# CA Owner Audit Dump - Certigna

Generated: 2026-07-28T06:44:19.283479Z

## CA Owner Summary

- Name: Certigna
- Country: France
- Website: -
- Problem Reporting: https://www.certigna.com/contactez-nous/
- CP/CPS URLs: https://www.certigna.com/autorites-de-certification/, https://cps.certigna.com/DPCCertignaTLSCA.pdf, https://cps.certigna.com/PCCertignaTLSCA.md, http://politique.certigna.fr/PCcertignaauthpris3pro.pdf, http://politique.certigna.fr/PCcertignacachetserveurmessagerie.pdf, https://www.certigna.fr/autorites/, https://cps.certigna.com/DPCCertignaSMIMECA.pdf, https://cps.certigna.com/DPCCertignaMultipurposeCA.pdf, https://cps.certigna.com/DPCCertignaCodeSigningCA.pdf, http://politique.certigna.fr/PCcertignaracine.pdf, http://politique.certigna.fr/PCcertignaidpris2pro.pdf, http://politique.certigna.fr/PCcertignaidpris3pro.pdf, http://politique.certigna.fr/PCcertignaserveurclient.pdf, http://politique.certigna.fr/PCcertignasslpris.pdf
- Audit URLs: https://apaveprod-cd1-bbh7c5ezeaaugfae.z01.azurefd.net/-/media/Project/GroupeApave/LSTI/Download/Attestation-Letter/23-1804-CAB-Forum_AAL_Certigna_Standard_Audit_E_V3_S5.pdf?rev=aecf9f157df44ce7aeb36873d7ddcbec&hash=5B855DEC04FD4D4CE0605FFD9B77F216, https://apaveprod-cd1-bbh7c5ezeaaugfae.z01.azurefd.net/-/media/Project/GroupeApave/LSTI/Download/Attestation-Letter/23-1804-CAB-Forum_AAL_Certigna_TLS-BR_Audit_E_V3_S5.pdf?rev=189ef82694a94cef93633032d405e89a&hash=DE84A5D1777FD458FC0FD2658FA0B894, https://apaveprod-cd1-bbh7c5ezeaaugfae.z01.azurefd.net/-/media/Project/GroupeApave/LSTI/Download/Attestation-Letter/23-1804-CAB-Forum_AAL_Certigna_TLS-EV_Audit_E_V3_S5.pdf?rev=feec4ce017184df1a8071f0586a883e4&hash=5DA6EE635809D4B0C6D6CBAD7C7F4EB0, https://apaveprod-cd1-bbh7c5ezeaaugfae.z01.azurefd.net/-/media/Project/GroupeApave/LSTI/Download/Attestation-Letter/23-1804-CAB-Forum_AAL_Certigna_SMIME-BR_Audit_E_V3_S5.pdf?rev=8349aea0f9fb48d0ac8316dac9f70954&hash=D0A55A60736D292A45E75A04E503D398, https://apaveprod-cd1-bbh7c5ezeaaugfae.z01.azurefd.net/-/media/Project/GroupeApave/LSTI/Download/Attestation-Letter/23-1804-CAB-Forum_AAL_Certigna_CS-BR_Audit_E_V3_S5.pdf?rev=66ad45d4ba6f43ecab738b86826aeeac&hash=69C8661637DB9B8B5630F72CEBF14C6E, http://www.lsti-certification.fr/images/liste_entreprise/Liste%20PSCe
- Root Programs: {"mozilla":"Included","chrome":"Removed","microsoft":"Included","apple":"Included"}

## Owner Disclosure Snapshot

- Problem reporting mechanism: https://www.certigna.com/contactez-nous/
- CP/CPS URLs: https://www.certigna.com/autorites-de-certification/, https://cps.certigna.com/DPCCertignaTLSCA.pdf, https://cps.certigna.com/PCCertignaTLSCA.md, http://politique.certigna.fr/PCcertignaauthpris3pro.pdf, http://politique.certigna.fr/PCcertignacachetserveurmessagerie.pdf, https://www.certigna.fr/autorites/, https://cps.certigna.com/DPCCertignaSMIMECA.pdf, https://cps.certigna.com/DPCCertignaMultipurposeCA.pdf, https://cps.certigna.com/DPCCertignaCodeSigningCA.pdf, http://politique.certigna.fr/PCcertignaracine.pdf, http://politique.certigna.fr/PCcertignaidpris2pro.pdf, http://politique.certigna.fr/PCcertignaidpris3pro.pdf, http://politique.certigna.fr/PCcertignaserveurclient.pdf, http://politique.certigna.fr/PCcertignasslpris.pdf
- Audit URLs: https://apaveprod-cd1-bbh7c5ezeaaugfae.z01.azurefd.net/-/media/Project/GroupeApave/LSTI/Download/Attestation-Letter/23-1804-CAB-Forum_AAL_Certigna_Standard_Audit_E_V3_S5.pdf?rev=aecf9f157df44ce7aeb36873d7ddcbec&hash=5B855DEC04FD4D4CE0605FFD9B77F216, https://apaveprod-cd1-bbh7c5ezeaaugfae.z01.azurefd.net/-/media/Project/GroupeApave/LSTI/Download/Attestation-Letter/23-1804-CAB-Forum_AAL_Certigna_TLS-BR_Audit_E_V3_S5.pdf?rev=189ef82694a94cef93633032d405e89a&hash=DE84A5D1777FD458FC0FD2658FA0B894, https://apaveprod-cd1-bbh7c5ezeaaugfae.z01.azurefd.net/-/media/Project/GroupeApave/LSTI/Download/Attestation-Letter/23-1804-CAB-Forum_AAL_Certigna_TLS-EV_Audit_E_V3_S5.pdf?rev=feec4ce017184df1a8071f0586a883e4&hash=5DA6EE635809D4B0C6D6CBAD7C7F4EB0, https://apaveprod-cd1-bbh7c5ezeaaugfae.z01.azurefd.net/-/media/Project/GroupeApave/LSTI/Download/Attestation-Letter/23-1804-CAB-Forum_AAL_Certigna_SMIME-BR_Audit_E_V3_S5.pdf?rev=8349aea0f9fb48d0ac8316dac9f70954&hash=D0A55A60736D292A45E75A04E503D398, https://apaveprod-cd1-bbh7c5ezeaaugfae.z01.azurefd.net/-/media/Project/GroupeApave/LSTI/Download/Attestation-Letter/23-1804-CAB-Forum_AAL_Certigna_CS-BR_Audit_E_V3_S5.pdf?rev=66ad45d4ba6f43ecab738b86826aeeac&hash=69C8661637DB9B8B5630F72CEBF14C6E, http://www.lsti-certification.fr/images/liste_entreprise/Liste%20PSCe
- Repository URLs: https://www.certigna.com/autorites-de-certification/
- Root programs: {"mozilla":"Included","chrome":"Removed","microsoft":"Included","apple":"Included"}
- Contact aliases: -

