instrumentation.insa-lyon.fr

- Institut National des Sciences Appliquées de Lyon -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 74:32:c2:19:82:6a:0f:71:5e:8a:f1:d4:9c:a5:ac:1e was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Institut National des Sciences Appliquées de Lyon

Organization: Institut National des Sciences Appliquées de Lyon
Organization unit: API
State / Province: Auvergne-Rhône-Alpes
Country: FR

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 74:32:c2:19:82:6a:0f:71:5e:8a:f1:d4:9c:a5:ac:1e
Serial Number (int): 154453999162505424259384685696741911582
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 60:36:9c:3e:9f:75:f7:ce:26:09:fa:06:1e:78:28:ce:af:fc:d7:4c
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 89:1b:2c:3b:db:a5:f7:29:45:d6:2d:a9:10:59:82:da:1f:28:42:b1
Fingerprint (sha256): 18:13:25:ff:b1:02:20:7d:69:48:b1:3d:cf:49:f1:37:a4:f6:26:bb:d7:fc:31:91:ea:df:ce:97:7c:aa:30:da

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate instrumentation.insa-lyon.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for instrumentation.insa-lyon.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

instrumentation.insa-lyon.fr
www.instrumentation.insa-lyon.fr

Other certificates including the domain name insa-lyon.fr

(limited to 100 certificates)
insa-dpadsvil1-01.insa-lyon.fr
cocovn.insa-lyon.fr
www.insa-lyon.fr
reportserver.insa-lyon.fr
reve.insa-lyon.fr
mouvinsa.insa-lyon.fr
gofast.insa-lyon.fr
tc-net2.insa-lyon.fr
reve.insa-lyon.fr
orioai.insa-lyon.fr
telecom.insa-lyon.fr
insa-fd.insa-lyon.fr
svn.insa-lyon.fr
tux.creatis.insa-lyon.fr
jpo.insa-lyon.fr
exal.insa-lyon.fr
vk2000-v6.insa-lyon.fr
aip-primeca.insa-lyon.fr
insa-vcvil1-01.insa-lyon.fr
lamcosbao.insa-lyon.fr
ecole-ete.insa-lyon.fr
myriad.creatis.insa-lyon.fr
tux.creatis.insa-lyon.fr
neurosens.creatis.insa-lyon.fr
servif-cocktail.insa-lyon.fr
dsi.insa-lyon.fr
wiki-dsi.insa-lyon.fr
neurosens.creatis.insa-lyon.fr
desk.creatis.insa-lyon.fr
gtwresd.insa-lyon.fr
sgd.insa-lyon.fr
mediacenter.insa-lyon.fr
aip-foad-web.insa-lyon.fr
tux.creatis.insa-lyon.fr
gtwresc.insa-lyon.fr
vk2-gm-72.insa-lyon.fr
deep.insa-lyon.fr
cipcnet.insa-lyon.fr
fondation.insa-lyon.fr
insa-vxrmgrvil1-01.insa-lyon.fr
fimi2i.insa-lyon.fr
intranetgi.insa-lyon.fr
liris-ktbs01.insa-lyon.fr
humanheart-project.creatis.insa-lyon.fr
insa-vxrvil1-06.insa-lyon.fr
*.insa-lyon.fr
dsi-ipam.insa-lyon.fr
*.creatis.insa-lyon.fr
tux.creatis.insa-lyon.fr
webaedi.insa-lyon.fr
helpdesk.insa-lyon.fr
insa-rproxy-01.insa-lyon.fr
fex.insa-lyon.fr
tux.creatis.insa-lyon.fr
webaedi.insa-lyon.fr
*.docelec.insa-lyon.fr
tux.creatis.insa-lyon.fr
reportserver.insa-lyon.fr
humanheart-project.creatis.insa-lyon.fr
catalogue.insa-lyon.fr
biosciences.insa-lyon.fr
tux.creatis.insa-lyon.fr
dsi-esb.insa-lyon.fr
neurosens.creatis.insa-lyon.fr
gfc-services-test.insa-lyon.fr
biosciences.insa-lyon.fr
mandril.creatis.insa-lyon.fr
tux.creatis.insa-lyon.fr
gtwresh.insa-lyon.fr
phishing.insa-lyon.fr
cipcnet.insa-lyon.fr
insa-rproxypp-01.insa-lyon.fr
smtp6.insa-lyon.fr
rpmfind.creatis.insa-lyon.fr
lune.insa-lyon.fr
virtualstudyfair.insa-lyon.fr
humanheart-project.creatis.insa-lyon.fr
aris-connect.insa-lyon.fr
envue.insa-lyon.fr
acdc.creatis.insa-lyon.fr
intranetgi.insa-lyon.fr
desk.creatis.insa-lyon.fr
glpi.insa-lyon.fr
rpmfind.creatis.insa-lyon.fr
instrumentation.insa-lyon.fr
dsi-gitlab.insa-lyon.fr
phishing.insa-lyon.fr
lire-pp.insa-lyon.fr
envue.insa-lyon.fr
acdc.creatis.insa-lyon.fr
lire.insa-lyon.fr
redmine-pp.insa-lyon.fr
fex.insa-lyon.fr
insa-ppsympa.insa-lyon.fr
casi.insa-lyon.fr
acdc.creatis.insa-lyon.fr
openreports.insa-lyon.fr
*.docelec.insa-lyon.fr
camus.creatis.insa-lyon.fr
departements.insa-lyon.fr

