tms.opacweb.fr

Issued by R3

About this certificate

This digital certificate with serial number 03:8a:14:2a:15:cf:d2:73:d6:7a:23:09:f3:e6:0a:06:85:48 was issued on by Let's Encrypt.

With 73 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tms.opacweb.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8a:14:2a:15:cf:d2:73:d6:7a:23:09:f3:e6:0a:06:85:48
Serial Number (int): 308322627509149967886544858615108698801480
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1f:00:27:96:29:39:71:4f:4d:bf:c0:66:be:22:e7:4e:61:91:91:12
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6a:18:51:64:69:26:97:f1:4a:1e:b9:f9:4d:6a:84:1e:fc:fc:b5:a1
Fingerprint (sha256): 9b:73:47:08:f9:6f:42:f3:75:01:dd:58:ef:53:7c:5b:44:ac:a8:22:08:14:e5:54:ea:b4:d4:bb:1c:1c:bd:0b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate tms.opacweb.fr

73

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tms.opacweb.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2000ans2000images.toulouse.fr
augustins.opacweb.fr
augustins.org
ba-bordeaux.opacweb.fr
babibliobordeaux.opacweb.fr
biblio-nyon.opacweb.fr
capc.opacweb.fr
centrebrassens.ville-sete.fr
charles-negre.opacweb.fr
collections-mba.nancy.fr
collections-musees.nyon.ch
collections-sarreguemines.opacweb.fr
collections-vaucluse.opacweb.fr
collections.mba-pau.opacweb.fr
collections.musees-dunkerque.eu
collections.musees.marseille.fr
collections.museum-histoirenaturelle.opacweb.fr
demo.opacweb.fr
dev.opacweb.fr
dev2.opacweb.fr
documentation-sarreguemines.opacweb.fr
documentation-vaucluse.opacweb.fr
documentation.laciteduvin.com
domaine-de-sceaux.opacweb.fr
dupuy.opacweb.fr
espacebrassens.ville-sete.fr
espacemuseal-mcn-collection.opacweb.fr
exposition-collection.opacweb.fr
filmoteca-oai.opacweb.fr
filmoteca-oainews.opacweb.fr
filmoteca.opacweb.fr
formation.opacweb.fr
labit.opacweb.fr
maison-de-chateaubriand.opacweb.fr
maqbordeaux.opacweb.fr
matou.opacweb.fr
mba-pau.opacweb.fr
mbalyon.opacweb.fr
mhc.opacweb.fr
mhn-opacweb.lille.fr
mhn2.opacweb.fr
mhntlse-ethno.opacweb.fr
mhntlse.opacweb.fr
mhntoulouse.opacweb.fr
mian-anatole-jakovsky.opacweb.fr
mobydocv7.opacweb.fr
musee-artsanciens-collection.opacweb.fr
musee-breton-oai.awstudio.website
musee-cheret.opacweb.fr
musee-cimiez.opacweb.fr
musee-leondierx.re
musee-massena.opacweb.fr
musee-matisse.opacweb.fr
musee-villele.re
musee.coulommiers.fr
museenouvellecaledonie-collections.gouv.nc
museenouvellecaledonie-ipkd.gouv.nc
musees.aude.fr
musees.ville-poissy.fr
museeseburomagus.aude.fr
museespetiet.aude.fr
palais-lascaris.opacweb.fr
paul-dupuy.opacweb.fr
pba.opacweb.fr
prod.opacweb.fr
provincedenamur-collection.opacweb.fr
saintraymond.opacweb.fr
sarreguemines-museum.opacweb.fr
sp6.opacweb.fr
terra-amata.opacweb.fr
tms.opacweb.fr
www.collections.musee-art-industrie.saint-etienne.fr
www.musee-carouge.ch

Other certificates including the domain name opacweb.fr

(limited to 100 certificates)
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
bo.opacweb.io
tms.opacweb.fr
tms.opacweb.fr
bo.opacweb.io
tms.opacweb.fr
bo.opacweb.io
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
collections.museum-histoirenaturelle.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
collections.museum-histoirenaturelle.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr

Certificate

The complete raw certificate details for tms.opacweb.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMtDCCC5ygAwIBAgISA4oUKhXP0nPWeiMJ8+YKBoVIMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA2MTIxODQ3MzVaFw0yMzA5MTAxODQ3MzRaMBkxFzAVBgNVBAMT
DnRtcy5vcGFjd2ViLmZyMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA
s1Xb8cDMtoHEyvxVtHCZzRSI7GprJDHG77hqcwI1ASEozjqWQvkpoiwavPTmBXQA
3Qwgz74cQIPx5MD5v7Mr0IHwXbiyVln/epq6RhlcP2l/jrvrP2gFI5fE65dwQsTm
S7uRootEJxa0gnYsq9RDKImAIrHzVTz41IbVPqI60jd6Rw12912ztO0kh8UnblFW
B8cYGUzx2zdCYiZ8fHICV7xaKoRRQESQavGiEQ1N2ZTi6Up00Ufea3JS2AaGmyMD
7eu854UAiBoDExTYD8ZBwzBT7xhBvljYCdYZuNzlN3iA3ZLOM4ag+BUZh7EjhimW
0q/t9fnwdK7TfTZ6D1mCPECLNPQyt0smVcbzZsYW17fZguDzChbLY6D59bSNL6k7
i+UHJtbpMptruM3tDwb6j6HP8vvuy3M3HcSgHsSfaVF5G9Qw2KDU1oPKvyvzQdCl
i2xCygXb9GGAKVvL0SF1f65tc+fULg4G+W8/qfCHKwM+iAwaDsfrfb0+0gq3qdnb
ya1inzNps+AQz95nS63sX8pNLQefz975ctreDgEfOLtmlqANYv5n8FBK9ArjjmXI
zXWjANcclP02QYnyOjbbPp0vqlzJ7RdQ8V8sTOwCGKyA+oF6LGviIWZS/M8sPpKS
eLZ6RpVtBBT4XA9l2qWV4cmtPKmrJgxjVj/qKlxIrdcCAwEAAaOCCNswggjXMA4G
A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYD
VR0TAQH/BAIwADAdBgNVHQ4EFgQUHwAnlik5cU9Nv8BmviLnTmGRkRIwHwYDVR0j
BBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsG
AQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6
Ly9yMy5pLmxlbmNyLm9yZy8wggecBgNVHREEggeTMIIHj4IdMjAwMGFuczIwMDBp
bWFnZXMudG91bG91c2UuZnKCFGF1Z3VzdGlucy5vcGFjd2ViLmZygg1hdWd1c3Rp
bnMub3JnghZiYS1ib3JkZWF1eC5vcGFjd2ViLmZyghtiYWJpYmxpb2JvcmRlYXV4
Lm9wYWN3ZWIuZnKCFmJpYmxpby1ueW9uLm9wYWN3ZWIuZnKCD2NhcGMub3BhY3dl
Yi5mcoIcY2VudHJlYnJhc3NlbnMudmlsbGUtc2V0ZS5mcoIYY2hhcmxlcy1uZWdy
ZS5vcGFjd2ViLmZyghhjb2xsZWN0aW9ucy1tYmEubmFuY3kuZnKCGmNvbGxlY3Rp
b25zLW11c2Vlcy5ueW9uLmNogiRjb2xsZWN0aW9ucy1zYXJyZWd1ZW1pbmVzLm9w
YWN3ZWIuZnKCH2NvbGxlY3Rpb25zLXZhdWNsdXNlLm9wYWN3ZWIuZnKCHmNvbGxl
Y3Rpb25zLm1iYS1wYXUub3BhY3dlYi5mcoIfY29sbGVjdGlvbnMubXVzZWVzLWR1
bmtlcnF1ZS5ldYIfY29sbGVjdGlvbnMubXVzZWVzLm1hcnNlaWxsZS5mcoIvY29s
bGVjdGlvbnMubXVzZXVtLWhpc3RvaXJlbmF0dXJlbGxlLm9wYWN3ZWIuZnKCD2Rl
bW8ub3BhY3dlYi5mcoIOZGV2Lm9wYWN3ZWIuZnKCD2RldjIub3BhY3dlYi5mcoIm
ZG9jdW1lbnRhdGlvbi1zYXJyZWd1ZW1pbmVzLm9wYWN3ZWIuZnKCIWRvY3VtZW50
YXRpb24tdmF1Y2x1c2Uub3BhY3dlYi5mcoIdZG9jdW1lbnRhdGlvbi5sYWNpdGVk
dXZpbi5jb22CHGRvbWFpbmUtZGUtc2NlYXV4Lm9wYWN3ZWIuZnKCEGR1cHV5Lm9w
YWN3ZWIuZnKCHGVzcGFjZWJyYXNzZW5zLnZpbGxlLXNldGUuZnKCJmVzcGFjZW11
c2VhbC1tY24tY29sbGVjdGlvbi5vcGFjd2ViLmZygiBleHBvc2l0aW9uLWNvbGxl
Y3Rpb24ub3BhY3dlYi5mcoIYZmlsbW90ZWNhLW9haS5vcGFjd2ViLmZyghxmaWxt
b3RlY2Etb2FpbmV3cy5vcGFjd2ViLmZyghRmaWxtb3RlY2Eub3BhY3dlYi5mcoIU
Zm9ybWF0aW9uLm9wYWN3ZWIuZnKCEGxhYml0Lm9wYWN3ZWIuZnKCIm1haXNvbi1k
ZS1jaGF0ZWF1YnJpYW5kLm9wYWN3ZWIuZnKCFm1hcWJvcmRlYXV4Lm9wYWN3ZWIu
ZnKCEG1hdG91Lm9wYWN3ZWIuZnKCEm1iYS1wYXUub3BhY3dlYi5mcoISbWJhbHlv
bi5vcGFjd2ViLmZygg5taGMub3BhY3dlYi5mcoIUbWhuLW9wYWN3ZWIubGlsbGUu
ZnKCD21objIub3BhY3dlYi5mcoIYbWhudGxzZS1ldGhuby5vcGFjd2ViLmZyghJt
aG50bHNlLm9wYWN3ZWIuZnKCFm1obnRvdWxvdXNlLm9wYWN3ZWIuZnKCIG1pYW4t
YW5hdG9sZS1qYWtvdnNreS5vcGFjd2ViLmZyghRtb2J5ZG9jdjcub3BhY3dlYi5m
coInbXVzZWUtYXJ0c2FuY2llbnMtY29sbGVjdGlvbi5vcGFjd2ViLmZygiFtdXNl
ZS1icmV0b24tb2FpLmF3c3R1ZGlvLndlYnNpdGWCF211c2VlLWNoZXJldC5vcGFj
d2ViLmZyghdtdXNlZS1jaW1pZXoub3BhY3dlYi5mcoISbXVzZWUtbGVvbmRpZXJ4
LnJlghhtdXNlZS1tYXNzZW5hLm9wYWN3ZWIuZnKCGG11c2VlLW1hdGlzc2Uub3Bh
Y3dlYi5mcoIQbXVzZWUtdmlsbGVsZS5yZYIUbXVzZWUuY291bG9tbWllcnMuZnKC
Km11c2Vlbm91dmVsbGVjYWxlZG9uaWUtY29sbGVjdGlvbnMuZ291di5uY4IjbXVz
ZWVub3V2ZWxsZWNhbGVkb25pZS1pcGtkLmdvdXYubmOCDm11c2Vlcy5hdWRlLmZy
ghZtdXNlZXMudmlsbGUtcG9pc3N5LmZyghhtdXNlZXNlYnVyb21hZ3VzLmF1ZGUu
ZnKCFG11c2Vlc3BldGlldC5hdWRlLmZyghpwYWxhaXMtbGFzY2FyaXMub3BhY3dl
Yi5mcoIVcGF1bC1kdXB1eS5vcGFjd2ViLmZygg5wYmEub3BhY3dlYi5mcoIPcHJv
ZC5vcGFjd2ViLmZygiVwcm92aW5jZWRlbmFtdXItY29sbGVjdGlvbi5vcGFjd2Vi
LmZyghdzYWludHJheW1vbmQub3BhY3dlYi5mcoIfc2FycmVndWVtaW5lcy1tdXNl
dW0ub3BhY3dlYi5mcoIOc3A2Lm9wYWN3ZWIuZnKCFnRlcnJhLWFtYXRhLm9wYWN3
