biel-galle.xenios.eu

Issued by Gandi Standard SSL CA 2

About this certificate

This digital certificate with serial number 6c:32:59:2a:62:ef:20:f6:be:61:d6:4f:30:0a:58:76 was issued on by Gandi.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=biel-galle.xenios.eu,OU=Domain Control Validated+OU=Gandi Standard SSL

Gandi

Organization: Gandi
State / Province: Paris
Locality: Paris
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): 6c:32:59:2a:62:ef:20:f6:be:61:d6:4f:30:0a:58:76
Serial Number (int): 143818046880353826153532286205472430198
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: c8:0e:be:6f:e6:ec:c9:99:5e:5f:23:08:e9:5d:3a:7d:b1:98:78:7a
AuthorityKeyId: b3:90:a7:d8:c9:af:4e:cd:61:3c:9f:7c:ad:5d:7f:41:fd:69:30:ea

Fingerprint (sha1): 6d:d6:b8:de:e7:7b:ed:78:21:04:af:02:f6:2e:95:00:f9:ef:51:99
Fingerprint (sha256): ba:ee:70:2f:3d:38:70:93:99:a3:54:b8:81:59:8b:b4:22:73:03:56:08:7b:eb:26:fb:d6:c4:32:97:78:c6:35

Issuing Certificate URL: http://crt.usertrust.com/GandiStandardSSLCA2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/GandiStandardSSLCA2.crl

Check the revocation status for certificate biel-galle.xenios.eu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for biel-galle.xenios.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

biel-galle.xenios.eu
www.biel-galle.xenios.eu

Other certificates including the domain name xenios.eu

(limited to 100 certificates)
massa.xenios.eu
evrard.xenios.eu
re3.xenios.eu
raxhon.xenios.eu
phsavdb.xenios.eu
castiaux.xenios.eu
raxhon.xenios.eu
phsavdb.xenios.eu
biel-galle.xenios.eu
deguide.xenios.eu
brule-scieur.xenios.eu
raxhon.xenios.eu
schmitz-noel.xenios.eu
deguide.xenios.eu
schmitz-noel.xenios.eu
biel-galle.xenios.eu
j-paques.xenios.eu
actionre3.xenios.eu
brule-scieur.xenios.eu
brule-scieur.xenios.eu
xharde.xenios.eu
schmitz-noel.xenios.eu
schmitz-noel.xenios.eu
www.xenios.eu
www.xenios.eu
www.xenios.eu
hostarii.xenios.eu
biel-galle.xenios.eu
xenios.eu
schmitz-noel.xenios.eu
biel-galle.xenios.eu
crabbe.xenios.eu
biel-galle.xenios.eu
hostarii.xenios.eu
brule-scieur.xenios.eu
j-paques.xenios.eu
schmitz-noel.xenios.eu
tefnin.xenios.eu
castiaux.xenios.eu
deguide.xenios.eu
biel-galle.xenios.eu
brule-scieur.xenios.eu
www.xenios.eu
castiaux.xenios.eu
raxhon.xenios.eu
biel-galle.xenios.eu
crabbe.xenios.eu
deguide.xenios.eu
deguide.xenios.eu
hostarii.xenios.eu
hostarii.xenios.eu
j-paques.xenios.eu
raxhon.xenios.eu
j-paques.xenios.eu
www.xenios.eu
j-paques.xenios.eu
j-paques.xenios.eu
castiaux.xenios.eu
castiaux.xenios.eu
hostarii.xenios.eu
extranet.xenios.eu
biel-galle.xenios.eu
castiaux.xenios.eu
remy.xenios.eu
crabbe.xenios.eu
phsavdb.xenios.eu
www.xenios.eu
deguide.xenios.eu
hostarii.xenios.eu
www.hostarii.xenios.eu
evrard.xenios.eu
castiaux.xenios.eu
evrard.xenios.eu
tefnin.xenios.eu
schmitz-noel.xenios.eu
raxhon.xenios.eu
raxhon.xenios.eu
phsavdb.xenios.eu
castiaux.xenios.eu
phsavdb.xenios.eu
crabbe.xenios.eu
evrard.xenios.eu
www.xenios.eu
hostarii.xenios.eu
brule-scieur.xenios.eu
deguide.xenios.eu
phsavdb.xenios.eu
remy.xenios.eu
biel-galle.xenios.eu
schmitz-noel.xenios.eu
huissier-christiane.xenios.eu

