*.yourax.fr
Issued by Gandi Standard SSL CA 2
About this certificate
This digital certificate with serial number 78:09:0d:25:bf:d5:3a:d3:66:38:6c:2e:00:6e:2e:08 was issued on by Gandi.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.yourax.fr,OU=Domain Control Validated+OU=Gandi Standard Wildcard SSL
Gandi
Organization:
Gandi
State / Province:
Paris
Locality: Paris
Country: FR
Locality: Paris
Country: FR
This certificate has expire since
Certificate Details
Serial Number (hex): 78:09:0d:25:bf:d5:3a:d3:66:38:6c:2e:00:6e:2e:08Serial Number (int): 159554356828052994568949210244176555528
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 0b:9c:fd:87:62:6e:62:09:77:eb:8d:b4:96:78:ff:14:13:21:f5:5f
AuthorityKeyId: b3:90:a7:d8:c9:af:4e:cd:61:3c:9f:7c:ad:5d:7f:41:fd:69:30:ea
Fingerprint (sha1): 2f:a9:80:32:d3:2f:15:27:59:36:c8:00:ff:d3:02:99:d3:3e:9d:4b
Fingerprint (sha256): 9c:57:b5:a8:3f:76:9d:6c:43:9b:6f:dc:b1:d6:67:77:a9:e0:34:45:96:43:f0:49:b7:6f:93:65:4f:35:5b:87
Issuing Certificate URL: http://crt.usertrust.com/GandiStandardSSLCA2.crt
Revocation information
OCSP Server: http://ocsp.usertrust.comCRL Distribution Point: http://crl.usertrust.com/GandiStandardSSLCA2.crl
Check the revocation status for certificate *.yourax.fr
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.yourax.fr
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.yourax.fr
yourax.fr
yourax.fr
Other certificates including the domain name yourax.fr
(limited to 100 certificates)
support.radiumbox.com
support.combativewingchun.com
supportitm.thecomplianceengine.com
support.combativewingchun.com
event.yourax.fr
events.staceydmoore.com
supportitm.thecomplianceengine.com
www.acxiomsupport.com
support.combativewingchun.com
supportitm.thecomplianceengine.com
repairsalessupport.sagent.net
supportitm.thecomplianceengine.com
*.yourax.fr
support.combativewingchun.com
vamc.djltraining.com
support.combativewingchun.com
entries.timeoutdoors.com
supportahj.thecomplianceengine.com
support.lifeforceharmonizer.com
supportitm.thecomplianceengine.com
support.combativewingchun.com
supportitm.thecomplianceengine.com
support.royalestrategy.com
supportitm.thecomplianceengine.com
support.combativewingchun.com
support.catprep.com
events.sleeparchitx.com
www.promarketer.biz
support.radiumbox.com
jpo.yourax.fr
supportitm.thecomplianceengine.com
tranquility.yourax.fr
support.combativewingchun.com
support.recollectcms.com
supportitm.thecomplianceengine.com
supportitm.thecomplianceengine.com
jpo.yourax.fr
support.radiumbox.com
support.lifeforceharmonizer.com
support.lifeforceharmonizer.com
*.yourax.fr
events.qbwa.qa
support.combativewingchun.com
events.movingworlds.org
support.combativewingchun.com
events.bestvenuesnewyork.com
support.primeroseguros.com
support.catprep.com
*.yourax.fr
supportitm.thecomplianceengine.com
events.gnsinc.net
supportitm.thecomplianceengine.com
support.radiumbox.com
tranquility.yourax.fr
supportitm.thecomplianceengine.com
supportitm.thecomplianceengine.com
jpo.yourax.fr
support.combativewingchun.com
event.reveali.com
supportitm.thecomplianceengine.com
