soprasteria.com

- SOPRA STERIA GROUP -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number b9:25:15:e3:c2:79:87:f2:60:33:f4:4b:f5:80:b9:ec was issued on by Sectigo Limited.

With 54 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

SOPRA STERIA GROUP

Organization: SOPRA STERIA GROUP
State / Province: Auvergne-Rhône-Alpes
Country: FR

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): b9:25:15:e3:c2:79:87:f2:60:33:f4:4b:f5:80:b9:ec
Serial Number (int): 246099738179556806452577190703892838892
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 91:b9:f3:4f:ed:c8:ea:43:d9:05:18:ed:76:6c:b8:a3:c8:d8:25:c4
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 1a:d9:24:5b:b4:c2:36:6f:74:90:29:6f:7b:20:30:11:51:34:36:b4
Fingerprint (sha256): 32:33:31:b6:cb:65:48:84:e5:da:67:4f:4b:17:af:03:09:ce:d3:0b:1a:b4:47:10:22:b2:a5:75:de:4d:4e:b0

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate soprasteria.com

54

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for soprasteria.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

soprasteria.com
bg.soprasteria.com
cpx.soprasteria.de
css.soprasteria.de
etudiants.soprasteria.fr
gasx.soprasteria.de
innhold.soprasteria.no
iss.soprasteria.de
jobs.soprasteria.com
mysoprahr.com
soprasteria.at
soprasteria.be
soprasteria.ch
soprasteria.co.uk
soprasteria.de
soprasteria.dk
soprasteria.es
soprasteria.fr
soprasteria.in
soprasteria.it
soprasteria.lu
soprasteria.nl
soprasteria.no
soprasteria.pl
soprasteria.se
soprasteriascaleup.com
support.soprasteria.com
www.cimpa.com
www.fondationsoprasteria.org
www.iss.soprasteria.de
www.masters.soprasteria.com
www.missionhandicap.soprasteria.com
www.passerelles.soprasteria.com
www.soprahr.com
www.soprasteria.at
www.soprasteria.be
www.soprasteria.ch
www.soprasteria.co.uk
www.soprasteria.com
www.soprasteria.de
www.soprasteria.dk
www.soprasteria.es
www.soprasteria.fr
www.soprasteria.in
www.soprasteria.it
www.soprasteria.lu
www.soprasteria.nl
www.soprasteria.no
www.soprasteria.pl
www.soprasteria.se
www.soprasteria.sg
www.soprasterianext.com
www.soprasterianext.fr
www.support.soprasteria.com

Other certificates including the domain name soprasteria.com

(limited to 100 certificates)
svs.soprasteria.com
soprasteria.com
blog.soprasteria.com
innersource.soprasteria.com
soprasteria.com
blog.soprasteria.com
blog.soprasteria.com
webext.soprasteria.com
soprasteria.com
soprahr.tn.web.soprasteria.com
via22latam.workspace.training
agenciasur.soprasteria.com
go.soprasteria.com
rpa.soprasteria.com
soprasteria.com
blog.soprasteria.com
www.soprasteria.com
soprasteria.com
active3d.soprasteria.com
cdn.soprasteria.com
soprasteria.com
mgw08.soprasteria.com
solpm.sciforma.soprasteria.com
soprasteria.com
vpn-in.soprasteria.com
www.soprasteria.com
svncassiopae.soprasteria.com
soprasteria.com
digitaldesk.soprasteria.com
ras-ghc.soprasteria.com
svs.soprasteria.com
www.isacampillo.com.mx
*.sbs.msuk.soprasteria.com
vpn-uk.soprasteria.com
soprasteria.com
soprasteria.com
preprod.digitaldesk.soprasteria.com
videoconferencing.soprasteria.com
mgw02.soprasteria.com
speed.soprasteria.com
cci-paris-idf-a3d-rec.soprasteria.com
gda-grs.soprasteria.com
www.soprasteria.com
soprasteria.com
soprasteria.com
parici.soprasteria.com
parici.soprasteria.com
blogtech.soprasteria.com
soprasteria.com
agenciasur.soprasteria.com
soprasteria.com
portal.restricted.soprasteria.com
blogtech.soprasteria.com
www.soprasteria.com
digibox.soprasteria.com
webext.soprasteria.com
app.ameicontabilidadeonline.com.br
soprasteria.com
soprasteria.com
slnxoccitaniekeycloak01.soprasteria.com
*.sit.fes.soprasteria.com
worktime.soprasteria.com
klif.f2fmobile.soprasteria.com
digitaldesk.soprasteria.com
svs.soprasteria.com
soprasteria.com
soprasteria.com
svs.soprasteria.com
digibox.soprasteria.com
ras-ghc.soprasteria.com
soprasteria.com
blog.soprasteria.com
quill.morishin.me
*.dev.fes.soprasteria.com
*.trn.fes.soprasteria.com
livingactor.soprasteria.com
soprasteria.com
uat.digitaldesk.soprasteria.com
api.cicd.arcus.soprasteria.com
staff.soprasteria.com
soprasteria.com
soprasteria.com
dev.digitaldesk.soprasteria.com
csadeo-wekan.soprasteria.com
soprasteria.com
soprasteria.com
blog.soprasteria.com
portal.soprasteria.com
uat.digitaldesk.soprasteria.com
soprasteria.com
remote.siiecome.soprasteria.com
soprasteria.com
blog.soprasteria.com
staff.soprasteria.com
blog.soprasteria.com
*.apps.cicd.arcus.soprasteria.com
diwocs.soprasteria.com
klif.vpn.soprasteria.com
blog.soprasteria.com
soprasteria.com

