dmz-std-prd.dsi.cnrs.fr

Issued by TERENA SSL CA 2

About this certificate

This digital certificate with serial number 77:2a:65:d4:fb:df:0d:97:96:e3:fe:37:2f:7f:11:09 was issued on by TERENA.

With 71 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dmz-std-prd.dsi.cnrs.fr,OU=Domain Control Validated

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 77:2a:65:d4:fb:df:0d:97:96:e3:fe:37:2f:7f:11:09
Serial Number (int): 158398273364154265588730829952671224073
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: c8:e9:7b:99:5b:48:4b:26:83:69:16:05:9c:8e:9d:c5:ee:f4:8f:72
AuthorityKeyId: 5b:d0:8a:1c:9a:32:5b:e0:b5:dd:96:54:1b:e1:86:28:b0:fd:b6:bd

Fingerprint (sha1): a8:54:9d:5a:76:8e:6b:9c:9c:65:13:67:7c:a6:1c:2d:31:82:48:72
Fingerprint (sha256): 30:3d:2d:a7:08:28:a9:28:6f:6b:44:d3:db:e0:b0:b4:56:c3:da:f0:f7:c2:d6:54:88:9a:9d:db:0c:55:08:ea

Issuing Certificate URL: http://crt.usertrust.com/TERENASSLCA2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/TERENASSLCA2.crl

Check the revocation status for certificate dmz-std-prd.dsi.cnrs.fr

71

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dmz-std-prd.dsi.cnrs.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dmz-std-prd.dsi.cnrs.fr
ael-order-response.dsi.cnrs.fr
agate-form.cnrs.fr
agate.cnrs.fr
bfc-cs.cnrs.fr
citrix-sap-pforward.dsi.cnrs.fr
citrix-sap.dsi.cnrs.fr
citrix.core-admins.net
concoursexternesit.cnrs.fr
dmf-consultation-for.cnrs.fr
dmf-suivi-for.cnrs.fr
dmf-videocodage.cnrs.fr
evrp-form.dsi.cnrs.fr
evrp.cnrs.fr
evrp.dsi.cnrs.fr
factivite.cnrs.fr
factivite.dsi.cnrs.fr
faq-dsi.cnrs.fr
forge.cnrs.fr
forge.git.cnrs.fr
forge.hudson.cnrs.fr
forge.nexus.cnrs.fr
forge.sonar.cnrs.fr
forge.subversion.cnrs.fr
gedcc.cnrs.fr
gedsi.dsi.cnrs.fr
gedsi2-bis.dsi.cnrs.fr
gedsi2.dsi.cnrs.fr
gedsibis.dsi.cnrs.fr
gedws.dsi.cnrs.fr
geslab-flux.dsi.cnrs.fr
geslab-form-flux.dsi.cnrs.fr
ginkgo.cnrs.fr
glpi.dsi.cnrs.fr
ihmeai-safe.dsi.cnrs.fr
isqlient.cnrs.fr
isqlplus.cnrs.fr
isqlplus.dsi.cnrs.fr
listes.services.cnrs.fr
logic.cnrs.fr
logs.dsi.cnrs.fr
mantis.cnrs.fr
migr-evrp.dsi.cnrs.fr
otarie.cnrs.fr
pedr.cnrs.fr
pma.dsi.cnrs.fr
pmp.cnrs.fr
preprodlistes.services.cnrs.fr
prisme-for.dsi.cnrs.fr
prisme-web.cnrs.fr
prisme.cnrs.fr
prisme2.dsi.cnrs.fr
prismeweb-for.dsi.cnrs.fr
reseda-form.cnrs.fr
reseda-master.cnrs.fr
reseda-master1-form.cnrs.fr
reseda-master2-form.cnrs.fr
reseda.cnrs.fr
sesame.cnrs.fr
sesame.dsi.cnrs.fr
sigap.cnrs.fr
simbaddevis.cnrs.fr
tcs.services.cnrs.fr
tempo-form.cnrs.fr
tempo.cnrs.fr
testlink.dsi.cnrs.fr
wayf-ds.dsi.cnrs.fr
wayf-federation.dsi.cnrs.fr
webservices.dsi.cnrs.fr
webstats.dsi.cnrs.fr
ws.agate.cnrs.fr

