insa-rproxypp-01.insa-lyon.fr

- Institut National des Sciences Appliquées de Lyon -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number d6:d4:bc:37:2f:ed:3c:39:7b:d0:de:d0:04:1c:2f:cb was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Institut National des Sciences Appliquées de Lyon

Organization: Institut National des Sciences Appliquées de Lyon
Organization unit: API
State / Province: Auvergne-Rhône-Alpes
Country: FR

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): d6:d4:bc:37:2f:ed:3c:39:7b:d0:de:d0:04:1c:2f:cb
Serial Number (int): 285559375497368400340468591421399248843
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 58:4e:60:79:31:d5:09:14:ce:9e:d0:b3:75:69:05:a9:89:cd:8f:bf
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 99:56:02:03:51:83:ff:b6:5a:91:13:55:98:e4:7e:67:e3:a6:5e:6f
Fingerprint (sha256): 15:bf:cd:51:da:62:de:d6:1f:83:c4:91:16:03:3b:12:bf:6a:f0:2c:0d:df:69:af:1e:34:c0:b4:b0:5b:38:f0

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate insa-rproxypp-01.insa-lyon.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for insa-rproxypp-01.insa-lyon.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

insa-rproxypp-01.insa-lyon.fr
osepp-ext.insa-lyon.fr

Other certificates including the domain name insa-lyon.fr

(limited to 100 certificates)
insa-dpadsvil1-01.insa-lyon.fr
cocovn.insa-lyon.fr
www.insa-lyon.fr
reportserver.insa-lyon.fr
reve.insa-lyon.fr
mouvinsa.insa-lyon.fr
gofast.insa-lyon.fr
tc-net2.insa-lyon.fr
reve.insa-lyon.fr
orioai.insa-lyon.fr
telecom.insa-lyon.fr
insa-fd.insa-lyon.fr
svn.insa-lyon.fr
tux.creatis.insa-lyon.fr
jpo.insa-lyon.fr
exal.insa-lyon.fr
vk2000-v6.insa-lyon.fr
aip-primeca.insa-lyon.fr
insa-vcvil1-01.insa-lyon.fr
lamcosbao.insa-lyon.fr
ecole-ete.insa-lyon.fr
myriad.creatis.insa-lyon.fr
tux.creatis.insa-lyon.fr
neurosens.creatis.insa-lyon.fr
servif-cocktail.insa-lyon.fr
dsi.insa-lyon.fr
wiki-dsi.insa-lyon.fr
neurosens.creatis.insa-lyon.fr
desk.creatis.insa-lyon.fr
gtwresd.insa-lyon.fr
sgd.insa-lyon.fr
mediacenter.insa-lyon.fr
aip-foad-web.insa-lyon.fr
tux.creatis.insa-lyon.fr
gtwresc.insa-lyon.fr
vk2-gm-72.insa-lyon.fr
deep.insa-lyon.fr
cipcnet.insa-lyon.fr
fondation.insa-lyon.fr
insa-vxrmgrvil1-01.insa-lyon.fr
fimi2i.insa-lyon.fr
intranetgi.insa-lyon.fr
liris-ktbs01.insa-lyon.fr
humanheart-project.creatis.insa-lyon.fr
insa-vxrvil1-06.insa-lyon.fr
*.insa-lyon.fr
dsi-ipam.insa-lyon.fr
*.creatis.insa-lyon.fr
tux.creatis.insa-lyon.fr
webaedi.insa-lyon.fr
helpdesk.insa-lyon.fr
insa-rproxy-01.insa-lyon.fr
fex.insa-lyon.fr
tux.creatis.insa-lyon.fr
webaedi.insa-lyon.fr
*.docelec.insa-lyon.fr
tux.creatis.insa-lyon.fr
reportserver.insa-lyon.fr
humanheart-project.creatis.insa-lyon.fr
catalogue.insa-lyon.fr
biosciences.insa-lyon.fr
tux.creatis.insa-lyon.fr
dsi-esb.insa-lyon.fr
neurosens.creatis.insa-lyon.fr
gfc-services-test.insa-lyon.fr
biosciences.insa-lyon.fr
mandril.creatis.insa-lyon.fr
tux.creatis.insa-lyon.fr
gtwresh.insa-lyon.fr
phishing.insa-lyon.fr
cipcnet.insa-lyon.fr
insa-rproxypp-01.insa-lyon.fr
smtp6.insa-lyon.fr
rpmfind.creatis.insa-lyon.fr
lune.insa-lyon.fr
virtualstudyfair.insa-lyon.fr
humanheart-project.creatis.insa-lyon.fr
aris-connect.insa-lyon.fr
envue.insa-lyon.fr
acdc.creatis.insa-lyon.fr
intranetgi.insa-lyon.fr
desk.creatis.insa-lyon.fr
glpi.insa-lyon.fr
rpmfind.creatis.insa-lyon.fr
instrumentation.insa-lyon.fr
dsi-gitlab.insa-lyon.fr
phishing.insa-lyon.fr
lire-pp.insa-lyon.fr
envue.insa-lyon.fr
acdc.creatis.insa-lyon.fr
lire.insa-lyon.fr
redmine-pp.insa-lyon.fr
fex.insa-lyon.fr
insa-ppsympa.insa-lyon.fr
casi.insa-lyon.fr
acdc.creatis.insa-lyon.fr
openreports.insa-lyon.fr
*.docelec.insa-lyon.fr
camus.creatis.insa-lyon.fr
departements.insa-lyon.fr

