netsync.ac-grenoble.fr

- Ministere Education Nationale (MENESR) -

Issued by AC Infrastructures

About this certificate

This digital certificate with serial number 9d:48:5f:f1:4a:3e:51:37:6f:bd:56:73:3d:71:05:d5 was issued on by Ministere education nationale (MENESR).

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates MUST contain the Subject Alternate Name extension (BRs: 7.1.4.2.1)
  • KeyUsage contains an inefficient encoding wherein the number of 'unused bits' is declared to be 7, but it should be 13. Raw Bytes: [3 3 7 160 0], Raw Binary: [00000011 00000011 00000111 10100000 00000000] RFC 5280 Section 4.2.1.3 describes the value of a KeyUsage to be a DER encoded BitString, which itself defines that all trailing 0 bits be counted as being "unused". (Where ITU-T Rec. X.680 | ISO/IEC 8824-1, 21.7, applies, the bitstring shall have all trailing 0 bits removed before it is encoded.)
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • KeyUsage contains superfluous trailing 00 byte. Bytes: [3 3 7 160 0], Binary: [00000011 00000011 00000111 10100000 00000000] RFC 5280 Section 4.2.1.3 describes the value of a KeyUsage to be a DER encoded BitString, which itself must not have unnecessary trailing 00 bytes. (1.2.2 Where Rec. ITU-T X.680 | ISO/IEC 8824-1, 22.7, applies, the bitstring shall have all trailing 0 bits removed before it is encoded.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ministere Education Nationale (MENESR)

Organization: Ministere Education Nationale (MENESR)
Organization unit: 110 043 015
Organization unit: ac-grenoble
Country: FR

Ministere education nationale (MENESR)

Organization: Ministere education nationale (MENESR)
Organization unit: 110 043 015
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): 9d:48:5f:f1:4a:3e:51:37:6f:bd:56:73:3d:71:05:d5
Serial Number (int): 209064586657923040143450904584195737045
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 3b:39:68:5c:fa:fb:41:b0:42:08:4f:b7:d4:d6:bc:dd:e4:9a:ec:b1
AuthorityKeyId: be:38:22:7f:72:46:a9:d6:84:15:9f:d5:c8:28:7f:5c:b3:02:20:cb

Fingerprint (sha1): ce:60:4f:f8:d0:0e:9c:62:d8:de:92:39:e8:7c:3d:01:eb:e8:24:bf
Fingerprint (sha256): 34:c4:9f:46:f0:82:12:ac:b4:f8:41:c8:b6:e5:c4:a3:4c:fc:5f:e5:19:ed:20:04:ed:df:0b:34:03:6d:1e:56

Issuing Certificate URL: http://www.igc.education.fr/Infrastructures.crt

Revocation information

CRL Distribution Point: http://crl1.igc.education.fr/Infrastructures.crl
CRL Distribution Point: http://crl2.igc.education.fr/Infrastructures.crl
CRL Distribution Point: http://crl3.igc.education.fr/Infrastructures.crl

Check the revocation status for certificate netsync.ac-grenoble.fr

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for netsync.ac-grenoble.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