Other certificates including the domain name cnrs.fr

(limited to 100 certificates)
*.ins2i.bib.cnrs.fr
www.ccsd.cnrs.fr
dmz-std-rec.dsi.cnrs.fr
*.ddl.cnrs.fr
bana.users.lmno.cnrs.fr
frenchbic.org
bosser.users.lmno.cnrs.fr
ecc-e7-bfc-new.dsi.cnrs.fr
www.pvm.cnrs.fr
dev-weimann.users.lmno.cnrs.fr
webmail.ipmc.cnrs.fr
www.iledefrance-villejuif.cnrs.fr
goudurix.placamat.cnrs.fr
asterics.lmno.cnrs.fr
WWW.MCSS.CNRS.FR
pedr.cnrs.fr
*.ibgc.cnrs.fr
reseda-master2-rec.cnrs.fr
echange.alpes.cnrs.fr
ls.caes.cnrs.fr
autodiscover.iphc.cnrs.fr
dev-users.lmno.cnrs.fr
12mail.dr12.cnrs.fr
clamm.irht.cnrs.fr
angles.users.lmno.cnrs.fr
wims-ufmi-bordeaux.math.cnrs.fr
cas-rec-ext.cnrs.fr
wordpress-php7.cnrs.fr
seism.cnrs.fr
reseda-master2-form.cnrs.fr
assocbs2.igh.cnrs.fr
test-emfleu.grenoble.cnrs.fr
journalbase.cnrs.fr
valo-rec.dsi.cnrs.fr
tixeo.cnrs.fr
nuxeo.msh-lse.fr
dev-taipe.users.lmno.cnrs.fr
ageron.users.lmno.cnrs.fr
reseda-dev.cnrs.fr
wart.igh.cnrs.fr
dev-users.lmno.cnrs.fr
dev-louaked.users.lmno.cnrs.fr
plmkan.math.cnrs.fr
fileznormandie.dr19.cnrs.fr
isqlient.cnrs.fr
dev-sesboue.users.lmno.cnrs.fr
intranet.neel.cnrs.fr
dialog.dsi.cnrs.fr
dev-users.lmno.cnrs.fr
enquete.grenoble.cnrs.fr
06papyrus.dr6.cnrs.fr
dev-wehrungf.users.lmno.cnrs.fr
mag.caes.cnrs.fr
files.lsce.ipsl.fr
portail.recore.cnrs.fr
objects.news.odyssey-messaging.com
barou.users.lmno.cnrs.fr
objects.news.odyssey-messaging.com
logic-rec.cnrs.fr
migr-evrp.dsi.cnrs.fr
ds92c.dt.insu.cnrs.fr
lejournal.cnrs.fr
*.irht.cnrs.fr
www.celluleenergie.cnrs.fr
wiki.2rm.cnrs.fr
portail.math.cnrs.fr
gtc.srv.dr12.cnrs.fr
siki.ish-lyon.cnrs.fr
rapi.alpes.cnrs.fr
ftp.igh.cnrs.fr
nouba.dsi.cnrs.fr
dev-ngodac.users.lmno.cnrs.fr
*.iledefrance-est.cnrs.fr
reseda-dev.cnrs.fr
wayf-ds.dsi.cnrs.fr
conf.lmno.cnrs.fr
wordpress-php7.cnrs.fr
photo.caes.cnrs.fr
inscription.alpes.cnrs.fr
dmz-std-rec.dsi.cnrs.fr
grenoble-lanef.fr
pfsense.placamat.cnrs.fr
dev-godelle.users.lmno.cnrs.fr
intranet.cnrs.fr
dev-karamian.users.lmno.cnrs.fr
h2020qualitop.liris.cnrs.fr
docutiles-rec.dsi.cnrs.fr
dev-reyssat.users.lmno.cnrs.fr
participation.dsi.cnrs.fr
dev-wehrungf.users.lmno.cnrs.fr
ssi.dr18.cnrs.fr
frenchbic.org
dev-thiel.users.lmno.cnrs.fr
calendrier.math.cnrs.fr
geslab.dsi.cnrs.fr
imap.cnrs.fr
objects.news.odyssey-messaging.com
catadupe.catalyse.cnrs.fr
assocbs2.igh.cnrs.fr
dev-dogbe.users.lmno.cnrs.fr

