tms.opacweb.fr

Issued by R3

About this certificate

This digital certificate with serial number 04:00:d8:f7:f1:71:87:c9:45:11:92:20:83:a4:9c:7c:2d:ea was issued on by Let's Encrypt.

With 81 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tms.opacweb.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:00:d8:f7:f1:71:87:c9:45:11:92:20:83:a4:9c:7c:2d:ea
Serial Number (int): 348737544368510107158214545339774905626090
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 33:99:ee:7e:92:b6:62:d9:e2:cb:40:88:84:87:b7:61:38:89:21:03
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 18:2d:5d:be:37:9d:03:d6:98:dc:28:01:2e:65:74:b1:32:6b:67:98
Fingerprint (sha256): d4:c5:0e:24:60:66:99:a8:41:06:e6:16:29:26:5d:ed:ca:6b:f7:3b:c1:ac:8f:f1:23:3d:51:84:d6:7d:77:0e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate tms.opacweb.fr

81

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tms.opacweb.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2000ans2000images.toulouse.fr
augustins.opacweb.fr
augustins.org
ba-bordeaux.opacweb.fr
babibliobordeaux.opacweb.fr
biblio-nyon.opacweb.fr
capc.opacweb.fr
centrebrassens.ville-sete.fr
charles-negre.opacweb.fr
collections-mba.nancy.fr
collections-musees.nyon.ch
collections-sarreguemines.opacweb.fr
collections-vaucluse.opacweb.fr
collections.mba-pau.opacweb.fr
collections.museenouvellecaledonie.nc
collections.musees-dunkerque.eu
collections.musees.marseille.fr
collections.museum-histoirenaturelle.opacweb.fr
demo.opacweb.fr
dev.opacweb.fr
dev2.opacweb.fr
documentation-sarreguemines.opacweb.fr
documentation-vaucluse.opacweb.fr
documentation.laciteduvin.com
domaine-de-sceaux.opacweb.fr
dupuy.opacweb.fr
espacebrassens.ville-sete.fr
espacemuseal-mcn-collection.opacweb.fr
exposition-collection.opacweb.fr
filmoteca-oai.opacweb.fr
filmoteca-oainews.opacweb.fr
filmoteca.opacweb.fr
formation.opacweb.fr
junior.augustins.org
labit.opacweb.fr
maison-de-chateaubriand.opacweb.fr
maqbordeaux.opacweb.fr
matou.opacweb.fr
mba-pau.opacweb.fr
mbalyon.opacweb.fr
mhc.opacweb.fr
mhn-opacweb.lille.fr
mhn2.opacweb.fr
mhntlse-ethno.opacweb.fr
mhntlse.opacweb.fr
mhntoulouse.opacweb.fr
mian-anatole-jakovsky.opacweb.fr
mobydocv7.opacweb.fr
musee-artsanciens-collection.opacweb.fr
musee-breton-oai.awstudio.website
musee-cheret.opacweb.fr
musee-cimiez.opacweb.fr
musee-leondierx.re
musee-massena.opacweb.fr
musee-matisse.opacweb.fr
musee-rops-collection.opacweb.fr
musee-villele.re
musee.coulommiers.fr
museenouvellecaledonie-collections.gouv.nc
museenouvellecaledonie-ipkd.gouv.nc
musees.aude.fr
musees.ville-poissy.fr
museeseburomagus.aude.fr
museespetiet.aude.fr
palais-lascaris.opacweb.fr
paul-dupuy.opacweb.fr
pba.opacweb.fr
prod.opacweb.fr
provincedenamur-collection.opacweb.fr
saintraymond.opacweb.fr
sarreguemines-museum.opacweb.fr
sp6.opacweb.fr
terra-amata.opacweb.fr
tms.opacweb.fr
toulouse.opacweb.fr
www.2000ans2000images.toulouse.fr
www.augustins.org
www.collections.musee-art-industrie.saint-etienne.fr
www.musee-carouge.ch
www.musee-leondierx.re
www.musee-villele.re

