cervoprint2.univ-lyon3.fr

- Université Lyon 3 Jean Moulin -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 20:69:2f:12:b7:d3:c4:5c:70:82:fa:57:f7:e9:28:75 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Université Lyon 3 Jean Moulin

Organization: Université Lyon 3 Jean Moulin
State / Province: Auvergne-Rhône-Alpes
Country: FR

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): 20:69:2f:12:b7:d3:c4:5c:70:82:fa:57:f7:e9:28:75
Serial Number (int): 43081441791513529153468779347327920245
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 01:f0:29:d1:09:5e:ed:01:12:63:25:b4:7a:26:af:9e:82:6a:42:7f
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 9c:69:ef:19:59:3d:d9:9f:34:bf:37:cb:6b:0a:b9:e1:05:c1:e7:bf
Fingerprint (sha256): 23:b5:ec:7b:e6:ce:2f:27:48:f0:37:27:1d:ec:4a:f3:49:93:ac:44:cb:6d:98:dc:3e:3d:58:a2:a8:8d:0c:d2

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate cervoprint2.univ-lyon3.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cervoprint2.univ-lyon3.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cervoprint2.univ-lyon3.fr
www.cervoprint2.univ-lyon3.fr

Other certificates including the domain name univ-lyon3.fr

(limited to 100 certificates)
sfbconf.univ-lyon3.fr
portail-vacataires-ens-consult.univ-lyon3.fr
vsp-quai-chev.univ-lyon3.fr
nextcloud-preprod.univ-lyon3.fr
parefeu-master-ipmi.univ-lyon3.fr
sondage.univ-lyon3.fr
evenements.univ-lyon3.fr
webtv.univ-lyon3.fr
web2.univ-lyon3.fr
webmail.univ-lyon3.fr
mail.univ-lyon3.fr
haproxy-pp.univ-lyon3.fr
webinscription.univ-lyon3.fr
ged.univ-lyon3.fr
psc.univ-lyon3.fr
superview.univ-lyon3.fr
pop.univ-lyon3.fr
vsp-manu-b4-haut.univ-lyon3.fr
webscolarite.univ-lyon3.fr
vsp-manu-b4-haut.univ-lyon3.fr
impression.univ-lyon3.fr
mahara.univ-lyon3.fr
webmail.univ-lyon3.fr
vdi.univ-lyon3.fr
fdv-srv.univ-lyon3.fr
llm.univ-lyon3.fr
netmanager.univ-lyon3.fr
esrs.univ-lyon3.fr
iaedt.univ-lyon3.fr
applications.univ-lyon3.fr
vsp-quai-chev.univ-lyon3.fr
adfs.ad.univ-lyon3.fr
ecandidat.univ-lyon3.fr
adfs.ad.univ-lyon3.fr
web2.univ-lyon3.fr
revues.univ-lyon3.fr
kanboard.univ-lyon3.fr
hra-for.univ-lyon3.fr
mahara.univ-lyon3.fr
applications.univ-lyon3.fr
boutique.univ-lyon3.fr
catalogue.univ-lyon3.fr
vsp-manu-b6-bas.univ-lyon3.fr
www.univ-lyon3.fr
idptest.univ-lyon3.fr
css03.univ-lyon3.fr
eduspot2.univ-lyon3.fr
autodiscover.univ-lyon3.fr
impression-pers.univ-lyon3.fr
choisirsonsport.univ-lyon3.fr
idp.univ-lyon3.fr
vsp-manu-b6-haut.univ-lyon3.fr
ligeo-gestion.univ-lyon3.fr
webelection.univ-lyon3.fr
esrs.univ-lyon3.fr
candidat-ens-chercheur.univ-lyon3.fr
oa.univ-lyon3.fr
webmail.univ-lyon3.fr
cervoprint2.univ-lyon3.fr
questionrep.univ-lyon3.fr
veeam.ad.univ-lyon3.fr
webtv.univ-lyon3.fr
cas.univ-lyon3.fr
moodle.univ-lyon3.fr
prel.univ-lyon3.fr
applications.univ-lyon3.fr
glpi.univ-lyon3.fr
impression.univ-lyon3.fr
imptest-pers.univ-lyon3.fr
owncloud.univ-lyon3.fr
survey.univ-lyon3.fr
piwik.univ-lyon3.fr
piwik.univ-lyon3.fr
vsp-quai-huvelin.univ-lyon3.fr
boutique.univ-lyon3.fr
atelier-artistique.univ-lyon3.fr
indicateurs-preprod.univ-lyon3.fr
cervoprint.univ-lyon3.fr
docker-registry.univ-lyon3.fr
acces-distant.univ-lyon3.fr
eas.univ-lyon3.fr
cadeaunoel.univ-lyon3.fr
idp.univ-lyon3.fr
moodle.univ-lyon3.fr
moodle.univ-lyon3.fr
imap.univ-lyon3.fr
bo.univ-lyon3.fr
impression-adm-ens.univ-lyon3.fr
edseg.univ-lyon3.fr
ezscd.univ-lyon3.fr
webmail.univ-lyon3.fr
scd-resnum.univ-lyon3.fr
clic.univ-lyon3.fr
imap.univ-lyon3.fr
mediatheque.univ-lyon3.fr
cervoprint2.univ-lyon3.fr
pop.univ-lyon3.fr
parefeu.univ-lyon3.fr
cerebro.univ-lyon3.fr
gitlab.univ-lyon3.fr

