www.cng.sante.fr

- SECRETARIAT GENERAL MINISTERES CHARGES AFFAIRES SOCIALES -

Issued by Certigna Services CA

About this certificate

This digital certificate with serial number 19:79:79:13:21:df:ed:17:6e:29:7d:b1:77:bd:ce:74 was issued on by DHIMYOTIS.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

SECRETARIAT GENERAL MINISTERES CHARGES AFFAIRES SOCIALES

Company registration number: S304493927
Organization: SECRETARIAT GENERAL MINISTERES CHARGES AFFAIRES SOCIALES
Locality: PARIS
Country: FR

DHIMYOTIS

Organization: DHIMYOTIS
Organization unit: 0002 48146308100036
Country: FR

This certificate will expire on

Certificate Details

Serial Number (hex): 19:79:79:13:21:df:ed:17:6e:29:7d:b1:77:bd:ce:74
Serial Number (int): 33861423501886456003739095852086316660
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: cc:b1:9f:99:b5:46:28:fd:d4:df:b6:1f:d0:77:00:11:5c:d3:8b:77
AuthorityKeyId: ac:ec:86:8f:4b:37:1c:b8:7f:17:1b:19:d0:ae:e8:4e:e3:34:5c:12

Fingerprint (sha1): 9f:3e:ef:bf:09:c1:44:2e:63:8c:7f:43:7c:d3:a6:0c:1d:8e:ab:76
Fingerprint (sha256): 0d:69:ed:1c:c9:ac:a9:eb:71:0d:19:84:50:c4:7b:ae:31:1b:e6:1b:c3:80:95:4d:e9:4e:92:7a:eb:08:25:42

Issuing Certificate URL: http://autorite.dhimyotis.com/servicesca.der
Issuing Certificate URL: http://autorite.certigna.fr/servicesca.der

Revocation information

OCSP Server: http://servicesca.ocsp.certigna.fr
OCSP Server: http://servicesca.ocsp.dhimyotis.com
CRL Distribution Point: http://crl.dhimyotis.com/servicesca.crl
CRL Distribution Point: http://crl.certigna.fr/servicesca.crl

Check the revocation status for certificate www.cng.sante.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cng.sante.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cng.sante.fr
www.cng.sante.fr

Other certificates including the domain name sante.fr

(limited to 100 certificates)
www.ocean-indien.paps.sante.fr
*.briques.sante.fr
*.briques.sante.fr
mon-rdv-dondesang.efs.sante.fr
auth.efs.sante.fr
actualites.wiztopic.com
atih.sante.fr
sni.cloudflaressl.com
coopps.ars.sante.fr
actualites.wiztopic.com
re7.efs.sante.fr
actualites.wiztopic.com
pdlo-mentor.efs.sante.fr
re7.donneurs.efs.sante.fr
cms.efs.sante.fr
ra.efs.sante.fr
ecars-ppc.ars.sante.fr
ecarsproxy-ppc.ars.sante.fr
applis.atih.sante.fr
qualhas.atih.sante.fr
www.hauts-de-france.paps.sante.fr
secours.sipg.sante.fr
*.asc.paca.sante.fr
mon-rdv-dondesang.efs.sante.fr
*.guichet-unique.paca.sante.fr
mail.atih.sante.fr
www.sipg.sante.fr
www.ocean-indien.ars.sante.fr
www.projet-regional-de-sante-pays-de-la-loire.ars.sante.fr
lesagoras.paca.ars.sante.fr
donneurs.efs.sante.fr
www.cls-bretagne.ars.sante.fr
sirec.ars.sante.fr
atih.sante.fr
www.democratie-sanitaire-pays-de-la-loire.ars.sante.fr
www.cng.sante.fr
mon-rdv-dondesang.efs.sante.fr
*.annuaire.sante.fr
re7.oudonner.api.efs.sante.fr
www.mini-site1.ars.sante.fr
cms.efs.sante.fr
www.mini-site1.ars.sante.fr
ecarsextranet.ars.sante.fr
ecarsproxy.ars.sante.fr
coopps.ars.sante.fr
mtsfp-vm-sante-ars-recette.accelance.net
ars.sante.fr
paps.sante.fr
inscriptions.cestanous.efs.sante.fr
sslcertificate2.queue-it.net
www.epmsi.atih.sante.fr
actualites.wiztopic.com
sslcertificate2.queue-it.net
mtsfp-sante-papsars-recette.accelance.net
webconf.intranet.atih.sante.fr
mtsfp-vm-sante-ars-preprod.accelance.net
www.epmsi.atih.sante.fr
cawi.esteban.invs.sante.fr
es-mayotte.ars.sante.fr
mtsfp-sante-papsars-recette.accelance.net
www.paps.pp.ars.sante.fr
sivss.sante.fr
www.guyane.paps.sante.fr
www.mini-site1.ars.sante.fr
*.inpes.sante.fr
sslcertificate2.queue-it.net
ecarsextranet.ars.sante.fr
applis.atih.sante.fr
actualites.wiztopic.com
actualites.wiztopic.com
arhgos.ars.sante.fr
mail.atih.sante.fr
donneurs.efs.sante.fr
ecars-frm.ars.sante.fr
tdb-esms.atih.sante.fr
www.cng.sante.fr
imotep.ars.sante.fr
paca-sport-sante.fr
www.corse.ars.sante.fr
www.efs.sante.fr
*.ansm.sante.fr
paca-sport-sante.fr
mti.efs.sante.fr
ecarsextranet-frm.ars.sante.fr
sslcertificate2.queue-it.net
www.ansm.sante.fr
imotep.ars.sante.fr
*.efs.sante.fr
actualites.wiztopic.com
dondesang.efs.sante.fr
arceidf.ars.sante.fr
ra.efs.sante.fr
partage.ars.sante.fr
www.epmsi.atih.sante.fr
www.efs.sante.fr
partenaires.annuaire.sante.fr
sni.cloudflaressl.com
form.api.efs.sante.fr
ecarsproxy-frm.ars.sante.fr
*.efs.sante.fr

