partner.berceaumagique.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 75:5e:b1:de:3e:d8:72:f6:09:3b:97:27:11:38:7c:6c was issued on by Google Trust Services LLC.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=partner.berceaumagique.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 75:5e:b1:de:3e:d8:72:f6:09:3b:97:27:11:38:7c:6c
Serial Number (int): 156011359006139096913478812136774335596
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: c0:3f:21:8e:8b:ad:08:71:7b:40:53:71:01:31:15:57:95:ca:c1:1b
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 98:19:66:d7:ec:0f:a0:65:90:45:ee:30:ee:22:27:91:0f:be:48:20
Fingerprint (sha256): 60:50:95:8d:a4:7a:93:7f:d0:17:a3:f6:b6:f3:5d:31:b5:ac:43:f9:77:66:f1:83:43:89:13:b2:3e:a8:df:b5

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/q5agacVk9EU
CRL Distribution Point: http://crls.pki.goog/gts1d4/_B2xlHsaJr4.crl

Check the revocation status for certificate partner.berceaumagique.com

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for partner.berceaumagique.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

partner.berceaumagique.com
partner.123consommables.com
partner.delygreen.com
partner.labor-hako.com
partner.ruedesplantes.com
partner.cap-adrenaline.com
partner.beautysuccess.fr
partner.boisenergienord.fr
partner.direct-fournitures.fr
partner.hypure.com
partner.carter-cash.com
newpartner.leocare.eu
partner.la-becanerie.com
partner.troisfoisvin.com
partner.antalis.fr
partner.jardins-loisirs.com
partner.gemme-les-bijoux.com
partner.loewi.fr

Other certificates including the domain name berceaumagique.com

(limited to 100 certificates)
berceaumagique.com
admin.exauceurs.berceaumagique.com
berceaumagique.com
static.berceaumagique.com
exauceurs.berceaumagique.com
admin.exauceurs.berceaumagique.com
blog.berceaumagique.com
blog.berceaumagique.com
www.berceaumagique.com
berceaumagique.com
berceaumagique.com
berceaumagique.com
admin.exauceurs.berceaumagique.com
berceaumagique.com
berceaumagique.com
admin.exauceurs.berceaumagique.com
exauceurs.berceaumagique.com
berceaumagique.com
blog.berceaumagique.com
exauceurs.berceaumagique.com
blog.berceaumagique.com
www.megara.fr
blog.berceaumagique.com
berceaumagique.com
blog.berceaumagique.com
www.berceaumagique.com
blog.berceaumagique.com
berceaumagique.com
admin.exauceurs.berceaumagique.com
partner.man-actu05.com
berceaumagique.com
berceaumagique.com
partner.man-actu05.com
exauceurs.berceaumagique.com
admin.exauceurs.berceaumagique.com
blog.berceaumagique.com
partner.berceaumagique.com
berceaumagique.com
exauceurs.berceaumagique.com
exauceurs.berceaumagique.com
bapteme-bebe.com
admin.exauceurs.berceaumagique.com
exauceurs.berceaumagique.com
berceaumagique.com
blog.berceaumagique.com
berceaumagique.com
berceaumagique.com
admin.exauceurs.berceaumagique.com
admin.exauceurs.berceaumagique.com
exauceurs.berceaumagique.com
www.megara.fr
berceaumagique.com
exauceurs.berceaumagique.com
pro.berceaumagique.com
pro.berceaumagique.com
admin.exauceurs.berceaumagique.com
exauceurs.berceaumagique.com
admin.exauceurs.berceaumagique.com
exauceurs.berceaumagique.com
berceaumagique.com
berceaumagique.com
blog.berceaumagique.com
exauceurs.berceaumagique.com
admin.exauceurs.berceaumagique.com
www.megara.fr
admin.exauceurs.berceaumagique.com
admin.exauceurs.berceaumagique.com
berceaumagique.com
berceaumagique.com
blog.berceaumagique.com
berceaumagique.com
blog.berceaumagique.com
berceaumagique.com
berceaumagique.com
www.happy-babyshower.com
www.megara.fr
berceaumagique.com
blog.berceaumagique.com
admin.exauceurs.berceaumagique.com
blog.berceaumagique.com
berceaumagique.com
berceaumagique.com
blog.berceaumagique.com
berceaumagique.com
admin.exauceurs.berceaumagique.com
exauceurs.berceaumagique.com
blog.berceaumagique.com
blog.berceaumagique.com
admin.exauceurs.berceaumagique.com
berceaumagique.com
www.berceaumagique.com
berceaumagique.com
admin.exauceurs.berceaumagique.com
berceaumagique.com
berceaumagique.com
exauceurs.berceaumagique.com
admin.exauceurs.berceaumagique.com
berceaumagique.com
berceaumagique.com
berceaumagique.com

