*.remi-centrevaldeloire.fr

- REGION CENTRE-VAL DE LOIRE -

Issued by DigiCert G2 TLS EU RSA4096 SHA384 2022 CA1

About this certificate

This digital certificate with serial number 03:3b:21:9a:78:a5:f9:39:e2:c0:31:d1:b1:5a:2f:24 was issued on by DigiCert Ireland Limited.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

REGION CENTRE-VAL DE LOIRE

Organization: REGION CENTRE-VAL DE LOIRE
State / Province: Centre-Val de Loire
Locality: Orléans
Country: FR

DigiCert Ireland Limited

Organization: DigiCert Ireland Limited
Country: IE

This certificate will expire on

Certificate Details

Serial Number (hex): 03:3b:21:9a:78:a5:f9:39:e2:c0:31:d1:b1:5a:2f:24
Serial Number (int): 4294711060001101026482283158022270756
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 33:5a:e6:c1:7b:f5:4c:10:22:d6:71:0b:48:21:72:0e:e6:5b:2b:1d
AuthorityKeyId: 18:89:e7:af:f0:28:f6:7c:ca:68:05:52:e1:62:d8:91:d6:16:65:60

Fingerprint (sha1): 6c:5e:b8:84:33:a2:26:f2:33:1a:fd:eb:cb:24:e4:88:9a:b0:9c:58
Fingerprint (sha256): d8:16:6d:a8:52:45:fb:c3:ea:f2:96:0e:c5:3f:98:2a:32:3e:d4:83:29:39:39:9e:3f:46:45:aa:77:e3:60:64

Issuing Certificate URL: http://cacerts.digicert.eu/DigiCertG2TLSEURSA4096SHA3842022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.eu
CRL Distribution Point: http://crl.digicert.eu/DigiCertG2TLSEURSA4096SHA3842022CA1.crl

Check the revocation status for certificate *.remi-centrevaldeloire.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.remi-centrevaldeloire.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.remi-centrevaldeloire.fr

Other certificates including the domain name remi-centrevaldeloire.fr

(limited to 100 certificates)
www.remi-centrevaldeloire.fr
www.remi-centrevaldeloire.fr
remi-centrevaldeloire.fr
www.remi-centrevaldeloire.fr
*.remi-centrevaldeloire.fr
www.remi-centrevaldeloire.fr
*.remi-centrevaldeloire.fr
*.remi-centrevaldeloire.fr