jpo.yourax.fr
jpo.yourax.fr
support.combativewingchun.com
supportitm.thecomplianceengine.com
support.combativewingchun.com
event.yourax.fr
events.staceydmoore.com
supportitm.thecomplianceengine.com
www.acxiomsupport.com
support.combativewingchun.com
supportitm.thecomplianceengine.com
repairsalessupport.sagent.net
supportitm.thecomplianceengine.com
*.yourax.fr
support.combativewingchun.com
vamc.djltraining.com
support.combativewingchun.com
entries.timeoutdoors.com
supportahj.thecomplianceengine.com
support.lifeforceharmonizer.com
supportitm.thecomplianceengine.com
support.combativewingchun.com
supportitm.thecomplianceengine.com
support.royalestrategy.com
supportitm.thecomplianceengine.com
support.combativewingchun.com
support.catprep.com
events.sleeparchitx.com
www.promarketer.biz
support.radiumbox.com
jpo.yourax.fr
supportitm.thecomplianceengine.com
tranquility.yourax.fr
support.combativewingchun.com
support.recollectcms.com
supportitm.thecomplianceengine.com
supportitm.thecomplianceengine.com
jpo.yourax.fr
support.radiumbox.com
support.lifeforceharmonizer.com
support.lifeforceharmonizer.com
*.yourax.fr
events.qbwa.qa
support.combativewingchun.com
events.movingworlds.org
support.combativewingchun.com
events.bestvenuesnewyork.com
support.primeroseguros.com
support.catprep.com
*.yourax.fr
supportitm.thecomplianceengine.com
events.gnsinc.net
supportitm.thecomplianceengine.com
support.radiumbox.com
tranquility.yourax.fr
supportitm.thecomplianceengine.com
supportitm.thecomplianceengine.com
jpo.yourax.fr
support.combativewingchun.com
event.reveali.com
supportitm.thecomplianceengine.com
jpo.yourax.fr
jpo.yourax.fr
Certificate
The complete raw certificate details for *.yourax.fr in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGdDCCBVygAwIBAgIQeAkNJb/VOtNmOGwuAG4uCDANBgkqhkiG9w0BAQsFADBf MQswCQYDVQQGEwJGUjEOMAwGA1UECBMFUGFyaXMxDjAMBgNVBAcTBVBhcmlzMQ4w DAYDVQQKEwVHYW5kaTEgMB4GA1UEAxMXR2FuZGkgU3RhbmRhcmQgU1NMIENBIDIw HhcNMTgwNDAzMDAwMDAwWhcNMjAwNDAzMjM1OTU5WjBfMSEwHwYDVQQLExhEb21h aW4gQ29udHJvbCBWYWxpZGF0ZWQxJDAiBgNVBAsTG0dhbmRpIFN0YW5kYXJkIFdp bGRjYXJkIFNTTDEUMBIGA1UEAwwLKi55b3VyYXguZnIwggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQCassxQcfTlREEr6E1BIRColQj3vUskgPG9YZuHITTy i6BlduLQBSjsHAZMFeTP1FSbk6zhKvH+Ek90f64yEq2Bi/7I/HsiGi9/f/apokao +51Vu6g4Lluta5mBgM/5S6zAjXKCVQjCarkDRPyydAnUIrKvl4hLz9uSitgFCOkM w6NugFh0/WeS2OqOlpPNul/heZ7ezK44NwesNJurDcnbKp2LB8y9HCCZv4mSizb6 ma7ECUpAYcvuy9oPqgrOF0KIQHbALWO3KnWPNskPRV9sVSbj5/6TNWD4Xyg1duRi sa1gjQFNLsCEvYCnT3lKFaFf7emQKshnsiRL4Ana65KLAgMBAAGjggMqMIIDJjAf BgNVHSMEGDAWgBSzkKfYya9OzWE8n3ytXX9B/Wkw6jAdBgNVHQ4EFgQUC5z9h2Ju Ygl36420lnj/FBMh9V8wDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEsGA1UdIAREMEIwNgYLKwYBBAGy MQECAhowJzAlBggrBgEFBQcCARYZaHR0cHM6Ly9jcHMudXNlcnRydXN0LmNvbTAI BgZngQwBAgEwQQYDVR0fBDowODA2oDSgMoYwaHR0cDovL2NybC51c2VydHJ1c3Qu Y29tL0dhbmRpU3RhbmRhcmRTU0xDQTIuY3JsMHMGCCsGAQUFBwEBBGcwZTA8Bggr BgEFBQcwAoYwaHR0cDovL2NydC51c2VydHJ1c3QuY29tL0dhbmRpU3RhbmRhcmRT U0xDQTIuY3J0MCUGCCsGAQUFBzABhhlodHRwOi8vb2NzcC51c2VydHJ1c3QuY29t