Certificate

The complete raw certificate details for insa-rproxypp-01.insa-lyon.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIuzCCBqOgAwIBAgIRANbUvDcv7Tw5e9De0AQcL8swDQYJKoZIhvcNAQEMBQAw
RDELMAkGA1UEBhMCTkwxGTAXBgNVBAoTEEdFQU5UIFZlcmVuaWdpbmcxGjAYBgNV
BAMTEUdFQU5UIE9WIFJTQSBDQSA0MB4XDTIyMDUwMzAwMDAwMFoXDTIzMDUwMzIz
NTk1OVowgaAxCzAJBgNVBAYTAkZSMR4wHAYDVQQIDBVBdXZlcmduZS1SaMO0bmUt
QWxwZXMxOzA5BgNVBAoMMkluc3RpdHV0IE5hdGlvbmFsIGRlcyBTY2llbmNlcyBB
cHBsaXF1w6llcyBkZSBMeW9uMQwwCgYDVQQLEwNBUEkxJjAkBgNVBAMTHWluc2Et
cnByb3h5cHAtMDEuaW5zYS1seW9uLmZyMIICIjANBgkqhkiG9w0BAQEFAAOCAg8A
MIICCgKCAgEA6vmuqGlmZ8tShmdjadsn3cMKWSVINrXlhyGsrQycMj9m1kmsOiSA
KF5RR4Q4tECOhP5fKCEQdTxmVan453zeAD/4RhJk2A8U7ZFAaGJi2JvEAeD3toLl
MYJAHslnufYhIqstj0ht+Ja+gVIrp/gppYGHs3qI5SH+YA4GPY7dZF0JYcijtlb4
tTixz88HN5saDaTKRIBvvGJfRPYmi2c64K5GH3kbFweqguMVfktImKFWJmCK126c
SIxl9v5VRic5Uz4BwwUKsnuENmkE1I+i/3mZwMlqnF8XVL6tCk8zlgxsRUNrHiww
U5+ZmMcTBVW0xi18av0nF6drvPIo4kZTGztevRmSpLmi0RwJdGfL4ZtR3Ad+ptMT
nS9BTdWHoExA2w3He7rxL0HfhNgUbCJ916d7vCqhdJOAiDWRw7UWnirKTCiDkSUV
vjs1yp189rapNICzYIb0x7O67JmIcxqEw9dDUBfhjt2PPfczDeClZZQTbquBIwxM
6OL8yBx52SC+jUz26SXGV5tsO0iPnge50M6ZDf63rqykDyryMXA1toIPF/ib/Ana
47kBgacA6auAuyUaJWZsRwYNHVkh20uqDYJPmXSTlcz9SwLuMrvhGVK5qMt3Zlnv
HB7QnLI6xRLLPfY80IuHUc5Z+JsOzzs+m3FXRsi82ohFJAofaHtH6aECAwEAAaOC
A0kwggNFMB8GA1UdIwQYMBaAFG8dNUkQbDL6WaCevIroH5W+cXoMMB0GA1UdDgQW
BBRYTmB5MdUJFM6e0LN1aQWpic2PvzAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/
BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSQYDVR0gBEIwQDA0
BgsrBgEEAbIxAQICTzAlMCMGCCsGAQUFBwIBFhdodHRwczovL3NlY3RpZ28uY29t
L0NQUzAIBgZngQwBAgIwPwYDVR0fBDgwNjA0oDKgMIYuaHR0cDovL0dFQU5ULmNy
bC5zZWN0aWdvLmNvbS9HRUFOVE9WUlNBQ0E0LmNybDB1BggrBgEFBQcBAQRpMGcw
OgYIKwYBBQUHMAKGLmh0dHA6Ly9HRUFOVC5jcnQuc2VjdGlnby5jb20vR0VBTlRP
VlJTQUNBNC5jcnQwKQYIKwYBBQUHMAGGHWh0dHA6Ly9HRUFOVC5vY3NwLnNlY3Rp
Z28uY29tMIIBfwYKKwYBBAHWeQIEAgSCAW8EggFrAWkAdwCt9776fP8QyIudPZwe
PhhqtGcpXc+xDCTKhYY069yCigAAAYCKK+AFAAAEAwBIMEYCIQDaZPl2EZCC58QR
nkCKw9VhqwDR0Mhd894GRl0ney1h1gIhALfP57ElYug4dCIXLySUytj8ngq+dX5m
k+0tzFKG9cCKAHYAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGA
iivgHwAABAMARzBFAiEA55LefwO8hCV8PjpC72npbyg46r3Rif44P5tvZiA0MM0C
IAw1f1ECyETkpEagkNuNvZYDgpueINW3Q5WQbbJdZb+YAHYA6D7Q2j71BjUy51co
vIlryQPTy9ERa+zraeF3fW0GvW4AAAGAiivf5QAABAMARzBFAiEAsECE/jP+WRTY
EOix29fsYo+agxurfQjdzil3pACufn0CIH76oZlhbGwDtq3vbw+U3dQptkBLDrjT
5HNuvdMP3AVzMEAGA1UdEQQ5MDeCHWluc2EtcnByb3h5cHAtMDEuaW5zYS1seW9u
LmZyghZvc2VwcC1leHQuaW5zYS1seW9uLmZyMA0GCSqGSIb3DQEBDAUAA4ICAQCF
yemffoMbFLJR9Kf0731ey2cz6pkB8TiDqm/P3Vgfw2tIOSmxKp/XYdeHFTb+urC7
PPgdqFcRumaXkzhJeVO4hb0+xX8EkDyUmxuGSQHMgxXipTYhk93iq2Eicq6Hz/in
