www.impots.gouv.fr

- DIRECTION GENERALE DES FINANCES PUBLIQUES -

Issued by Certigna Services CA

About this certificate

This digital certificate with serial number da:8f:64:27:5d:f7:57:a3:b5:94:d8:a5:3e:17:43:36 was issued on by DHIMYOTIS.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

DIRECTION GENERALE DES FINANCES PUBLIQUES

Company registration number: S260590917
Organization: DIRECTION GENERALE DES FINANCES PUBLIQUES
Locality: PARIS
Country: FR

DHIMYOTIS

Organization: DHIMYOTIS
Organization unit: 0002 48146308100036
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): da:8f:64:27:5d:f7:57:a3:b5:94:d8:a5:3e:17:43:36
Serial Number (int): 290516232891821968323878880482524873526
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: e2:e8:41:6c:f4:c2:be:ef:fa:90:8c:e2:f9:90:8c:10:30:71:bd:2d
AuthorityKeyId: ac:ec:86:8f:4b:37:1c:b8:7f:17:1b:19:d0:ae:e8:4e:e3:34:5c:12

Fingerprint (sha1): 6e:03:a3:4a:fe:1e:eb:af:74:20:6e:4c:29:01:f6:b6:7e:55:04:30
Fingerprint (sha256): 8b:70:f6:46:79:cf:ff:68:f8:3f:36:29:a4:0e:b7:2b:8c:8a:32:b7:4f:c8:7c:3d:60:6a:60:1d:12:8e:b5:55

Issuing Certificate URL: http://autorite.certigna.fr/servicesca.der
Issuing Certificate URL: http://autorite.dhimyotis.com/servicesca.der

Revocation information

OCSP Server: http://servicesca.ocsp.certigna.fr
OCSP Server: http://servicesca.ocsp.dhimyotis.com
CRL Distribution Point: http://crl.dhimyotis.com/servicesca.crl
CRL Distribution Point: http://crl.certigna.fr/servicesca.crl

Check the revocation status for certificate www.impots.gouv.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.impots.gouv.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.impots.gouv.fr
static.impots.gouv.fr

Other certificates including the domain name impots.gouv.fr

(limited to 100 certificates)
cfsfc.impots.gouv.fr
bmly.impots.gouv.fr
adel.impots.gouv.fr
cfspro-idp.impots.gouv.fr
www.impots.gouv.fr
teletd.impots.gouv.fr
cfsfc.impots.gouv.fr
www.impots.gouv.fr
www.impots.gouv.fr
cfspro.impots.gouv.fr
timbres.impots.gouv.fr
cfspro.impots.gouv.fr
www3.impots.gouv.fr
consommation.timbres.impots.gouv.fr
cfspart.impots.gouv.fr
cfspart.impots.gouv.fr
inscriptionpart.impots.gouv.fr
assistance-en-ligne.integration.impots.gouv.fr
static.impots.gouv.fr
assistance-en-ligne.impots.gouv.fr
inscriptionpro.integration.impots.gouv.fr
www3.impots.gouv.fr
idp.impots.gouv.fr
wss-acl.integration.impots.gouv.fr
www.integration.impots.gouv.fr
cfsmsp.impots.gouv.fr
cfspro.impots.gouv.fr
static.impots.gouv.fr
inscriptionpro.impots.gouv.fr
teletd.impots.gouv.fr
cfspro-idp.impots.gouv.fr
idp.impots.gouv.fr
adel.integration.impots.gouv.fr
teletd-test.impots.gouv.fr
timbres.impots.gouv.fr
static.impots.gouv.fr
inscriptionpro.impots.gouv.fr
inscriptionpro.impots.gouv.fr
www.impots.gouv.fr
teletd.integration.impots.gouv.fr
inscriptionpro.impots.gouv.fr
recherchesuccessionsvacantes.impots.gouv.fr
cfsfc.impots.gouv.fr
poseidon1.integration.impots.gouv.fr
www.impots.gouv.fr
inscriptionpro.integration.impots.gouv.fr
formuelassistteleservice.impots.gouv.fr
www.impots.gouv.fr
encheres-domaine.integration.impots.gouv.fr
poseidon1-test.integration.impots.gouv.fr
cfsmsp.impots.gouv.fr
formulaires.impots.gouv.fr
inscriptionpro.impots.gouv.fr
idp.impots.gouv.fr
eai-cts-nc.impots.gouv.fr
rendezvous.impots.gouv.fr
idp.integration.impots.gouv.fr
poseidon2.impots.gouv.fr
idp.integration.impots.gouv.fr
cfsfc.impots.gouv.fr
www.impots.gouv.fr
payfip.impots.gouv.fr
poseidon1.impots.gouv.fr
www.impots.gouv.fr
static.impots.gouv.fr
payfip.impots.gouv.fr
timbres.impots.gouv.fr
consommation.timbres.impots.gouv.fr
gw.impots.gouv.fr
cfsfc.impots.gouv.fr
teletd.integration.impots.gouv.fr
static.impots.gouv.fr
poseidon2.impots.gouv.fr
cfspro.impots.gouv.fr
cfspart.integration.impots.gouv.fr
payfip.integration.impots.gouv.fr
cfsmsp.impots.gouv.fr
formuelassistteleservice.impots.gouv.fr
retraitesdeletat.integration.impots.gouv.fr
cfspart.impots.gouv.fr
cfspro.impots.gouv.fr
encheres-domaine2.integration.impots.gouv.fr
www.impots.gouv.fr
static.impots.gouv.fr
static.impots.gouv.fr
inscriptionpro.impots.gouv.fr
www.tipi.integration.impots.gouv.fr
idp.impots.gouv.fr
inscriptionpart.impots.gouv.fr
padoc.impots.gouv.fr
eai-cts.impots.gouv.fr
avatar.impots.gouv.fr
adel.impots.gouv.fr
bofip-archives.impots.gouv.fr
teletd.impots.gouv.fr
cfspart.impots.gouv.fr
teletd-test.integration.impots.gouv.fr
teletd.impots.gouv.fr
inscriptionpro.impots.gouv.fr
formuelassistanceteleprocedure.impots.gouv.fr

