www.macif.fr

- AÉMA GROUPE -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 2a:e1:94:d7:b3:96:af:ce:4c:ff:7c:97:fb:4f:91:c8 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

AÉMA GROUPE

Organization: AÉMA GROUPE
State / Province: Île-de-France
Country: FR

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 2a:e1:94:d7:b3:96:af:ce:4c:ff:7c:97:fb:4f:91:c8
Serial Number (int): 56998861502393069743109618319152353736
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: d9:78:e7:8e:33:f3:82:ce:3d:24:41:f7:84:87:11:ec:d8:29:01:84
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 40:33:d7:a4:7b:3c:af:ae:5e:80:00:57:18:26:f9:cf:56:23:a0:ef
Fingerprint (sha256): 23:05:f6:21:68:5d:68:b3:9d:07:f1:c3:2b:0f:4d:56:22:1b:54:ac:3a:bf:96:65:02:1b:d3:15:a5:34:b6:59

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate www.macif.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.macif.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.macif.fr
macif.fr

Other certificates including the domain name macif.fr

(limited to 100 certificates)
www.macifevasions.macif.fr
jevote.macif.fr
jeparticipe.macif.fr
fisso-sp.macif.fr
messervices.macif.fr
communaute-auto.macif.fr
atelier.macif.fr
actualites.wiztopic.com
fisso-hub.macif.fr
atelier.macif.fr
signatureelectronique.macif.fr
actualites.wiztopic.com
www.macif.fr
actualites.wiztopic.com
www.ceidf.macif.fr
emmcentre-rec.macif.fr
faq.macif.fr
mailhost.macif.fr
fisso-inter-vip.preprod.macif.fr
www.macifevasions.macif.fr
presse.macif.fr
sosg.macif.fr
mcs.macif.fr
servicesweb.macif.fr
atelier.macif.fr
connect.macif.fr
*.macif.fr
agence.macif.fr
actualites.wiztopic.com
atelier.macif.fr
agence.macif.fr
atelier.macif.fr
mcs.macif.fr
actualites.wiztopic.com
actualites.wiztopic.com
toad.macif.fr
toad.macif.fr
www.macifevasions.macif.fr
www.macif.fr
espacegandreck.macif.fr
www.brandcenter.macif.fr
www.macif.fr
preprod-presse.macif.fr
nvmp1815.macif.fr
www.ceidf.macif.fr
device.macif.fr
evenements.macif.fr
www.rsvm.macif.fr
www.macif.fr
presse.macif.fr
actualites.wiztopic.com
atelier.macif.fr
atelier.macif.fr
cds.macif.fr
communaute-auto.macif.fr
lessentiel.macif.fr
actualites.wiztopic.com
de.newsletter.events.renault.com
nvmp1816.macif.fr
as.macif.fr
as.macif.fr
actualites.wiztopic.com
ee.macif.fr
*.recette.macif.fr
rendezvousbrisdeglace-rec.macif.fr
gw.visio.vt.macif.fr
toad.macif.fr
satisfaction.macif.fr
agence.macif.fr
actualites.wiztopic.com
as.macif.fr
agence.macif.fr
pdtv.macif.fr
pca.macif.fr
lessentiel.macif.fr
www.macifevasions.macif.fr
jevote.macif.fr
www.macif.fr
satisfaction.macif.fr
expert.macif.fr
fisso-hub.macif.fr
cdn.uat.documents.macif.fr
signatureelectronique.macif.fr
signatureelectronique.macif.fr
i-reliure.macif.fr
as.macif.fr
jevote.macif.fr
rendezvousbrisdeglace.macif.fr
expert.macif.fr
messervices.macif.fr
presse.macif.fr
actualites.wiztopic.com
www.ceidf.macif.fr
as.macif.fr
atelier.macif.fr
evenements.macif.fr
expert.macif.fr
gestionsante.macif.fr
messervices.macif.fr
www.macif.fr

Certificate

The complete raw certificate details for www.macif.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3Qep/MMUSU2BgrRU/TJw
WJLLx0Y5tZU4aMhyWlJijnZxzNhvRR74G05RTnt0DL56zIVUsHQa4v26pm+wBH0D
UH9zCYgR9fXhXa5nomUOEdjpU0Gi3lECkdWMPHyfPZNWKZ4Li4ZqTyFg4bBWhgQw
ezFUblc1H/StQPntS2xZXZ7GduZ9YHKKH/3tAUaEJIf0OVobrS5gs0hrXE+Iok3B
k5VSw6V7mP2UiMtBrjJ5MBIXi+VNeEJUL1lCnlViQY9+PYZIyW0pwtZQJL7Hjp9G
mUu61LB+LAuJJNb6AlwGi5iPnp7c5mLGKZ7jg4X4Tt/MTwsKn/1lk6Yds3I2uod7
gn2C68qkUsm5J6T9XE6ZO70Ul2c4W8Ee6ev7VRZSxzWuCrYkp6ExqG4LldP50T/m
nmXT3COyPYt99NbvoJsfjI8h7oRXz3gRarLqiL7cDIFbWa7STVbKLeqsHxU28b1w
R4XjC3swy90EfAm8WfMhiOm1+SKUcwFZxPdwk6LPzGi/hjoC6Ank23POSzI0sdZ/
vMCtiAx4i9bwWvHbljXCn3CI3Uw4BqSpRMYPzFjhlhJ2DTTVR27D+i/jDijnqDok
waIR79N2mELjcZtduoNL2APuwe9tE04kfOoz7ZkzxcH1BCXFhNcx0i1Htbs4WmRz
0O3AiA9MOObZ9lKsBPBdHHcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 56998861502393069743109618319152353736
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'AÉMA GROUPE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.macif.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 901723473585377496380754438029414684970491293359864073201121971706117604040509444788557427179718199334660949989022395148399895599374794056072073159225529945999691533174008855129878385329490277589834448296942592002470925326634654214020471739924832349888659770486909799207038954379504259322308273710654009892488423831634238024864894385259046057222451888602275982478478205970599455275548239143066577362224634371323713676294146116087917353978016034312534424894701311863635321002067582179956752028495649802146481911947744575127341850483817097912813180999967574259925733603563858734507964704677863881937530905172512415415145536955826359138668363872393754368787343754497287605640121461140611864732043724662979053505337611777117285362202547870292212793534455943529234352532804629449925092187446244417106883376754002072998386954582995965742790211055428840430546271138625106292250229578347501020272615630492598539153202304955762605107143447335902027463885412312112360827596949035910824096739987390365108504618500797965730635126723591397631018303488757722229385361275973831861927144394933955724857501091042611532263188710233803399565965570363402860083680162355501160792770929207755208819763431160872177815552620319831291096407383332915605478519
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d978e78e33f382ce3d2441f7848711ecd8290184
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018afaa64a8e0000040300473045022060383806128adb50205cfec3612f7b3937cd7890e1255c7a5c017baf9d8b1b31022100c5caf1626eb7cd1d331549d0ed313f0652b0dfc3c1eb3e145b44390d50fb5366007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018afaa64aea0000040300483046022100f60adb61b11b3d1535e9304e4a8db095e1d1d9b049635555425583a3c8d34fbd022100bf0827ed97bc3ec6d9378a7bcdd5e3b4e8853ba8fe12fd5419b6f8a9a75cfb4e007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018afaa64abb0000040300483046022100e4d23a7bafded115ede90fa38ca020d312bad25596b1ba9f67342b33741ef431022100d306cc435a9f8e727d650172a34e8929f1002b7c6b99e1d18527e3407a24ab09
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macif.fr'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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