*.cemagref.fr
Issued by TERENA SSL CA 2
About this certificate
This digital certificate with serial number e9:ab:1b:55:f0:9e:23:fd:d9:11:93:7b:e1:43:6d:af was issued on by TERENA.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.cemagref.fr,OU=Domain Control Validated
TERENA
Organization:
TERENA
State / Province:
Noord-Holland
Locality: Amsterdam
Country: NL
Locality: Amsterdam
Country: NL
This certificate has expire since
Certificate Details
Serial Number (hex): e9:ab:1b:55:f0:9e:23:fd:d9:11:93:7b:e1:43:6d:afSerial Number (int): 310598560214615548820752426075391487407
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: ff:51:79:72:f3:66:18:81:02:b8:2e:c7:13:7b:56:6e:42:bc:1e:bf
AuthorityKeyId: 5b:d0:8a:1c:9a:32:5b:e0:b5:dd:96:54:1b:e1:86:28:b0:fd:b6:bd
Fingerprint (sha1): 76:fa:b8:4d:08:10:74:6d:32:e8:81:50:77:2c:3a:0c:1d:e0:a1:ca
Fingerprint (sha256): 10:1d:ff:23:40:16:7b:3b:37:58:25:4e:15:1b:be:fb:02:fe:a2:ac:d9:8d:e6:fb:4f:ef:a2:2f:a4:81:f2:29
Issuing Certificate URL: http://crt.usertrust.com/TERENASSLCA2.crt
Revocation information
OCSP Server: http://ocsp.usertrust.comCRL Distribution Point: http://crl.usertrust.com/TERENASSLCA2.crl
Check the revocation status for certificate *.cemagref.fr
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.cemagref.fr
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.cemagref.fr
Other certificates including the domain name cemagref.fr
(limited to 100 certificates)
iwa-gmp-tg.irstea.fr
agirh.irstea.fr
*.lyon.cemagref.fr
*.cemagref.fr
iwa-gmp-tg.irstea.fr
agirh.irstea.fr
svn.lyon.cemagref.fr
actisurtt.cemagref.fr
hydroeco.irstea.fr
test.collec-science.inrae.fr
r2d2-2050.irstea.fr
extraflo.irstea.fr
zimbra.lyon.cemagref.fr
sapb7d.cemagref.fr
floodscale.irstea.fr
emat2030.cemagref.fr
emat2030.cemagref.fr
demether.cemagref.fr
proddeval.irstea.fr
emat2030.cemagref.fr
sst.irstea.fr
kilimanjaro.cemagref.fr
floodscale.irstea.fr
r2d2-2050.irstea.fr
sapj7q.cemagref.fr
proddeval.irstea.fr
sapjax.cemagref.fr
forge.lyon.cemagref.fr
erinoh-db.lyon.cemagref.fr
actisurtt.cemagref.fr
demether.cemagref.fr
metafort.cemagref.fr
sapjax.cemagref.fr
demether.cemagref.fr
metafort.cemagref.fr
missmond.irstea.fr
iwa-gmp-tg.irstea.fr
floodscale.irstea.fr
*.cemagref.fr
zimbra.lyon.cemagref.fr
sapj7q.cemagref.fr
extraflo.irstea.fr
*.cemagref.fr
sst.irstea.fr
rhytmme.irstea.fr
tsip-pcb.irstea.fr
webmail.cemagref.fr
floodscale.irstea.fr
ldap-irstea-master.lyon.cemagref.fr
sapj7q.cemagref.fr
tr-usages.irstea.fr
tsip-pcb.irstea.fr
sst.irstea.fr
ldap-irstea-master.lyon.cemagref.fr
*.cemagref.fr
hydroeco.irstea.fr
r2d2-2050.irstea.fr
vecard.lyon.cemagref.fr
extraflo.irstea.fr
cemadoc-qualification.lyon.cemagref.fr
webmail.cemagref.fr
agirh.irstea.fr
sapj7p.cemagref.fr
actisurtt.cemagref.fr
ldap-irstea-master.lyon.cemagref.fr
collaboration.lyon.cemagref.fr