Other certificates including the domain name opacweb.fr

(limited to 100 certificates)
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
bo.opacweb.io
tms.opacweb.fr
tms.opacweb.fr
bo.opacweb.io
tms.opacweb.fr
bo.opacweb.io
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
collections.museum-histoirenaturelle.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
collections.museum-histoirenaturelle.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr
tms.opacweb.fr

Certificate

The complete raw certificate details for tms.opacweb.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOfzCCDWegAwIBAgISBADY9/Fxh8lFEZIgg6ScfC3qMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA0MTMxODU2NDRaFw0yMzA3MTIxODU2NDNaMBkxFzAVBgNVBAMT
DnRtcy5vcGFjd2ViLmZyMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA
oxDLv3cghppmEf+tCZu/JRFiobC2I0E7fkMpZ6646MQZryWCucSmCjyG2D4KQ4kZ
kTlTXbzU3YVzTc1v6QdmAcYRrIf8NYQhPVWKjpGFa573Eei5cPgD81xrZCwHT2k9
GI3gd92ooT99MM4mEdv5Gx9Qd02aosRRQJeCQR78S5yVLS5NRmBoa+gykCxBWK1C
jRhhzsvPP9dKUjShZUdwDpu5fHKkGVvCuCICvPcLgheCWOuCa/e3vMf/DHOrkNka
6Y1KbgoZgXJfhRO/UT3lLVZUpW8/s5m5QNH5CRLq/OqKIZK0WJuhKwNJDz060AWD
nPcdGzJ8mTptLthmOtkuSWJSoqqqmtMn8Ocip+yWffEg6tNa5lASBYjx279j1/Wx
qohCN13+PS0vpSJqjhub4zanHFAVMzX6/Sv1fplLNBrlS+VJ2fHJNAba3MGbd3Q6
y/GwPU9xp6x4kRgu9Lq9SXdGr7psm33jmyz19GpX8IXL6OOBaDguWI5U/+gyo7s0
v4U73g3zgEu018Pe7Ttrj3up4DHWVIsD9tNBskRCqyl3iTe1HNEqv6IUC1hb7WKG
KMkQmbuPjWgB7VfFsxQwF3PEmG325K1eGuSyjynmKf6jwdjE7UGJfYZgbASipw9x
CWV7vPJ4z6kiT7yq4Yo0ArNGrUz/tSo4fmtivrIKpd0CAwEAAaOCCqYwggqiMA4G
A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYD
VR0TAQH/BAIwADAdBgNVHQ4EFgQUM5nufpK2Ytniy0CIhIe3YTiJIQMwHwYDVR0j
BBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsG
AQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6
Ly9yMy5pLmxlbmNyLm9yZy8wggh0BgNVHREEgghrMIIIZ4IdMjAwMGFuczIwMDBp
bWFnZXMudG91bG91c2UuZnKCFGF1Z3VzdGlucy5vcGFjd2ViLmZygg1hdWd1c3Rp
bnMub3JnghZiYS1ib3JkZWF1eC5vcGFjd2ViLmZyghtiYWJpYmxpb2JvcmRlYXV4
Lm9wYWN3ZWIuZnKCFmJpYmxpby1ueW9uLm9wYWN3ZWIuZnKCD2NhcGMub3BhY3dl
Yi5mcoIcY2VudHJlYnJhc3NlbnMudmlsbGUtc2V0ZS5mcoIYY2hhcmxlcy1uZWdy
ZS5vcGFjd2ViLmZyghhjb2xsZWN0aW9ucy1tYmEubmFuY3kuZnKCGmNvbGxlY3Rp
b25zLW11c2Vlcy5ueW9uLmNogiRjb2xsZWN0aW9ucy1zYXJyZWd1ZW1pbmVzLm9w
YWN3ZWIuZnKCH2NvbGxlY3Rpb25zLXZhdWNsdXNlLm9wYWN3ZWIuZnKCHmNvbGxl
Y3Rpb25zLm1iYS1wYXUub3BhY3dlYi5mcoIlY29sbGVjdGlvbnMubXVzZWVub3V2
ZWxsZWNhbGVkb25pZS5uY4IfY29sbGVjdGlvbnMubXVzZWVzLWR1bmtlcnF1ZS5l
dYIfY29sbGVjdGlvbnMubXVzZWVzLm1hcnNlaWxsZS5mcoIvY29sbGVjdGlvbnMu
bXVzZXVtLWhpc3RvaXJlbmF0dXJlbGxlLm9wYWN3ZWIuZnKCD2RlbW8ub3BhY3dl
Yi5mcoIOZGV2Lm9wYWN3ZWIuZnKCD2RldjIub3BhY3dlYi5mcoImZG9jdW1lbnRh
dGlvbi1zYXJyZWd1ZW1pbmVzLm9wYWN3ZWIuZnKCIWRvY3VtZW50YXRpb24tdmF1
Y2x1c2Uub3BhY3dlYi5mcoIdZG9jdW1lbnRhdGlvbi5sYWNpdGVkdXZpbi5jb22C
HGRvbWFpbmUtZGUtc2NlYXV4Lm9wYWN3ZWIuZnKCEGR1cHV5Lm9wYWN3ZWIuZnKC
HGVzcGFjZWJyYXNzZW5zLnZpbGxlLXNldGUuZnKCJmVzcGFjZW11c2VhbC1tY24t
Y29sbGVjdGlvbi5vcGFjd2ViLmZygiBleHBvc2l0aW9uLWNvbGxlY3Rpb24ub3Bh
Y3dlYi5mcoIYZmlsbW90ZWNhLW9haS5vcGFjd2ViLmZyghxmaWxtb3RlY2Etb2Fp
bmV3cy5vcGFjd2ViLmZyghRmaWxtb3RlY2Eub3BhY3dlYi5mcoIUZm9ybWF0aW9u
Lm9wYWN3ZWIuZnKCFGp1bmlvci5hdWd1c3RpbnMub3JnghBsYWJpdC5vcGFjd2Vi
LmZygiJtYWlzb24tZGUtY2hhdGVhdWJyaWFuZC5vcGFjd2ViLmZyghZtYXFib3Jk
ZWF1eC5vcGFjd2ViLmZyghBtYXRvdS5vcGFjd2ViLmZyghJtYmEtcGF1Lm9wYWN3
ZWIuZnKCEm1iYWx5b24ub3BhY3dlYi5mcoIObWhjLm9wYWN3ZWIuZnKCFG1obi1v
cGFjd2ViLmxpbGxlLmZygg9taG4yLm9wYWN3ZWIuZnKCGG1obnRsc2UtZXRobm8u
