ezscd.univ-lyon3.fr

- Université Lyon 3 Jean Moulin -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number c5:30:ce:80:a7:93:fe:5b:37:51:bc:f0:13:fd:e7:25 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Université Lyon 3 Jean Moulin

Organization: Université Lyon 3 Jean Moulin
State / Province: Auvergne-Rhône-Alpes
Country: FR

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): c5:30:ce:80:a7:93:fe:5b:37:51:bc:f0:13:fd:e7:25
Serial Number (int): 262111333788284162657536511254107907877
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 15:20:e2:0f:50:45:9d:c3:72:61:cf:85:e3:fd:38:98:29:af:e9:f6
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 14:5b:bf:00:81:d5:af:62:b8:70:06:ce:42:9a:b4:31:2a:65:a9:32
Fingerprint (sha256): 37:2e:88:2e:b6:da:4a:62:9a:9b:b6:98:94:8c:a5:6a:0c:f1:f9:87:10:d0:4e:c7:68:9e:e5:4e:3d:f0:f2:b7

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate ezscd.univ-lyon3.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ezscd.univ-lyon3.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ezscd.univ-lyon3.fr
*.ezscd.univ-lyon3.fr

Other certificates including the domain name univ-lyon3.fr

(limited to 100 certificates)
sfbconf.univ-lyon3.fr
portail-vacataires-ens-consult.univ-lyon3.fr
vsp-quai-chev.univ-lyon3.fr
nextcloud-preprod.univ-lyon3.fr
parefeu-master-ipmi.univ-lyon3.fr
sondage.univ-lyon3.fr
evenements.univ-lyon3.fr
webtv.univ-lyon3.fr
web2.univ-lyon3.fr
webmail.univ-lyon3.fr
mail.univ-lyon3.fr
haproxy-pp.univ-lyon3.fr
webinscription.univ-lyon3.fr
ged.univ-lyon3.fr
psc.univ-lyon3.fr
superview.univ-lyon3.fr
pop.univ-lyon3.fr
vsp-manu-b4-haut.univ-lyon3.fr
webscolarite.univ-lyon3.fr
vsp-manu-b4-haut.univ-lyon3.fr
impression.univ-lyon3.fr
mahara.univ-lyon3.fr
webmail.univ-lyon3.fr
vdi.univ-lyon3.fr
fdv-srv.univ-lyon3.fr
llm.univ-lyon3.fr
netmanager.univ-lyon3.fr
esrs.univ-lyon3.fr
iaedt.univ-lyon3.fr
applications.univ-lyon3.fr
vsp-quai-chev.univ-lyon3.fr
adfs.ad.univ-lyon3.fr
ecandidat.univ-lyon3.fr
adfs.ad.univ-lyon3.fr
web2.univ-lyon3.fr
revues.univ-lyon3.fr
kanboard.univ-lyon3.fr
hra-for.univ-lyon3.fr
mahara.univ-lyon3.fr
applications.univ-lyon3.fr
boutique.univ-lyon3.fr
catalogue.univ-lyon3.fr
vsp-manu-b6-bas.univ-lyon3.fr
www.univ-lyon3.fr
idptest.univ-lyon3.fr
css03.univ-lyon3.fr
eduspot2.univ-lyon3.fr
autodiscover.univ-lyon3.fr
impression-pers.univ-lyon3.fr
choisirsonsport.univ-lyon3.fr
idp.univ-lyon3.fr
vsp-manu-b6-haut.univ-lyon3.fr
ligeo-gestion.univ-lyon3.fr
webelection.univ-lyon3.fr
esrs.univ-lyon3.fr
candidat-ens-chercheur.univ-lyon3.fr
oa.univ-lyon3.fr
webmail.univ-lyon3.fr
cervoprint2.univ-lyon3.fr
questionrep.univ-lyon3.fr
veeam.ad.univ-lyon3.fr
webtv.univ-lyon3.fr
cas.univ-lyon3.fr
moodle.univ-lyon3.fr
prel.univ-lyon3.fr
applications.univ-lyon3.fr
glpi.univ-lyon3.fr
impression.univ-lyon3.fr
imptest-pers.univ-lyon3.fr
owncloud.univ-lyon3.fr
survey.univ-lyon3.fr
piwik.univ-lyon3.fr
piwik.univ-lyon3.fr
vsp-quai-huvelin.univ-lyon3.fr
boutique.univ-lyon3.fr
atelier-artistique.univ-lyon3.fr
indicateurs-preprod.univ-lyon3.fr
cervoprint.univ-lyon3.fr
docker-registry.univ-lyon3.fr
acces-distant.univ-lyon3.fr
eas.univ-lyon3.fr
cadeaunoel.univ-lyon3.fr
idp.univ-lyon3.fr
moodle.univ-lyon3.fr
moodle.univ-lyon3.fr
imap.univ-lyon3.fr
bo.univ-lyon3.fr
impression-adm-ens.univ-lyon3.fr
edseg.univ-lyon3.fr
ezscd.univ-lyon3.fr
webmail.univ-lyon3.fr
scd-resnum.univ-lyon3.fr
clic.univ-lyon3.fr
imap.univ-lyon3.fr
mediatheque.univ-lyon3.fr
cervoprint2.univ-lyon3.fr
pop.univ-lyon3.fr
parefeu.univ-lyon3.fr
cerebro.univ-lyon3.fr
gitlab.univ-lyon3.fr