Certificate

The complete raw certificate details for partner.berceaumagique.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHMDCCBhigAwIBAgIQdV6x3j7YcvYJO5cnETh8bDANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM
QzETMBEGA1UEAxMKR1RTIENBIDFENDAeFw0yMzExMjIwNDM5MjNaFw0yNDAyMjAw
NTMxNTRaMCUxIzAhBgNVBAMTGnBhcnRuZXIuYmVyY2VhdW1hZ2lxdWUuY29tMIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXWh8Okvcc9PkR5nsmdtcJg/
ZHGIgvT4sofnUkLtqWrr6Xm4IKYVsod53UmEn9p3LztmUMkQlYMbFIEOI1HUgXEY
o2N5+3hOcyEwuDfoUSO07rzMAAAVpxrXkLP89fMr8/PixcooPLkpOFuaC8GKzEDm
JxxaSSbyAjr66RhigCycoyInXeqUE2BPuEC3U/IYYcBgCkur/8uyoCGt7eZTtT0p
VwiDP/OkYQjsNvEUFDx2mdHb2OdMetJ6It3cMbTkQ6F6n+hWjrfVqgzxD6zlUmw/
jWUycMjbbDktDIsWNIRBnKHoqNPJ7MNvfUz+Ku0l6XxWhGTxs9KI6UU6LOa3iwID
AQABo4IEOTCCBDUwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMB
MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFMA/IY6LrQhxe0BTcQExFVeVysEbMB8G
A1UdIwQYMBaAFCXiGA6yV5GUKuXUXYaQg95Ts7iSMHgGCCsGAQUFBwEBBGwwajA1
BggrBgEFBQcwAYYpaHR0cDovL29jc3AucGtpLmdvb2cvcy9ndHMxZDQvcTVhZ2Fj
Vms5RVUwMQYIKwYBBQUHMAKGJWh0dHA6Ly9wa2kuZ29vZy9yZXBvL2NlcnRzL2d0
czFkNC5kZXIwggHaBgNVHREEggHRMIIBzYIacGFydG5lci5iZXJjZWF1bWFnaXF1
ZS5jb22CG3BhcnRuZXIuMTIzY29uc29tbWFibGVzLmNvbYIVcGFydG5lci5kZWx5
Z3JlZW4uY29tghZwYXJ0bmVyLmxhYm9yLWhha28uY29tghlwYXJ0bmVyLnJ1ZWRl
c3BsYW50ZXMuY29tghpwYXJ0bmVyLmNhcC1hZHJlbmFsaW5lLmNvbYIYcGFydG5l
ci5iZWF1dHlzdWNjZXNzLmZyghpwYXJ0bmVyLmJvaXNlbmVyZ2llbm9yZC5mcoId
cGFydG5lci5kaXJlY3QtZm91cm5pdHVyZXMuZnKCEnBhcnRuZXIuaHlwdXJlLmNv
bYIXcGFydG5lci5jYXJ0ZXItY2FzaC5jb22CFW5ld3BhcnRuZXIubGVvY2FyZS5l
dYIYcGFydG5lci5sYS1iZWNhbmVyaWUuY29tghhwYXJ0bmVyLnRyb2lzZm9pc3Zp
bi5jb22CEnBhcnRuZXIuYW50YWxpcy5mcoIbcGFydG5lci5qYXJkaW5zLWxvaXNp
cnMuY29tghxwYXJ0bmVyLmdlbW1lLWxlcy1iaWpvdXguY29tghBwYXJ0bmVyLmxv
ZXdpLmZyMCEGA1UdIAQaMBgwCAYGZ4EMAQIBMAwGCisGAQQB1nkCBQMwPAYDVR0f
BDUwMzAxoC+gLYYraHR0cDovL2NybHMucGtpLmdvb2cvZ3RzMWQ0L19CMnhsSHNh
SnI0LmNybDCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2AO7N0GTV2xrOxVy3nbTN
E6Iyh0Z8vOzew1FIWUZxH7WbAAABi/WKUA8AAAQDAEcwRQIgcpur+zWIgobbkv3R
48/BkYwWg4T0rD/WoDuFKRPp4z0CIQCeFmG44jOguARJA5UfBP6pNsjDfD5TNyc1
0nS4yRrMPgB3AFWB1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+jqh0HE9MMAAABi/WK
UE8AAAQDAEgwRgIhAIY+akqKU5UjJGd0LAYr+87BpX3dms+1TOESgs/S5NDHAiEA
8+jEVYQUa8ot5KFDwSzSei7QWButDbLbTEwSGW1093IwDQYJKoZIhvcNAQELBQAD
ggEBAKc76D/ybywyDUAYs9SdpfJLrfFVqAXiZOA7PmmFXdTvrXIbn6Q51afW6z7r
a8LSS1qY6RqqMPXUHDYDZ/qL77Bub2aFRzY+z9Ydr5dE3+JdWHqz0v6V7CuTYi4D
+RcVUFipUb6WQMXAMsTkIleDfO01CqMJlaaYya++1AQxsDighMz+0stV25tgr9XK
cfzAuxvMhd75PC4mEIS1V6b0n8KbzvdFKHt+ppNSvT3d8jLTQZqxjyh5iqmj+jnp
RVc5CVc5I1YQHVB+R0YWfm9heBkqL/1QM/mB+6xhj6tu/IhrS3x4bcFqBx8/GYEa
IZm+ooKgb1eHCK08c9nDrJWLsa0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXWh8Okvcc9PkR5nsmdt
cJg/ZHGIgvT4sofnUkLtqWrr6Xm4IKYVsod53UmEn9p3LztmUMkQlYMbFIEOI1HU
gXEYo2N5+3hOcyEwuDfoUSO07rzMAAAVpxrXkLP89fMr8/PixcooPLkpOFuaC8GK
zEDmJxxaSSbyAjr66RhigCycoyInXeqUE2BPuEC3U/IYYcBgCkur/8uyoCGt7eZT
tT0pVwiDP/OkYQjsNvEUFDx2mdHb2OdMetJ6It3cMbTkQ6F6n+hWjrfVqgzxD6zl
