tms.opacweb.fr

Issued by R3

About this certificate

This digital certificate with serial number 03:dc:ea:ec:c0:a4:d1:0f:34:c0:29:26:49:ab:88:1a:97:80 was issued on by Let's Encrypt.

With 71 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tms.opacweb.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:dc:ea:ec:c0:a4:d1:0f:34:c0:29:26:49:ab:88:1a:97:80
Serial Number (int): 336511247158240249738901761403620370847616
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2a:8c:e8:58:92:c6:c5:dc:10:41:3d:e5:2d:f3:64:a5:a9:1b:00:98
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c1:a9:65:3f:98:0d:3a:be:25:2d:ad:7b:2b:ee:3c:5a:97:85:50:0e
Fingerprint (sha256): 19:5d:99:8b:87:5f:9b:ad:2f:0d:e6:07:d9:a1:62:de:a9:4b:e8:a8:36:f7:52:a5:17:39:2b:9d:db:c3:17:31

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate tms.opacweb.fr

71

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tms.opacweb.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2000ans2000images.toulouse.fr
augustins.opacweb.fr
augustins.org
ba-bordeaux.opacweb.fr
babibliobordeaux.opacweb.fr
biblio-nyon.opacweb.fr
capc.opacweb.fr
centrebrassens.ville-sete.fr
charles-negre.opacweb.fr
collections-mba.nancy.fr
collections-musees.nyon.ch
collections-sarreguemines.opacweb.fr
collections-vaucluse.opacweb.fr
collections.mba-pau.opacweb.fr
collections.musees-dunkerque.eu
collections.musees.marseille.fr
collections.museum-histoirenaturelle.opacweb.fr
demo.opacweb.fr
dev.opacweb.fr
dev2.opacweb.fr
documentation-sarreguemines.opacweb.fr
documentation-vaucluse.opacweb.fr
documentation.laciteduvin.com
domaine-de-sceaux.opacweb.fr
dupuy.opacweb.fr
espacebrassens.ville-sete.fr
espacemuseal-mcn-collection.opacweb.fr
exposition-collection.opacweb.fr
filmoteca-oai.opacweb.fr
filmoteca-oainews.opacweb.fr
filmoteca.opacweb.fr
formation.opacweb.fr
labit.opacweb.fr
maison-de-chateaubriand.opacweb.fr
maqbordeaux.opacweb.fr
matou.opacweb.fr
mba-pau.opacweb.fr
mbalyon.opacweb.fr
mhc.opacweb.fr
mhn-opacweb.lille.fr
mhn2.opacweb.fr
mhntlse-ethno.opacweb.fr
mhntlse.opacweb.fr
mhntoulouse.opacweb.fr
mian-anatole-jakovsky.opacweb.fr
mobydocv7.opacweb.fr
musee-artsanciens-collection.opacweb.fr
musee-breton-oai.awstudio.website
musee-cheret.opacweb.fr
musee-cimiez.opacweb.fr
musee-leondierx.re
musee-massena.opacweb.fr
musee-matisse.opacweb.fr
musee-villele.re
musee.coulommiers.fr
museenouvellecaledonie-collections.gouv.nc
museenouvellecaledonie-ipkd.gouv.nc
musees.ville-poissy.fr
museeseburomagus.aude.fr
museespetiet.aude.fr
palais-lascaris.opacweb.fr
paul-dupuy.opacweb.fr
pba.opacweb.fr
provincedenamur-collection.opacweb.fr
saintraymond.opacweb.fr
sarreguemines-museum.opacweb.fr
sp6.opacweb.fr
terra-amata.opacweb.fr
tms.opacweb.fr
www.collections.musee-art-industrie.saint-etienne.fr
www.musee-carouge.ch

Other certificates including the domain name opacweb.fr

(limited to 100 certificates)
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
bo.opacweb.io
tms.opacweb.fr
tms.opacweb.fr
bo.opacweb.io
tms.opacweb.fr
bo.opacweb.io
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
collections.museum-histoirenaturelle.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
collections.museum-histoirenaturelle.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr

Certificate

The complete raw certificate details for tms.opacweb.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA6Iz9BXpsuMLyV4BJ55Ef
G0tXdmG7BAnE22irF/6On7K5iff8FO720i8UpJsyndFiHFo+r1T1FWGcZ5F+Ee0S
64ZAEXvWs3bU1LOe2aNJoIX+2KxaLHCs554mEyF8/M3/RMA5WXWZjJLAH+K8WKMM
TdZOumyYHgFrhWN0V+1XyHiY+2hdqAHTxOyY+vaPJMlo9xaCp7ns+zav8qnBKo1V
ys7+XZA7CODpOn26OOyxJxqpeMyNeTBnGp2ufnKYrv2izmy1WgaaUv5pkyVzOT+9
w8mDsh4PhgS++gYKSx73wlvhWPTFKYaQpf/GuzLif4ZNc/1+EwtvY8Px5cpIxYaH
6eeZsrRnDVblyMTcxrjpPEoqsn4mKxB6C+TD5MWz2sUy/e0Kys1Fr4nVyyGAVH60
Y6z2Z78HFu+CkUXceO+hTzMRUeJP1XjJvFJGMNkQHZL6qDOdsROO4yb3Bj06aWBM
3fKvlQ3+l7I6/qpcH6z46oZvMvqaVAIg1zCrFFr1kU+PHqDQtV6IOmtEX4qP6ask
JhWEUJXzGlQPpZGY3hD+9trubjxcljnSyn0Gv+f0/QG6PxvM+9+LbputSTaltw40
WoSCSXw5oWsFF/zwYVXT4o9IuumXWYMm1nO9KShzz/nCYu4vS1zSlz/GdNIMjnea
DsKgJNNT1HhjUQy4J+O0EcsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336511247158240249738901761403620370847616
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-13 16:45:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-12 16:45:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tms.opacweb.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 948724229820839568676798895619157369606300592312026525759976544831572298150587018790861386988030109590832627844024591256194785551924986254497037050096820401794829061335371648432949206340579737223945217576172450592710050898342128455269335628460742103127961247912166398433596212340018416337134750824250836481871277677334414094062904567015946631617858672845353812011767553597903569729727431515160150103168758257812887732848704936998046763748657748931170693106507086821529112793819122292951793757039066964642953668110816037969197936027677714699432908816545869974817101752144998663226889854023769547745474724126534280069574481622356480223743942407069577988885798891731136574699574512133538589889602398613261147922618370544946469197785253923754381125817824822715584879759713913831379910927542647100821308881498558411423960194359577851231010319318345430655161591686106646668921590072069527447417236479856486338392925702733488241345717041247143892208934192392913566403424078552844861868533431214291948015566022551079366278781646704426578429616143203106878703855128994213095400112691183582319027102427386138114644221662563898298049680309964818977684182681864078683888320140635783188793441289781599121841952669140452584113647531287208248218059
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2a8ce85892c6c5dc10413de52df364a5a91b0098
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1906 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2000ans2000images.toulouse.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'augustins.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'augustins.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ba-bordeaux.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'babibliobordeaux.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biblio-nyon.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capc.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centrebrassens.ville-sete.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charles-negre.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collections-mba.nancy.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collections-musees.nyon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collections-sarreguemines.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collections-vaucluse.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collections.mba-pau.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collections.musees-dunkerque.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collections.musees.marseille.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collections.museum-histoirenaturelle.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentation-sarreguemines.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentation-vaucluse.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentation.laciteduvin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domaine-de-sceaux.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dupuy.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espacebrassens.ville-sete.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espacemuseal-mcn-collection.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exposition-collection.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmoteca-oai.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmoteca-oainews.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmoteca.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formation.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labit.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maison-de-chateaubriand.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maqbordeaux.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matou.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mba-pau.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbalyon.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhc.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhn-opacweb.lille.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhn2.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhntlse-ethno.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhntlse.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhntoulouse.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mian-anatole-jakovsky.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobydocv7.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musee-artsanciens-collection.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musee-breton-oai.awstudio.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musee-cheret.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musee-cimiez.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musee-leondierx.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musee-massena.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musee-matisse.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musee-villele.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musee.coulommiers.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'museenouvellecaledonie-collections.gouv.nc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'museenouvellecaledonie-ipkd.gouv.nc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musees.ville-poissy.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'museeseburomagus.aude.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'museespetiet.aude.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palais-lascaris.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paul-dupuy.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pba.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'provincedenamur-collection.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintraymond.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sarreguemines-museum.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp6.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terra-amata.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collections.musee-art-industrie.saint-etienne.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.musee-carouge.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001877bb89918000004030047304502206667c18eea6d7bc3a6e782a1af2cbfa412f9e6776f7634bd1e5af4bccc2a2093022100df2fd05d38a41731267976e23a37a9c7386be324202e33c2dbdd038ba122a111007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001877bb89956000004030046304402203da2a2f1be39a5f758033dbbbae637511bf98926ee5630553fc99f9ec5dfdaa302202e431454de892e955c20e27301549cbb36f5cfa9c692bd4d5b5302ca64b0cea5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007d21d6ecd011be38d4935bf77ced622affc1fcd045c6f11be7a0ac66fe2f69b77e4e386456fac9a34c562c2b1be7bb95524ccae3b5ac6fbf2fa4f22a98d3ef0756ecc6fc56f2e2225348d74081d5cb9b966e101a5ab4c33869a80aae6efa50caa3dd2e21a20c8008a39504049279f51f65afb59bef661f565314f73a6a0d6da9d75dcba9304118ab9b22f70f5810bd0043c3e6ef76a88fa3c917002a1cc051e1651d7e910961175e3d5dd6de5e129afc61922a90fc7e0b4974e0eb4448d7936c5db79243cbdb31c2d52a9147ff68c6437b0ff1953a785d6c8c5f8c81f2a92eb415d6384023d8dfc92a94700376c3c1728697547ada2d7ca4dcec63a21b97f8c4