Certificate

The complete raw certificate details for www.cng.sante.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBWOWC1kmzrkOkapI8mV
auoR0rblZYm61HXIeu70sLuOXK4uPhy43GwUnPU5RKDUV5x+Nb+QlB80zAVyr+rD
1h8eHXox1kbYjXATfyS9CixEKkLCTnfgDL1r81VvO6hl7bBI9MlRiVGu9SMvqf5M
ghrYT7kY5xfI5xxgVispRZgsaLUqxUtusTMagRXeQLE3sum9XZYKzr5bdPmgFgYU
DfFStIYHfZtntTQLKUo11z9aoCiaIWkjL9/jm8GfIhdZTzxZen+XWz1DknbIxeOC
hXVjKbfkHhtVAMJRwmuxImyID84FkUN8IUe+nlTswClNgxqTPi5RJMkyHa/eWPcJ
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 33861423501886456003739095852086316660
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DHIMYOTIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '0002 48146308100036'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.97
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NTRFR-48146308100036'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Certigna Services CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-25 23:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-15 22:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SECRETARIAT GENERAL MINISTERES CHARGES AFFAIRES SOCIALES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.cng.sante.fr'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'S304493927'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20713711690469045113661495654228887163065858450022775596803370205019151346557720832732466902117731277500103863565247135576114142346987518578127203257295674834511372335595366197316844094548244807094464386057842199972640864250969635945161866744763850834216746636362893894871590998181326310228920496243420029617277563680105128801944494508230340815574022990318751961243421263234837917438014353678208895166210982329135788545716810014932116649506973444083583377813851468947105922376328995555700670307540892733380382750374146223411611658461753385333663912520909603365914409177128215938409067161893473957481424414355630786879
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (215 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://autorite.dhimyotis.com/servicesca.der'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://autorite.certigna.fr/servicesca.der'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://servicesca.ocsp.certigna.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://servicesca.ocsp.dhimyotis.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName acec868f4b371cb87f171b19d0aee84ee3345c12
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.250.1.177.2.5.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.certigna.com/autorite-certification'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.dhimyotis.com/servicesca.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.certigna.fr/servicesca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cng.sante.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cng.sante.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ccb19f99b54628fdd4dfb61fd07700115cd38b77
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00af89c885f9ab488343f69128c90225578671f16310e598ac46563383aded48e00e1e4c8a2cf35a59a236efeb8094e6ffb4dd2a78faaa933d07a8a2e2e084fc07f01803e4be4a9ad78fe5a13a63a759b492e61788aa242e8356dcbc416026efbbcffd9a57fecec8e787f8b4615362694aa3e8aa0ba7c92133459bc1084fdf9df6f8ab9073f92c08c32e694480f3c73e46aa546ae18efdd1a1f0aa0333ae146fbca439aa2096a51c514488019d9b661bbeb68b1eff156db8de6efc47241bb36d8a6f30fccf75169cb8099b7f825113c5296b8dc3826d937e92422a58a94582dcf143fd753d74f81eec66238d6f96346f6b0f2ae189f38006d38e85dd5d0d506eefa190c3b0043079b85939ba6140c6ac1d5da761cd160dbb1f8d9d6a148f7839500a73f07cce13d92ba056c0199be65869a55c29e98bba10b127b1532438339752a5bfbf5c96a7b4445a9ed65d0b0662308674b8a79da85506d6170b87e4ced47e94e01a58c932452c8bb31f1e54456a71b3ff010239c90a1b00c1169dbd28c083f3ef259bd8d68c0174cde3d79f6794372e054994d87913496ddbef835c62b3edd1295d25abf6cd8babf266e1e1583a32f486678cc72736ef077a1b07fed13a069b63eb00baff1362b24ce6d41347f205b13a8e30c20254a5c2982d935294334457b9d81ee42cc34ef43b5d065c52ab71bcfd9db41e3e4584ab6573dbe6ef712c