## Certificate Inventory

| # | Subject | CA | Lifecycle | Validity | Policies | pathLen | EKU | zlint |
|---|---|---|---|---|---|---|---|---|
| 1 | countryName=FR, organizationName=Dhimyotis, commonName=Certigna | yes | unknown | 2007-06-29 to 2027-06-29 | - | - | - | clean |
| 2 | countryName=FR, organizationName=Certigna, commonName=Certigna Email Protection EU Root CA | yes | unknown | 2025-02-28 to 2040-02-28 | - | - | - | clean |
| 3 | countryName=FR, organizationName=Certigna, commonName=Certigna Email Protection Root CA | yes | unknown | 2024-03-13 to 2039-03-13 | - | - | - | clean |
| 4 | countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 48146308100036, commonName=Certigna Root CA | yes | unknown | 2013-10-01 to 2033-10-01 | 2.5.29.32.0 | - | - | current errors: 1 |
| 5 | countryName=FR, organizationName=Certigna, commonName=Certigna Server Authentication EU Root CA | yes | unknown | 2025-02-28 to 2040-02-28 | - | - | - | clean |
| 6 | countryName=FR, organizationName=Certigna, commonName=Certigna Server Authentication Root CA | yes | unknown | 2024-03-13 to 2039-03-13 | - | - | - | clean |
| 7 | countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 481463081, commonName=Certigna Authentification PRIS***, serialNumber=26 | yes | revoked, expired | 2009-11-02 to 2019-10-31 | 1.2.250.1.177.1.0.1.1 | - | - | clean |
| 8 | countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 481463081, commonName=Certigna Authentification PRIS*** Pro, serialNumber=27 | yes | revoked, expired | 2009-11-02 to 2019-10-31 | 1.2.250.1.177.1.0.1.1 | - | - | clean |
| 9 | countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 481463081, commonName=Certigna Cachet Serveur, serialNumber=30 | yes | revoked, expired | 2009-11-02 to 2019-10-31 | 1.2.250.1.177.1.0.1.1 | - | - | clean |
| 10 | countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 481463081, commonName=Certigna Chiffrement, serialNumber=5 | yes | expired | 2007-07-03 to 2017-07-03 | - | - | - | clean |
| 11 | countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 481463081, commonName=Certigna Classique, serialNumber=19 | yes | revoked, expired | 2008-09-22 to 2018-09-23 | 1.2.250.1.177.1.5.1.1 | - | - | clean |
| 12 | countryName=FR, organizationName=Certigna, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Email Protection Legal Person CA | yes | current | 2024-03-13 to 2039-03-12 | 1.2.250.1.177.8.0.1.1, 2.23.140.1.5.1.3, 2.23.140.1.5.2.3, 2.23.140.1.5.3.3, 2.23.140.1.5.4.3 | 0 | E-mail Protection | current errors: 1 |
| 13 | countryName=FR, organizationName=Certigna, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Email Protection Legal Person EU CA | yes | current | 2025-02-28 to 2040-02-27 | 2.23.140.1.5.1.3, 2.23.140.1.5.2.3, 2.23.140.1.5.3.3, 2.23.140.1.5.4.3, 1.2.250.1.177.17.0.1.1 | 0 | E-mail Protection | current errors: 1 |
| 14 | countryName=FR, organizationName=Certigna, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Email Protection Natural Person CA | yes | current | 2024-03-13 to 2039-03-12 | 1.2.250.1.177.8.0.1.1, 2.23.140.1.5.1.3, 2.23.140.1.5.2.3, 2.23.140.1.5.3.3, 2.23.140.1.5.4.3 | 0 | E-mail Protection | current errors: 1 |
| 15 | countryName=FR, organizationName=Certigna, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Email Protection Natural Person EU CA | yes | current | 2025-02-28 to 2040-02-27 | 2.23.140.1.5.1.3, 2.23.140.1.5.2.3, 2.23.140.1.5.3.3, 2.23.140.1.5.4.3, 1.2.250.1.177.17.0.1.1 | 0 | E-mail Protection | current errors: 1 |
| 16 | countryName=FR, organizationName=DHIMYOTIS, organizationalUnitName=0002 48146308100036, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Entity CA | yes | current | 2015-11-25 to 2033-06-03 | 1.2.250.1.177.2.0.1.1 | 0 | - | clean |
| 17 | countryName=FR, organizationName=DHIMYOTIS, organizationalUnitName=0002 48146308100036, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Entity CA | yes | expired | 2015-11-25 to 2025-11-22 | 1.2.250.1.177.1.0.1.2 | 0 | - | historical errors: 1 |
| 18 | countryName=FR, organizationName=DHIMYOTIS, organizationalUnitName=0002 48146308100036, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Entity Code Signing CA | yes | current | 2016-02-04 to 2033-08-13 | 1.2.250.1.177.2.0.1.1 | 0 | - | clean |
| 19 | countryName=FR, organizationName=DHIMYOTIS, organizationalUnitName=0002 48146308100036, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Entity Code Signing CA | yes | expired | 2016-02-04 to 2025-12-13 | 1.2.250.1.177.1.0.1.2 | 0 | - | historical errors: 1 |
| 20 | countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 481463081, commonName=Certigna Extended Validation SSL, serialNumber=35 | yes | revoked, expired | 2011-05-27 to 2021-05-24 | 2.5.29.32.0, 1.2.250.1.177.1.0.1.1 | 0 | - | clean |
| 21 | countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 481463081, commonName=Certigna ID, serialNumber=4 | yes | revoked, expired | 2007-07-03 to 2017-07-03 | - | - | - | clean |
| 22 | countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 481463081, commonName=Certigna ID Classe 3, serialNumber=32 | yes | revoked, expired | 2009-12-09 to 2019-12-07 | 1.2.250.1.177.1.0.1.1 | - | - | clean |
| 23 | countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 481463081, commonName=Certigna ID PRIS, serialNumber=21 | yes | revoked, expired | 2008-11-19 to 2018-11-17 | 1.2.250.1.177.1.0.1.1 | - | - | clean |
| 24 | countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 481463081, commonName=Certigna ID PRIS Pro, serialNumber=22 | yes | expired | 2008-11-19 to 2018-11-17 | 1.2.250.1.177.1.0.1.1 | - | - | clean |
| 25 | countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 481463081, commonName=Certigna ID PRIS**, serialNumber=28 | yes | revoked, expired | 2009-11-02 to 2019-10-31 | 1.2.250.1.177.1.0.1.1 | - | - | clean |
| 26 | countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 481463081, commonName=Certigna ID PRIS** Pro, serialNumber=29 | yes | revoked, expired | 2009-11-02 to 2019-10-31 | 1.2.250.1.177.1.0.1.1 | - | - | clean |
| 27 | countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 481463081, commonName=Certigna ID PRIS***, serialNumber=23 | yes | revoked, expired | 2008-11-19 to 2018-11-17 | 1.2.250.1.177.1.0.1.1 | - | - | clean |
| 28 | countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 481463081, commonName=Certigna ID PRIS*** Pro, serialNumber=24 | yes | expired | 2008-11-19 to 2018-11-17 | 1.2.250.1.177.1.0.1.1 | - | - | clean |
| 29 | countryName=FR, organizationName=DHIMYOTIS, organizationalUnitName=0002 48146308100036, organizationIdentifier=NTRFR-0002 48146308100036, commonName=Certigna Identity CA | yes | expired | 2015-12-31 to 2025-12-28 | 1.2.250.1.177.1.0.1.2 | 0 | - | historical errors: 1 |
| 30 | countryName=FR, organizationName=DHIMYOTIS, organizationalUnitName=0002 48146308100036, organizationIdentifier=NTRFR-0002 48146308100036, commonName=Certigna Identity CA | yes | current | 2015-12-31 to 2033-07-09 | 1.2.250.1.177.2.0.1.1 | 0 | - | clean |
| 31 | countryName=FR, organizationName=DHIMYOTIS, organizationalUnitName=0002 48146308100036, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Identity Plus CA | yes | expired | 2015-11-25 to 2025-11-22 | 1.2.250.1.177.1.0.1.2 | 0 | - | historical errors: 1 |
| 32 | countryName=FR, organizationName=DHIMYOTIS, organizationalUnitName=0002 48146308100036, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Identity Plus CA | yes | current | 2015-11-25 to 2033-06-03 | 1.2.250.1.177.2.0.1.1 | 0 | - | clean |
| 33 | countryName=FR, organizationName=DHIMYOTIS, organizationalUnitName=0002 48146308100036, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Interne | yes | revoked | 2015-11-10 to 2033-05-04 | 1.2.250.1.177.2.0.1.1 | 0 | - | clean |
| 34 | countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 481463081, commonName=Certigna Interne, serialNumber=20 | yes | expired | 2008-09-23 to 2018-09-23 | 1.2.250.1.177.1.6.1.1 | - | - | clean |
| 35 | countryName=FR, organizationName=DHIMYOTIS, organizationalUnitName=0002 48146308100036, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Interne | yes | revoked, expired | 2015-11-10 to 2026-05-06 | 1.2.250.1.177.1.0.1.2 | - | - | historical errors: 3 |
| 36 | countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 48146308100036, commonName=Certigna Root CA | yes | current | 2025-11-28 to 2027-06-28 | 2.23.140.1.2.2 | - | TLS Web Server Authentication | current errors: 1 |
