reach.sagemcom.com

- SAGEMCOM BROADBAND SAS -

Issued by TBS X509 CA business 2

About this certificate

This digital certificate with serial number a9:03:7e:17:52:8c:20:4d:61:cb:4e:3a:bc:58:45:f6 was issued on by TBS INTERNET.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

SAGEMCOM BROADBAND SAS

Organization: SAGEMCOM BROADBAND SAS
Organization unit: 0002 440294510
Organization unit: DSI
Address: 250 ROUTE DE L'EMPEREUR
Postal code: 92500
State / Province: Hauts de Seine
Locality: Rueil Malmaison
Country: FR

TBS INTERNET

Organization: TBS INTERNET
Organization unit: TBS INTERNET CA
State / Province: Calvados
Locality: Caen
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): a9:03:7e:17:52:8c:20:4d:61:cb:4e:3a:bc:58:45:f6
Serial Number (int): 224657665609631357905452067961838257654
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 97:ef:9a:b0:fc:78:64:f3:bf:6e:22:11:06:1b:bc:65:1b:d1:d8:cd
AuthorityKeyId: 71:f2:0b:a9:a3:ed:cb:03:4a:0c:3c:01:3b:be:4c:44:6d:eb:2a:f8

Fingerprint (sha1): 29:63:5c:3c:9d:cd:b2:4c:76:97:be:af:89:82:8a:fe:20:bf:e7:83
Fingerprint (sha256): 63:96:12:ef:72:3b:26:7a:4f:2c:b6:4b:31:81:ec:1e:ef:ea:85:e2:de:09:d4:80:ae:9b:38:cb:49:d0:15:51

Issuing Certificate URL: http://crt.usertrust.com/TBSX509CAbusiness2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/TBSX509CAbusiness2.crl

Check the revocation status for certificate reach.sagemcom.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for reach.sagemcom.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

reach.sagemcom.com
www.reach.sagemcom.com

Other certificates including the domain name sagemcom.com

(limited to 100 certificates)
keys.sagemcom.com
snc.sagemcom.com
mdm.sagemcom.com
transfer.sagemcom.com
shiva.sagemcom.com
webmail-ext.sagemcom.com
webmail-ext.sagemcom.com
snc.sagemcom.com
incident.sagemcom.com
webmail-ext.sagemcom.com
incident.sagemcom.com
cms-demo.sagemcom.com
neoftp.sagemcom.com
www.sagemcom.com
neoftp.sagemcom.com
snc.sagemcom.com
support.sagemcom.com
orion.sagemcom.com
*.sagemcom.com
rdfe2.sagemcom.com
www.sagemcom.com
pegase.sagemcom.com
beam.sagemcom.com
limesurvey.sagemcom.com
reach.sagemcom.com
securemail.sagemcom.com
store.sagemcom.com
share.sagemcom.com
otrs.m2m.sagemcom.com
shiva.sagemcom.com
snc.sagemcom.com
sagemcom.com
gsmr-support.sagemcom.com
reach.sagemcom.com
share.sagemcom.com
reach.sagemcom.com
pegase.sagemcom.com
pegase-partenaire.sagemcom.com
sts.sagemcom.com
incident.sagemcom.com
cas.sagemcom.com
snc.sagemcom.com
sharesc.sagemcom.com
reach.sagemcom.com
documents-sav-b2b.sagemcom.com
mdm.sagemcom.com
esm-support.sagemcom.com
secure.sagemcom.com
shiva.sagemcom.com
cas.sagemcom.com
andromede.sagemcom.com
incident.sagemcom.com
pegase-psi.sagemcom.com
share.sagemcom.com
reach.sagemcom.com
share.sagemcom.com
snc.sagemcom.com
ctac.sagemcom.com
ctac.sagemcom.com
m2m.sagemcom.com
pegase.sagemcom.com
sharesc.sagemcom.com
shiva.sagemcom.com
transfer.sagemcom.com
snc.sagemcom.com
neoftp.sagemcom.com
neoftp.sagemcom.com
ctac.sagemcom.com
orion.sagemcom.com
old.sagemcom.com
rdfe2.sagemcom.com
share.sagemcom.com
mgp.sagemcom.com
ctac.sagemcom.com
pegase.sagemcom.com
shiva.sagemcom.com
sharesc.sagemcom.com
pa.sagemcom.com
pegase.sagemcom.com
webmail-ext.sagemcom.com
smartvillage1.sagemcom.com
sagemcom.com
sagemcom.com
limesurvey.sagemcom.com
rdfe2.sagemcom.com
support-femto.sagemcom.com
gsmr-support.sagemcom.com
transfer.sagemcom.com
pegase-psi.sagemcom.com
oldportal.sagemcom.com
snc.sagemcom.com
ctac.sagemcom.com
reach.sagemcom.com
share.sagemcom.com
share.sagemcom.com
pegase.sagemcom.com
pa.sagemcom.com
webmail-ext.sagemcom.com
keys.sagemcom.com
andromede.sagemcom.com

