www.cls-bretagne.ars.sante.fr

- SECRETARIAT GENERAL MINISTERES CHARGES AFFAIRES SOCIALES -

Issued by Certigna Services CA

About this certificate

This digital certificate with serial number cc:20:2a:9a:47:3a:3a:b0:e0:6e:72:fb:c2:2f:35:5b was issued on by DHIMYOTIS.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

SECRETARIAT GENERAL MINISTERES CHARGES AFFAIRES SOCIALES

Company registration number: S302311741
Organization: SECRETARIAT GENERAL MINISTERES CHARGES AFFAIRES SOCIALES
Locality: PARIS
Country: FR

DHIMYOTIS

Organization: DHIMYOTIS
Organization unit: 0002 48146308100036
Country: FR

This certificate will expire on

Certificate Details

Serial Number (hex): cc:20:2a:9a:47:3a:3a:b0:e0:6e:72:fb:c2:2f:35:5b
Serial Number (int): 271329528723980163678263512891497854299
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 81:7c:57:b3:94:75:7f:b1:76:6b:fe:a7:cb:73:f0:31:33:a5:c0:48
AuthorityKeyId: ac:ec:86:8f:4b:37:1c:b8:7f:17:1b:19:d0:ae:e8:4e:e3:34:5c:12

Fingerprint (sha1): c3:97:86:09:d3:8b:e7:0f:5f:63:d8:3f:a8:7e:d4:27:5a:46:a3:7f
Fingerprint (sha256): 0c:6a:d6:94:15:70:0c:49:0b:37:73:ac:ef:46:3a:fc:16:a7:5f:a2:43:4a:ba:a7:01:b7:ec:d6:1c:5b:fb:6c

Issuing Certificate URL: http://autorite.dhimyotis.com/servicesca.der
Issuing Certificate URL: http://autorite.certigna.fr/servicesca.der

Revocation information

OCSP Server: http://servicesca.ocsp.dhimyotis.com
OCSP Server: http://servicesca.ocsp.certigna.fr
CRL Distribution Point: http://crl.certigna.fr/servicesca.crl
CRL Distribution Point: http://crl.dhimyotis.com/servicesca.crl

Check the revocation status for certificate www.cls-bretagne.ars.sante.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cls-bretagne.ars.sante.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cls-bretagne.ars.sante.fr
www.cls-bretagne.ars.sante.fr