| 37 | countryName=FR, organizationName=Certigna, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Server Authentication ACME CA | yes | revoked | 2024-03-13 to 2039-03-12 | 1.2.250.1.177.2.0.1.1, 2.23.140.1.1, 2.23.140.1.2.1, 2.23.140.1.2.2 | 0 | TLS Web Server Authentication, TLS Web Client Authentication | historical errors: 2 |
| 38 | countryName=FR, organizationName=Certigna, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Server Authentication ACME CA 2024 | yes | revoked | 2024-03-13 to 2039-03-12 | 1.2.250.1.177.1.0.1.2, 2.23.140.1.1, 2.23.140.1.2.1, 2.23.140.1.2.2 | 0 | TLS Web Server Authentication, TLS Web Client Authentication | historical errors: 2 |
| 39 | countryName=FR, organizationName=Certigna, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Server Authentication ACME CA G1 | yes | revoked | 2024-03-26 to 2027-06-28 | 1.2.250.1.177.1.0.1.2, 2.23.140.1.1, 2.23.140.1.2.1, 2.23.140.1.2.2 | 0 | TLS Web Client Authentication, TLS Web Server Authentication | historical errors: 2 |
| 40 | countryName=FR, organizationName=Certigna, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Server Authentication ACME CA G2 | yes | revoked | 2024-03-26 to 2033-09-29 | 1.2.250.1.177.2.0.1.1, 2.23.140.1.1, 2.23.140.1.2.1, 2.23.140.1.2.2 | 0 | TLS Web Client Authentication, TLS Web Server Authentication | historical errors: 2 |
| 41 | countryName=FR, organizationName=Certigna, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Server Authentication ACME FR CA | yes | revoked | 2024-03-13 to 2039-03-12 | 1.2.250.1.177.2.0.1.1, 2.23.140.1.1, 2.23.140.1.2.1, 2.23.140.1.2.2 | 0 | TLS Web Server Authentication, TLS Web Client Authentication | historical errors: 2 |
| 42 | countryName=FR, organizationName=Certigna, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Server Authentication ACME FR CA 2024 | yes | revoked | 2024-03-13 to 2039-03-12 | 1.2.250.1.177.1.0.1.2, 2.23.140.1.1, 2.23.140.1.2.1, 2.23.140.1.2.2 | 0 | TLS Web Server Authentication, TLS Web Client Authentication | historical errors: 2 |
| 43 | countryName=FR, organizationName=Certigna, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Server Authentication ACME FR CA G1 | yes | revoked | 2024-03-26 to 2027-06-28 | 1.2.250.1.177.1.0.1.2, 2.23.140.1.1, 2.23.140.1.2.1, 2.23.140.1.2.2 | 0 | TLS Web Client Authentication, TLS Web Server Authentication | historical errors: 2 |
| 44 | countryName=FR, organizationName=Certigna, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Server Authentication ACME FR CA G2 | yes | revoked | 2024-03-26 to 2033-09-29 | 1.2.250.1.177.2.0.1.1, 2.23.140.1.1, 2.23.140.1.2.1, 2.23.140.1.2.2 | 0 | TLS Web Client Authentication, TLS Web Server Authentication | historical errors: 2 |
| 45 | countryName=FR, organizationName=Certigna, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Server Authentication Auto CA | yes | revoked | 2024-03-13 to 2039-03-12 | 1.2.250.1.177.6.0.1.1, 2.23.140.1.1, 2.23.140.1.2.1, 2.23.140.1.2.2 | 0 | TLS Web Server Authentication, TLS Web Client Authentication | historical errors: 2 |
| 46 | countryName=FR, organizationName=Certigna, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Server Authentication Auto FR CA | yes | revoked | 2024-03-13 to 2039-03-12 | 1.2.250.1.177.6.0.1.1, 2.23.140.1.1, 2.23.140.1.2.1, 2.23.140.1.2.2 | 0 | TLS Web Server Authentication, TLS Web Client Authentication | historical errors: 2 |
| 47 | countryName=FR, organizationName=Certigna, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Server Authentication Auto OVCP CA | yes | current | 2025-02-28 to 2039-03-12 | 2.23.140.1.2.2, 1.2.250.1.177.6.0.1.1 | 0 | TLS Web Server Authentication, TLS Web Client Authentication | clean |
| 48 | countryName=FR, organizationName=Certigna, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Server Authentication Auto OVCP EU CA | yes | current | 2025-02-28 to 2040-02-27 | 2.23.140.1.2.2, 1.2.250.1.177.14.0.1.1 | 0 | TLS Web Server Authentication, TLS Web Client Authentication | clean |
| 49 | countryName=FR, organizationName=Certigna, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Server Authentication Auto QCP CA | yes | current | 2025-02-28 to 2039-03-12 | 2.23.140.1.2.2, 1.2.250.1.177.6.0.1.1 | 0 | TLS Web Server Authentication, TLS Web Client Authentication | clean |
| 50 | countryName=FR, organizationName=Certigna, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Server Authentication CA | yes | revoked | 2024-03-13 to 2039-03-12 | 1.2.250.1.177.6.0.1.1, 2.23.140.1.1, 2.23.140.1.2.1, 2.23.140.1.2.2 | 0 | TLS Web Server Authentication, TLS Web Client Authentication | historical errors: 2 |
| 51 | countryName=FR, organizationName=Certigna, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Server Authentication OVCP CA | yes | current | 2025-02-28 to 2039-03-12 | 2.23.140.1.2.2, 1.2.250.1.177.6.0.1.1 | 0 | TLS Web Server Authentication, TLS Web Client Authentication | clean |
| 52 | countryName=FR, organizationName=Certigna, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Server Authentication OVCP CA G1 | yes | current | 2025-02-28 to 2027-06-28 | 2.23.140.1.2.2, 1.2.250.1.177.1.0.1.2 | 0 | TLS Web Server Authentication, TLS Web Client Authentication | clean |
| 53 | countryName=FR, organizationName=Certigna, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Server Authentication OVCP EU CA | yes | current | 2025-02-28 to 2040-02-27 | 2.23.140.1.2.2, 1.2.250.1.177.14.0.1.1 | 0 | TLS Web Server Authentication, TLS Web Client Authentication | clean |
| 54 | countryName=FR, organizationName=Certigna, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Server Authentication OVCP EU CA G1 | yes | current | 2025-02-28 to 2027-06-28 | 2.23.140.1.2.2, 1.2.250.1.177.1.0.1.2 | 0 | TLS Web Server Authentication, TLS Web Client Authentication | clean |
| 55 | countryName=FR, organizationName=Certigna, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Server Authentication QCP CA | yes | current | 2025-02-28 to 2039-03-12 | 2.23.140.1.2.2, 1.2.250.1.177.6.0.1.1 | 0 | TLS Web Server Authentication, TLS Web Client Authentication | clean |
| 56 | countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 481463081, commonName=Certigna Serveur Client, serialNumber=31 | yes | revoked, expired | 2009-11-02 to 2019-10-31 | 1.2.250.1.177.1.0.1.1 | - | - | clean |
| 57 | countryName=FR, organizationName=DHIMYOTIS, organizationalUnitName=0002 48146308100036, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Services CA | yes | expired | 2015-11-25 to 2025-11-22 | 1.2.250.1.177.1.0.1.2 | 0 | - | historical errors: 1 |
| 58 | countryName=FR, organizationName=DHIMYOTIS, organizationalUnitName=0002 48146308100036, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Services CA | yes | current | 2015-11-25 to 2033-06-03 | 1.2.250.1.177.2.0.1.1 | 0 | - | clean |
| 59 | countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 481463081, commonName=Certigna SSL, serialNumber=3 | yes | revoked, expired | 2007-07-03 to 2017-07-03 | - | - | - | clean |
| 60 | countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 481463081, commonName=Certigna SSL PRIS, serialNumber=7 | yes | revoked, expired | 2008-06-20 to 2018-06-20 | - | - | - | clean |
| 61 | countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 481463081, commonName=Certigna SSL PRIS, serialNumber=25 | yes | expired | 2008-11-19 to 2018-11-17 | 1.2.250.1.177.1.0.1.1 | - | - | clean |
| 62 | countryName=FR, organizationName=DHIMYOTIS, organizationalUnitName=0002 48146308100036, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Wild CA | yes | current | 2015-11-25 to 2033-06-03 | 1.2.250.1.177.2.0.1.1 | 0 | - | clean |
| 63 | countryName=FR, organizationName=DHIMYOTIS, organizationalUnitName=0002 48146308100036, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Wild CA | yes | expired | 2015-11-25 to 2025-11-22 | 1.2.250.1.177.1.0.1.2 | 0 | - | historical errors: 1 |
| 64 | countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 481463081, commonName=Dova SAN, serialNumber=34 | yes | revoked, expired | 2010-05-11 to 2020-05-08 | - | - | - | clean |
| 65 | countryName=FR, organizationName=DHIMYOTIS, organizationalUnitName=0002 48146308100036, commonName=FR03 | yes | current | 2015-02-20 to 2033-02-15 | 1.2.250.1.177.2.0.1.1 | 0 | - | clean |