Certificate

The complete raw certificate details for cervoprint2.univ-lyon3.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIlzCCBn+gAwIBAgIQIGkvErfTxFxwgvpX9+kodTANBgkqhkiG9w0BAQwFADBE
MQswCQYDVQQGEwJOTDEZMBcGA1UEChMQR0VBTlQgVmVyZW5pZ2luZzEaMBgGA1UE
AxMRR0VBTlQgT1YgUlNBIENBIDQwHhcNMjMxMTIyMDAwMDAwWhcNMjQxMTIxMjM1
OTU5WjB6MQswCQYDVQQGEwJGUjEeMBwGA1UECAwVQXV2ZXJnbmUtUmjDtG5lLUFs
cGVzMScwJQYDVQQKDB5Vbml2ZXJzaXTDqSBMeW9uIDMgSmVhbiBNb3VsaW4xIjAg
BgNVBAMTGWNlcnZvcHJpbnQyLnVuaXYtbHlvbjMuZnIwggIiMA0GCSqGSIb3DQEB
AQUAA4ICDwAwggIKAoICAQDCkFsLWT13N8qsgCPPpiqQxj7iQG24MTnn4hG/mKE9
tuwEGdm5sxozPiBXh/AknX3JgVWYNQrPGYB1LlV529DnPUAzbz6Friw8nMuejHhB
mwRnMfqbi9Fimrifct1x9o/wv7B3TxUshI2PNCU6/NeB+g41BbCzPOxkjcIy25bj
pqWfgArB3BNmr9fWE2k+jbekEX4iiRD29jezR15SWzJGzElafr/RiHiGg6VShUm6
MN5H1QhX6QACSOhYYyijweAXtYlDOUjGWPA3uTwvE1sXuJ7zMpMOk68V4hi8RgZn
nTdAMfVjG5VNpJcZ38kg2MSjckb1wHp00m8sFDym0u4/enNw4yiNhpPdBV+9kgsp
rMhEJAbRT/kkWlhWiriyFKkYRBgjeCwxZi3keX8gUpLCl3JKesU85DymqKybTMuK
BgRtVxWZH/30bHa3Lu584lcZpp40bwGItiqxkLlmOjE8U8N9US0BtCwfIriW+vox
g+Dyn32nlcwZdP3pQmKkAkMwg0pu7/a75scB4MSrSqNroMyDNn7wC1VbRyq0hj2k
3RdLsg4Yk10jjK4PfOphlb827snj27FGzKMuo9wERJ+WpUtWhdRorAQZa/amZ3zl
9EqYlOtuAASvwXjVBwzFpvM0l8VbVMrIVxDgKAWbB1GEH+0CXlS04mr/JY4BHbG7
kwIDAQABo4IDTTCCA0kwHwYDVR0jBBgwFoAUbx01SRBsMvpZoJ68iugflb5xegww
HQYDVR0OBBYEFAHwKdEJXu0BEmMltHomr56CakJ/MA4GA1UdDwEB/wQEAwIFoDAM
BgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBJBgNV
HSAEQjBAMDQGCysGAQQBsjEBAgJPMCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vc2Vj
dGlnby5jb20vQ1BTMAgGBmeBDAECAjA/BgNVHR8EODA2MDSgMqAwhi5odHRwOi8v
R0VBTlQuY3JsLnNlY3RpZ28uY29tL0dFQU5UT1ZSU0FDQTQuY3JsMHUGCCsGAQUF
BwEBBGkwZzA6BggrBgEFBQcwAoYuaHR0cDovL0dFQU5ULmNydC5zZWN0aWdvLmNv
bS9HRUFOVE9WUlNBQ0E0LmNydDApBggrBgEFBQcwAYYdaHR0cDovL0dFQU5ULm9j
c3Auc2VjdGlnby5jb20wggGABgorBgEEAdZ5AgQCBIIBcASCAWwBagB3AHb/iD8K
tvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABi/ZfB+QAAAQDAEgwRgIhAPZZ
vD65k9/UmNEG26/t7L3Vr0eCcf+d091CiaAsqw7+AiEA3UTCDpAsVGxCZnvU/jyw
69s+O9Q0OfufGsckH5xfFTQAdwA/F0tP1yJHWJQdZRyEvg0S7ZA3fx+FauvBvyiF
7PhkbgAAAYv2XwgNAAAEAwBIMEYCIQCvbCcG2q0pbp3wRnWQ5nwr5oVe/p0/AxBL
zweYH2Y2fgIhAIBBCXLBYgK5noPVelnp88kDEy4VIgoS/MbasffVImXhAHYA7s3Q
ZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGL9l8IEwAABAMARzBFAiBM
7bEUAvguAWTy307MKpQEXh9hhA3N/hK2sE8nPUZ7nAIhAPpHhe4LdmMWZJjJNc74
uZxJ8Jnp+nItaY1s66eLJwO6MEMGA1UdEQQ8MDqCGWNlcnZvcHJpbnQyLnVuaXYt
bHlvbjMuZnKCHXd3dy5jZXJ2b3ByaW50Mi51bml2LWx5b24zLmZyMA0GCSqGSIb3
DQEBDAUAA4ICAQClJSzAEJmDnrds6AoIPhuRnX7/UTr+c798gAHohNqF3kKiBxzs
wEW0pYXspLY/wlr+UH/U7tGml7244bGKyjkyVW/Kj7rkEJjOe1lAERYvqTdWPV00
