www.ricaud.com
- Laboratoires de Biologie Vegetale Yves Rocher -
Issued by Sectigo RSA Organization Validation Secure Server CA
About this certificate
This digital certificate with serial number 8b:16:72:cb:d2:20:ef:4e:63:c8:80:e6:79:77:0e:1d was issued on by Sectigo Limited.
With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Laboratoires de Biologie Vegetale Yves Rocher
Organization:
Laboratoires de Biologie Vegetale Yves Rocher
State / Province:
Bretagne
Country: FR
Country: FR
Sectigo Limited
Organization:
Sectigo Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate will expire on
Certificate Details
Serial Number (hex): 8b:16:72:cb:d2:20:ef:4e:63:c8:80:e6:79:77:0e:1dSerial Number (int): 184879250288034547007881428467090656797
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: e1:c8:4d:c1:71:a0:47:37:ce:1b:40:1a:29:a6:80:57:14:2a:ba:9c
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb
Fingerprint (sha1): 5d:26:3f:1b:19:f1:67:21:ac:80:ea:87:11:7d:82:5f:e7:6e:4b:b0
Fingerprint (sha256): 13:a8:22:f7:99:57:61:43:a5:53:76:72:a2:7e:91:19:0f:35:a3:0c:47:14:04:75:3e:49:80:3e:7c:ba:80:1e
Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.sectigo.comCRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl
Check the revocation status for certificate www.ricaud.com
23
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.ricaud.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.ricaud.com
bo.ricaud.com
cdn.ricaud.com
communaute.ricaud.com
danieljouvance.com
decryptage.ricaud.com
logs.ricaud.com
metrics.ricaud.com
mo.ricaud.com
pma.ricaud.com
ricaud.be
ricaud.ch
ricaud.com
ricaud.de
ricaud.fr
ricaud.nl
survey.ricaud.com
www.danieljouvance.com
www.ricaud.be
www.ricaud.ch
www.ricaud.de
www.ricaud.fr
www.ricaud.nl
bo.ricaud.com
cdn.ricaud.com
communaute.ricaud.com
danieljouvance.com
decryptage.ricaud.com
logs.ricaud.com
metrics.ricaud.com
mo.ricaud.com
pma.ricaud.com
ricaud.be
ricaud.ch
ricaud.com
ricaud.de
ricaud.fr
ricaud.nl
survey.ricaud.com
www.danieljouvance.com
www.ricaud.be
www.ricaud.ch
www.ricaud.de
www.ricaud.fr
www.ricaud.nl
Other certificates including the domain name ricaud.com
(limited to 100 certificates)
secure01.lithium.com
livedatainstant.ricaud.com
workbench-www.ricaud.com
livedatainstant.ricaud.com
services.yves-rocher.com
secure10.lithium.com
secure01.stage.lithium.com
secure01.lithium.com
www.ricaud.com
assets.ricaud.com
secure10.lithium.com
incapsula.com
secure10.lithium.com
secure01.stage.lithium.com
www.ricaud.com
secure01.stage.lithium.com
staging-www.ricaud.com
www.yves-rocher.com
survey.yves-rocher.fr
secure10.lithium.com
secure01.lithium.com
secure01.lithium.com
www.ricaud.com
contrib-www.ricaud.com
secure10.lithium.com
www.ricaud.com
secure01.lithium.com
www.ricaud.com
www.yves-rocher.com
secure10.lithium.com
secure01.stage.lithium.com
www.ricaud.com
assets.ricaud.com
workbench-www.ricaud.com
imperva.com
www.ricaud.com
secure01.stage.lithium.com
secure10.lithium.com
mo.ricaud.com
secure01.lithium.com
secure10.lithium.com
secure01.stage.lithium.com
secure-vpci.ricaud.com
secure10.lithium.com
incapsula.com
survey.yves-rocher.fr
