tms.opacweb.fr

Issued by R3

About this certificate

This digital certificate with serial number 04:a9:0b:ab:c2:0a:7c:6f:2a:5c:4c:ee:66:a5:0f:32:b7:8b was issued on by Let's Encrypt.

With 75 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=tms.opacweb.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a9:0b:ab:c2:0a:7c:6f:2a:5c:4c:ee:66:a5:0f:32:b7:8b
Serial Number (int): 405972377063014285707524893109054138922891
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 34:53:1c:19:ea:5c:92:7b:ca:d6:0c:81:88:19:e0:5f:58:f2:fe:9b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6f:c7:a3:fe:12:03:8a:b5:a5:48:82:56:b8:06:8f:90:7f:d1:c7:f5
Fingerprint (sha256): a1:36:c4:b8:b1:3b:37:1b:a9:23:47:eb:d1:74:df:05:e5:dc:54:5e:1c:0d:bc:23:46:07:8d:ad:49:25:31:16

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate tms.opacweb.fr

75

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tms.opacweb.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2000ans2000images.toulouse.fr
augustins.opacweb.fr
ba-bordeaux.opacweb.fr
babibliobordeaux.opacweb.fr
biblio-nyon.opacweb.fr
capc.opacweb.fr
centrebrassens.ville-sete.fr
charles-negre.opacweb.fr
collections-mba.nancy.fr
collections-sarreguemines.opacweb.fr
collections-vaucluse.opacweb.fr
collections.museenouvellecaledonie.nc
collections.musees-dunkerque.eu
collections.musees.marseille.fr
collections.museum-histoirenaturelle.opacweb.fr
demo.opacweb.fr
dev.opacweb.fr
dev2.opacweb.fr
documentation-sarreguemines.opacweb.fr
documentation-vaucluse.opacweb.fr
documentation.laciteduvin.com
domaine-de-sceaux.opacweb.fr
dupuy.opacweb.fr
espacebrassens.ville-sete.fr
espacemuseal-mcn-collection.opacweb.fr
exposition-collection.opacweb.fr
filmoteca-oai.opacweb.fr
filmoteca-oainews.opacweb.fr
filmoteca.opacweb.fr
formation.opacweb.fr
junior.augustins.org
labit.opacweb.fr
maison-de-chateaubriand.opacweb.fr
maqbordeaux.opacweb.fr
matou.opacweb.fr
maugustins.opacweb.fr
mbalyon.opacweb.fr
mhc.opacweb.fr
mhn-opacweb.lille.fr
mhn2.opacweb.fr
mhntlse-ethno.opacweb.fr
mhntlse.opacweb.fr
mhntoulouse.opacweb.fr
mian-anatole-jakovsky.opacweb.fr
mobydocv7.opacweb.fr
musee-artsanciens-collection.opacweb.fr
musee-breton-oai.awstudio.website
musee-cheret.opacweb.fr
musee-cimiez.opacweb.fr
musee-leondierx.re
musee-massena.opacweb.fr
musee-matisse.opacweb.fr
musee-rops-collection.opacweb.fr
musee-villele.re
musee.coulommiers.fr
musees.aude.fr
musees.ville-poissy.fr
museeseburomagus.aude.fr
museespetiet.aude.fr
palais-lascaris.opacweb.fr
paul-dupuy.opacweb.fr
pba.opacweb.fr
prod.opacweb.fr
provincedenamur-collection.opacweb.fr
saintraymond.opacweb.fr
sarreguemines-museum.opacweb.fr
sp6.opacweb.fr
terra-amata.opacweb.fr
tms.opacweb.fr
toulouse.opacweb.fr
www.2000ans2000images.toulouse.fr
www.collections.musee-art-industrie.saint-etienne.fr
www.musee-carouge.ch
www.musee-leondierx.re
www.musee-villele.re

Other certificates including the domain name opacweb.fr

(limited to 100 certificates)
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
bo.opacweb.io
tms.opacweb.fr
tms.opacweb.fr
bo.opacweb.io
tms.opacweb.fr
bo.opacweb.io
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
collections.museum-histoirenaturelle.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
collections.museum-histoirenaturelle.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr

Certificate

The complete raw certificate details for tms.opacweb.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 405972377063014285707524893109054138922891
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-18 07:59:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-17 07:59:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tms.opacweb.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 621092172140014667114549654574005470847710870102017434562645292856418817705007674720108258273027372920497345760173540197525186950610114366625517090245391263104692038831932160484021869551473944789820286466740363674979215987310969845482419284449430025784383010181944038734921403733731916175502004147126352473124975113396515675819009906372035400029385186541643730465229822562784515434411473855060945727775226024676927881190349807352086360862706554943639667708165956083894804513429851654443214718604747664029293235262469241368108317367483566164421673989931474600349731602079166272813370772476631950385488245596224853093110757669003765274639780574581926017906254959103409648002471622758700992170434653035163224217772151212852251115142998947425578600511274873085413455308281405969040347325550323935909852259932787723885128786951050699779513783180797731268857904770571296066843445745362976705111127318785972363323708923265363867704635206768210558575090637236394513708865633832224872523493015060283635141537411124063369568586333530626252790856750310829455522295078983713508647434458696031656767624387180940731450159248253316016942020879188308481893263653003728366047144994445665641123723345670985517395067791541265113743338972497763529748079
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							34531c19ea5c927bcad60c818819e05f58f2fe9b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1983 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2000ans2000images.toulouse.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'augustins.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ba-bordeaux.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'babibliobordeaux.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biblio-nyon.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capc.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centrebrassens.ville-sete.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charles-negre.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collections-mba.nancy.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collections-sarreguemines.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collections-vaucluse.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collections.museenouvellecaledonie.nc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collections.musees-dunkerque.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collections.musees.marseille.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collections.museum-histoirenaturelle.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentation-sarreguemines.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentation-vaucluse.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentation.laciteduvin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domaine-de-sceaux.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dupuy.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espacebrassens.ville-sete.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espacemuseal-mcn-collection.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exposition-collection.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmoteca-oai.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmoteca-oainews.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmoteca.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formation.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'junior.augustins.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labit.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maison-de-chateaubriand.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maqbordeaux.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matou.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maugustins.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbalyon.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhc.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhn-opacweb.lille.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhn2.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhntlse-ethno.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhntlse.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhntoulouse.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mian-anatole-jakovsky.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobydocv7.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musee-artsanciens-collection.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musee-breton-oai.awstudio.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musee-cheret.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musee-cimiez.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musee-leondierx.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musee-massena.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musee-matisse.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musee-rops-collection.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musee-villele.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musee.coulommiers.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musees.aude.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musees.ville-poissy.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'museeseburomagus.aude.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'museespetiet.aude.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palais-lascaris.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paul-dupuy.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pba.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'provincedenamur-collection.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintraymond.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sarreguemines-museum.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp6.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terra-amata.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toulouse.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2000ans2000images.toulouse.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collections.musee-art-industrie.saint-etienne.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.musee-carouge.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.musee-leondierx.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.musee-villele.re'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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