Certificate

The complete raw certificate details for ezscd.univ-lyon3.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIgDCCBmigAwIBAgIRAMUwzoCnk/5bN1G88BP95yUwDQYJKoZIhvcNAQEMBQAw
RDELMAkGA1UEBhMCTkwxGTAXBgNVBAoTEEdFQU5UIFZlcmVuaWdpbmcxGjAYBgNV
BAMTEUdFQU5UIE9WIFJTQSBDQSA0MB4XDTI0MDExMTAwMDAwMFoXDTI1MDExMDIz
NTk1OVowdDELMAkGA1UEBhMCRlIxHjAcBgNVBAgMFUF1dmVyZ25lLVJow7RuZS1B
bHBlczEnMCUGA1UECgweVW5pdmVyc2l0w6kgTHlvbiAzIEplYW4gTW91bGluMRww
GgYDVQQDExNlenNjZC51bml2LWx5b24zLmZyMIICIjANBgkqhkiG9w0BAQEFAAOC
Ag8AMIICCgKCAgEAxXDublHzMgYxp+wxqSN8btOZ+PvjDrpQuL9QgwKNwlpYmExG
9eOoBdAF1Sv1/C0ZAvmxcWLo7Y4XO25KvSRYrDvjJbDYmw3YCL7QpGzDtGMBggJZ
5dj7wYm3lyacNDuX/eYkrE6LngqxuuYzA9IS5Y4Ze3FUEWXXKdb/BlV7q1rWXZyY
1A4C2m8KkUFY6HvcceERV5N5tfz7UVCKDSPV3GZrgVQhAGhqwDx4SKq96/gbaoa8
LZ5b7fbFoKCla4xQ1ucjmHOyjOGruaFsAm8Gzb2P9l8Od6ig2HjeR/XBDXYA47pw
KlmSKsvhs0Pbeiz/mkkpBRa8lxmwRVmdbcut/ijDu/kcco4g4iqEaRfDtFJinOLv
jDjRKIqbKiDyFe+0ZVArl7GZKTOVlJAAHWC+Rwgo/HTag60rI6RWn6wfEYh+Jfs9
KtDMnBX9R9CDpa/tDBA1ufEBTbdj6aYJK5r4CcwdPVwDeed/HQBfXlMo6em6zESq
RnSuBa8CkACI9LKdS8fHZsQwOUYnNRl/ZIAAOjhVaRhIzrysT36iroBkg2iMqv/1
62nVOxAusKbX6sjE0r3mZUbT64cRbdIEbFZQWon6Ohu1BP9vV0mjnpkTH4Sq/syp
V2iccsawiOUkuYbnd+XkVKPYS2GB3bMnBBrhue8/7pjzVdOhLhuPOlAnh48CAwEA
AaOCAzswggM3MB8GA1UdIwQYMBaAFG8dNUkQbDL6WaCevIroH5W+cXoMMB0GA1Ud
DgQWBBQVIOIPUEWdw3Jhz4Xj/TiYKa/p9jAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0T
AQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSQYDVR0gBEIw
QDA0BgsrBgEEAbIxAQICTzAlMCMGCCsGAQUFBwIBFhdodHRwczovL3NlY3RpZ28u
Y29tL0NQUzAIBgZngQwBAgIwPwYDVR0fBDgwNjA0oDKgMIYuaHR0cDovL0dFQU5U
LmNybC5zZWN0aWdvLmNvbS9HRUFOVE9WUlNBQ0E0LmNybDB1BggrBgEFBQcBAQRp
MGcwOgYIKwYBBQUHMAKGLmh0dHA6Ly9HRUFOVC5jcnQuc2VjdGlnby5jb20vR0VB
TlRPVlJTQUNBNC5jcnQwKQYIKwYBBQUHMAGGHWh0dHA6Ly9HRUFOVC5vY3NwLnNl
Y3RpZ28uY29tMIIBfAYKKwYBBAHWeQIEAgSCAWwEggFoAWYAdgDPEVbu1S58r/OH
W9lpLpvpGnFnSrAX7KwB0lt3zsw7CAAAAYz3mIulAAAEAwBHMEUCIQDsX66i2VVr
OxRCY+ralvd0Ao7K0ad2nObOJZw0zwQhlgIgR7EyceuRsqUqxqkC6Ysa3h4cGo40
2c2OfS2ueyCUNywAdQCi4wrkRe+9rZt+OO1HZ3dT14JbhJTXK14bLMS5UKRH5wAA
AYz3mIvpAAAEAwBGMEQCIHjMf7rX6v8vQ3rr/fXFRLcqKxotcWXIVlrb3diSczCv
AiAYAeqH+gYW5l8GXDNPFesSMQFTa3prlt7AtmKmPBm8xQB1AE51oydcmhDDOFts
1N8/Uusd8OCOG41pwLH6ZLFimjnfAAABjPeYi4QAAAQDAEYwRAIgDXzgYLIxlh1m
Ye5bf1cltO68Qyc8vT4AcFVOaBykFMwCIEmdrVzADxzmOeZJtGwWtY4HtYb9mBpy
NGtwpXJTjM9RMDUGA1UdEQQuMCyCE2V6c2NkLnVuaXYtbHlvbjMuZnKCFSouZXpz
Y2QudW5pdi1seW9uMy5mcjANBgkqhkiG9w0BAQwFAAOCAgEAnbldDB4XM7oojFyv
sPc6pXbaZy2pfw0UJYp8cl+DG3nxy9q5UHQmE1Ez5tFBnM/7RkAhl4QHXFhWUs+A
70syHTwtxWYDPi1HcCRZIvxGFWAJGykVMTPQ+C8VJZEfFD7eTw/JrilDzj5ESdgf