Certificate

The complete raw certificate details for soprasteria.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoadY1uZic29uYVep/5r3
0P6ChEjy+zawvSjUQsl1w/fLVpRmwMsphIGtWsYKsFSoC3XznHXhOSEJwNpEc6ap
oAnqKzNSP1E/SdqYtjCNMtRllAMrH6pskypXLeKjdptSYtc2vN/hckk8cy4jYDWW
Ss83+FVjUGqmcT/4i3RAnfvqUvq7f174jInTzPDuwqbg9jxn4iX+jycJjZaen3Ld
HasC84U9iBPCMolpxuS/vBsTmfOps7DKe0Ej66xMTd7/y6hh5Fg8tda6UcfZp5Lr
7oSEpyjKLuGTaXhP1LQd+spPFVfIQsUZgD9HmkNi7DQt36tkHye9P8+IJvpdI8bk
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 246099738179556806452577190703892838892
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Auvergne-Rhône-Alpes'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SOPRA STERIA GROUP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'soprasteria.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20406888995224156376993814434837591523410224642804201969239545402475414601585972679843664557689998490042090319903026924260571846726118195357301813179150231598885949846324327655478173587806490292461591305074777749934434399003386643061476967707490344509112659604562867421346014530025399663169778131979751576792426210796446963628122326091305047846524867541699701301700629063911507000122775674621119132987722867425308455725362418695286614278886111837289454598336491292077661139769688431596624583462225389576832964595835375203276696141724833636637672365961203611836990369637906803447870641942448534000518087532889913091181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							91b9f34fedc8ea43d90518ed766cb8a3c8d825c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soprasteria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bg.soprasteria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpx.soprasteria.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'css.soprasteria.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etudiants.soprasteria.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gasx.soprasteria.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innhold.soprasteria.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iss.soprasteria.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.soprasteria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysoprahr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soprasteria.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soprasteria.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soprasteria.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soprasteria.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soprasteria.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soprasteria.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soprasteria.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soprasteria.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soprasteria.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soprasteria.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soprasteria.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soprasteria.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soprasteria.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soprasteria.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soprasteria.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soprasteriascaleup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.soprasteria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cimpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fondationsoprasteria.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iss.soprasteria.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.masters.soprasteria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.missionhandicap.soprasteria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.passerelles.soprasteria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soprahr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soprasteria.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soprasteria.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soprasteria.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soprasteria.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soprasteria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soprasteria.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soprasteria.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soprasteria.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soprasteria.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soprasteria.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soprasteria.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soprasteria.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soprasteria.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soprasteria.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soprasteria.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soprasteria.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soprasteria.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soprasterianext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soprasterianext.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.support.soprasteria.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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