*.opsom.org

- OPH EN SOMME (OFFICE PUBLIC DE L'HABITAT EN SOMME) -

Issued by TBS X509 CA business 2

About this certificate

This digital certificate with serial number e2:5f:b5:30:27:e1:57:98:ea:17:b6:b5:b5:29:47:48 was issued on by TBS INTERNET.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

OPH EN SOMME (OFFICE PUBLIC DE L'HABITAT EN SOMME)

Organization: OPH EN SOMME (OFFICE PUBLIC DE L'HABITAT EN SOMME)
Organization unit: OPSOM
Address: BP 70605
Address: 36 RUE DU GENERAL LECLERC
Postal code: 80000
State / Province: Somme
Locality: AMIENS
Country: FR

TBS INTERNET

Organization: TBS INTERNET
Organization unit: TBS INTERNET CA
State / Province: Calvados
Locality: Caen
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): e2:5f:b5:30:27:e1:57:98:ea:17:b6:b5:b5:29:47:48
Serial Number (int): 300902470180384194897108741645671155528
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 35:9c:c3:a6:d1:14:26:d2:df:82:19:1f:65:59:3a:6d:3c:2f:77:7b
AuthorityKeyId: 71:f2:0b:a9:a3:ed:cb:03:4a:0c:3c:01:3b:be:4c:44:6d:eb:2a:f8

Fingerprint (sha1): c0:d5:04:65:93:7c:17:b9:14:11:4a:85:7d:0b:66:03:c4:9b:4f:a2
Fingerprint (sha256): da:fa:81:48:8e:83:12:a8:40:10:bf:3c:29:67:e3:7f:76:fb:2b:94:2d:e8:d9:0a:6b:e9:36:a9:82:ab:68:72

Issuing Certificate URL: http://crt.usertrust.com/TBSX509CAbusiness2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/TBSX509CAbusiness2.crl

Check the revocation status for certificate *.opsom.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.opsom.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.opsom.org
opsom.org

Other certificates including the domain name opsom.org

(limited to 100 certificates)
extranet.opsom.org
mail.opsom.org
vivreici.opsom.org
*.opsom.org
extranet.opsom.org
matomo.opsom.org
*.opsom.org
extranet.opsom.org
extranet.opsom.org
extranet.opsom.org
www.opsom.org
*.opsom.org
extranet.opsom.org
*.opsom.org
extranet.opsom.org