## Certificate Details

### Certigna

- Subject: countryName=FR, organizationName=Dhimyotis, commonName=Certigna
- Issuer: countryName=FR, organizationName=Dhimyotis, commonName=Certigna
- Serial: FEDCE3010FC948FF
- SHA-256: E3B6A2DB2ED7CE48842F7AC53241C7B71D54144BFB40C11F3F1D0B42F5EEA12D
- SPKI SHA-256: 510D20E5C47F63CF666B20F61AF62BC099A42AC824FFA443A2DA7C90B1808A91
- Validity: 2007-06-29 to 2027-06-29
- Key: RSA 2048
- Signature Algorithm: RSA-SHA1

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://cps.certigna.com/DPCCertignaTLSCA.pdf; https://cps.certigna.com/DPCCertignaTLSCA.pdf; https://cps.certigna.com/DPCCertignaTLSCA.pdf
- CP/CPS same as parent: false
- Audit URLs: https://apaveprod-cd1-bbh7c5ezeaaugfae.z01.azurefd.net/-/media/Project/GroupeApave/LSTI/Download/Attestation-Letter/23-1804-CAB-Forum_AAL_Certigna_Standard_Audit_E_V3_S5.pdf?rev=aecf9f157df44ce7aeb36873d7ddcbec&hash=5B855DEC04FD4D4CE0605FFD9B77F216, https://apaveprod-cd1-bbh7c5ezeaaugfae.z01.azurefd.net/-/media/Project/GroupeApave/LSTI/Download/Attestation-Letter/23-1804-CAB-Forum_AAL_Certigna_TLS-BR_Audit_E_V3_S5.pdf?rev=189ef82694a94cef93633032d405e89a&hash=DE84A5D1777FD458FC0FD2658FA0B894, https://apaveprod-cd1-bbh7c5ezeaaugfae.z01.azurefd.net/-/media/Project/GroupeApave/LSTI/Download/Attestation-Letter/23-1804-CAB-Forum_AAL_Certigna_TLS-EV_Audit_E_V3_S5.pdf?rev=feec4ce017184df1a8071f0586a883e4&hash=5DA6EE635809D4B0C6D6CBAD7C7F4EB0, https://apaveprod-cd1-bbh7c5ezeaaugfae.z01.azurefd.net/-/media/Project/GroupeApave/LSTI/Download/Attestation-Letter/23-1804-CAB-Forum_AAL_Certigna_SMIME-BR_Audit_E_V3_S5.pdf?rev=8349aea0f9fb48d0ac8316dac9f70954&hash=D0A55A60736D292A45E75A04E503D398, https://apaveprod-cd1-bbh7c5ezeaaugfae.z01.azurefd.net/-/media/Project/GroupeApave/LSTI/Download/Attestation-Letter/23-1804-CAB-Forum_AAL_Certigna_CS-BR_Audit_E_V3_S5.pdf?rev=66ad45d4ba6f43ecab738b86826aeeac&hash=69C8661637DB9B8B5630F72CEBF14C6E
- Audit same as parent: false
- CRLs issued by this CA disclosed in CCADB: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Revocation status: -
- Browser status: {"apple":"Included","chrome":"Removed","microsoft":"Included","mozilla":"Included"}
- Certificate type: Root Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: -
- Currently valid: -
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: -
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: -
- CRL DP: -
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            fe:dc:e3:01:0f:c9:48:ff
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, CN = Certigna
        Validity
            Not Before: Jun 29 15:13:05 2007 GMT
            Not After : Jun 29 15:13:05 2027 GMT
        Subject: C = FR, O = Dhimyotis, CN = Certigna
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11
            X509v3 Authority Key Identifier:
                keyid:1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11
                DirName:/C=FR/O=Dhimyotis/CN=Certigna
                serial:FE:DC:E3:01:0F:C9:48:FF
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Netscape Cert Type:
                SSL CA, S/MIME CA, Object Signing CA
    Signature Algorithm: sha1WithRSAEncryption
    SHA256 Fingerprint: E3B6A2DB2ED7CE48842F7AC53241C7B71D54144BFB40C11F3F1D0B42F5EEA12D
    SPKI SHA256: 510D20E5C47F63CF666B20F61AF62BC099A42AC824FFA443A2DA7C90B1808A91
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: -
- AIA OCSP: -
- AIA CA Issuers: -
- CRL Distribution Points: -
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_root_ca
- is_self_signed
- has_basic_constraints
- is_ca
- has_key_usage
- expires_within_398_days

### Certigna Email Protection EU Root CA

- Subject: countryName=FR, organizationName=Certigna, commonName=Certigna Email Protection EU Root CA
- Issuer: countryName=FR, organizationName=Certigna, commonName=Certigna Email Protection EU Root CA
- Serial: 7ACEF938FDFC0F6C2CBF5B9727AC2A1C7CFA177B
- SHA-256: 0CC3CFB9C40C1EF39D257262B90F0A5E1E9C2EA978021372364319E2D9BD5E4C
- SPKI SHA-256: AC597D5BF4686AF64755A05E4C7D487E62BD84E65BD21AF26D3B09D4A4BE9801
- Validity: 2025-02-28 to 2040-02-28
- Key: RSA 4096
- Signature Algorithm: RSA-SHA384