Certificate

The complete raw certificate details for *.remi-centrevaldeloire.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHuzCCBaOgAwIBAgIQAzshmnil+TniwDHRsVovJDANBgkqhkiG9w0BAQsFADBl
MQswCQYDVQQGEwJJRTEhMB8GA1UEChMYRGlnaUNlcnQgSXJlbGFuZCBMaW1pdGVk
MTMwMQYDVQQDEypEaWdpQ2VydCBHMiBUTFMgRVUgUlNBNDA5NiBTSEEzODQgMjAy
MiBDQTEwHhcNMjMxMjI3MDAwMDAwWhcNMjUwMTAyMjM1OTU5WjCBiDELMAkGA1UE
BhMCRlIxHDAaBgNVBAgTE0NlbnRyZS1WYWwgZGUgTG9pcmUxETAPBgNVBAcMCE9y
bMOpYW5zMSMwIQYDVQQKExpSRUdJT04gQ0VOVFJFLVZBTCBERSBMT0lSRTEjMCEG
A1UEAwwaKi5yZW1pLWNlbnRyZXZhbGRlbG9pcmUuZnIwggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQC4m7PwEnbNBgf1sf9Hp9oIkDwgXPCyzeOkHl/+dPwQ
aDlo4YG49brM6wQzHnoa8ZYfwV+CTMGTLukPZQ0DvU1DakcuAlp4tjtEYfPKt7E9
mDZ9M20oJg1vPb8Os+HBfqo/0VnQve4MeVkJJ6PFxRoZBMfmWF6V5DYszOfP8/kB
jInojBQj9WqiyciMw715frr0ZGDAlrR3BmA2X/cvWscDl6x6mS7lby1krxTrwLri
PuAmAA54XYXZXfxhihhVnI493zaWcEuafYOie/BFLx0a9xHqim3FnDWlv2FomyK7
hIEq4O/EBhpHHsGLp1ak4+vA4tLJe7sWIgVcdMesONzbAgMBAAGjggNBMIIDPTAf
BgNVHSMEGDAWgBQYieev8Cj2fMpoBVLhYtiR1hZlYDAdBgNVHQ4EFgQUM1rmwXv1
TBAi1nELSCFyDuZbKx0wJQYDVR0RBB4wHIIaKi5yZW1pLWNlbnRyZXZhbGRlbG9p
cmUuZnIwPgYDVR0gBDcwNTAzBgZngQwBAgIwKTAnBggrBgEFBQcCARYbaHR0cDov
L3d3dy5kaWdpY2VydC5jb20vQ1BTMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwTwYDVR0fBEgwRjBEoEKgQIY+aHR0cDovL2Ny
bC5kaWdpY2VydC5ldS9EaWdpQ2VydEcyVExTRVVSU0E0MDk2U0hBMzg0MjAyMkNB
MS5jcmwwgYMGCCsGAQUFBwEBBHcwdTAjBggrBgEFBQcwAYYXaHR0cDovL29jc3Au
ZGlnaWNlcnQuZXUwTgYIKwYBBQUHMAKGQmh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0
LmV1L0RpZ2lDZXJ0RzJUTFNFVVJTQTQwOTZTSEEzODQyMDIyQ0ExLmNydDAMBgNV
HRMBAf8EAjAAMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdQBOdaMnXJoQwzhb
bNTfP1LrHfDgjhuNacCx+mSxYpo53wAAAYyrEu1eAAAEAwBGMEQCIAwkvvnNE4o9
C5dyEelH7ercAQ7W+4ZzcOOXJjzL6AgQAiAZawpQFzTHKYuOS4Ab8AV7q2y8SZG0
UynCRp3l9X34+AB3AD8XS0/XIkdYlB1lHIS+DRLtkDd/H4Vq68G/KIXs+GRuAAAB
jKsS7hkAAAQDAEgwRgIhANZ31Y+PqHkbyMXifbUWZgVAf6nPPmCcUnre8EHA8tAj
AiEA7mrTd6niUEfPXlG1Fju63u/b4Uk1me8jfHw1eAaEPlAAdgDPEVbu1S58r/OH
W9lpLpvpGnFnSrAX7KwB0lt3zsw7CAAAAYyrEu0sAAAEAwBHMEUCIQDMSpzU6a9Y
GXRX8j4ysZM5y6cFw5Dx0GGExM2SFrc9qQIgLQNRlkicQdLAk84teQKeZxQ4kkv1
28vFTwXzIdvTEnwwDQYJKoZIhvcNAQELBQADggIBALAgJ0V/iduJQSZrlvsnE7ZJ
SPkGaH2F0gqJ7fetOiBlv98xyc4pbhexusdR3UN8nihtCxEYSb333Z0KV5XqkMbM
NQgSZYYc/hdSqDAzdvGX75GicIu7ERrNHTjjZM5XzsuFPbwZqX2+y/hv5M6sMWvX
LPxdkTr2QOVcTKnSeoG8bNjGuJVTWsL85KDUz1Zag6flZDkviv06yL1j37CdzCbe
kqK0U6ULYTzBrb2G0Xu9/Ivvrk7EGfgZvUX/4hTHGHqSph/+RePCRRDswu8o9hVN
qoeGB/sD5fXd4XOp0afLAik09J55zG1/Zh/+fPMMm5pyNWyhVlH8pErFCbcio+8H
V0Py2PBL6yqAMdVF12+BuL6Pyd5Rkhlpu5I2do6N9zmnQ+Bs5J4s0nIKb+ykTa8g
IC/3bXZNAZfL28YiQpY2KIFm7DRBmSjUqjnSVoLwTMRuM6oZFX5aJF+ewxZu4/4e
nI6/1ivkkpf6Vs3I1w3kjqhje4bwavQA/cpcTOV3dXxDDzf3Z0deAYL601UgQbo4
EMsL+emJQGaF30MLvVg48my2ItNBjODeMnrGx0sVsvP3Ebb9/61KWCxfNbM/11eC
JhOsKcHvpx8JPBn38UHBRww1szV1lTFfybrx6efD5Qt9e7kHZdUH7eZyuFwMsYA8
rTbZySgu5W6yIU1/dqTG
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJuz8BJ2zQYH9bH/R6fa
CJA8IFzwss3jpB5f/nT8EGg5aOGBuPW6zOsEMx56GvGWH8FfgkzBky7pD2UNA71N