SEq8tVS8YnKyKqJuvT09ZJHAi3mN8P56LpF/GDRr0f4l5CWeghiIB2hT00C1zlFO
Q455tl2D688ZeFn8QJwNhp12btlBOoxLs9/fbeyXoJwimtATuK1BKDVxfJ9Xt6/K
lJrl7X/xg2duYyA8a/N8GXrnYXK49DJQEGwvdkKW+dJ0GPt1p2bQlnObCI5cRYnD
l/e9uvXbq5EJD08D/N6j/O/a5DCkd64pJo8/geK1vBZqGB6zyOhXILkB6WqtoLQX
vJdtheyY1etpWZvbgB6xnmGM+r9k5FRlQbeGrgjVhffpvja06YPenwqX7NS8O+yE
9N9kTbBm4UNME3WwTxmTYKL/mIb2uLvhkIyAF0mynEbbDccSaD5IvupGEq0QPtpN
TcJnKwfvSybX5OVWT0Iaf6jROZV6fy12K8EGlTkQ9eq6Y0Utkzv8qCemwzGFr9yG
mdLncwJXO8WuZTS0f2lIku1uz3K/syuZmvTZ+N4O2sC0UyBdWT97lldCh6wJ6ncY
ryJ8JkpSnVH5cqADDazM2pGdB8UwbioyFe9t2xweHg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285559375497368400340468591421399248843
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Auvergne-Rhône-Alpes'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Institut National des Sciences Appliquées de Lyon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'API'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'insa-rproxypp-01.insa-lyon.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 958615675743725804760668001749238836388199766901452823095473389634515001122820587816627584080456958603153046538814360258583742469020111174692704372625758601927142889301552959596196798591634662406009861918833490168854516441878930848197825015402186904666392735073327699079740198363543280771113132068980891767003772709175563745914994885257076666968628071781594177865830796952718426605316238659440802479995820401015297293028750477271313186201793233368646891092454007791433683566542512892080106776517121245634078967467523758725745511133639612711628609713433000862979951748259623757239734687883336478606045374858975680724073053142436171462270914291919221276801607574006267253679484597372849134959149817678746204649444440616666702205076759003135286430758385449435661273286517056193319947593516190739776266841473201723197721761913276219605521396165189669779923611717724012549408442462345582975668706708452519984301404427796743315629732360792054828511770509473464406714696957293351101602577111005953393974551627689316437042301343378312398225882226109220390681913614729857507531320163581123129217656004827233962758958756521900789495819338240814030525500088939424804200649291296379780547753625421193304070992460789720758637686746036010494716321
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							584e607931d50914ce9ed0b3756905a989cd8fbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insa-rproxypp-01.insa-lyon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osepp-ext.insa-lyon.fr'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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