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: https://apaveprod-cd1-bbh7c5ezeaaugfae.z01.azurefd.net/-/media/Project/GroupeApave/LSTI/Download/Attestation-Letter/23-1804-CAB-Forum_AAL_Certigna_Standard_Audit_E_V3_S5.pdf?rev=aecf9f157df44ce7aeb36873d7ddcbec&hash=5B855DEC04FD4D4CE0605FFD9B77F216, https://apaveprod-cd1-bbh7c5ezeaaugfae.z01.azurefd.net/-/media/Project/GroupeApave/LSTI/Download/Attestation-Letter/23-1804-CAB-Forum_AAL_Certigna_SMIME-BR_Audit_E_V3_S5.pdf?rev=8349aea0f9fb48d0ac8316dac9f70954&hash=D0A55A60736D292A45E75A04E503D398
- Audit same as parent: false
- CRLs issued by this CA disclosed in CCADB: http://crl.certigna.com/CertignaEmailProtectionEURootCA.crl
- Revocation status: -
- Browser status: {"apple":"Not Included","chrome":"Not Included","microsoft":"Not Included","mozilla":"Not Yet Included"}
- Certificate type: Root Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: -
- Currently valid: -
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: -
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: -
- CRL DP: -
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ce:f9:38:fd:fc:0f:6c:2c:bf:5b:97:27:ac:2a:1c:7c:fa:17:7b
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C = FR, O = Certigna, CN = Certigna Email Protection EU Root CA
        Validity
            Not Before: Feb 28 09:49:36 2025 GMT
            Not After : Feb 28 09:49:35 2040 GMT
        Subject: C = FR, O = Certigna, CN = Certigna Email Protection EU Root CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier:
                CE:8D:E0:B1:C3:A4:67:85:BC:9B:78:2C:94:BF:1B:66:D0:C7:FB:02
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                CE:8D:E0:B1:C3:A4:67:85:BC:9B:78:2C:94:BF:1B:66:D0:C7:FB:02
    Signature Algorithm: sha384WithRSAEncryption
    SHA256 Fingerprint: 0CC3CFB9C40C1EF39D257262B90F0A5E1E9C2EA978021372364319E2D9BD5E4C
    SPKI SHA256: AC597D5BF4686AF64755A05E4C7D487E62BD84E65BD21AF26D3B09D4A4BE9801
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: -
- AIA OCSP: -
- AIA CA Issuers: -
- CRL Distribution Points: -
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_root_ca
- is_self_signed
- has_basic_constraints
- is_ca
- has_key_usage

### Certigna Email Protection Root CA

- Subject: countryName=FR, organizationName=Certigna, commonName=Certigna Email Protection Root CA
- Issuer: countryName=FR, organizationName=Certigna, commonName=Certigna Email Protection Root CA
- Serial: 68B43184C463A96BC536106BB3C30741C11198D7
- SHA-256: C0C816BC038F0226227F083B03FB0F4EE677C962DC19E958BA329E3B7A90CCB1
- SPKI SHA-256: 73B557E72ED325056917EF968BEBA17050664E5B27CF725CD43041CBEBAB69B7
- Validity: 2024-03-13 to 2039-03-13
- Key: RSA 4096
- Signature Algorithm: RSA-SHA384

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: https://apaveprod-cd1-bbh7c5ezeaaugfae.z01.azurefd.net/-/media/Project/GroupeApave/LSTI/Download/Attestation-Letter/23-1804-CAB-Forum_AAL_Certigna_Standard_Audit_E_V3_S5.pdf?rev=aecf9f157df44ce7aeb36873d7ddcbec&hash=5B855DEC04FD4D4CE0605FFD9B77F216, https://apaveprod-cd1-bbh7c5ezeaaugfae.z01.azurefd.net/-/media/Project/GroupeApave/LSTI/Download/Attestation-Letter/23-1804-CAB-Forum_AAL_Certigna_SMIME-BR_Audit_E_V3_S5.pdf?rev=8349aea0f9fb48d0ac8316dac9f70954&hash=D0A55A60736D292A45E75A04E503D398
- Audit same as parent: false
- CRLs issued by this CA disclosed in CCADB: http://crl.certigna.com/CertignaEmailProtectionRootCA.crl
- Revocation status: -
- Browser status: {"apple":"Not Included","chrome":"Not Included","microsoft":"Not Included","mozilla":"Not Yet Included"}
- Certificate type: Root Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: -
- Currently valid: -
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: -
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: -
- CRL DP: -
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b4:31:84:c4:63:a9:6b:c5:36:10:6b:b3:c3:07:41:c1:11:98:d7
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C = FR, O = Certigna, CN = Certigna Email Protection Root CA
        Validity
            Not Before: Mar 13 10:16:55 2024 GMT
            Not After : Mar 13 10:16:54 2039 GMT
        Subject: C = FR, O = Certigna, CN = Certigna Email Protection Root CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier:
                66:A8:33:C8:E3:14:9B:49:A9:F7:53:F6:AC:BD:05:F1:B5:3F:61:1D
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                66:A8:33:C8:E3:14:9B:49:A9:F7:53:F6:AC:BD:05:F1:B5:3F:61:1D
    Signature Algorithm: sha384WithRSAEncryption
    SHA256 Fingerprint: C0C816BC038F0226227F083B03FB0F4EE677C962DC19E958BA329E3B7A90CCB1
    SPKI SHA256: 73B557E72ED325056917EF968BEBA17050664E5B27CF725CD43041CBEBAB69B7
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: -
- AIA OCSP: -
- AIA CA Issuers: -
- CRL Distribution Points: -
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_root_ca
- is_self_signed
- has_basic_constraints
- is_ca
- has_key_usage

### Certigna Root CA

- Subject: countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 48146308100036, commonName=Certigna Root CA
- Issuer: countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 48146308100036, commonName=Certigna Root CA
- Serial: CAE91B89F155030DA3E6416DC4E3A6E1
- SHA-256: D48D3D23EEDB50A459E55197601C27774B9D7B18C94D5A059511A10250B93168
- SPKI SHA-256: 8E8046EC4CAC015A507CE0D2D0154A4B40E8E42B3165CFA546571435112D17E5
- Validity: 2013-10-01 to 2033-10-01
- Key: RSA 4096
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://cps.certigna.com/DPCCertignaTLSCA.pdf; https://cps.certigna.com/DPCCertignaTLSCA.pdf; https://cps.certigna.com/DPCCertignaTLSCA.pdf
- CP/CPS same as parent: false
- Audit URLs: https://apaveprod-cd1-bbh7c5ezeaaugfae.z01.azurefd.net/-/media/Project/GroupeApave/LSTI/Download/Attestation-Letter/23-1804-CAB-Forum_AAL_Certigna_Standard_Audit_E_V3_S5.pdf?rev=aecf9f157df44ce7aeb36873d7ddcbec&hash=5B855DEC04FD4D4CE0605FFD9B77F216, https://apaveprod-cd1-bbh7c5ezeaaugfae.z01.azurefd.net/-/media/Project/GroupeApave/LSTI/Download/Attestation-Letter/23-1804-CAB-Forum_AAL_Certigna_TLS-BR_Audit_E_V3_S5.pdf?rev=189ef82694a94cef93633032d405e89a&hash=DE84A5D1777FD458FC0FD2658FA0B894, https://apaveprod-cd1-bbh7c5ezeaaugfae.z01.azurefd.net/-/media/Project/GroupeApave/LSTI/Download/Attestation-Letter/23-1804-CAB-Forum_AAL_Certigna_TLS-EV_Audit_E_V3_S5.pdf?rev=feec4ce017184df1a8071f0586a883e4&hash=5DA6EE635809D4B0C6D6CBAD7C7F4EB0, https://apaveprod-cd1-bbh7c5ezeaaugfae.z01.azurefd.net/-/media/Project/GroupeApave/LSTI/Download/Attestation-Letter/23-1804-CAB-Forum_AAL_Certigna_SMIME-BR_Audit_E_V3_S5.pdf?rev=8349aea0f9fb48d0ac8316dac9f70954&hash=D0A55A60736D292A45E75A04E503D398, https://apaveprod-cd1-bbh7c5ezeaaugfae.z01.azurefd.net/-/media/Project/GroupeApave/LSTI/Download/Attestation-Letter/23-1804-CAB-Forum_AAL_Certigna_CS-BR_Audit_E_V3_S5.pdf?rev=66ad45d4ba6f43ecab738b86826aeeac&hash=69C8661637DB9B8B5630F72CEBF14C6E
- Audit same as parent: false
- CRLs issued by this CA disclosed in CCADB: https://crl.certigna.fr/certignarootca.crl, http://crl.dhimyotis.com/certignarootca.crl
- Revocation status: -
- Browser status: {"apple":"Not Included","chrome":"Included","microsoft":"Included","mozilla":"Included"}
- Certificate type: Root Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: -
- Currently valid: -
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: -
- CRL DP: http://crl.certigna.fr/certignarootca.crl, http://crl.dhimyotis.com/certignarootca.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ca:e9:1b:89:f1:55:03:0d:a3:e6:41:6d:c4:e3:a6:e1
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, OU = 0002 48146308100036, CN = Certigna Root CA
        Validity
            Not Before: Oct  1 08:32:27 2013 GMT
            Not After : Oct  1 08:32:27 2033 GMT
        Subject: C = FR, O = Dhimyotis, OU = 0002 48146308100036, CN = Certigna Root CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                18:87:56:E0:6E:77:EE:24:35:3C:4E:73:9A:1F:D6:E1:E2:79:7E:2B
            X509v3 Authority Key Identifier:
                18:87:56:E0:6E:77:EE:24:35:3C:4E:73:9A:1F:D6:E1:E2:79:7E:2B
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
                  CPS: https://wwww.certigna.fr/autorites/
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.fr/certignarootca.crl
                Full Name:
                  URI:http://crl.dhimyotis.com/certignarootca.crl
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: D48D3D23EEDB50A459E55197601C27774B9D7B18C94D5A059511A10250B93168
    SPKI SHA256: 8E8046EC4CAC015A507CE0D2D0154A4B40E8E42B3165CFA546571435112D17E5
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: -
- AIA CA Issuers: -
- CRL Distribution Points: http://crl.certigna.fr/certignarootca.crl, http://crl.dhimyotis.com/certignarootca.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings


- [current] warn w_root_ca_contains_cert_policy: 

#### Computed Flags

- is_root_ca
- is_self_signed
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_any_policy
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp

### Certigna Server Authentication EU Root CA

- Subject: countryName=FR, organizationName=Certigna, commonName=Certigna Server Authentication EU Root CA
- Issuer: countryName=FR, organizationName=Certigna, commonName=Certigna Server Authentication EU Root CA
- Serial: 11A064F5746CC6CCB5FD081CCF0A857051F569A5
- SHA-256: E1DBC3C7633EF9FB1408081F2279DA1BAF19DEEFF52201F6A4090A2199B9D868
- SPKI SHA-256: B75377D13A9E1FDFFFB31AE75D043B1E12B6197DEEE464F44D443928E8B2A09D
- Validity: 2025-02-28 to 2040-02-28
- Key: RSA 4096
- Signature Algorithm: RSA-SHA384

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://cps.certigna.com/DPCCertignaTLSCA.pdf; https://cps.certigna.com/DPCCertignaTLSCA.pdf; https://cps.certigna.com/DPCCertignaTLSCA.pdf
- CP/CPS same as parent: false
- Audit URLs: https://apaveprod-cd1-bbh7c5ezeaaugfae.z01.azurefd.net/-/media/Project/GroupeApave/LSTI/Download/Attestation-Letter/23-1804-CAB-Forum_AAL_Certigna_Standard_Audit_E_V3_S5.pdf?rev=aecf9f157df44ce7aeb36873d7ddcbec&hash=5B855DEC04FD4D4CE0605FFD9B77F216, https://apaveprod-cd1-bbh7c5ezeaaugfae.z01.azurefd.net/-/media/Project/GroupeApave/LSTI/Download/Attestation-Letter/23-1804-CAB-Forum_AAL_Certigna_TLS-BR_Audit_E_V3_S5.pdf?rev=189ef82694a94cef93633032d405e89a&hash=DE84A5D1777FD458FC0FD2658FA0B894
- Audit same as parent: false
- CRLs issued by this CA disclosed in CCADB: http://crl.certigna.com/CertignaServerAuthenticationEURootCA.crl
- Revocation status: -
- Browser status: {"apple":"Not Included","chrome":"Not Included","microsoft":"Not Included","mozilla":"Not Yet Included"}
- Certificate type: Root Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: -
- Currently valid: -
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: -
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: -
- CRL DP: -
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a0:64:f5:74:6c:c6:cc:b5:fd:08:1c:cf:0a:85:70:51:f5:69:a5
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C = FR, O = Certigna, CN = Certigna Server Authentication EU Root CA
        Validity
            Not Before: Feb 28 09:49:08 2025 GMT
            Not After : Feb 28 09:49:07 2040 GMT
        Subject: C = FR, O = Certigna, CN = Certigna Server Authentication EU Root CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier:
                37:0B:6A:1C:32:83:6A:A8:35:F2:A6:D9:1C:EA:59:5B:11:88:31:90
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                37:0B:6A:1C:32:83:6A:A8:35:F2:A6:D9:1C:EA:59:5B:11:88:31:90
    Signature Algorithm: sha384WithRSAEncryption
    SHA256 Fingerprint: E1DBC3C7633EF9FB1408081F2279DA1BAF19DEEFF52201F6A4090A2199B9D868
    SPKI SHA256: B75377D13A9E1FDFFFB31AE75D043B1E12B6197DEEE464F44D443928E8B2A09D
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: -
- AIA OCSP: -
- AIA CA Issuers: -
- CRL Distribution Points: -
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_root_ca
- is_self_signed
- has_basic_constraints
- is_ca
- has_key_usage

### Certigna Server Authentication Root CA

- Subject: countryName=FR, organizationName=Certigna, commonName=Certigna Server Authentication Root CA
- Issuer: countryName=FR, organizationName=Certigna, commonName=Certigna Server Authentication Root CA
- Serial: 0DAA2368DCF40235D1117F1EB7FC1E032B5B4F46
- SHA-256: 38E5A7047A3BA80DF9CBA23F96A5E9BD8BBC937D0E5D739DEEDA9A384542D17A
- SPKI SHA-256: F16EC272045859AD0081BEE50EF0F1BCC08096800B57F3893A15205D6258384F
- Validity: 2024-03-13 to 2039-03-13
- Key: RSA 4096
- Signature Algorithm: RSA-SHA384

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://cps.certigna.com/DPCCertignaTLSCA.pdf; https://cps.certigna.com/DPCCertignaTLSCA.pdf; https://cps.certigna.com/DPCCertignaTLSCA.pdf
- CP/CPS same as parent: false
- Audit URLs: https://apaveprod-cd1-bbh7c5ezeaaugfae.z01.azurefd.net/-/media/Project/GroupeApave/LSTI/Download/Attestation-Letter/23-1804-CAB-Forum_AAL_Certigna_Standard_Audit_E_V3_S5.pdf?rev=aecf9f157df44ce7aeb36873d7ddcbec&hash=5B855DEC04FD4D4CE0605FFD9B77F216, https://apaveprod-cd1-bbh7c5ezeaaugfae.z01.azurefd.net/-/media/Project/GroupeApave/LSTI/Download/Attestation-Letter/23-1804-CAB-Forum_AAL_Certigna_TLS-BR_Audit_E_V3_S5.pdf?rev=189ef82694a94cef93633032d405e89a&hash=DE84A5D1777FD458FC0FD2658FA0B894
- Audit same as parent: false
- CRLs issued by this CA disclosed in CCADB: http://crl.certigna.com/CertignaServerAuthenticationRootCA.crl
- Revocation status: -
- Browser status: {"apple":"Not Included","chrome":"Not Included","microsoft":"Not Included","mozilla":"Not Yet Included"}
- Certificate type: Root Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: -
- Currently valid: -
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: -
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: -
- CRL DP: -
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:aa:23:68:dc:f4:02:35:d1:11:7f:1e:b7:fc:1e:03:2b:5b:4f:46
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C = FR, O = Certigna, CN = Certigna Server Authentication Root CA
        Validity
            Not Before: Mar 13 10:16:40 2024 GMT
            Not After : Mar 13 10:16:39 2039 GMT
        Subject: C = FR, O = Certigna, CN = Certigna Server Authentication Root CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier:
                D6:92:98:E7:9D:1D:AD:E1:E6:0A:4A:96:04:87:6B:EE:FB:29:1A:BA
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                D6:92:98:E7:9D:1D:AD:E1:E6:0A:4A:96:04:87:6B:EE:FB:29:1A:BA
    Signature Algorithm: sha384WithRSAEncryption
    SHA256 Fingerprint: 38E5A7047A3BA80DF9CBA23F96A5E9BD8BBC937D0E5D739DEEDA9A384542D17A
    SPKI SHA256: F16EC272045859AD0081BEE50EF0F1BCC08096800B57F3893A15205D6258384F
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: -
- AIA OCSP: -
- AIA CA Issuers: -
- CRL Distribution Points: -
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_root_ca
- is_self_signed
- has_basic_constraints
- is_ca
- has_key_usage