ZWIuZnKCDnRtcy5vcGFjd2ViLmZygjR3d3cuY29sbGVjdGlvbnMubXVzZWUtYXJ0
LWluZHVzdHJpZS5zYWludC1ldGllbm5lLmZyghR3d3cubXVzZWUtY2Fyb3VnZS5j
aDBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUF
BwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzATBgorBgEEAdZ5AgQDAQH/
BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHyZjgMuIx6io6GH7psAk3HgOzdSaFz5Y
fEq5Gt2E6ebGTViOSI2IG/w2oVUF3X+KnomQrb005W3c54PzWPPUSeVtF6yygXXa
7e0+xVjRDDUbQsWdJDAVOVk/02+iRYzawTEFN20o1pCWJ9s0Rkye65ugNukaIt8l
eXOC1XuamR2dTpi9IUEsvAg9x5rYbv1qxiV2jBK52FdqaGxqfKyXabpuVH/Jvlgt
PsXsXBN3iyvBQxZCTqVz5Dc4dmHw9sMFprssV1Cc3GJ9DiDxCG2ruemHbkHzvsvA
/hLjh8HB5y9qGvEmWjLRT2t0DPTeeJs9vkQnz7AyzBjBnOXwF5zUqA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308322627509149967886544858615108698801480
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-12 18:47:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-10 18:47:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tms.opacweb.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 731624549124932855908129372634994878354316155403422964084999592497156018063508332099598701457395738127433949558930343665296048505418798575009386541948959482052026812901468957267031923610560488901750240098785797706460697537801499061810146815579359932561188236792215013321618838329889346832911473199812537709363942811174156866230654617850912628896939494652066700514976772314749503633189173232718327734023805733358541391650041316855462073296228049714299949970525651868580153205731677535179999345406043098197773584077323109918869559860298576241000687663903214178574961992387898861879966036776728391756446846905938395488398801864211851495095836425674410749531307109743302089621223141264855550384474164609809103127311964372611281850173844965491311448167257457200834130331767102295607839428751249346489864174904003402964508408886009686193340857797877766945757967177314594453101201718859585326415928927449716457603083079045440961801172644613300536504335537657710345887199696929868983107552698965538890007308447327319177835781026833249157340289587215123929444991600257745897096158395454587959979556261143742068653008080391186640316597160029081624241887082429904469996209477576069369175278328256576104834638005385496191232896671092857092222423
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1f0027962939714f4dbfc066be22e74e61919112
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1939 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2000ans2000images.toulouse.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'augustins.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'augustins.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ba-bordeaux.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'babibliobordeaux.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biblio-nyon.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capc.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centrebrassens.ville-sete.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charles-negre.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collections-mba.nancy.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collections-musees.nyon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collections-sarreguemines.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collections-vaucluse.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collections.mba-pau.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collections.musees-dunkerque.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collections.musees.marseille.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collections.museum-histoirenaturelle.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentation-sarreguemines.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentation-vaucluse.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentation.laciteduvin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domaine-de-sceaux.