Certificate

The complete raw certificate details for biel-galle.xenios.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIQbDJZKmLvIPa+YdZPMApYdjANBgkqhkiG9w0BAQsFADBf
MQswCQYDVQQGEwJGUjEOMAwGA1UECBMFUGFyaXMxDjAMBgNVBAcTBVBhcmlzMQ4w
DAYDVQQKEwVHYW5kaTEgMB4GA1UEAxMXR2FuZGkgU3RhbmRhcmQgU1NMIENBIDIw
HhcNMTgxMDIzMDAwMDAwWhcNMTkxMjEyMjM1OTU5WjBfMSEwHwYDVQQLExhEb21h
aW4gQ29udHJvbCBWYWxpZGF0ZWQxGzAZBgNVBAsTEkdhbmRpIFN0YW5kYXJkIFNT
TDEdMBsGA1UEAxMUYmllbC1nYWxsZS54ZW5pb3MuZXUwggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQDe6/qmEsAS08hZ/1qZwk9Jzv1szfhEe+7qiiU5fc6N
NQUY7JO9I9Yv4R2ugYyq8+pCHLwVqSlv+vGmW5ZJtpRVkhPD0mtnWMOEs0UAoAUH
E5IyW/wDw1JOaNpCo2SfZNBAqzdqrLAYAu0nA5LJg4LqqKJZcBTb0Pk8AwNotlh6
I+YQE9Hbi8BumzlLvFL2Nid+3dYwNrQk9v56LzzmyCLaGApJtLBxrhjP3KiiEcAn
D9tovgDl5TCDVvnWw6eDRYseXDbad81RksNr4/SNCsCZ1hiLTwch33jLPu9cKXFy
cgbG+K8YAzNkQUMfiHhEjbDWE5vlWsRWTwsKZfmFJZBvAgMBAAGjggLHMIICwzAf
BgNVHSMEGDAWgBSzkKfYya9OzWE8n3ytXX9B/Wkw6jAdBgNVHQ4EFgQUyA6+b+bs
yZleXyMI6V06fbGYeHowDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEsGA1UdIAREMEIwNgYLKwYBBAGy
MQECAhowJzAlBggrBgEFBQcCARYZaHR0cHM6Ly9jcHMudXNlcnRydXN0LmNvbTAI
BgZngQwBAgEwQQYDVR0fBDowODA2oDSgMoYwaHR0cDovL2NybC51c2VydHJ1c3Qu
Y29tL0dhbmRpU3RhbmRhcmRTU0xDQTIuY3JsMHMGCCsGAQUFBwEBBGcwZTA8Bggr
BgEFBQcwAoYwaHR0cDovL2NydC51c2VydHJ1c3QuY29tL0dhbmRpU3RhbmRhcmRT
U0xDQTIuY3J0MCUGCCsGAQUFBzABhhlodHRwOi8vb2NzcC51c2VydHJ1c3QuY29t
MDkGA1UdEQQyMDCCFGJpZWwtZ2FsbGUueGVuaW9zLmV1ghh3d3cuYmllbC1nYWxs
ZS54ZW5pb3MuZXUwggECBgorBgEEAdZ5AgQCBIHzBIHwAO4AdQDuS723dc5guuFC
aR+r4Z5mow9+X7By2IMAxHuJeqj9ywAAAWahAEJHAAAEAwBGMEQCIDK82SOh1eH0
jmccdgMUxj7j1L+ZW5Sd5XHRn9I1Ph9iAiBF8OGMt86Y0vrmvqVPNNLVGh3LLIG+
9XPy8yqV2K9f3QB1AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQe8xWAAAB
ZqEAQooAAAQDAEYwRAIgAeu1rSJfU0ZbI4rAkLOsS4joW9Xfkmprpsvna5JpLMkC
IDsXTyhHNz84AkutKaNTFJelTmir7saDmkUAQElrkNgRMA0GCSqGSIb3DQEBCwUA
A4IBAQAz83uOTBrcfYvhRgoIpurs6RVclv2LtjpZEhJYyPE+T6XLl/I9cqQ9sRsR
5FgeVQoHSIgtPG17V24B2y1fA9JM7tfiFUtwQa8K8q74r/BMH0YTwQAMvno2S9PD
8lp4+PGtkfJniVoqZ1SSdngkzx6Dbgs6FOTtw0zDe55/WQlsL2o4vqFiCaxVa6lN
tATeWW452HzbFUyad10QBh8fLaXywqw/emRbz+J0ck0iZPuVcJrhz+nvLgTtO6zv
egeFCNlXEb0yQU9P7bX/8BjTtosKLuRSTe1y0knZFxBipoNMyhcPIfDVjm0sz0dD
RVpP7GHDTWCxMSmFwmgIBV+HPVmg
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uv6phLAEtPIWf9amcJP
Sc79bM34RHvu6oolOX3OjTUFGOyTvSPWL+EdroGMqvPqQhy8Fakpb/rxpluWSbaU
VZITw9JrZ1jDhLNFAKAFBxOSMlv8A8NSTmjaQqNkn2TQQKs3aqywGALtJwOSyYOC
6qiiWXAU29D5PAMDaLZYeiPmEBPR24vAbps5S7xS9jYnft3WMDa0JPb+ei885sgi
2hgKSbSwca4Yz9yoohHAJw/baL4A5eUwg1b51sOng0WLHlw22nfNUZLDa+P0jQrA
mdYYi08HId94yz7vXClxcnIGxvivGAMzZEFDH4h4RI2w1hOb5VrEVk8LCmX5hSWQ
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 143818046880353826153532286205472430198
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi Standard SSL CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi Standard SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'biel-galle.xenios.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28141269331993335980926134971131531987181760692310363163655024710128619334700876771975149225895864989996708775733420381051871467340226676973403399602309041237769792396915467119789128932578018126198246385626239880149152630990565852878266647553066638398905005911404184639481409513817594688329113420591650455153556550949719194475017214568605517986880036391267212021404574490493820032763342017724035594967280078861611641292970737697961985199636645158647169881064839174228396806251555538481230522230285957537021791515706517914979153825878758992514636822778960250963993272167912004107979998437191531120222236359320444178543
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b390a7d8c9af4ecd613c9f7cad5d7f41fd6930ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c80ebe6fe6ecc9995e5f2308e95d3a7db198787a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.26
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/GandiStandardSSLCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/GandiStandardSSLCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biel-galle.xenios.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biel-galle.xenios.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000166a10042470000040300463044022032bcd923a1d5e1f48e671c760314c63ee3d4bf995b949de571d19fd2353e1f62022045f0e18cb7ce98d2fae6bea54f34d2d51a1dcb2c81bef573f2f32a95d8af5fdd007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000166a100428a0000040300463044022001ebb5ad225f53465b238ac090b3ac4b88e85bd5df926a6ba6cbe76b92692cc902203b174f2847373f38024bad29a3531497a54e68abeec6839a450040496b90d811
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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