workbench-www.ricaud.com
secure10.lithium.com
secure10.lithium.com
www.ricaud.com
incapsula.com
secure01.lithium.com
secure01.stage.lithium.com
survey.yves-rocher.fr
secure10.lithium.com
www-npe.yves-rocher.com
incapsula.com
secure10.lithium.com
secure10.lithium.com
survey.yves-rocher.fr
workbench-www.ricaud.com
incapsula.com
secure10.lithium.com
secure01.stage.lithium.com
www.ricaud.com
incapsula.com
workbench-www.ricaud.com
mo.ricaud.com
secure01.stage.lithium.com
secure01.stage.lithium.com
workbench-www.ricaud.com
secure01.stage.lithium.com
www-npe.yves-rocher.com
secure10.lithium.com
secure01.stage.lithium.com
secure10.lithium.com
www.yves-rocher.com
secure10.lithium.com
secure01.stage.lithium.com
secure01.stage.lithium.com
t.nl.yves-rocher.de
secure01.stage.lithium.com
incapsula.com
survey.yves-rocher.fr
imperva.com
www.ricaud.com
secure01.stage.lithium.com
contrib-www.ricaud.com
contrib-www.ricaud.com
secure01.stage.lithium.com
t.nl.yves-rocher.de
push.ricaud.com
secure10.lithium.com
secure01.stage.lithium.com
secure01.stage.lithium.com
secure01.lithium.com
secure-vpci.ricaud.com
secure01.stage.lithium.com
secure01.stage.lithium.com
secure01.stage.lithium.com
livedatainstant.ricaud.com
workbench-www.ricaud.com
livedatainstant.ricaud.com
services.yves-rocher.com
secure10.lithium.com
secure01.stage.lithium.com
secure01.lithium.com
www.ricaud.com
assets.ricaud.com
secure10.lithium.com
incapsula.com
secure10.lithium.com
secure01.stage.lithium.com
www.ricaud.com
secure01.stage.lithium.com
staging-www.ricaud.com
www.yves-rocher.com
survey.yves-rocher.fr
secure10.lithium.com
secure01.lithium.com
secure01.lithium.com
www.ricaud.com
contrib-www.ricaud.com
secure10.lithium.com
www.ricaud.com
secure01.lithium.com
www.ricaud.com
www.yves-rocher.com
secure10.lithium.com
secure01.stage.lithium.com
www.ricaud.com
assets.ricaud.com
workbench-www.ricaud.com
imperva.com
www.ricaud.com
secure01.stage.lithium.com
secure10.lithium.com
mo.ricaud.com
secure01.lithium.com
secure10.lithium.com
secure01.stage.lithium.com
secure-vpci.ricaud.com
secure10.lithium.com
incapsula.com
survey.yves-rocher.fr
workbench-www.ricaud.com
secure10.lithium.com
secure10.lithium.com
www.ricaud.com
incapsula.com
secure01.lithium.com
secure01.stage.lithium.com
survey.yves-rocher.fr
secure10.lithium.com
www-npe.yves-rocher.com
incapsula.com
secure10.lithium.com
secure10.lithium.com
survey.yves-rocher.fr
workbench-www.ricaud.com
incapsula.com
secure10.lithium.com
secure01.stage.lithium.com
www.ricaud.com
incapsula.com
workbench-www.ricaud.com
mo.ricaud.com
secure01.stage.lithium.com
secure01.stage.lithium.com
workbench-www.ricaud.com
secure01.stage.lithium.com
www-npe.yves-rocher.com
secure10.lithium.com
secure01.stage.lithium.com
secure10.lithium.com
www.yves-rocher.com
secure10.lithium.com
secure01.stage.lithium.com
secure01.stage.lithium.com
t.nl.yves-rocher.de
secure01.stage.lithium.com
incapsula.com
survey.yves-rocher.fr
imperva.com
www.ricaud.com
secure01.stage.lithium.com
contrib-www.ricaud.com
contrib-www.ricaud.com
secure01.stage.lithium.com
t.nl.yves-rocher.de
push.ricaud.com
secure10.lithium.com