Q2pHLgJaeLY7RGHzyrexPZg2fTNtKCYNbz2/DrPhwX6qP9FZ0L3uDHlZCSejxcUa
GQTH5lheleQ2LMznz/P5AYyJ6IwUI/VqosnIjMO9eX669GRgwJa0dwZgNl/3L1rH
A5esepku5W8tZK8U68C64j7gJgAOeF2F2V38YYoYVZyOPd82lnBLmn2DonvwRS8d
GvcR6optxZw1pb9haJsiu4SBKuDvxAYaRx7Bi6dWpOPrwOLSyXu7FiIFXHTHrDjc
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4294711060001101026482283158022270756
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Ireland Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert G2 TLS EU RSA4096 SHA384 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Centre-Val de Loire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Orléans'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'REGION CENTRE-VAL DE LOIRE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.remi-centrevaldeloire.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23304628066477249362609651213367913803753587032041892373744303237212758307682488990283680718754157938316551449049733687482157701482189795666325071738676926369983845580988327301560253859168916101228440288915209294554944972267724677634143677218018786299258588051087180183217990691797283566079260557107984844272614443392991661491897239989145026759755244268996527040923821720363662536706643522888880539631988554223726484842618452364893520311322886016430536034263376739460834168154109340838102295627179069482397538645192746120312489069197890798791378461482573330750660975389426985764194836653081757081993046404957837253851
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1889e7aff028f67cca680552e162d891d6166560
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							335ae6c17bf54c1022d6710b4821720ee65b2b1d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.remi-centrevaldeloire.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.digicert.eu/DigiCertG2TLSEURSA4096SHA3842022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.eu/DigiCertG2TLSEURSA4096SHA3842022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00b02027457f89db8941266b96fb2713b64948f906687d85d20a89edf7ad3a2065bfdf31c9ce296e17b1bac751dd437c9e286d0b111849bdf7dd9d0a5795ea90c6cc35081265861cfe1752a8303376f197ef91a2708bbb111acd1d38e364ce57cecb853dbc19a97dbecbf86fe4ceac316bd72cfc5d913af640e55c4ca9d27a81bc6cd8c6b895535ac2fce4a0d4cf565a83a7e564392f8afd3ac8bd63dfb09dcc26de92a2b453a50b613cc1adbd86d17bbdfc8befae4ec419f819bd45ffe214c7187a92a61ffe45e3c24510ecc2ef28f6154daa878607fb03e5f5dde173a9d1a7cb022934f49e79cc6d7f661ffe7cf30c9b9a72356ca15651fca44ac509b722a3ef075743f2d8f04beb2a8031d545d76f81b8be8fc9de51921969bb9236768e8df739a743e06ce49e2cd2720a6feca44daf20202ff76d764d0197cbdbc622429636288166ec34419928d4aa39d25682f04cc46e33aa19157e5a245f9ec3166ee3fe1e9c8ebfd62be49297fa56cdc8d70de48ea8637b86f06af400fdca5c4ce577757c430f37f767475e0182fad3552041ba3810cb0bf9e989406685df430bbd5838f26cb622d3418ce0de327ac6c74b15b2f3f711b6fdffad4a582c5f35b33fd757822613ac29c1efa71f093c19f7f141c1470c35b3357595315fc9baf1e9e7c3e50b7d7bb90765d507ede672b85c0cb1803cad36d9c9282ee56eb2214d7f76a4c6