b3BhY3dlYi5mcoISbWhudGxzZS5vcGFjd2ViLmZyghZtaG50b3Vsb3VzZS5vcGFj
d2ViLmZygiBtaWFuLWFuYXRvbGUtamFrb3Zza3kub3BhY3dlYi5mcoIUbW9ieWRv
Y3Y3Lm9wYWN3ZWIuZnKCJ211c2VlLWFydHNhbmNpZW5zLWNvbGxlY3Rpb24ub3Bh
Y3dlYi5mcoIhbXVzZWUtYnJldG9uLW9haS5hd3N0dWRpby53ZWJzaXRlghdtdXNl
ZS1jaGVyZXQub3BhY3dlYi5mcoIXbXVzZWUtY2ltaWV6Lm9wYWN3ZWIuZnKCEm11
c2VlLWxlb25kaWVyeC5yZYIYbXVzZWUtbWFzc2VuYS5vcGFjd2ViLmZyghhtdXNl
ZS1tYXRpc3NlLm9wYWN3ZWIuZnKCIG11c2VlLXJvcHMtY29sbGVjdGlvbi5vcGFj
d2ViLmZyghBtdXNlZS12aWxsZWxlLnJlghRtdXNlZS5jb3Vsb21taWVycy5mcoIq
bXVzZWVub3V2ZWxsZWNhbGVkb25pZS1jb2xsZWN0aW9ucy5nb3V2Lm5jgiNtdXNl
ZW5vdXZlbGxlY2FsZWRvbmllLWlwa2QuZ291di5uY4IObXVzZWVzLmF1ZGUuZnKC
Fm11c2Vlcy52aWxsZS1wb2lzc3kuZnKCGG11c2Vlc2VidXJvbWFndXMuYXVkZS5m
coIUbXVzZWVzcGV0aWV0LmF1ZGUuZnKCGnBhbGFpcy1sYXNjYXJpcy5vcGFjd2Vi
LmZyghVwYXVsLWR1cHV5Lm9wYWN3ZWIuZnKCDnBiYS5vcGFjd2ViLmZygg9wcm9k
Lm9wYWN3ZWIuZnKCJXByb3ZpbmNlZGVuYW11ci1jb2xsZWN0aW9uLm9wYWN3ZWIu
ZnKCF3NhaW50cmF5bW9uZC5vcGFjd2ViLmZygh9zYXJyZWd1ZW1pbmVzLW11c2V1
bS5vcGFjd2ViLmZygg5zcDYub3BhY3dlYi5mcoIWdGVycmEtYW1hdGEub3BhY3dl
Yi5mcoIOdG1zLm9wYWN3ZWIuZnKCE3RvdWxvdXNlLm9wYWN3ZWIuZnKCIXd3dy4y
MDAwYW5zMjAwMGltYWdlcy50b3Vsb3VzZS5mcoIRd3d3LmF1Z3VzdGlucy5vcmeC
NHd3dy5jb2xsZWN0aW9ucy5tdXNlZS1hcnQtaW5kdXN0cmllLnNhaW50LWV0aWVu
bmUuZnKCFHd3dy5tdXNlZS1jYXJvdWdlLmNoghZ3d3cubXVzZWUtbGVvbmRpZXJ4
LnJlghR3d3cubXVzZWUtdmlsbGVsZS5yZTBMBgNVHSAERTBDMAgGBmeBDAECATA3
BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNy
eXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB1ALc++yTfnE26dfI5xbpY
9Gxd/ELPep81xJ4dCYEl7bSZAAABh3wxFkgAAAQDAEYwRAIgInbj4QWhVsEAKHkN
uv1ElaN0O0bar0RXgzkXTVd96c8CIFg4u+VBMQiFZq8DkpGUEfk443BW46q1MA28
DpICPXgDAHcArfe++nz/EMiLnT2cHj4YarRnKV3PsQwkyoWGNOvcgooAAAGHfDEW
dAAABAMASDBGAiEArZT+ZZec9KUPSo1U8VGa9CeW8OMdCLU2Cv25S36K7nACIQDL
52nMplLW2POrSK+Sks+T+hFqmGKBbNIHzKArPZmUhzANBgkqhkiG9w0BAQsFAAOC
AQEAUUVDb6yhTd5gDwgK4i9z/uRQ9sm2LuyvOow4w8SyssKKHj1uaq/bUL68JF6O
8UErPKaQM11wch3b24GYHyJ66VHGrFfD+1h0x8ra0Fgvvy8FTbs+1/KCwvJLlUVy
L8uOBlXkugD99CxsmCoWklL6k9k6jrz3xjVrbj2T/A2k9U8cL9582GxEybsA3FWU
5ZGDjdyXwD+TpT72kBdZbMpKJTBtFJ8b173qcWIpsHy1IaBG8yJfVfQMm6Lp0loh
x/ohGgwib3noBpxbEcRm9X0vcaSSSJPQa66CsLVvd4r1S0xk4vS69JtJyZqnzQKy
Z8VMkuSzWwk3KW4J2hcL0fUVIA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 348737544368510107158214545339774905626090
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-13 18:56:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-12 18:56:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tms.opacweb.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 665249644236283841305361424819977702453177056798977471980252045639919023702781565530173485051666850197115923355042158415398695279466798189826765733276623233096412836168053222374667167642805907651091040262329068211494356905303074918211123489568303880658464929286895451379016376428724824579968249825224462839563100793097434641720953038940864095147574233666667424441315523946333517069553614801222033216456172389201997833914355350323538343025345720781785402000890250008446368679981431503551134083383422099068914772959548433626593062689716430701665315086287448344683021749225506555417514888984747464028683459969065358363224001372668085556649021732846096458996821632428772755057345820653192270763633388264944560346994905511476682158075078319476639921037627122965277166205396049347400817926214333887760356076971346038085281077856765247838787956880009884468831042411111660900616741521887734310835769710359213563565809530863349595442565668594711822004471137830853093135407811725619433579226842211598075950764142285964566951327999984133951953458074423730107503022393536022011226143196652206902958705139030970394490501293335865963088507339063732063559789901796848358883793067281731273787418817757990800236767120191994105693728595235864373274077