7 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name ac-grenoble.fr

(limited to 100 certificates)
documentation.ac-grenoble.fr
publinet.ac-grenoble.fr
test-admin-adm.ac-grenoble.fr
*.clg-pierre-aiguille.ac-grenoble.fr
incident.ac-grenoble.fr
ds-airwatch.ac-grenoble.fr
assistance.ac-grenoble.fr
drupal-cas.ac-grenoble.fr
*.lyc-champollion.ac-grenoble.fr
bas-moodle33.ac-grenoble.fr
andromede.ac-grenoble.fr
*.emwiki.ac-grenoble.fr
*.clg-charvieu.ac-grenoble.fr
dafco-appli.ac-grenoble.fr
airwatch-preprod.ac-grenoble.fr
drupal-cas.ac-grenoble.fr
visio.ac-grenoble.fr
*.lyc-louise-michel.eple.in.ac-grenoble.fr
devnat.ac-grenoble.fr
jitsi.ac-grenoble.fr
extranet.ac-grenoble.fr
documentation.ac-grenoble.fr
pia-sso1.ac-grenoble.fr
documentation.ac-grenoble.fr
lec.ac-grenoble.fr
smtp.ac-grenoble.fr
aloes.0380105H.ac-grenoble.fr
pronote.lec.ac-grenoble.fr
airwatch.ac-grenoble.fr
pia.ac-grenoble.fr
bv.ac-grenoble.fr
lyc-guillaume-fichet.ac-grenoble.fr
ent.ac-grenoble.fr
gestiondeparc.ac-grenoble.fr
moodle.ac-grenoble.fr
cordelia.ac-grenoble.fr
pia-sso.ac-grenoble.fr
extranet.ac-grenoble.fr
smtp.ac-grenoble.fr
portail-captif.ac-grenoble.fr
mdm.cg-drome-1.ac-grenoble.fr
webmail.ac-grenoble.fr
fluence.ac-grenoble.fr
*.lyc-guillaume-fichet.ac-grenoble.fr
devnat.ac-grenoble.fr
extranet.ac-grenoble.fr
*.lyc-guillaume-fichet.ac-grenoble.fr
perdition.ac-grenoble.fr
incident.ac-grenoble.fr
documentation.ac-grenoble.fr
documentation.ac-grenoble.fr
moodle.ac-grenoble.fr
ocean.ac-grenoble.fr
*.lyc-pheroult.ac-grenoble.fr
clg-ggaud.ac-grenoble.fr
extranet.ac-grenoble.fr
lec.ac-grenoble.fr
proxyecole.ac-grenoble.fr
erea-amelie-gex.ac-grenoble.fr
stswebnet.ac-grenoble.fr
sql.ac-grenoble.fr
ocean.ac-grenoble.fr
rhea.ac-grenoble.fr
webmail.ac-grenoble.fr
clg-louis-lumiere.ac-grenoble.fr
netsync.in.ac-grenoble.fr
bas-moodle33.ac-grenoble.fr
*.lyc-stendhal.ac-grenoble.fr
clg-louis-lumiere.ac-grenoble.fr
netsync.ac-grenoble.fr
ts.ac-grenoble.fr
documentation.ac-grenoble.fr
clg-champoulant-adm.ac-grenoble.fr
bv.ac-grenoble.fr
pia.ac-grenoble.fr
clg-barnave.ac-grenoble.fr
moodle.ac-grenoble.fr
bv.ac-grenoble.fr
*.lyc-pneruda.ac-grenoble.fr
devnat.ac-grenoble.fr
netsync.ac-grenoble.fr
assistance.ac-grenoble.fr
*.clg-belledonne.ac-grenoble.fr
pluton.ac-grenoble.fr
clg-barnave.ac-grenoble.fr
vpn-etab.ac-grenoble.fr
listes.ac-grenoble.fr
documentation.ac-grenoble.fr
lec.ac-grenoble.fr
ocean.ac-grenoble.fr
assistance.ac-grenoble.fr
pia-sso.ac-grenoble.fr
clg-jean-monnet.ac-grenoble.fr
ocean.ac-grenoble.fr
ocean.ac-grenoble.fr
*.clg-fleming.ac-grenoble.fr
*.clg-barnave.ac-grenoble.fr
lp-moutiers.ac-grenoble.fr
teleservices.ac-grenoble.fr
moodle.ac-grenoble.fr

