dsi-gitlab.insa-lyon.fr

- Institut National des Sciences Appliquées de Lyon -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 79:cc:e1:17:05:b9:92:2b:85:cf:e9:5c:98:13:ee:73 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Institut National des Sciences Appliquées de Lyon

Organization: Institut National des Sciences Appliquées de Lyon
Organization unit: API
State / Province: Auvergne-Rhône-Alpes
Country: FR

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 79:cc:e1:17:05:b9:92:2b:85:cf:e9:5c:98:13:ee:73
Serial Number (int): 161900381415296251505600136117910498931
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 1c:cb:57:93:a2:e6:59:d8:b2:b5:27:76:c9:ee:5a:10:de:7e:5d:d8
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): dc:31:29:68:88:75:36:00:9f:83:60:ff:ac:b1:a9:ba:b6:56:1c:73
Fingerprint (sha256): 18:1e:ca:b2:98:7c:bb:7b:40:ab:71:dd:bf:97:b4:d6:53:9c:be:fa:37:e6:6f:7d:51:5f:ba:5b:a5:76:a1:03

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate dsi-gitlab.insa-lyon.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dsi-gitlab.insa-lyon.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dsi-gitlab.insa-lyon.fr
www.dsi-gitlab.insa-lyon.fr

Other certificates including the domain name insa-lyon.fr

(limited to 100 certificates)
insa-dpadsvil1-01.insa-lyon.fr
cocovn.insa-lyon.fr
www.insa-lyon.fr
reportserver.insa-lyon.fr
reve.insa-lyon.fr
mouvinsa.insa-lyon.fr
gofast.insa-lyon.fr
tc-net2.insa-lyon.fr
reve.insa-lyon.fr
orioai.insa-lyon.fr
telecom.insa-lyon.fr
insa-fd.insa-lyon.fr
svn.insa-lyon.fr
tux.creatis.insa-lyon.fr
jpo.insa-lyon.fr
exal.insa-lyon.fr
vk2000-v6.insa-lyon.fr
aip-primeca.insa-lyon.fr
insa-vcvil1-01.insa-lyon.fr
lamcosbao.insa-lyon.fr
ecole-ete.insa-lyon.fr
myriad.creatis.insa-lyon.fr
tux.creatis.insa-lyon.fr
neurosens.creatis.insa-lyon.fr
servif-cocktail.insa-lyon.fr
dsi.insa-lyon.fr
wiki-dsi.insa-lyon.fr
neurosens.creatis.insa-lyon.fr
desk.creatis.insa-lyon.fr
gtwresd.insa-lyon.fr
sgd.insa-lyon.fr
mediacenter.insa-lyon.fr
aip-foad-web.insa-lyon.fr
tux.creatis.insa-lyon.fr
gtwresc.insa-lyon.fr
vk2-gm-72.insa-lyon.fr
deep.insa-lyon.fr
cipcnet.insa-lyon.fr
fondation.insa-lyon.fr
insa-vxrmgrvil1-01.insa-lyon.fr
fimi2i.insa-lyon.fr
intranetgi.insa-lyon.fr
liris-ktbs01.insa-lyon.fr
humanheart-project.creatis.insa-lyon.fr
insa-vxrvil1-06.insa-lyon.fr
*.insa-lyon.fr
dsi-ipam.insa-lyon.fr
*.creatis.insa-lyon.fr
tux.creatis.insa-lyon.fr
webaedi.insa-lyon.fr
helpdesk.insa-lyon.fr
insa-rproxy-01.insa-lyon.fr
fex.insa-lyon.fr
tux.creatis.insa-lyon.fr
webaedi.insa-lyon.fr
*.docelec.insa-lyon.fr
tux.creatis.insa-lyon.fr
reportserver.insa-lyon.fr
humanheart-project.creatis.insa-lyon.fr
catalogue.insa-lyon.fr
biosciences.insa-lyon.fr
tux.creatis.insa-lyon.fr
dsi-esb.insa-lyon.fr
neurosens.creatis.insa-lyon.fr
gfc-services-test.insa-lyon.fr
biosciences.insa-lyon.fr
mandril.creatis.insa-lyon.fr
tux.creatis.insa-lyon.fr
gtwresh.insa-lyon.fr
phishing.insa-lyon.fr
cipcnet.insa-lyon.fr
insa-rproxypp-01.insa-lyon.fr
smtp6.insa-lyon.fr
rpmfind.creatis.insa-lyon.fr
lune.insa-lyon.fr
virtualstudyfair.insa-lyon.fr
humanheart-project.creatis.insa-lyon.fr
aris-connect.insa-lyon.fr
envue.insa-lyon.fr
acdc.creatis.insa-lyon.fr
intranetgi.insa-lyon.fr
desk.creatis.insa-lyon.fr
glpi.insa-lyon.fr
rpmfind.creatis.insa-lyon.fr
instrumentation.insa-lyon.fr
dsi-gitlab.insa-lyon.fr
phishing.insa-lyon.fr
lire-pp.insa-lyon.fr
envue.insa-lyon.fr
acdc.creatis.insa-lyon.fr
lire.insa-lyon.fr
redmine-pp.insa-lyon.fr
fex.insa-lyon.fr
insa-ppsympa.insa-lyon.fr
casi.insa-lyon.fr
acdc.creatis.insa-lyon.fr
openreports.insa-lyon.fr
*.docelec.insa-lyon.fr
camus.creatis.insa-lyon.fr
departements.insa-lyon.fr