Umw/jWUycMjbbDktDIsWNIRBnKHoqNPJ7MNvfUz+Ku0l6XxWhGTxs9KI6UU6LOa3
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 156011359006139096913478812136774335596
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-22 04:39:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-20 05:31:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'partner.berceaumagique.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22907139987110785356165939095722826775931649928133040254134544290473798972051195654028718907024889869177375034500513026920838200099596631198292699598686320759403896075722755280962001490087599654899164093508740006651281018554363646405076031031101282312689396173346510745367066715862025758268020869842349759743735278207478314305353236389695068728368952873083002317047130810974664523818483925150352593709794970908779759806687101218606131851175094481529501240392323803652488687071380383684160100513544395004418894424676822576610612870992991515408459180424969561888976814630215677122878553594010049143574510746249944545163
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c03f218e8bad08717b4053710131155795cac11b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/q5agacVk9EU'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (465 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.berceaumagique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.123consommables.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.delygreen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.labor-hako.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.ruedesplantes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.cap-adrenaline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.beautysuccess.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.boisenergienord.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.direct-fournitures.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.hypure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.carter-cash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newpartner.leocare.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.la-becanerie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.troisfoisvin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.antalis.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.jardins-loisirs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.gemme-les-bijoux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.loewi.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/_B2xlHsaJr4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bf58a500f00000403004730450220729babfb35888286db92fdd1e3cfc1918c168384f4ac3fd6a03b852913e9e33d0221009e1661b8e233a0b8044903951f04fea936c8c37c3e53372735d274b8c91acc3e0077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000018bf58a504f0000040300483046022100863e6a4a8a5395232467742c062bfbcec1a57ddd9acfb54ce11282cfd2e4d0c7022100f3e8c45584146bca2de4a143c12cd27a2ed0581bad0db2db4c4c12196d74f772
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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