### Certigna Authentification PRIS***

- Subject: countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 481463081, commonName=Certigna Authentification PRIS***, serialNumber=26
- Issuer: countryName=FR, organizationName=Dhimyotis, commonName=Certigna
- Serial: 1A
- SHA-256: 8E1EE929620816880C6C800D629C546E30875F19D5F0BBDA005E230934188DEA
- SPKI SHA-256: 2B19E17F520426F0A5680E54E4690C21F796F6D93B97FB39E2A56FC62AF23048
- Validity: 2009-11-02 to 2019-10-31
- Key: RSA 2048
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: true
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: -
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.1.0.1.1
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: -
- CRL DP: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, CN = Certigna
        Validity
            Not Before: Nov  2 09:31:08 2009 GMT
            Not After : Oct 31 09:31:08 2019 GMT
        Subject: C = FR, O = Dhimyotis, OU = 0002 481463081, CN = Certigna Authentification PRIS***, serialNumber = 26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies:
                Policy: 1.2.250.1.177.1.0.1.1
            X509v3 Subject Key Identifier:
                16:D4:51:18:1A:E3:92:99:D7:A6:81:43:CD:83:9D:AC:BC:78:7E:08
            X509v3 Authority Key Identifier:
                keyid:1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11
                DirName:/C=FR/O=Dhimyotis/CN=Certigna
                serial:FE:DC:E3:01:0F:C9:48:FF
            Netscape CA Revocation Url:
                http://crl.certigna.fr/certigna.crl
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.fr/certigna.crl
                Full Name:
                  URI:http://crl.dhimyotis.com/certigna.crl
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 8E1EE929620816880C6C800D629C546E30875F19D5F0BBDA005E230934188DEA
    SPKI SHA256: 2B19E17F520426F0A5680E54E4690C21F796F6D93B97FB39E2A56FC62AF23048
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.1.0.1.1
- AIA OCSP: -
- AIA CA Issuers: -
- CRL Distribution Points: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_http_urls
- has_crldp
- is_expired

### Certigna Authentification PRIS*** Pro

- Subject: countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 481463081, commonName=Certigna Authentification PRIS*** Pro, serialNumber=27
- Issuer: countryName=FR, organizationName=Dhimyotis, commonName=Certigna
- Serial: 1B
- SHA-256: FFA2D953F38D247894EA6B3F1E91C9BFBCEBB0E7A927D646F5A83570E3F5BC1A
- SPKI SHA-256: 4909F93D3329E8D7908CA570AE474B84A09EF13DABF1EE2B79DF330E5DFFBCFD
- Validity: 2009-11-02 to 2019-10-31
- Key: RSA 2048
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: http://politique.certigna.fr/PCcertignaauthpris3pro.pdf
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: -
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.1.0.1.1
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: -
- CRL DP: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, CN = Certigna
        Validity
            Not Before: Nov  2 10:05:04 2009 GMT
            Not After : Oct 31 10:05:04 2019 GMT
        Subject: C = FR, O = Dhimyotis, OU = 0002 481463081, CN = Certigna Authentification PRIS*** Pro, serialNumber = 27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies:
                Policy: 1.2.250.1.177.1.0.1.1
            X509v3 Subject Key Identifier:
                7C:16:A2:94:67:ED:52:CD:E5:6F:D8:D6:C0:89:89:F9:7E:64:C2:33
            X509v3 Authority Key Identifier:
                keyid:1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11
                DirName:/C=FR/O=Dhimyotis/CN=Certigna
                serial:FE:DC:E3:01:0F:C9:48:FF
            Netscape CA Revocation Url:
                http://crl.certigna.fr/certigna.crl
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.fr/certigna.crl
                Full Name:
                  URI:http://crl.dhimyotis.com/certigna.crl
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: FFA2D953F38D247894EA6B3F1E91C9BFBCEBB0E7A927D646F5A83570E3F5BC1A
    SPKI SHA256: 4909F93D3329E8D7908CA570AE474B84A09EF13DABF1EE2B79DF330E5DFFBCFD
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.1.0.1.1
- AIA OCSP: -
- AIA CA Issuers: -
- CRL Distribution Points: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_http_urls
- has_crldp
- is_expired

### Certigna Cachet Serveur

- Subject: countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 481463081, commonName=Certigna Cachet Serveur, serialNumber=30
- Issuer: countryName=FR, organizationName=Dhimyotis, commonName=Certigna
- Serial: 1E
- SHA-256: 94509512E831AC4867E1E5A00FFE471DB8DE01617E9E2A149EDEBC57C7933F49
- SPKI SHA-256: 7C7DD0A59D03395FFFEFE131DB5E66D249B62E30B851C0981DAC5C2DB58ED721
- Validity: 2009-11-02 to 2019-10-31
- Key: RSA 2048
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: http://politique.certigna.fr/PCcertignacachetserveurmessagerie.pdf
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: -
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.1.0.1.1
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: -
- CRL DP: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, CN = Certigna
        Validity
            Not Before: Nov  2 11:17:42 2009 GMT
            Not After : Oct 31 11:17:42 2019 GMT
        Subject: C = FR, O = Dhimyotis, OU = 0002 481463081, CN = Certigna Cachet Serveur, serialNumber = 30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies:
                Policy: 1.2.250.1.177.1.0.1.1
            X509v3 Subject Key Identifier:
                23:CD:00:42:D0:99:CF:C5:4A:DA:75:49:59:49:DF:B1:03:8C:43:DE
            X509v3 Authority Key Identifier:
                keyid:1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11
                DirName:/C=FR/O=Dhimyotis/CN=Certigna
                serial:FE:DC:E3:01:0F:C9:48:FF
            Netscape CA Revocation Url:
                http://crl.certigna.fr/certigna.crl
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.fr/certigna.crl
                Full Name:
                  URI:http://crl.dhimyotis.com/certigna.crl
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 94509512E831AC4867E1E5A00FFE471DB8DE01617E9E2A149EDEBC57C7933F49
    SPKI SHA256: 7C7DD0A59D03395FFFEFE131DB5E66D249B62E30B851C0981DAC5C2DB58ED721
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.1.0.1.1
- AIA OCSP: -
- AIA CA Issuers: -
- CRL Distribution Points: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_http_urls
- has_crldp
- is_expired

### Certigna Chiffrement

- Subject: countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 481463081, commonName=Certigna Chiffrement, serialNumber=5
- Issuer: countryName=FR, organizationName=Dhimyotis, commonName=Certigna
- Serial: 05
- SHA-256: 38D5866EF8ECD60B874EFA7C3592CB0F91221212FD78C3C7EC41016AF985C650
- SPKI SHA-256: 2BB9B96DE74E4F1598C7D9EEA689D8BE886D5A0A9CB8AA63ADBDB8E2C2CCA156
- Validity: 2007-07-03 to 2017-07-03
- Key: RSA 2048
- Signature Algorithm: RSA-SHA1