Certificate

The complete raw certificate details for dsi-gitlab.insa-lyon.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAp84bakmI0bqIMyHe1ec9
IyLAbXCkOql9UXqNSAkc1rES3lUxPLcMWJzc1/WaTO3CPZj/h8IhS4rxJGikYUqz
a0PvfGC6WqyAMFKVsOD0AOjrVAYmeisOryM0js7sGLh/O9VA5mKxuM5qbiwzqP1Q
jbpB3nWykTGRMLoPvP3LNBQE/56gkbGGnjFr2wkxZs816hGhDykyV7uvHwnmOj9c
m+26VAM2y29fGaI71+dcUTcZZXl1yLBX3kbSk2Xc12sNQoLMgMVqNsBRr/6UQ+C1
UyBYIckBAffPbovpB1RTyM/+AdJcMLxRgvzL2KNNWcY2PvyjnjOh78K17SNiapwJ
hA7LmOtpyNzdf0TxdHAvtturM3j1uo4Ix1WLncgLXICqrGuaNfCklS/1KLesDYQj
u4ND2TDz1Qqa5zLGJtpHMly7ihL/QQePc8owRaHxro5dhA/BtW5j3dUdFnZemXVr
lj0wkgZSdSj7kxCITaAtwuf21VoLeRtg95jQOzUqJ9MgF7JuI2TfKQnbJz8xV/iN
UU1jhFVxpL2PnlQQZE2fzbceqXX0naQzMWoemS0l8gAv+Vf+a6xv+PbcK7ot+Oul
5DU5AmQYeyQicsccRBULgr27Yf9M35JxJXHNAEeowRJjihLa61f53dMKKXaaWew8
PfevBxYDAsSJign8cPu+yfcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 161900381415296251505600136117910498931
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Auvergne-Rhône-Alpes'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Institut National des Sciences Appliquées de Lyon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'API'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dsi-gitlab.insa-lyon.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 684585104552325666189144321897976938858023750785470628350705316015904587386991536058340070427650850409794984973461327879975455340053740809758174939147323936541398615361805027456173715978864255127880580176818348643625773410130406961557248919794852404454205160115280323294455929979316549384048006256419654194553833806908119370553132603892702633054895864933878727373912926577076733146263307671742432532641288950556479476094994550108698676180265054531978930214166446028263104995568737715890156518785944327520617303340465084163247742852643922360180019170519715650701144458838855384508141866784885020458698759818518337692804240512964000334753533402934882798367842733550542045856995819948109144404367028447880706879664354898349840464314043513564200134951293774454312572685948629170137237897563610139598031439356954075365369931046647364774938585597939529141593411112301512557514385732319488469252320354946506725379899114608304881441832367022812857884287243930701769625052956199224659841497877668323949464700194484056481312014984936063171037299036871058271600742584308352166290648204865781851910814657628109907622355096075335896674883831155880554777648157049466099955730858207043057634422371737231371802869514709065179011804720418645688109559
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1ccb5793a2e659d8b2b52776c9ee5a10de7e5dd8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsi-gitlab.insa-lyon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dsi-gitlab.insa-lyon.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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