BrVMqkTJwjkDPqAHTLJXFVk8qqWX/Se5mVNEflx53YAEVZom/bC9dSZM3EPMdU3o
Ycyhh80wA11/wpzR2ftivwpjJVKjYbnyfDPVfXnWH2ZQlgHc8dOrbAJXngOPJHed
r3HefX/NVSG1SekPbDKN2aITVT49jZrAHilW20Lul7uPqUzE/jNs3NqELovFyC32
QSv2Z5hZ92SDBjf+qcuzLBqSE1V7aFBQNnUw3mP4jyhhZ/FUF1W1MWJyakgKdXzI
am9HUsrtq7FW5znFRNibvNRpAvPxocDh3MDK1FIzDFEjUZumA9arDR8OSfLx3TWe
pWPn9+YYeP+IXA9CtkX+S/sNSKJrTkdGBy+BKww+sbys6VrVCsgGeegzcyZaen1H
PkYNMAhvu/NUU3TgjUHv3bnRIMj+IueJm2H1c9hXvn33theOyVUoQjlLSNqY3E63
vEtarnKoP69H3qyzAS3MvYqTafADOS/Jk532H1pVMeZoJV/6oL1dyuunZCndbZhX
naptYTuZAfgWWy0BIqWI/YWxxnZVGabhIMnvSLLRCbRHFD52flFjzBuJtw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 43081441791513529153468779347327920245
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Auvergne-Rhône-Alpes'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Université Lyon 3 Jean Moulin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cervoprint2.univ-lyon3.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 793751416532729040539868989234154015701044123111029258001799019629994121352265111431366351899227458553490283031614351013720371495599336086742386641267258098951230430421776451435123906788071611813949895952770908947368651308687567919384265956204513998987875231070853280265024377327493014492169060509334391701677418712303808195987655121257178461091428787716859863185177336826404208132260185160789652073281320114849477816035939957874500923051856893084602851177247221574068696229706474645082646215919879899495644863266175673984072483088756878824801993131258198125909207115636773172096813801764498204071640651282494462839558959196067031585963498319661891031027379936534898498949540754042173021646556379859630099453698290652525479994410540175424718079077666814991936488048073864353255350573914329887217914619686149975435086641535382175845405253551082135117701878559695006641959534323099942593280698990680457099493224280069360762057938502229752309715474220545873434966920621638949358763677415875535363265204732418326184352218413783466174370360873009428766103833715925422883153711096098247192673163697896297370449085893965829649823988711047368798556193547708962290953689910708646228097344425905098328685829248351032672284233571170355103513491
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							01f029d1095eed01126325b47a26af9e826a427f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cervoprint2.univ-lyon3.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cervoprint2.univ-lyon3.fr'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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