ist-geodyn.univ-grenoble-alpes.fr

- Université Grenoble Alpes -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number d7:93:16:f3:91:23:f4:41:02:a0:b2:39:d3:03:78:77 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Université Grenoble Alpes

Organization: Université Grenoble Alpes
State / Province: Auvergne-Rhône-Alpes
Country: FR

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): d7:93:16:f3:91:23:f4:41:02:a0:b2:39:d3:03:78:77
Serial Number (int): 286547752242335095923126942107911288951
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: f4:04:91:a4:5c:0e:d3:ac:9e:77:09:8b:47:db:19:bf:d4:25:5a:0a
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 8f:9c:2f:ff:eb:8f:24:f1:bd:0f:b1:3c:0c:b8:44:ef:00:a3:ab:49
Fingerprint (sha256): 1c:38:fe:51:bd:d9:2d:f1:11:01:5c:d7:4d:53:4c:28:f7:9e:a7:ed:8a:f6:85:f6:69:db:f6:bf:49:a5:27:53

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate ist-geodyn.univ-grenoble-alpes.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ist-geodyn.univ-grenoble-alpes.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ist-geodyn.univ-grenoble-alpes.fr
geodyn.univ-grenoble-alpes.fr

Other certificates including the domain name univ-grenoble-alpes.fr

(limited to 100 certificates)
chamilo.iut2.univ-grenoble-alpes.fr
shib3v3.univ-grenoble-alpes.fr
iut1-srv-web18.univ-grenoble-alpes.fr
enquetes.univ-grenoble-alpes.fr
projects-call.univ-grenoble-alpes.fr
copass.grenet.fr
miage-grenoble.univ-grenoble-alpes.fr
housing.univ-grenoble-alpes.fr
*.univ-grenoble-alpes.fr
gin5-serv.univ-grenoble-alpes.fr
fuga-media-stock.univ-grenoble-alpes.fr
www-fourier.univ-grenoble-alpes.fr
partage-lsi.univ-grenoble-alpes.fr
persyval-lab.univ-grenoble-alpes.fr
sk-cic-it.imag.fr
gricad-registry-test.univ-grenoble-alpes.fr
copass.grenet.fr
ifmail.univ-grenoble-alpes.fr
apple-uga.u-ga.fr
pilote.univ-grenoble-alpes.fr
gricad.univ-grenoble-alpes.fr
ist-web3.ujf-grenoble.fr
ufrim2ag.ujf-grenoble.fr
gin-serv.univ-grenoble-alpes.fr
lig-expire-web.imag.fr
echamilo.grenet.fr
datageosciences.univ-grenoble-alpes.fr
projects-call.univ-grenoble-alpes.fr
fabmstic.univ-grenoble-alpes.fr
*.univ-grenoble-alpes.fr
self6.univ-grenoble-alpes.fr
ulea-wiki.univ-grenoble-alpes.fr
ifmission.ujf-grenoble.fr
ecandidat-gestionnaire.univ-grenoble-alpes.fr
housing.univ-grenoble-alpes.fr
sante-lsurvey.univ-grenoble-alpes.fr
iut1-culture-etudiant.univ-grenoble-alpes.fr
wcp.univ-grenoble-alpes.fr
self7.univ-grenoble-alpes.fr
if-forge.ujf-grenoble.fr
self.univ-grenoble-alpes.fr
resa-ictiss.imag.fr
vpn2-int.iut2.univ-grenoble-alpes.fr
iut1-mmi-moodle.univ-grenoble-alpes.fr
copass.grenet.fr
gricad-doc.univ-grenoble-alpes.fr
chamilo-uga-vs.grenet.fr
copass-client.grenet.fr
projects-call.univ-grenoble-alpes.fr
projects-call.univ-grenoble-alpes.fr
cours.univ-grenoble-alpes.fr
self.univ-grenoble-alpes.fr
*.univ-grenoble-alpes.fr
ifmission.univ-grenoble-alpes.fr
ldap.iut2.upmf-grenoble.fr
*.gricad-pages.univ-grenoble-alpes.fr
portail.univ-grenoble-alpes.fr
www-liphy.ujf-grenoble.fr
self5.univ-grenoble-alpes.fr
self.univ-grenoble-alpes.fr
www-fourier.ujf-grenoble.fr
ecandidat-gestionnaire.univ-grenoble-alpes.fr
ist-geodyn.univ-grenoble-alpes.fr
im2ag-sgce.e.univ-grenoble-alpes.fr
ametys-uga.grenet.fr
shibboleth.univ-grenoble-alpes.fr
intranet-timc.imag.fr
cloud.univ-grenoble-alpes.fr
arpont.imag.fr
observatoire.univ-grenoble-alpes.fr
*.gricad-gitlab.univ-grenoble-alpes.fr
sum-graf.univ-grenoble-alpes.fr
iut1-srv-web14.univ-grenoble-alpes.fr
fourier.univ-grenoble-alpes.fr
lig-wwwphp.imag.fr
dev-1.u-ga.fr
ifforge.univ-grenoble-alpes.fr
auth.univ-grenoble-alpes.fr
ist-sismalp.osug.fr
*.comar-project.univ-grenoble-alpes.fr
eformation.univ-grenoble-alpes.fr
ljk.univ-grenoble-alpes.fr
im2ag-wiki.univ-grenoble-alpes.fr
help.univ-grenoble-alpes.fr
*.univ-grenoble-alpes.fr
veri-web-projects.univ-grenoble-alpes.fr
visio-preprod.univ-grenoble-alpes.fr
*.univ-grenoble-alpes.fr
cours.univ-grenoble-alpes.fr
www-info.iut2.upmf-grenoble.fr
www-fourier.ujf-grenoble.fr
iut1-srv-web19.univ-grenoble-alpes.fr
gin11-web.univ-grenoble-alpes.fr
*.univ-grenoble-alpes.fr
cloud-test.univ-grenoble-alpes.fr
hal.univ-grenoble-alpes.fr
gricad-wiki.univ-grenoble-alpes.fr
chamilo-iut2-vs.grenet.fr
enquetes.univ-grenoble-alpes.fr
superdoc.iut2.univ-grenoble-alpes.fr