secure01.stage.lithium.com
secure01.stage.lithium.com
secure01.lithium.com
secure-vpci.ricaud.com
secure01.stage.lithium.com
secure01.stage.lithium.com
secure01.stage.lithium.com
Certificate
The complete raw certificate details for www.ricaud.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIITDCCBzSgAwIBAgIRAIsWcsvSIO9OY8iA5nl3Dh0wDQYJKoZIhvcNAQELBQAw gZUxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE9MDsGA1UE AxM0U2VjdGlnbyBSU0EgT3JnYW5pemF0aW9uIFZhbGlkYXRpb24gU2VjdXJlIFNl cnZlciBDQTAeFw0yNDAyMDYwMDAwMDBaFw0yNTAyMDUyMzU5NTlaMHExCzAJBgNV BAYTAkZSMREwDwYDVQQIEwhCcmV0YWduZTE2MDQGA1UEChMtTGFib3JhdG9pcmVz IGRlIEJpb2xvZ2llIFZlZ2V0YWxlIFl2ZXMgUm9jaGVyMRcwFQYDVQQDEw53d3cu cmljYXVkLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALfeEIwR Ylt6wg+KiK8kjXzo883M2MONVNgihZJWNKS3wFabgU1BX/cBbfbxs1LJuL8GJdw5 F5uuqdtHhpydExzS8lDaTHG6ll3Bb8ZBPWJcKCHTKIu/8P+BMWB+kMJXszd2m9em TPFns2AcpGMYvIIX9FmldYb3g2QHF//9eMTaWTp38R8ATVFfwUcVnDjcWUggt07z 3nZevO0doe+61ujrj9x/ZpmMpSBgcFU2ZITGRv1ht7yQtmu5Ku5yRE0uRl3N8EDr G7WHYUw62fSUCTicUT02ahSd2J24uLDwTMZBr6WCqYwPvnhxrV2RECS9NwHAyjYj MgqtL88Y2W8cDd0CAwEAAaOCBLgwggS0MB8GA1UdIwQYMBaAFBfZ1iUnZ/kxwklD 2TA2RIxsqU/rMB0GA1UdDgQWBBThyE3BcaBHN84bQBoppoBXFCq6nDAOBgNVHQ8B Af8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwSgYDVR0gBEMwQTA1BgwrBgEEAbIxAQIBAwQwJTAjBggrBgEFBQcCARYX aHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMwCAYGZ4EMAQICMFoGA1UdHwRTMFEwT6BN oEuGSWh0dHA6Ly9jcmwuc2VjdGlnby5jb20vU2VjdGlnb1JTQU9yZ2FuaXphdGlv blZhbGlkYXRpb25TZWN1cmVTZXJ2ZXJDQS5jcmwwgYoGCCsGAQUFBwEBBH4wfDBV BggrBgEFBQcwAoZJaHR0cDovL2NydC5zZWN0aWdvLmNvbS9TZWN0aWdvUlNBT3Jn YW5pemF0aW9uVmFsaWRhdGlvblNlY3VyZVNlcnZlckNBLmNydDAjBggrBgEFBQcw AYYXaHR0cDovL29jc3Auc2VjdGlnby5jb20wggF/BgorBgEEAdZ5AgQCBIIBbwSC AWsBaQB1AM8RVu7VLnyv84db2Wkum+kacWdKsBfsrAHSW3fOzDsIAAABjX5wBgAA AAQDAEYwRAIgJDUnflxc3sJIc/H8ggUbswXOO4tM3b/eG97OLFbn/1kCIFfX3N1X dOQysZutL8DnCavscWgtes2nTtH/4Livg5ujAHcAouMK5EXvva2bfjjtR2d3U9eC W4SU1yteGyzEuVCkR+cAAAGNfnAGoAAABAMASDBGAiEArDPhY3vivX1G5lxp95N1 9dfTUi0uZQekTduq4XwzCykCIQDCfz43Huc9XDXXfejIUQvY7WFGqxgqL3gye3RZ QQ7qTgB3AE51oydcmhDDOFts1N8/Uusd8OCOG41pwLH6ZLFimjnfAAABjX5wBiwA AAQDAEgwRgIhAOVzF+bne+KydXTA0gLYEc6B42wdtxFjjd/yKE65BRhtAiEA9COd SWN1+UORvXhcI7Nw7D/WhH67DDKLClxJkvNMnM4wggF7BgNVHREEggFyMIIBboIO d3d3LnJpY2F1ZC5jb22CDWJvLnJpY2F1ZC5jb22CDmNkbi5yaWNhdWQuY29tghVj b21tdW5hdXRlLnJpY2F1ZC5jb22CEmRhbmllbGpvdXZhbmNlLmNvbYIVZGVjcnlw dGFnZS5yaWNhdWQuY29tgg9sb2dzLnJpY2F1ZC5jb22CEm1ldHJpY3MucmljYXVk LmNvbYINbW8ucmljYXVkLmNvbYIOcG1hLnJpY2F1ZC5jb22CCXJpY2F1ZC5iZYIJ cmljYXVkLmNoggpyaWNhdWQuY29tgglyaWNhdWQuZGWCCXJpY2F1ZC5mcoIJcmlj YXVkLm5sghFzdXJ2ZXkucmljYXVkLmNvbYIWd3d3LmRhbmllbGpvdXZhbmNlLmNv bYINd3d3LnJpY2F1ZC5iZYINd3d3LnJpY2F1ZC5jaIINd3d3LnJpY2F1ZC5kZYIN d3d3LnJpY2F1ZC5mcoINd3d3LnJpY2F1ZC5ubDANBgkqhkiG9w0BAQsFAAOCAQEA BN0dEYHyIa04bnbWjJxLpH+sYDMLf/vL4wQ+WopWeqt3+xPAQevJ/ibejI2TsNdv rzZPRs0JXwNnKyks/JZ6WeeE5ScMJhAUMmEiBSjl+v7T53dJ8jjwK8ZlaXs3kq3B dyVeSiArCCnjdUnGTtpKHQ7CH7JhKOdoIgLkNqQ6SHkS45uRwcfvC8k8yyEtuU9I NZrRxYZ1ia83v2YfXEN8t5oAuSNvDUnbONfGi62v2Qx6pbaqU2vpptPhwZaCd7Eu 2ywEBkN5LK1TnjyjQi9UGBuLWE5MH+JwcDpQllXDHdF8ZeBT/pXEu9bkzgU89m8D