erinoh-db.lyon.cemagref.fr
forgeco.irstea.fr
stratus.irstea.fr
collaboration.lyon.cemagref.fr
iwa-gmp-tg.irstea.fr
tsip-pcb.irstea.fr
stratus.irstea.fr
stratus.irstea.fr
rhytmme.irstea.fr
sapj7d.cemagref.fr
osquar-shs.irstea.fr
teampass.lyon.cemagref.fr
saphfr.cemagref.fr
sst.irstea.fr
forgeco.irstea.fr
sst.irstea.fr
saphfr.cemagref.fr
agirh.irstea.fr
*.lyon.cemagref.fr
*.cemagref.fr
iwa-gmp-tg.irstea.fr
agirh.irstea.fr
svn.lyon.cemagref.fr
actisurtt.cemagref.fr
hydroeco.irstea.fr
test.collec-science.inrae.fr
r2d2-2050.irstea.fr
extraflo.irstea.fr
zimbra.lyon.cemagref.fr
sapb7d.cemagref.fr
floodscale.irstea.fr
emat2030.cemagref.fr
emat2030.cemagref.fr
demether.cemagref.fr
proddeval.irstea.fr
emat2030.cemagref.fr
sst.irstea.fr
kilimanjaro.cemagref.fr
floodscale.irstea.fr
r2d2-2050.irstea.fr
sapj7q.cemagref.fr
proddeval.irstea.fr
sapjax.cemagref.fr
forge.lyon.cemagref.fr
erinoh-db.lyon.cemagref.fr
actisurtt.cemagref.fr
demether.cemagref.fr
metafort.cemagref.fr
sapjax.cemagref.fr
demether.cemagref.fr
metafort.cemagref.fr
missmond.irstea.fr
iwa-gmp-tg.irstea.fr
floodscale.irstea.fr
*.cemagref.fr
zimbra.lyon.cemagref.fr
sapj7q.cemagref.fr
extraflo.irstea.fr
*.cemagref.fr
sst.irstea.fr
rhytmme.irstea.fr
tsip-pcb.irstea.fr
webmail.cemagref.fr
floodscale.irstea.fr
ldap-irstea-master.lyon.cemagref.fr
sapj7q.cemagref.fr
tr-usages.irstea.fr
tsip-pcb.irstea.fr
sst.irstea.fr
ldap-irstea-master.lyon.cemagref.fr
*.cemagref.fr
hydroeco.irstea.fr
r2d2-2050.irstea.fr
vecard.lyon.cemagref.fr
extraflo.irstea.fr
cemadoc-qualification.lyon.cemagref.fr
webmail.cemagref.fr
agirh.irstea.fr
sapj7p.cemagref.fr
actisurtt.cemagref.fr
ldap-irstea-master.lyon.cemagref.fr
collaboration.lyon.cemagref.fr
erinoh-db.lyon.cemagref.fr
forgeco.irstea.fr
stratus.irstea.fr
collaboration.lyon.cemagref.fr
iwa-gmp-tg.irstea.fr
tsip-pcb.irstea.fr
stratus.irstea.fr
stratus.irstea.fr
rhytmme.irstea.fr
sapj7d.cemagref.fr
osquar-shs.irstea.fr
teampass.lyon.cemagref.fr
saphfr.cemagref.fr
sst.irstea.fr
forgeco.irstea.fr
sst.irstea.fr
saphfr.cemagref.fr
Certificate
The complete raw certificate details for *.cemagref.fr in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIElTCCA32gAwIBAgIRAOmrG1XwniP92RGTe+FDba8wDQYJKoZIhvcNAQELBQAw ZDELMAkGA1UEBhMCTkwxFjAUBgNVBAgTDU5vb3JkLUhvbGxhbmQxEjAQBgNVBAcT CUFtc3RlcmRhbTEPMA0GA1UEChMGVEVSRU5BMRgwFgYDVQQDEw9URVJFTkEgU1NM IENBIDIwHhcNMTQxMjA5MDAwMDAwWhcNMTUxMjA5MjM1OTU5WjA7MSEwHwYDVQQL ExhEb21haW4gQ29udHJvbCBWYWxpZGF0ZWQxFjAUBgNVBAMUDSouY2VtYWdyZWYu ZnIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3BsqPQULSKWE+SY3O aEeRehTw1s8OZMdKcBwNOTCSv1yAjzd1d9zawrdW795TLwam+8gcmdRAIXz2yocW WBg1WfWaGkhxHiRmt06ld2d6AnoYEPhrO+iELS4n+fP0bbH5c2TcBbjbQuCQesVH DmQmFJW9u4GLgzdfvBKI1lgrj4tky54Bodf8u1Y/welrzDXAg8LkePGMQB7FC8lr jLADUrtiOZMx1orYpfh0gtNJJJagnFNl6Vy5YMRGQLICZ0oqnal4cbpnaA874bmV