Certificate

The complete raw certificate details for instrumentation.insa-lyon.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyKKyvz+JzdUWNotrgm99
wXKYUzbE/hqPlSl0aubLUMFE49a9IiNFePy/wYEp5gOBl7VruNqsHaFbAJpmV8Hw
9+K/Qy4KKajHp9AOUgQH1zSXXEIihpgNm8cSL3zlyW12Ti+pOgpL+7ITjuoIdLb2
dNp+O43TxnELHpG5yS9cTt6hDeKAaXSrM4SVvLbW1KZoNqQIz8Ikx0oJk6UeScwe
OfFMf9qJgZMe6ZXVUCvWhXgzBWNdkXlDR8np2rmSNyzTd1PC5X1fL6W2oPAEcZyK
98wj0GZUYlHHYxhKwzOU092/AmYViQuIsE86KIzTMSPWdKNSicXe5romWQztZLYc
WhRj+Mk6JQeGq6anZT0CPmad6ZS4pNb5bvsLffe1oMdWUPpw8EwHeKnyrqAiYwpP
+Yhh4zWWEqhH3VwNkgD8dag0nMr02pnBHZk8PuwM2fXwEcfww9WXldcREECNwdd9
TjjqXSoKFAFG5/ej+jf4/AuEHwI7mDBcqL23MTF1amULkVtwjb669yjcAkksmIHc
p4hG9AQ4hDy6j6CBNk6xRvH8OXFyLXpwV9cHrv+HxdfJPUVkBDr2lGH8wIEYcRpu
NSaELJw5aYSIx7YdkYL3Usln9WKfDfsQDYKOjuqCMWXDotWqaHSrYxkCLxj6tWAu
/NXW4B3Nvq5cPYE7oMaUKR0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 154453999162505424259384685696741911582
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Auvergne-Rhône-Alpes'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Institut National des Sciences Appliquées de Lyon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'API'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'instrumentation.insa-lyon.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 818521590447062289528669501569557508483899510410881739845138256670927156465350685067978398371632357902136370848486623067284952707801073485947626691400708931010070241532224223541800726588370284406147316990475080390154028029430741448557071605665379191406150775581384872834327943588133607988388733395266984372517678744160415488061695352336823781607194138679619280584314797733636582848833783231643042822203933719341915107449506540834352588157972866872800362313029998126565179972047093510182107424806048440077011520887586069781955755826496350076220753984687407389968833927423845929221421923678639110713760046343558356455791457521202115405991833983461355691074919071566093583825259256691086107004741516314734937907011688066648929146466888949145188504330823316073976044119227221808599002387962518609486837961472411403566907814808521409234353792497342021861229571970541151640196284490498487685203050106234861216183708914157651655579633646093821359993442690905130795856286760495616749688191882300620757132724762791508501846137203591514961265594612099366521662560709057379469520389897061489676516263577425262753784374829863256813641399955073804011633827878168887670873343280182022306692533488729448697031368239099348884153736305189335394953501
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							60369c3e9f75f7ce2609fa061e7828ceaffcd74c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instrumentation.insa-lyon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.instrumentation.insa-lyon.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0051e9f9c220cf0fa98a1c835e08ecd8a6df8c3ab20d479b4681ac344f16ca08a069ebf65ad0b95aef4b083ea6c29d73f16dee32364ef7cdc99ad5b68de34a55327e8714e1962dc244909151ad56cf5ee8b3121ac427b39dc0d125ca8774f10e96701c8efa282144b8cc20ed8c5f770400f1abf3a369454f8da7d42c06ca5fc8bc16f4f038d2f138ea6d36bd15d3ed39045dcabba3a3be7c1a1da8bb90045729f9772fe5649aa9eef9b1da621c1d63f63112542f435115560103ebf677775729958dfca404c3c13b95b63ea12c6d882683cb65834ea223d1bdf7f1cd86e798fe9b0eb23db5b000774f1b671409ba1ceba61d74d6d0af9cff43ebaa27938f874c5e5b3b9a9cb9be8a87161e31632e1382d625715d2c35b03e1ce31bc7df9680d14f36e9259f8d99b93ce142975956ad2322ea487861b1abc7b621490120b96e37134eca5ab562cc7455c93db57e603fd1ed042fa7475d5dded39f799ba6cfc893272ac146f43a866bb872613a61f18d37b5501a869dad9a86e5ea5c8fdbc809a0b73163149f52225e9e10a1b80697645dcd71f16e89909032c9b9ef55138c6e690bd0cd07d533361a1d1095dedd67986bff893af014c93ec4dbb22c0c88a227d663b20a222ec0b003bb2f766bc6b50b25c2cc7ade0e9f25f88ad83898cb2ecef9ca78cb7994e01729da8cf8adf90d55f7cdd5e72094d2c05ce1c76e6f13e1608620