oFx3RyiVl1odrsjiE9SsWtRX5MOm1rj7GSagSPHIXuMlplhsQeYBP+lmy2zxSqgp
FxEQQraVhCe8g2EM0au+002xRD51t+CpaR3mepZd+IUgAri84caH+Eeb+Waq+J6/
J487EAxxkoThKK2m/FuA010HvRa9zzC8dgt+QaK7vM/MFheX5FvOcmpAaeGpIpR4
1ZCOfEnlzcQ9HYDKBTZPTBHVDhrPaLD2cXGmuhl7xRWquh7YMxhOKpFnR6CU/oux
HBPCtGR2OnNnP1mabRNXBTFPgiVdXimJwKhvUk4/u7ej/M0SwI6hLhxKUk8/NCQO
uzHEpEeWQToPMnxnQd3p8w9wH3QOohV54wwAldz9qhjlIVEqaLBGRDY1ATh49EqZ
1fKcg/VX2GcHBeA1dZ37andDyaT3diLmj88W+f+Jqcl3GZpNlbeI5LsC8saCdsXd
k95ti/b63bMECpGXccFRMc7hVpNWCxpuSAqqfqBVGeMniTjo9TY/R18WdvccMAYl
6MLBHzVt46pVMLe4RP73/MyHaGM=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 262111333788284162657536511254107907877
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Auvergne-Rhône-Alpes'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Université Lyon 3 Jean Moulin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ezscd.univ-lyon3.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 805489568107727829694577190039446995141299143768592404209429007406884988994150042255355955613004577578580077318213165170015030116147259000248480925771497159449099176922613341500083883688348284107939989667083483225762453378424496081758787179235992108036146646003163878496081092440469431066903534369903753414941184216678057522176913308342527738652422062786824478771729325220708516011857729076918673939135581678983968690194612252199053035441257196407437843228434730489876486105120106611003252404027875387444302703999972795361914465254326792898006342590896618214984386299087631142065046099602958582055358263808476029003826182661086891993523086641207297435989198631041611792597230847323042976041462556561842223072131173943184647822070200245632601248641500403129692911244795050755543232227019402330994975522709004170190046915420093871599936606166979651066910156017794517291233511503655412073300735173284911421291459049924317047015458412837819331977404633572966758745833294457373566061467766556024288131567234496398623555646531149903299652686255470056684694735492231477383096705821343290295696179105383836735361617949889090477668239874136046786648744791788173479974243712056355076805365014603492111473326955453234765355951524647350632417167
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1520e20f50459dc37261cf85e3fd389829afe9f6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ezscd.univ-lyon3.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ezscd.univ-lyon3.fr'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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