Certificate

The complete raw certificate details for netsync.ac-grenoble.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGCjCCA/KgAwIBAgIRAJ1IX/FKPlE3b71Wcz1xBdUwDQYJKoZIhvcNAQEFBQAw
cTELMAkGA1UEBhMCRlIxLzAtBgNVBAoTJk1pbmlzdGVyZSBlZHVjYXRpb24gbmF0
aW9uYWxlIChNRU5FU1IpMRQwEgYDVQQLEwsxMTAgMDQzIDAxNTEbMBkGA1UEAxMS
QUMgSW5mcmFzdHJ1Y3R1cmVzMB4XDTEyMDcwNjA3MzM0M1oXDTE0MDcwNjA3MzM0
M1owgYsxCzAJBgNVBAYTAkZSMS8wLQYDVQQKEyZNaW5pc3RlcmUgRWR1Y2F0aW9u
IE5hdGlvbmFsZSAoTUVORVNSKTEUMBIGA1UECxMLMTEwIDA0MyAwMTUxFDASBgNV
BAsTC2FjLWdyZW5vYmxlMR8wHQYDVQQDExZuZXRzeW5jLmFjLWdyZW5vYmxlLmZy
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5j3GofRU4C6o0obqgSw0
TSfa93Ol34/JW2Ehb0gnDSabkRfKz6+XuwHmvmhHeUgoa0zuYBJfrPkSFgIY4Ag9
1KvViIL7xluM7Sg/UvCRSxKU6nB7d30HNmQYOGVxIHoauku6rh42VMl6JLSc1mRg
SwKQ/VbzbNY/EkdAXFG/y8dBr5ViS3jlRBCqm1E4e/wc/RWPacleXj6WeG+ep0Hb
EstgI5kd9INM+nYPw4pIeiiUv+c7HPxWFnTPvXqmcd1GAXfvoHwgghXpwd9lyQAR
AVnfhbjy7FORYq+w1urDilsVbNTJ6ZmcTr0C349BkrdCD08g0SakiTOJPSpulX6C
SQIDAQABo4IBgDCCAXwwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDwYDVR0PAQH/BAUD
AwegADBLBggrBgEFBQcBAQQ/MD0wOwYIKwYBBQUHMAKGL2h0dHA6Ly93d3cuaWdj
LmVkdWNhdGlvbi5mci9JbmZyYXN0cnVjdHVyZXMuY3J0MB8GA1UdIwQYMBaAFL44
In9yRqnWhBWf1cgof1yzAiDLMBoGA1UdIAQTMBEwDwYNKwYBBAGBnmZFAQEEATCB
qgYDVR0fBIGiMIGfMIGcoIGZoIGWhjBodHRwOi8vY3JsMS5pZ2MuZWR1Y2F0aW9u
LmZyL0luZnJhc3RydWN0dXJlcy5jcmyGMGh0dHA6Ly9jcmwyLmlnYy5lZHVjYXRp
b24uZnIvSW5mcmFzdHJ1Y3R1cmVzLmNybIYwaHR0cDovL2NybDMuaWdjLmVkdWNh
dGlvbi5mci9JbmZyYXN0cnVjdHVyZXMuY3JsMB0GA1UdDgQWBBQ7OWhc+vtBsEII
T7fU1rzd5JrssTANBgkqhkiG9w0BAQUFAAOCAgEAuYjyZj5Lc6XmuXpbIq6VlWkB
Lea/B6UtAJMUb3cOO+lXpuJTgUUF4b2PjzPuDaIAktxacyMmyYrvC7eiB+mBtpwf
Y1vjDcxWMK8ehRXT+zsko1VmY4O1OEuIdYT9mrfKlcJuaVhirdYDrqg5KFqSXpja
0Lf/p/qKMDKNPjtu1FFjAWAXRFSmI/OOaZ8K55jjx2THa0rkjgKZ5AOv99g2YazM
zWPSxskgez6wCIbPMSQ6PF2f5ndQSU3XPCHc/Ln7lv61qfntC2Zt9oQpqeB0EWiI
ZdoXfZDZl6x2E90PxiQK5VwWXWBxGj8Xz7ierrmUmXDQhAgFa7b9wjjql98KolhW
nnkq7rnqDvKCtbiqImUzswhu8UtEOfZzV01MYhkkBoLbK/mA0ktTduQjEbZG6dUd
tqoFGRUloOeNFcRMG1/x8V3EsE5fwpMpf0Rrg63AdrsWFoIppr+wletcu3hc9s6e
4FMrXZCL5DiOOAkhJCr11EQJkF1y24IlOfB9rWvMWWlfRwX3WSulZHTKmH9D1zvz
5eKfXddsxtkJRMhWamJsTpUjf+xYLHkLUaG3Dnc1wLzhxHnGTeIoFS3rG2sFkalH
qCuR0CyaTBCAld9RGqryYBn4zrdNDtB9PiyBFg4J9vo3AiNH5VXYhZh6A2G6Uo7o
OdT6+0mhwEDU1ksEV1o=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5j3GofRU4C6o0obqgSw0
TSfa93Ol34/JW2Ehb0gnDSabkRfKz6+XuwHmvmhHeUgoa0zuYBJfrPkSFgIY4Ag9
1KvViIL7xluM7Sg/UvCRSxKU6nB7d30HNmQYOGVxIHoauku6rh42VMl6JLSc1mRg
SwKQ/VbzbNY/EkdAXFG/y8dBr5ViS3jlRBCqm1E4e/wc/RWPacleXj6WeG+ep0Hb
EstgI5kd9INM+nYPw4pIeiiUv+c7HPxWFnTPvXqmcd1GAXfvoHwgghXpwd9lyQAR
AVnfhbjy7FORYq+w1urDilsVbNTJ6ZmcTr0C349BkrdCD08g0SakiTOJPSpulX6C
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 209064586657923040143450904584195737045
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ministere education nationale (MENESR)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '110 043 015'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AC Infrastructures'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-07-06 07:33:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-07-06 07:33:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ministere Education Nationale (MENESR)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '110 043 015'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ac-grenoble'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'netsync.ac-grenoble.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29065272978152869203928195290818236149698089024704424352774814384168855237845289279372790452042464140104259096441522385708017028549983076522422756727603019422480676833442734008697242721966845848543293933854652721709182850545711394551879356552845548310308951772917821435273550981048923484974654598702524425309071571182097913478143896945757250386838767844873918748623502750364319027077989512157882573205746058196769750481482545543309347579995801721173253965153288009298952729208045367480339794025738232908261706704193990751888390435142783516871233367561541110357397154625397510674951337897543195760829561847858918752841
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (5 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (9 bits)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 

