*.hub.inrae.fr

- INRAE -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 46:a7:22:63:5d:67:e8:99:d7:97:a8:e1:f6:79:d7:3a was issued on by GEANT Vereniging.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

INRAE

Organization: INRAE
State / Province: Paris
Country: FR

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): 46:a7:22:63:5d:67:e8:99:d7:97:a8:e1:f6:79:d7:3a
Serial Number (int): 93913770754741764085911261433743136570
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: c6:56:06:9d:1f:ac:7a:f7:b9:7a:2a:ac:be:20:73:c9:e6:1c:ad:52
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 11:f9:65:5f:77:bf:69:0a:da:d0:79:49:bd:5e:61:f6:9b:d4:60:01
Fingerprint (sha256): 0d:21:51:9e:9b:eb:e8:06:4c:8c:51:21:df:95:a2:3a:62:c9:72:de:9c:d7:ab:dc:3e:c6:97:61:02:4b:12:b3

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate *.hub.inrae.fr

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.hub.inrae.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.hub.inrae.fr
*.angers-nantes.hub.inrae.fr
*.antilles.hub.inrae.fr
*.bordeaux-aquitaine.hub.inrae.fr
*.clermont.hub.inrae.fr
*.colmar.hub.inrae.fr
*.corse.hub.inrae.fr
*.custom.hub.inrae.fr
*.dijon.hub.inrae.fr
*.hautsdefrance.hub.inrae.fr
*.jouy.hub.inrae.fr
*.lyon-grenoble.hub.inrae.fr
*.montpellier.hub.inrae.fr
*.nancy.hub.inrae.fr
*.nouvelle-aquitaine-poitiers.hub.inrae.fr
*.paca.hub.inrae.fr
*.paris.hub.inrae.fr
*.rennes.hub.inrae.fr
*.toulouse.hub.inrae.fr
*.val-de-loire.hub.inrae.fr
*.versailles-grignon.hub.inrae.fr
riverly.inrae.fr
test-hub.inrae.fr

Other certificates including the domain name inrae.fr

(limited to 100 certificates)
org.hub.inrae.fr
colloque.inra.fr
*.montpellier.inra.fr
plateforme-alimentation.sae2.inra.fr
lix1.toulouse.inra.fr
vocabulaires.test.irstea.fr
vmi-dev.97.jouy.inra.fr
entretiens-evaluations-pre.inra.fr
ddi.dsi.inra.fr
gmd.irstea.fr
*.opens3r-tls-pprod.stockage.inrae.fr
great.colmar.inrae.fr
gestion.rpcas.inra.fr
xtms.micalis.inrae.fr
vmi-prod-312.dctlse.inra.fr
trs-gateway01.tours.inra.fr
energie-step-diagnostic.irstea.fr
bureau-distant.inra.fr
cas.inra.fr
w3.paca.inra.fr
ldap-preproduction-ndeite.inrae.fr
vm-metexplore-dev.toulouse.inra.fr
gitlab.irstea.fr
accesdistant.irstea.fr
vmi-dev-88.jouy.inra.fr
colloque.inra.fr
*.montpellier.inrae.fr
portail-invite.inra.fr
agirh.test.irstea.fr
sgadmin-elise.irstea.fr
restitutions-preproduction.intranet.inra.fr
team.forgemia.inra.fr
www.persyst.inra.fr
idp.test.irstea.fr
partage-fichiers.inra.fr
*.irstea.fr
pmad-preproduction.inra.fr
irsteadoc.dev.irstea.fr
temps-activites.inrae.fr
atcha.toulouse.inra.fr
*.umrh.clermont.inrae.fr
temps-activites.inra.fr
supervision.dcidf.inra.fr
evaluation-avis-cd-preproduction.intranet.inra.fr
*.s3-idf.stockage.inra.fr
phenoscope.versailles.inra.fr
org.hub.inrae.fr
heart.irstea.fr
*.montpellier.inra.fr
pshsrv6.paca.inrae.fr
node-test.dctlse.rpcas.inra.fr
uefp.pierroton.inra.fr
gedeop.cati.inrae.fr
logs.cirrus.cloud.inrae.fr
agirh.irstea.fr
*.bordeaux.inra.fr
enquetes-preproduction.intranet.inra.fr
piwik.irstea.fr
portail-eduspot.inra.fr
ldap.irstea.fr
ng6.toulouse.inra.fr
radius.dcidf.inra.fr
sturwild.irstea.fr
url.inrae.fr
agirh.dev.irstea.fr
css-evaluation-preproduction.intranet.inra.fr
acces-rds.inra.fr
lix1.toulouse.inra.fr
analyses.migale.inra.fr
data-preproduction-v3.inra.fr
acces.intranet.inra.fr
gmao.intranet.inra.fr
biofora-nas.orleans.inra.fr
consultation-structures-integration.jouy.inra.fr
nextcloud-pprod.stockage.inra.fr
orediapfc.inra.fr
resa.irstea.fr
wiki.irstea.fr
sygade.inrae.fr
*.sk8.inrae.fr
*.s3-tls.stockage.inra.fr
agirh.irstea.fr
*.hub.inrae.fr
plastic-apps.transform.inrae.fr
vm-chemflow.toulouse.inra.fr
bdoh.irstea.fr
partage-fichiers-preproduction.extranet.inra.fr
deas.irstea.fr
*.rosetta.irstea.fr
text-mining.inra.fr
aff.roazhon.inra.fr
xylofront.pierroton.inra.fr
regulweb-preproduction.intranet.inra.fr
*.sgbd.inra.fr
supervision.clermont.inra.fr
dcim.dcidf.inra.fr
mediatheque.inrae.fr
colloque-mdv-preproduction.inra.fr
wiki.dijon.inra.fr
base-des-conventions.irstea.fr