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3399ee7e92b662d9e2cb40888487b76138892103
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2155 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2000ans2000images.toulouse.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'augustins.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'augustins.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ba-bordeaux.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'babibliobordeaux.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biblio-nyon.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capc.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centrebrassens.ville-sete.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charles-negre.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collections-mba.nancy.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collections-musees.nyon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collections-sarreguemines.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collections-vaucluse.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collections.mba-pau.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collections.museenouvellecaledonie.nc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collections.musees-dunkerque.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collections.musees.marseille.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collections.museum-histoirenaturelle.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentation-sarreguemines.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentation-vaucluse.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentation.laciteduvin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domaine-de-sceaux.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dupuy.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espacebrassens.ville-sete.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espacemuseal-mcn-collection.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exposition-collection.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmoteca-oai.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmoteca-oainews.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmoteca.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formation.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'junior.augustins.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labit.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maison-de-chateaubriand.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maqbordeaux.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matou.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mba-pau.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbalyon.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhc.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhn-opacweb.lille.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhn2.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhntlse-ethno.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhntlse.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhntoulouse.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mian-anatole-jakovsky.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobydocv7.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musee-artsanciens-collection.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musee-breton-oai.awstudio.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musee-cheret.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musee-cimiez.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musee-leondierx.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musee-massena.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musee-matisse.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musee-rops-collection.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musee-villele.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musee.coulommiers.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'museenouvellecaledonie-collections.gouv.nc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'museenouvellecaledonie-ipkd.gouv.nc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musees.aude.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musees.ville-poissy.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'museeseburomagus.aude.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'museespetiet.aude.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palais-lascaris.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paul-dupuy.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pba.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'provincedenamur-collection.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintraymond.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sarreguemines-museum.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp6.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terra-amata.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toulouse.opacweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2000ans2000images.toulouse.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.augustins.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collections.musee-art-industrie.saint-etienne.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.musee-carouge.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.musee-leondierx.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.musee-villele.re'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001877c311648000004030046304402202276e3e105a156c10028790dbafd4495a3743b46daaf44578339174d577de9cf02205838bbe54131088566af0392919411f938e37056e3aab5300dbc0e92023d7803007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001877c3116740000040300483046022100ad94fe65979cf4a50f4a8d54f1519af42796f0e31d08b5360afdb94b7e8aee70022100cbe769cca652d6d8f3ab48af9292cf93fa116a9862816cd207cca02b3d999487
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005145436faca14dde600f080ae22f73fee450f6c9b62eecaf3a8c38c3c4b2b2c28a1e3d6e6aafdb50bebc245e8ef1412b3ca690335d70721ddbdb81981f227ae951c6ac57c3fb5874c7cadad0582fbf2f054dbb3ed7f282c2f24b9545722fcb8e0655e4ba00fdf42c6c982a169252fa93d93a8ebcf7c6356b6e3d93fc0da4f54f1c2fde7cd86c44c9bb00dc5594e591838ddc97c03f93a53ef69017596cca4a25306d149f1bd7bdea716229b07cb521a046f3225f55f40c9ba2e9d25a21c7fa211a0c226f79e8069c5b11c466f57d2f71a4924893d06bae82b0b56f778af54b4c64e2f4baf49b49c99aa7cd02b267c54c92e4b35b0937296e09da170bd1f51520