6zq5bVKm1neS
5voZM+vAyAkJk8ebvw6mrwYX+/g2FQIgLfhJ3X80ujXMsmF+v6kYdr2oxtTfYQvB
dfBmM+dndfAwDQYJKoZIhvcNAQELBQADggIBAMPI9PgDIZTQi2n2s+KdGqB8ZPIE
KXqT6iQ5IoSkXZc/pEClUsbAVhIglglWddVfmuIpCJ+UYdURbTPGJbP9obhN8uBb
3M6vOWtZ126ggSOJGLSzpfuwHuN1G3ihTA3SSICJRLTi8uWfIhyEeT/3plsidx7j
n22kBZzoaJ0l5iUJ1i95frrNRVoYo2ZXObEL0IjeSMPsjCUOnsuB2MBoQnpu9PBn
B7cjrK0ATdaKPLhSAl52xgnPV6vfheANmCxk7epmNq8TxrmWKmwio+wM3nTdUw0p
An7FurlZ1YGftfRgra2tHdQA1RauYcUuRFJmkIkfWgupbD8S8eJgNzQ2HXWvgwRK
E1XA5I1yKUfL3UAMAzLv2AYrvrKxFsULirUlT+SH33I7k8/Z7lGRnOi0ibrQWa4v
NCXDgIv71vxHRpcxYo+5MKxTvWgGS2eGBnhu3/76M10fGpM4iweN3nyaxYcUjlA9
s5z/Iieuh51iSh4oM1yXM+YYCjrFVbeCq/Ofq2Wfo3pnUuK4zQQbWG6igc0gbJut
dLU4UdnDd1/AvzibjYnu/C/opJwwPhD3LS/ZtAnd2KOshBxye6cVPiT9YoazWKvt
N0hBQlVZVXS0dRC2eQ69JpWNRQq23tVNce2fMtmG3KRfP0Wf0j2wX7cEcupO+beH
JdlCFnvLAHsYWpkn
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnho9/LIqluKpVQtZpflm
aP9f86r/mQukgrSGa08QFHd/0UYCMTBOePAZ5G6v6WAnWut2ZaSl6XUU+6v2gGXg
9jqo3VDeDesxSfZDL0J8zsOriDIGGVUT4F4PQRwrof5seqeVzxEOGZm4v2j8q4/h
QqqEgn/ilM/EmLEdKd4c3uocFi/xGdVZEnALR3PltJlob19i7EHsycS1LOixI5n8
M6HN+wpeFab1DMWyUmymbsaf3G0SZm+SbmBFV3hkef6yo8iUt4OgjIdi8ICz0VoR
Ty7RguJSog63Zk1yw7YJ3ebXAAo3PDsxLqNSEVHxHHAZr6QouI9Eqi2vGmihczS/
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9828474696155414476885107566880078095
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Ireland Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert G2 TLS EU RSA4096 SHA384 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ELECTRICITE DE FRANCE SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pp-smartpush.edf.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19958592664731871367909420259961052700570400217481455300056535177812479469381939578978772184212388933146251150966002349151487277590567762265391359289031622551480441415249121861020076964471787691521329791365026166975965123780808138017813094857226165235364361113024670996259251255557065328973237146117215650735309394588155883541478181957837477947264860222047474368889560313239659212201879104363249655120099523320196027783372263822130562092463009059153693474656249144674525459205498322898997397898762565238584893212138421672631562987645567054884923514517817521414076476086202100167928499927705550730776372202633224830903
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1889e7aff028f67cca680552e162d891d6166560
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							52801b30bb5c6a6904fc017fea826f4b6a0a634c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pp-smartpush.edf.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pp-smartpush.enedis.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.digicert.eu/DigiCertG2TLSEURSA4096SHA3842022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.eu/DigiCertG2TLSEURSA4096SHA3842022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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