orion.sagemcom.com

- SAGEMCOM BROADBAND SAS -

Issued by TBS X509 CA business 2

About this certificate

This digital certificate with serial number 6b:f9:14:d0:a7:57:f8:57:a7:bf:32:fd:03:66:5e:5d was issued on by TBS INTERNET.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

SAGEMCOM BROADBAND SAS

Organization: SAGEMCOM BROADBAND SAS
Organization unit: SAGEMCOM BROADBAND SAS
Address: 250 ROUTE DE L'EMPEREUR
Postal code: 92500
State / Province: Hauts-De-Seine
Locality: RUEIL MALMAISON
Country: FR

TBS INTERNET

Organization: TBS INTERNET
Organization unit: TBS INTERNET CA
State / Province: Calvados
Locality: Caen
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): 6b:f9:14:d0:a7:57:f8:57:a7:bf:32:fd:03:66:5e:5d
Serial Number (int): 143520699646201392430915168725272780381
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 85:d3:49:0e:3b:2b:69:83:d5:66:c1:c3:c3:e4:d4:13:2c:63:e4:51
AuthorityKeyId: 71:f2:0b:a9:a3:ed:cb:03:4a:0c:3c:01:3b:be:4c:44:6d:eb:2a:f8

Fingerprint (sha1): ba:1c:41:2a:16:e5:70:dc:70:af:60:5c:f6:38:db:ed:f2:83:42:4e
Fingerprint (sha256): 79:c1:05:c0:99:a4:18:10:de:4e:50:fb:d2:7b:3b:36:14:8a:61:5d:0b:fd:5b:6f:1b:b7:68:34:12:1f:aa:9a

Issuing Certificate URL: http://crt.usertrust.com/TBSX509CAbusiness2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/TBSX509CAbusiness2.crl

Check the revocation status for certificate orion.sagemcom.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for orion.sagemcom.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

orion.sagemcom.com
www.orion.sagemcom.com

Other certificates including the domain name sagemcom.com

(limited to 100 certificates)
keys.sagemcom.com
snc.sagemcom.com
mdm.sagemcom.com
transfer.sagemcom.com
shiva.sagemcom.com
webmail-ext.sagemcom.com
webmail-ext.sagemcom.com
snc.sagemcom.com
incident.sagemcom.com
webmail-ext.sagemcom.com
incident.sagemcom.com
cms-demo.sagemcom.com
neoftp.sagemcom.com
www.sagemcom.com
neoftp.sagemcom.com
snc.sagemcom.com
support.sagemcom.com
orion.sagemcom.com
*.sagemcom.com
rdfe2.sagemcom.com
www.sagemcom.com
pegase.sagemcom.com
beam.sagemcom.com
limesurvey.sagemcom.com
reach.sagemcom.com
securemail.sagemcom.com
store.sagemcom.com
share.sagemcom.com
otrs.m2m.sagemcom.com
shiva.sagemcom.com
snc.sagemcom.com
sagemcom.com
gsmr-support.sagemcom.com
reach.sagemcom.com
share.sagemcom.com
reach.sagemcom.com
pegase.sagemcom.com
pegase-partenaire.sagemcom.com
sts.sagemcom.com
incident.sagemcom.com
cas.sagemcom.com
snc.sagemcom.com
sharesc.sagemcom.com
reach.sagemcom.com
documents-sav-b2b.sagemcom.com
mdm.sagemcom.com
esm-support.sagemcom.com
secure.sagemcom.com
shiva.sagemcom.com
cas.sagemcom.com
andromede.sagemcom.com
incident.sagemcom.com
pegase-psi.sagemcom.com
share.sagemcom.com
reach.sagemcom.com
share.sagemcom.com
snc.sagemcom.com
ctac.sagemcom.com
ctac.sagemcom.com
m2m.sagemcom.com
pegase.sagemcom.com
sharesc.sagemcom.com
shiva.sagemcom.com
transfer.sagemcom.com
snc.sagemcom.com
neoftp.sagemcom.com
neoftp.sagemcom.com
ctac.sagemcom.com
orion.sagemcom.com
old.sagemcom.com
rdfe2.sagemcom.com
share.sagemcom.com
mgp.sagemcom.com
ctac.sagemcom.com
pegase.sagemcom.com
shiva.sagemcom.com
sharesc.sagemcom.com
pa.sagemcom.com
pegase.sagemcom.com
webmail-ext.sagemcom.com
smartvillage1.sagemcom.com
sagemcom.com
sagemcom.com
limesurvey.sagemcom.com
rdfe2.sagemcom.com
support-femto.sagemcom.com
gsmr-support.sagemcom.com
transfer.sagemcom.com
pegase-psi.sagemcom.com
oldportal.sagemcom.com
snc.sagemcom.com
ctac.sagemcom.com
reach.sagemcom.com
share.sagemcom.com
share.sagemcom.com
pegase.sagemcom.com
pa.sagemcom.com
webmail-ext.sagemcom.com
keys.sagemcom.com
andromede.sagemcom.com

Certificate

The complete raw certificate details for orion.sagemcom.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVK7HW2R9v3crOpKWXrL
9PCH3hdhSxZEvpCjia//r9HkTomety6ConMN3WEKsGirBpsxw7qsB4seJjq3doFR
7YiGchTtilG0ldVVR6HrYuqATopjZb+hUoE3R27pgvihBIhD5cjINBeShBbZohrK
NC0FORJGTLRn77s1ZtgyOzwDKOwn3dWAsDheKd0PQ+/fb/d/thJJopDgtJhOfkRO
CjAqDw+UXG31TsSn23Cqt66WtNsZBrCVkVxVyrOb2KCHC/+h/eGng5JyGK62ypFC
NdTzoBdD2Ask9p95wcr6rt7GtNkKJilHn8PNx+5tGsFfQgLpJ+TLTnH7c8G5y/kI
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 143520699646201392430915168725272780381
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Calvados'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Caen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TBS INTERNET'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TBS INTERNET CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TBS X509 CA business 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '92500'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hauts-De-Seine'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RUEIL MALMAISON'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '250 ROUTE DE L'EMPEREUR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SAGEMCOM BROADBAND SAS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SAGEMCOM BROADBAND SAS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'orion.sagemcom.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22384976115045354592684509522780204982415870318924758676655259384095406604722567269906728342586121895164154686694848629020657553105336569344938825065685790447823522403244915470063836975089474402922082060099142131254981588550637596339813578093553687572158303163160245039490049278994143985720828447252899623537547929149580910567071118759019492792713929538273394988478047809052245917467986977086599991330382341635975822816790344879958224995108511050150314824767806954158913913877014472859459794569099200968465811215859265260330096692354337790737027253658369442605295758411184195654571792627671418340312974401474087422171
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 71f20ba9a3edcb034a0c3c013bbe4c446deb2af8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							85d3490e3b2b6983d566c1c3c3e4d4132c63e451
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.12983.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/TBSX509CAbusiness2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/TBSX509CAbusiness2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orion.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orion.sagemcom.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d700000170c8c0da1e000004030046304402201218288a8de7127209ab0609c0900e942c9dd171a6c1d612995e012deebe6ca50220375fb7202b5ee4310da611546d2c476ac99a914509747915e2ded156cc449ba00076009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c200000170c8c0d9e60000040300473045022100945c9225099557b8e83ca6c1004e9b4882d4f7227161b139939ab4637adf6ec50220615586e9e3351d62279850ecd9dff81fff1958add009978b698bf1decd46b1bb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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