Certificate

The complete raw certificate details for reach.sagemcom.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuS8n/nH4BcwQX4jU5NLK
bw0rdNCo1bs/MQX00PF+IPKqBm5ZG3GhG6YxRN5JhbgXmuAZfIK0mV5g2os0f6YM
ES7Np742qTWZqocpHQS9jCcJSchkb/0PT+ip44CA2+NqHW3ODoplHYXrNV9ekXmI
LH5Ij9a2S4L42a1kBNzazVBfhIVWP0+yOKgILHqysX5TyGjraT6n4bMifFAfpWwD
xALORYHrb6W3JxT0fbH0hPD3bQkfNN8HEhwEltKEwj5dYmsRFpYoTcIoM5mKGXDv
JIJGSgioGp0viMjOyVrgER2F+Z9K5ZOdyz8uKiOdzUjfekbL4gZTJrHwVLsG7UNs
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 224657665609631357905452067961838257654
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Calvados'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Caen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TBS INTERNET'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TBS INTERNET CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TBS X509 CA business 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '92500'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hauts de Seine'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rueil Malmaison'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '250 ROUTE DE L'EMPEREUR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SAGEMCOM BROADBAND SAS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '0002 440294510'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DSI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'reach.sagemcom.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23377340020570900897606479462844369117934327281499814662832453932204370111406382138834741616453371904770914387944676996749773282581920147030819408730175983137031720650769570447256748291685081110387499286647690842451302244942527447100552170848988249407089977277113586131850288141232809923064243531284036226329298262698758681791935574821641284008036145697333767725191253761016246495857195328085054201752461384102891385223094545213888672474518563701267438047343174425241562985081497242213445483929894749075038877278058665891277553283369103462824593406602813031377287918939165717987616806166984125322664753634569401625811
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 71f20ba9a3edcb034a0c3c013bbe4c446deb2af8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							97ef9ab0fc7864f3bf6e2211061bbc651bd1d8cd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.12983.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/TBSX509CAbusiness2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/TBSX509CAbusiness2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reach.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reach.sagemcom.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009ec371d9b305bb7aa6aca38ff33c0cf9fd205947df72921fbd29a55ba7de0c44642b6a980931f189aa7a5068325f05ed49c5a6b31227deeb5f180971099f77f1223126b3fc8b4fc5289ddbd7dc02e6d43d6ff8cd04bcc71440a5488f351becd00dbb0462cabd33db8ddc01f177535e68cea079f6f3c62fe367db7d6bc0ca0e95dcd502487cc24d74dfc7aa500cc0430f47cde2dffe4e4ad10466a2e2f0e9ad72fc8ec205f5820ebe6eb161fc633bec2fcb35f9db53f4c2c5b1218d81920eaa730812e11a51928e6d23eb88f5b26b5435fccdf470c2a7367e2132957dc94d2b1adaaca81d85902bf1683342756a4d786059354ba632b30326522de74b56d20481