 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.igc.education.fr/Infrastructures.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName be38227f7246a9d684159fd5c8287f5cb30220cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.20326.69.1.1.4.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (162 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl1.igc.education.fr/Infrastructures.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.igc.education.fr/Infrastructures.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.igc.education.fr/Infrastructures.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3b39685cfafb41b042084fb7d4d6bcdde49aecb1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00b988f2663e4b73a5e6b97a5b22ae959569012de6bf07a52d0093146f770e3be957a6e253814505e1bd8f8f33ee0da20092dc5a732326c98aef0bb7a207e981b69c1f635be30dcc5630af1e8515d3fb3b24a355666383b5384b887584fd9ab7ca95c26e695862add603aea839285a925e98dad0b7ffa7fa8a30328d3e3b6ed451630160174454a623f38e699f0ae798e3c764c76b4ae48e0299e403aff7d83661accccd63d2c6c9207b3eb00886cf31243a3c5d9fe67750494dd73c21dcfcb9fb96feb5a9f9ed0b666df68429a9e07411688865da177d90d997ac7613dd0fc6240ae55c165d60711a3f17cfb89eaeb9949970d08408056bb6fdc238ea97df0aa258569e792aeeb9ea0ef282b5b8aa226533b3086ef14b4439f673574d4c6219240682db2bf980d24b5376e42311b646e9d51db6aa05191525a0e78d15c44c1b5ff1f15dc4b04e5fc293297f446b83adc076bb16168229a6bfb095eb5cbb785cf6ce9ee0532b5d908be4388e380921242af5d44409905d72db822539f07dad6bcc59695f4705f7592ba56474ca987f43d73bf3e5e29f5dd76cc6d90944c8566a626c4e95237fec582c790b51a1b70e7735c0bce1c479c64de228152deb1b6b0591a947a82b91d02c9a4c108095df511aaaf26019f8ceb74d0ed07d3e2c81160e09f6fa37022347e555d885987a0361ba528ee839d4fafb49a1c040d4d64b04575a