Other certificates including the domain name sante.fr

(limited to 100 certificates)
www.ocean-indien.paps.sante.fr
*.briques.sante.fr
*.briques.sante.fr
mon-rdv-dondesang.efs.sante.fr
auth.efs.sante.fr
actualites.wiztopic.com
atih.sante.fr
sni.cloudflaressl.com
coopps.ars.sante.fr
actualites.wiztopic.com
re7.efs.sante.fr
actualites.wiztopic.com
pdlo-mentor.efs.sante.fr
re7.donneurs.efs.sante.fr
cms.efs.sante.fr
ra.efs.sante.fr
ecars-ppc.ars.sante.fr
ecarsproxy-ppc.ars.sante.fr
applis.atih.sante.fr
qualhas.atih.sante.fr
www.hauts-de-france.paps.sante.fr
secours.sipg.sante.fr
*.asc.paca.sante.fr
mon-rdv-dondesang.efs.sante.fr
*.guichet-unique.paca.sante.fr
mail.atih.sante.fr
www.sipg.sante.fr
www.ocean-indien.ars.sante.fr
www.projet-regional-de-sante-pays-de-la-loire.ars.sante.fr
lesagoras.paca.ars.sante.fr
donneurs.efs.sante.fr
www.cls-bretagne.ars.sante.fr
sirec.ars.sante.fr
atih.sante.fr
www.democratie-sanitaire-pays-de-la-loire.ars.sante.fr
www.cng.sante.fr
mon-rdv-dondesang.efs.sante.fr
*.annuaire.sante.fr
re7.oudonner.api.efs.sante.fr
www.mini-site1.ars.sante.fr
cms.efs.sante.fr
www.mini-site1.ars.sante.fr
ecarsextranet.ars.sante.fr
ecarsproxy.ars.sante.fr
coopps.ars.sante.fr
mtsfp-vm-sante-ars-recette.accelance.net
ars.sante.fr
paps.sante.fr
inscriptions.cestanous.efs.sante.fr
sslcertificate2.queue-it.net
www.epmsi.atih.sante.fr
actualites.wiztopic.com
sslcertificate2.queue-it.net
mtsfp-sante-papsars-recette.accelance.net
webconf.intranet.atih.sante.fr
mtsfp-vm-sante-ars-preprod.accelance.net
www.epmsi.atih.sante.fr
cawi.esteban.invs.sante.fr
es-mayotte.ars.sante.fr
mtsfp-sante-papsars-recette.accelance.net
www.paps.pp.ars.sante.fr
sivss.sante.fr
www.guyane.paps.sante.fr
www.mini-site1.ars.sante.fr
*.inpes.sante.fr
sslcertificate2.queue-it.net
ecarsextranet.ars.sante.fr
applis.atih.sante.fr
actualites.wiztopic.com
actualites.wiztopic.com
arhgos.ars.sante.fr
mail.atih.sante.fr
donneurs.efs.sante.fr
ecars-frm.ars.sante.fr
tdb-esms.atih.sante.fr
www.cng.sante.fr
imotep.ars.sante.fr
paca-sport-sante.fr
www.corse.ars.sante.fr
www.efs.sante.fr
*.ansm.sante.fr
paca-sport-sante.fr
mti.efs.sante.fr
ecarsextranet-frm.ars.sante.fr
sslcertificate2.queue-it.net
www.ansm.sante.fr
imotep.ars.sante.fr
*.efs.sante.fr
actualites.wiztopic.com
dondesang.efs.sante.fr
arceidf.ars.sante.fr
ra.efs.sante.fr
partage.ars.sante.fr
www.epmsi.atih.sante.fr
www.efs.sante.fr
partenaires.annuaire.sante.fr
sni.cloudflaressl.com
form.api.efs.sante.fr
ecarsproxy-frm.ars.sante.fr
*.efs.sante.fr

Certificate

The complete raw certificate details for www.cls-bretagne.ars.sante.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszK/cp6D9tZNmKSKwAM9
PCuvPL30DmLM6iSA6U+FNR6AnrjLp7aVCBPYbxCD71pFc/nx1mtidZNhoqg6yGQT
7Pu0wBro5CdaHkVbv6NGCYt8GwgEtek/QTubnF0sWk4/wsW1lWtFG1vZ4q1DkDiC
cNfVcyzHYYkzCx/mxcicC392UHjv9MsPSDdsFnbCKFdYxJAyPFaAEFK9TPOxU+8q
Fw1ChIdGlxqfwscVtli+JO49DrmZPGRTGVrIp5cVHcBaxZEMYBKD7O7IJiMvmx3l
RYVM+1elpZgxIg3wm9JiQfg/qjiZr/cb6n1WzleFE8hKNiVoo2mzzv6StwNNu+/U
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271329528723980163678263512891497854299
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DHIMYOTIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '0002 48146308100036'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.97
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NTRFR-48146308100036'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Certigna Services CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-04 23:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-04 22:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SECRETARIAT GENERAL MINISTERES CHARGES AFFAIRES SOCIALES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.cls-bretagne.ars.sante.fr'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'S302311741'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22621681282843083126546943310158713975179377452609510708093917875174989037979271079110258310077669167666293790304459769465980474429965440938726856662278253651939053299841096432032744434315999541960335933584479568033631282311130324646642021227879069534838895324958592809389334560882172159694042425187189771304119663224213863960213019041794268712452333080738331586406453093693182201986397738407058640814938760041272506316866274327582382794312883210628080113289542831902774847182306903561038001948134057329100681335813644743852293252275030861274091559420237951076602496208516147357035634264899418038350639194926822184177
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (215 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://autorite.dhimyotis.com/servicesca.der'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://autorite.certigna.fr/servicesca.der'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://servicesca.ocsp.dhimyotis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://servicesca.ocsp.certigna.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName acec868f4b371cb87f171b19d0aee84ee3345c12
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.250.1.177.2.5.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.certigna.com/autorite-certification'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.certigna.fr/servicesca.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.dhimyotis.com/servicesca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cls-bretagne.ars.sante.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cls-bretagne.ars.sante.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							817c57b394757fb1766bfea7cb73f03133a5c048
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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