H2A/FRIYtnspMTpbKU3VBxB6mDNJu7lSDo48hvPqyfF1pIrb46W/gKSUryH3prjE IJLnAgMBAAGjggFpMIIBZTAfBgNVHSMEGDAWgBRb0IocmjJb4LXdllQb4YYosP22 vTAdBgNVHQ4EFgQU/1F5cvNmGIECuC7HE3tWbkK8Hr8wDgYDVR0PAQH/BAQDAgWg MAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMCIG A1UdIAQbMBkwDQYLKwYBBAGyMQECAh0wCAYGZ4EMAQIBMDoGA1UdHwQzMDEwL6At oCuGKWh0dHA6Ly9jcmwudXNlcnRydXN0LmNvbS9URVJFTkFTU0xDQTIuY3JsMGwG CCsGAQUFBwEBBGAwXjA1BggrBgEFBQcwAoYpaHR0cDovL2NydC51c2VydHJ1c3Qu Y29tL1RFUkVOQVNTTENBMi5jcnQwJQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3NwLnVz ZXJ0cnVzdC5jb20wGAYDVR0RBBEwD4INKi5jZW1hZ3JlZi5mcjANBgkqhkiG9w0B AQsFAAOCAQEADP/+6yhnlSNWXjKZ7dBkA0mMIYTGRoFfZBDjYVEqcfTA7hlRLdb6 AmuuNnVpGrXz9yC9AdnnL7cnnzKHoV92cSplQx2GDtqo4CFxfrw1r6n3GfA9mReM Y5XDxBwAEOM9Rt7Q7Ribq9CGlt2rOeF0ZqnzZB8M+/v1eBGQ9fKPqAQAornlH7HZ pg0P/xqzsU+hHwN/l+/YDVkh61j8qjMeOagbsHn3ZMEx46qAYAoSbdjvKmf/4SSH FNKxX6nZk/wSAE70aOd+Ea7IEU6DagCUrQXZy4/Z73b6NJjOWQpfD3HrjG41nQMH RJC7e0SzEa1+61F73789JQSNEWz1bk68mw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwbKj0FC0ilhPkmNzmhH kXoU8NbPDmTHSnAcDTkwkr9cgI83dXfc2sK3Vu/eUy8GpvvIHJnUQCF89sqHFlgY NVn1mhpIcR4kZrdOpXdnegJ6GBD4azvohC0uJ/nz9G2x+XNk3AW420LgkHrFRw5k JhSVvbuBi4M3X7wSiNZYK4+LZMueAaHX/LtWP8Hpa8w1wIPC5HjxjEAexQvJa4yw A1K7YjmTMdaK2KX4dILTSSSWoJxTZelcuWDERkCyAmdKKp2peHG6Z2gPO+G5lR9g PxUSGLZ7KTE6WylN1QcQepgzSbu5Ug6OPIbz6snxdaSK2+Olv4CklK8h96a4xCCS 5wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 310598560214615548820752426075391487407 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-12-09 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-09 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.cemagref.fr' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23104958698187955775469806781253758396611649404890504471735718868347890980314541562584438712114400133927504365484658566068504033772955300390012955597870336146303381247188223079989651300317209446101687106868469677607023726952069813550670055616816723181704024669773145877699644165315147966525755096936570735713267619479488431979423218631086378661699166414732759088357523025239441651387969102405766318354282791547063062391986463351147154360015558116782622269720640009224242779082865501522892273965040674160664521906470470409048825613695548022230850228673209141218971579666325393885292811144856767235276855272255787143911 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5bd08a1c9a325be0b5dd96541be18628b0fdb6bd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ff517972f366188102b82ec7137b566e42bc1ebf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.29 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/TERENASSLCA2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/TERENASSLCA2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cemagref.fr' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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