Certificate

The complete raw certificate details for dmz-std-prd.dsi.cnrs.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzP/uiGUkoTpxL8ac55Uk
MKlqKlVRoeapCpsV6+D/poAIA1xLWnJWKBfAxXBCP7e//w+TkbmkSnp192gzLGe2
Qko0PKUffZw5ByBN1XM4w74RD/dw47SZND7EsPhAfd9HMk+5uqgkBwiQKpgIOHrR
B4C6rjWchC57rcTp9Ns7Nr83mfPVf7QGUF7x58sO8hy62w6ja034l38j5IcjVRer
y5hwp5YVTKyfRJLzq0RIXih8fG4QfH88mYaYfv2Sx6HMXT8P+R/0Jpu8Rj8k78rk
W5CLhk8LxXUBxrrU/JbpEq2TLjv8f8CvMjB1PjygGKL0IApP1XY97wbWORmT8KDt
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 158398273364154265588730829952671224073
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-02-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dmz-std-prd.dsi.cnrs.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25878818871945770485558859908044996660406844750838647460974606863849085577471759303531529059290879615099872112588782475889493635058016820435274951185346313988298783806411357452632896841242030186547077713661433973944423566136142130966403731313102023942622562614439524484565279682437487705369766997458941175519742031198196444381526248042292240213037547782120181496476204388628651118249733333073357882900416004427267547808655450254932272599639261822502287535097957049976698372259081674640865228055282183088505313071139990784318832485953024757163899214624609419915602342654232915782868064767777777956972365695202791320939
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5bd08a1c9a325be0b5dd96541be18628b0fdb6bd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c8e97b995b484b26836916059c8e9dc5eef48f72
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.29
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/TERENASSLCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/TERENASSLCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1509 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmz-std-prd.dsi.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ael-order-response.dsi.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agate-form.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agate.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bfc-cs.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citrix-sap-pforward.dsi.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citrix-sap.dsi.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citrix.core-admins.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concoursexternesit.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmf-consultation-for.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmf-suivi-for.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmf-videocodage.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evrp-form.dsi.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evrp.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evrp.dsi.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factivite.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factivite.dsi.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq-dsi.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forge.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forge.git.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forge.hudson.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forge.nexus.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forge.sonar.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forge.subversion.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gedcc.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gedsi.dsi.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gedsi2-bis.dsi.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gedsi2.dsi.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gedsibis.dsi.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gedws.dsi.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geslab-flux.dsi.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geslab-form-flux.dsi.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ginkgo.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glpi.dsi.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihmeai-safe.dsi.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isqlient.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isqlplus.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isqlplus.dsi.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'listes.services.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logic.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logs.dsi.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mantis.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'migr-evrp.dsi.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otarie.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pedr.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pma.dsi.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmp.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprodlistes.services.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prisme-for.dsi.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prisme-web.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prisme.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prisme2.dsi.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prismeweb-for.dsi.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reseda-form.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reseda-master.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reseda-master1-form.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reseda-master2-form.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reseda.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sesame.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sesame.dsi.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sigap.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simbaddevis.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcs.services.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tempo-form.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tempo.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testlink.dsi.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wayf-ds.dsi.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wayf-federation.dsi.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webservices.dsi.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webstats.dsi.cnrs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws.agate.cnrs.fr'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008de1859bdd9042fac626d7d9c19689a9bcb33d44ce0d868e74fcfe066ad1d4367e30c4d3452c05a0c0abcf7678af6463992276d11f99bbe32bde0caacd516adbf657b09351eee33e1eb6282003c1051de435e32db12674ea843a5e9bc39d3c0c1b935c0acf2e8f7fc121279a644bf5e5995a4bfce05b556386ff571a8d1ae8aeb8f3f73c2bb9c3f560cd589d19ff8ba562ec346a94fc8c3f1c58da3a161f3c3ebeb08de5dd05b7d0d7f6537a0d866def00fb97b4eecfb6744892e7000d89e752c2eaad947103ca8db639bf63e4dabf929fc0761be29cbe3833efee2447cb72c833f5dbec477af641282765ea226cf6e1155c7486398336d574c1b8f0761c0ac2