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dupuy.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espacebrassens.ville-sete.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espacemuseal-mcn-collection.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exposition-collection.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmoteca-oai.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmoteca-oainews.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmoteca.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formation.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labit.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maison-de-chateaubriand.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maqbordeaux.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matou.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mba-pau.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbalyon.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhc.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhn-opacweb.lille.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhn2.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhntlse-ethno.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhntlse.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhntoulouse.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mian-anatole-jakovsky.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobydocv7.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musee-artsanciens-collection.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musee-breton-oai.awstudio.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musee-cheret.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musee-cimiez.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musee-leondierx.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musee-massena.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musee-matisse.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musee-villele.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musee.coulommiers.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'museenouvellecaledonie-collections.gouv.nc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'museenouvellecaledonie-ipkd.gouv.nc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musees.aude.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musees.ville-poissy.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'museeseburomagus.aude.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'museespetiet.aude.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palais-lascaris.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paul-dupuy.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pba.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'provincedenamur-collection.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintraymond.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sarreguemines-museum.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp6.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terra-amata.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collections.musee-art-industrie.saint-etienne.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.musee-carouge.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001f266380cb88c7a8a8e861fba6c024dc780ecdd49a173e587c4ab91add84e9e6c64d588e488d881bfc36a15505dd7f8a9e8990adbd34e56ddce783f358f3d449e56d17acb28175daeded3ec558d10c351b42c59d24301539593fd36fa2458cdac13105376d28d6909627db34464c9eeb9ba036e91a22df25797382d57b9a991d9d4e98bd21412cbc083dc79ad86efd6ac625768c12b9d8576a686c6a7cac9769ba6e547fc9be582d3ec5ec5c13778b2bc14316424ea573e437387661f0f6c305a6bb2c57509cdc627d0e20f1086dabb9e9876e41f3becbc0fe12e387c1c1e72f6a1af1265a32d14f6b740cf4de789b3dbe4427cfb032cc18c19ce5f0179cd4a8