wOjzn//Tpz1lZZd6Vhal2g== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt94QjBFiW3rCD4qIrySN fOjzzczYw41U2CKFklY0pLfAVpuBTUFf9wFt9vGzUsm4vwYl3DkXm66p20eGnJ0T HNLyUNpMcbqWXcFvxkE9YlwoIdMoi7/w/4ExYH6QwlezN3ab16ZM8WezYBykYxi8 ghf0WaV1hveDZAcX//14xNpZOnfxHwBNUV/BRxWcONxZSCC3TvPedl687R2h77rW 6OuP3H9mmYylIGBwVTZkhMZG/WG3vJC2a7kq7nJETS5GXc3wQOsbtYdhTDrZ9JQJ OJxRPTZqFJ3Ynbi4sPBMxkGvpYKpjA++eHGtXZEQJL03AcDKNiMyCq0vzxjZbxwN 3QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 184879250288034547007881428467090656797 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-05 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bretagne' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Laboratoires de Biologie Vegetale Yves Rocher' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ricaud.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23211113962700619814600455015983024829011527002742571874154630259291470545581643055059375330708129405763675739489581771549202985217813303030447683627418559420570805822105266303600294324493563966751726666936216303039460266311494120845964138146277165741773079285200998225270232060869390945829456725342893815503684420374252061241348763070874929076778767914656249563621955265174742308230247905646749745593504555664716962286153506710366023585068553019318976429118749985186030811316597741126644478277079941731702983333445071071534803294695305324855964738980981331222582538950636772716666195156828301284195526724465278586333 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e1c84dc171a04737ce1b401a29a68057142aba9c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (370 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ricaud.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bo.ricaud.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ricaud.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communaute.ricaud.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danieljouvance.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decryptage.ricaud.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logs.ricaud.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.ricaud.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mo.ricaud.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pma.ricaud.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ricaud.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ricaud.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ricaud.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ricaud.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ricaud.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ricaud.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.ricaud.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.danieljouvance.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ricaud.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ricaud.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ricaud.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ricaud.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ricaud.nl' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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