Certificate

The complete raw certificate details for ist-geodyn.univ-grenoble-alpes.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EaWbJzM+BciPVZsN7ha
gvrO2Ii9BZVHgpD5ZsDnKBUBAV/PxvXbM0+QagWIbrdgvCORbr9wDgIhaZ5122Df
RuOqy3O2oIuo5V6oHhUS9BdZ25ufTJWUWZXSC44cS8/GJw3hQlJIyAIH4DAaQqS9
NO9Ux+pMsG19LsSe6jcdCXy/SIISMGhMueBGTD/OgEqJs3kRg4Ih7uepYW+Mp7Ag
3uFweZQOQ8d0sIBOUiP0thxsaiHw9wXkSb8codQwr3j5tvRNg1TkPBRpzo1OZlqR
VkT6W4V0ympZrbjB4dJwq5x4PAEP8aYDtfEJgJa7iocUmz3Xd+LQO8lJDZ5JxRfv
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286547752242335095923126942107911288951
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Auvergne-Rhône-Alpes'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Université Grenoble Alpes'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ist-geodyn.univ-grenoble-alpes.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27807235132839871176639699419576826474048764709515692621793805798181971370347889654798225240566387411092439507286461088646445997424959235593834346165708585292536020033693971503792869255588564407468828017421161701540838644680085981319381321728863011214824596187312472637330527208179634909922641887276694615769763288699985356941599893307587544220929632143498926023247451374283415747600391637015200697180931405325748477735776987823479442491251273316645860624123157787667927180676044817929278398468856644543949718264362433959752666852008797778532101367572306261450711291380633101075945615945611224555076217082505957208027
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f40491a45c0ed3ac9e77098b47db19bfd4255a0a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							016700760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018578125cd60000040300473045022003221aa4d0352615bd75fb7b9fc12ae237d0e230e903ea3acfad6f6ff462b66a022100d2c57c399155a338e1b958fd5af4cedfd0240fde7640f68e3eb54019c3b8f868007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018578125c9f0000040300473045022100a5d7cced9a4825943b037b17261faaae9e899d034461c3a5c5ef6f0727b5f0220220769237b2798e39e324aa93a42cea5f9261899f4c9696ed5fb66cd6be5faf77dc007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018578125c72000004030046304402201bc65460a6912dfdfbd079cd00bcbbdbf283ec4bcf894dc89c8c0f316b73f88e022006483cad0b51476a240f7020429d715dd32ff2013c080c1b63e82cdaf48f4fbd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ist-geodyn.univ-grenoble-alpes.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geodyn.univ-grenoble-alpes.fr'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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