MCEGA1UdEQQaMBiCCyoueW91cmF4LmZyggl5b3VyYXguZnIwggF9BgorBgEEAdZ5 AgQCBIIBbQSCAWkBZwB2AO5Lvbd1zmC64UJpH6vhnmajD35fsHLYgwDEe4l6qP3L AAABYorgjpwAAAQDAEcwRQIgGPkN1oA3x6kZcCvzys0l4cIInATIsMOkUS7w0UlJ LWYCIQCi85HMYeD4NQFWdtxLSOyOstuFeihcDJYW0tKs4nuYfgB2AF6nc/nfVsDn tTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABYorgaSwAAAQDAEcwRQIgXUhqv3Zi z8x7P2TEqp2Hp9SNhtXiGli6JLcDEWROUYECIQC9gyBlRja5hpryaSAw8fQ4c5U1 lg/cGXwuQveKF7ksTgB1AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kT AAABYorgaX4AAAQDAEYwRAIgdJMLo59wOwgm7YO+8Yza/Kyq6fF73T9POCYcpUtC X/gCIHwHi5nCjf9zfMOl399N16RljegkuR5YKR7YuzRWyGs2MA0GCSqGSIb3DQEB CwUAA4IBAQA3HYa4EiRlJ3wg0t8tbSfwUE+isbd3ny3tW34HrCprS6NVOOdHMh+Q 4EhIc33kbSNdyBCZvRwOaoVM1JrTG0XKvU8BFUT1AlTZO0A7Dj2dLmpx3orkAIdi xmWgDssQGOBDo/WymRxcxlcEaBT56ifBNWn9rR22W6giKdAdf3AA7KWADtC+0uor P5RmgJ7HFehvr4D6TPOhzDkeWYDlkOlhPt5yHFKxjTG4XJauYN+HY8MzRJmV+v0A PbV8VbZIxI3DjYk5byocf9Iz99YJfdJzs+EoCNFwcMaQBRYxn5hvHrZHxu6IVFdl baqts+5uyDiS/UIWc7+cU8PshnVPLSoT -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrLMUHH05URBK+hNQSEQ qJUI971LJIDxvWGbhyE08ougZXbi0AUo7BwGTBXkz9RUm5Os4Srx/hJPdH+uMhKt gYv+yPx7Ihovf3/2qaJGqPudVbuoOC5brWuZgYDP+UuswI1yglUIwmq5A0T8snQJ 1CKyr5eIS8/bkorYBQjpDMOjboBYdP1nktjqjpaTzbpf4Xme3syuODcHrDSbqw3J 2yqdiwfMvRwgmb+Jkos2+pmuxAlKQGHL7svaD6oKzhdCiEB2wC1jtyp1jzbJD0Vf bFUm4+f+kzVg+F8oNXbkYrGtYI0BTS7AhL2Ap095ShWhX+3pkCrIZ7IkS+AJ2uuS iwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 159554356828052994568949210244176555528 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi Standard SSL CA 2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-03 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-03 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi Standard Wildcard SSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.yourax.fr' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19528867595203401382275877564566266344302634962750506517662836144606099525642126771691421772134011926373377958527360180766292238110957421854714004153998022169500456191200438622406268608185396941438066685489978646132310232807645368476802906228937845625353343543928779047989982129814448148662784057869248916135111739017163308579298099316462882110801915259360499960088967872237741207199591737228065461968817187555110148178640358496769854211913980241554862671887807077491373233763606835159394733652339860276688125267179912835526810939147775751551593452823212233167199611752795835211343239090898504595913829370769806430859 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b390a7d8c9af4ecd613c9f7cad5d7f41fd6930ea . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0b9cfd87626e620977eb8db49678ff141321f55f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.26 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/GandiStandardSSLCA2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/GandiStandardSSLCA2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yourax.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourax.fr' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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