Certificate

The complete raw certificate details for *.opsom.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGlzCCBX+gAwIBAgIRAOJftTAn4VeY6he2tbUpR0gwDQYJKoZIhvcNAQELBQAw
gYExCzAJBgNVBAYTAkZSMREwDwYDVQQIEwhDYWx2YWRvczENMAsGA1UEBxMEQ2Fl
bjEVMBMGA1UEChMMVEJTIElOVEVSTkVUMRgwFgYDVQQLEw9UQlMgSU5URVJORVQg
Q0ExHzAdBgNVBAMTFlRCUyBYNTA5IENBIGJ1c2luZXNzIDIwHhcNMTkwNzIzMDAw
MDAwWhcNMjAwOTE5MjM1OTU5WjCB2DELMAkGA1UEBhMCRlIxDjAMBgNVBBETBTgw
MDAwMQ4wDAYDVQQIEwVTb21tZTEPMA0GA1UEBxMGQU1JRU5TMREwDwYDVQQJEwhC
UCA3MDYwNTEiMCAGA1UECRMZMzYgUlVFIERVIEdFTkVSQUwgTEVDTEVSQzE7MDkG
A1UEChMyT1BIIEVOIFNPTU1FIChPRkZJQ0UgUFVCTElDIERFIEwnSEFCSVRBVCBF
TiBTT01NRSkxDjAMBgNVBAsTBU9QU09NMRQwEgYDVQQDDAsqLm9wc29tLm9yZzCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKZ8RyTKvPTCX8GfXrUtHi3v
HnJPYoA/m7Ww/g+EQ7kVdXe//RlF2zpI9xKRHHLWORh2qge146NeXVIH6dBfJ9fE
ETRlLtiOJzAsAlSzDPbi9klUqexkZ8kYo3SalXL5ImcEXhhRuRHFRLeh1XHaugD4
cyWPeWqHSA4I0Wnr6gqp6e8e53MjiB/w9VuHsrGPaeMyWQQv6nv5i/Y5thOwtndD
dxamgLcu3YHl+ns8JfAX5dPxJPuvIlpRSFzVRQdK832K4ZNReu5iRPDrUyOAF5kX
QGXSYj0odxyXjpUFFuYOhaL6WMjc54JBW/BJ+IJYtqCfW4CI6reCz0yfnaRXRrEC
AwEAAaOCAq8wggKrMB8GA1UdIwQYMBaAFHHyC6mj7csDSgw8ATu+TERt6yr4MB0G
A1UdDgQWBBQ1nMOm0RQm0t+CGR9lWTptPC93ezAOBgNVHQ8BAf8EBAMCBaAwDAYD
VR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSgYDVR0g
BEMwQTA1BgorBgEEAeU3AgEBMCcwJQYIKwYBBQUHAgEWGWh0dHBzOi8vY3BzLnVz
ZXJ0cnVzdC5jb20wCAYGZ4EMAQICMEAGA1UdHwQ5MDcwNaAzoDGGL2h0dHA6Ly9j
cmwudXNlcnRydXN0LmNvbS9UQlNYNTA5Q0FidXNpbmVzczIuY3JsMHIGCCsGAQUF
BwEBBGYwZDA7BggrBgEFBQcwAoYvaHR0cDovL2NydC51c2VydHJ1c3QuY29tL1RC
U1g1MDlDQWJ1c2luZXNzMi5jcnQwJQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3NwLnVz
ZXJ0cnVzdC5jb20wIQYDVR0RBBowGIILKi5vcHNvbS5vcmeCCW9wc29tLm9yZzCC
AQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2ALIeBcyLos2KIE6HZvkruYolIGdr2vpw
57JJUy3vi5BeAAABbCE0eaQAAAQDAEcwRQIhAKhVAGIGYy25vyy4yQ18HqccYuXo
GjIIkuBqiXmthI/WAiBQj5ridKWVs5BHsVwpGms/uPv+NUdsJ21Cu17euFl+vQB3
AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABbCE0ecYAAAQDAEgw
RgIhAPcOUiXhgv4oZWeus8QvNzwVNMl7u67G/wBFW2SoFMOmAiEAwr2FW+VZhfmg
21JKMH/0ceMiSA5T2vcN8DykwMI0OxEwDQYJKoZIhvcNAQELBQADggEBADsXvGyg
VcZYCfXf0/GhWbTNex3M3nRU71NILTrMbRvZA3d9ufN87cSHJg7AYztBs6c3f/AT
FzL7J5RCSC5l1Jk4TbCy/RpnGQwDODBK1zg7th4NSi+7N1eej/H1QEAOZDKRAmRO
YhkoJCjnBxqUqJZC8FBvwKtkQC0UoNrIAqijXD+D1B7LUQIE3M6Bq8TZUdKVt3rt
CQcPD30oeGm/J+5tsdtR0gvfWd56EnYkrJn4KsNa9bF5l2qXxSlN1SxApRLoDsSf
CQeK2WFfKe6+SaCegv160UhLBB8D01YOPafVTsYKfkHGkSfxyVqrI8YQeomFETZX
aajEqirCArqK8Ag=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnxHJMq89MJfwZ9etS0e
Le8eck9igD+btbD+D4RDuRV1d7/9GUXbOkj3EpEcctY5GHaqB7Xjo15dUgfp0F8n
18QRNGUu2I4nMCwCVLMM9uL2SVSp7GRnyRijdJqVcvkiZwReGFG5EcVEt6HVcdq6
APhzJY95aodIDgjRaevqCqnp7x7ncyOIH/D1W4eysY9p4zJZBC/qe/mL9jm2E7C2
d0N3FqaAty7dgeX6ezwl8Bfl0/Ek+68iWlFIXNVFB0rzfYrhk1F67mJE8OtTI4AX
mRdAZdJiPSh3HJeOlQUW5g6FovpYyNzngkFb8En4gli2oJ9bgIjqt4LPTJ+dpFdG
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300902470180384194897108741645671155528
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Calvados'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Caen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TBS INTERNET'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TBS INTERNET CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TBS X509 CA business 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '80000'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Somme'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AMIENS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BP 70605'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '36 RUE DU GENERAL LECLERC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OPH EN SOMME (OFFICE PUBLIC DE L'HABITAT EN SOMME)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OPSOM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.opsom.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21016842343470952714767615134622413100453240240286797662984289012908054451141921067087121183571486681657042252026533735371888345813605089150980773792330119997568260548139534998937146300508451929922762083787674623304070328548325789221595858545047762095331486576942018126206983222276949446836231483269089664753178583736647035477062720444948620101812694206138714841813983849862593675648282293053668139190560902757702649189050999139723532017165165355346734809174312264738275384567434651560121493799163773898799793313524786948662693971774486937316763506890940377867986938983475054864699855758445621091039535721555871352497
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 71f20ba9a3edcb034a0c3c013bbe4c446deb2af8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							359cc3a6d11426d2df82191f65593a6d3c2f777b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.12983.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/TBSX509CAbusiness2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/TBSX509CAbusiness2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.opsom.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opsom.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016c213479a40000040300473045022100a855006206632db9bf2cb8c90d7c1ea71c62e5e81a320892e06a8979ad848fd60220508f9ae274a595b39047b15c291a6b3fb8fbfe35476c276d42bb5edeb8597ebd0077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016c213479c60000040300483046022100f70e5225e182fe286567aeb3c42f373c1534c97bbbaec6ff00455b64a814c3a6022100c2bd855be55985f9a0db524a307ff471e322480e53daf70df03ca4c0c2343b11
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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