Certificate

The complete raw certificate details for www.impots.gouv.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCTyeOwmuukl5kUqMpij
V5Hcxwo/E5HOdZGoGSolyY+iXY05xp/LQ0OBvocvfd43pko3D4HSn0aRq6+uB3D/
ItAQMWbFS0JKnRhY7Q6KgPsBuykqJsfPb7rklsHGNauBE+8LiH2w5CUW/qu6bjmu
eB4gACPWNlEysjAYNcR2PSNojoB8OuJyknhZ7EyeXqHuW2/AcKiolbTDsU0lZ3DE
hJURW8Nw3k+LQesUgXAQ+PPkRkPFVYrruwbej5I2j6krmnTEHVVsuVRnuCDfBNt6
FFYyKsSmziufPoaDd126nSFMRPxo/9EcR9sIMRhnXczOKg4kvnX1zgNw5u/WqCUf
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290516232891821968323878880482524873526
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DHIMYOTIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '0002 48146308100036'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.97
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NTRFR-48146308100036'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Certigna Services CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-11 23:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-01 22:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DIRECTION GENERALE DES FINANCES PUBLIQUES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.impots.gouv.fr'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'S260590917'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22741114216361550562136892381900128149752343791769319129826056039963509145355457138727649855463181638449949605916625207590220853190426410920000760737838195371744890364277553819197597469017551643004718680818263996762718836609988070624249039988679998329349471758915952884570009055677640113839479884945601309700164482563378231313818538526337486790068615751305878631475595968339765722604892776149130210232821093503810694058646180393079358473928918705907270786181949699266988635127497538697545800636550024634836333532688401498914316500877277723365179050804825396197377681532793528774844442600447405117358253409775011569459
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (215 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://autorite.certigna.fr/servicesca.der'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://autorite.dhimyotis.com/servicesca.der'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://servicesca.ocsp.certigna.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://servicesca.ocsp.dhimyotis.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName acec868f4b371cb87f171b19d0aee84ee3345c12
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.250.1.177.2.5.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.certigna.com/autorite-certification'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.dhimyotis.com/servicesca.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.certigna.fr/servicesca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.impots.gouv.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.impots.gouv.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e2e8416cf4c2beeffa908ce2f9908c103071bd2d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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