Certificate

The complete raw certificate details for *.hub.inrae.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1D8LrIJM3aS4EiyykxvZ
eRyqoNofPBI4mSVHae9xpJ7UESko+HaXL49XiKn6Fzu05Kv6aJEwtEvx1JvOsNC2
c3NoEYaleVScp63MGvX4hpmiBkdf8A04WAUZLRjQJLc5TyR6Nr0qkkpP42cV7BUg
Q3ldvGZrHhHUtk/Uu+ncAHNalgAigKxLCjswuE3kmcH1kD1oESzWUctz60j2R7aw
502jLH4n9QuAmOpyRMQ3hPQ6dbGhE/UhIAxI9T3AJL8tiUeUMOjpZmOP4R5/Iypg
fHNM+2RotPLRYuCnuEtJ2xEritCAtx25EyeJqEUyiCygAE2JC1Y6tqAor33dtfQi
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 93913770754741764085911261433743136570
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'INRAE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.hub.inrae.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26793609597372274815149102801149649703312996764412062364289339713355798900810786718281657986325683184713297890793096696712381351401038460307650131119159988001894284092884061018177074450885602932595445684935495817058729924529144806907175726076299833427848904868958492966562641025460081158387300724927175798665202901896286430393166329617568211430872348339742616245933866391881175159227831475072101343963720452005984243224684508776028616454925459663016902256773446571524331181131790618896639211926117192552679165762586373690842733366783817408453015634294722338579463878899857168532849420345794622417508455629513592939091
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c656069d1fac7af7b97a2aacbe2073c9e61cad52
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (592 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hub.inrae.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.angers-nantes.hub.inrae.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.antilles.hub.inrae.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bordeaux-aquitaine.hub.inrae.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clermont.hub.inrae.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.colmar.hub.inrae.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.corse.hub.inrae.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.custom.hub.inrae.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dijon.hub.inrae.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hautsdefrance.hub.inrae.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jouy.hub.inrae.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lyon-grenoble.hub.inrae.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.montpellier.hub.inrae.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nancy.hub.inrae.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nouvelle-aquitaine-poitiers.hub.inrae.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paca.hub.inrae.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paris.hub.inrae.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rennes.hub.inrae.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toulouse.hub.inrae.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.val-de-loire.hub.inrae.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.versailles-grignon.hub.inrae.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riverly.inrae.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-hub.inrae.fr'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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