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://www.certigna.fr/autorites/
- CP/CPS same as parent: false
- Audit URLs: http://www.lsti-certification.fr/images/liste_entreprise/Liste%20PSCe
- Audit same as parent: false
- CRLs issued by this CA disclosed in CCADB: -
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: false
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: -
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: -
- CRL DP: http://www.certigna.fr/crl/certigna.crl, http://www.dhimyotis.com/crl/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, CN = Certigna
        Validity
            Not Before: Jul  3 08:00:07 2007 GMT
            Not After : Jul  3 08:00:07 2017 GMT
        Subject: C = FR, O = Dhimyotis, OU = 0002 481463081, CN = Certigna Chiffrement, serialNumber = 5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Netscape Cert Type:
                SSL CA, S/MIME CA, Object Signing CA
            X509v3 Subject Key Identifier:
                84:C4:22:63:C8:83:7E:66:58:62:AB:F6:9D:3C:B0:2A:14:C0:DF:3C
            X509v3 Authority Key Identifier:
                keyid:1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11
                DirName:/C=FR/O=Dhimyotis/CN=Certigna
                serial:FE:DC:E3:01:0F:C9:48:FF
            Netscape CA Revocation Url:
                http://www.certigna.fr/crl/certigna.crl
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://www.certigna.fr/crl/certigna.crl
                Full Name:
                  URI:http://www.dhimyotis.com/crl/certigna.crl
    Signature Algorithm: sha1WithRSAEncryption
    SHA256 Fingerprint: 38D5866EF8ECD60B874EFA7C3592CB0F91221212FD78C3C7EC41016AF985C650
    SPKI SHA256: 2BB9B96DE74E4F1598C7D9EEA689D8BE886D5A0A9CB8AA63ADBDB8E2C2CCA156
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: -
- AIA OCSP: -
- AIA CA Issuers: -
- CRL Distribution Points: http://www.certigna.fr/crl/certigna.crl, http://www.dhimyotis.com/crl/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_http_urls
- has_crldp
- is_expired

### Certigna Classique

- Subject: countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 481463081, commonName=Certigna Classique, serialNumber=19
- Issuer: countryName=FR, organizationName=Dhimyotis, commonName=Certigna
- Serial: 13
- SHA-256: 9CC1A4FE2C3F60CA3826DE7200ECF83A2D84E060613FEA5A8EEE734375203D0C
- SPKI SHA-256: 0491C68840982892027D72B5A9D024C7A2A12A45D86BE3AABD41DD3E0ABF5367
- Validity: 2008-09-22 to 2018-09-23
- Key: RSA 2048
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: true
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: -
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.1.5.1.1
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://certigna.ocsp.certigna.fr, http://certigna.ocsp.dhimyotis.com
- CRL DP: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, CN = Certigna
        Validity
            Not Before: Sep 22 10:06:37 2008 GMT
            Not After : Sep 23 10:06:37 2018 GMT
        Subject: C = FR, O = Dhimyotis, OU = 0002 481463081, CN = Certigna Classique, serialNumber = 19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Netscape Cert Type:
                S/MIME CA, Object Signing CA
            X509v3 Certificate Policies:
                Policy: 1.2.250.1.177.1.5.1.1
            Authority Information Access:
                OCSP - URI:http://certigna.ocsp.certigna.fr
                OCSP - URI:http://certigna.ocsp.dhimyotis.com
            X509v3 Subject Key Identifier:
                8A:05:E2:33:34:DE:F5:94:5F:76:20:54:DF:6D:F2:B0:0E:96:17:6C
            X509v3 Authority Key Identifier:
                keyid:1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11
                DirName:/C=FR/O=Dhimyotis/CN=Certigna
                serial:FE:DC:E3:01:0F:C9:48:FF
            Netscape CA Revocation Url:
                http://crl.certigna.fr/certigna.crl
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.fr/certigna.crl
                Full Name:
                  URI:http://crl.dhimyotis.com/certigna.crl
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 9CC1A4FE2C3F60CA3826DE7200ECF83A2D84E060613FEA5A8EEE734375203D0C
    SPKI SHA256: 0491C68840982892027D72B5A9D024C7A2A12A45D86BE3AABD41DD3E0ABF5367
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.1.5.1.1
- AIA OCSP: http://certigna.ocsp.certigna.fr, http://certigna.ocsp.dhimyotis.com
- AIA CA Issuers: -
- CRL Distribution Points: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_http_urls
- has_crldp
- has_ocsp
- is_expired

### Certigna Email Protection Legal Person CA

- Subject: countryName=FR, organizationName=Certigna, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Email Protection Legal Person CA
- Issuer: countryName=FR, organizationName=Certigna, commonName=Certigna Email Protection Root CA
- Serial: 259C979C9C33F6A3FA8F6A2B65D2D0395BD5A150
- SHA-256: 7B6F9FFBAE220E1E5209770B06ACA49D0B0F61E4C7D5DF3CEAE6C19768398981
- SPKI SHA-256: 7D67C3C710FC0590B4F6504234819F75913823AEA4064B994F168D9E421ED152
- Validity: 2024-03-13 to 2039-03-12
- Key: RSA 4096
- Signature Algorithm: RSA-SHA384

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: https://crl.certigna.com/CertignaEmailProtectionLegalPersonCA.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: 0
- Key Usage: keyCertSign, cRLSign
- EKU: E-mail Protection
- Certificate Policies: 1.2.250.1.177.8.0.1.1, 2.23.140.1.5.1.3, 2.23.140.1.5.2.3, 2.23.140.1.5.3.3, 2.23.140.1.5.4.3
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://ocsp.certigna.com
- CRL DP: http://crl.certigna.com/CertignaEmailProtectionRootCA.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:9c:97:9c:9c:33:f6:a3:fa:8f:6a:2b:65:d2:d0:39:5b:d5:a1:50
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C = FR, O = Certigna, CN = Certigna Email Protection Root CA
        Validity
            Not Before: Mar 13 10:16:58 2024 GMT
            Not After : Mar 12 10:16:57 2039 GMT
        Subject: C = FR, O = Certigna, organizationIdentifier = NTRFR-48146308100036, CN = Certigna Email Protection Legal Person CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access:
                CA Issuers - URI:http://cert.certigna.com/CertignaEmailProtectionRootCA.cer
                OCSP - URI:http://ocsp.certigna.com
            X509v3 Authority Key Identifier:
                66:A8:33:C8:E3:14:9B:49:A9:F7:53:F6:AC:BD:05:F1:B5:3F:61:1D
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies:
                Policy: 1.2.250.1.177.8.0.1.1
                  CPS: http://cps.certigna.com
                Policy: 2.23.140.1.5.1.3
                Policy: 2.23.140.1.5.2.3
                Policy: 2.23.140.1.5.3.3
                Policy: 2.23.140.1.5.4.3
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.com/CertignaEmailProtectionRootCA.crl
            X509v3 Extended Key Usage:
                E-mail Protection
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                E7:97:D4:2B:37:4F:3A:4B:15:05:11:F5:8A:D6:C7:0D:9B:61:E1:DF
    Signature Algorithm: sha384WithRSAEncryption
    SHA256 Fingerprint: 7B6F9FFBAE220E1E5209770B06ACA49D0B0F61E4C7D5DF3CEAE6C19768398981
    SPKI SHA256: 7D67C3C710FC0590B4F6504234819F75913823AEA4064B994F168D9E421ED152
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":0}
- Key Usage: keyCertSign, cRLSign
- EKU: E-mail Protection
- Certificate Policies: 1.2.250.1.177.8.0.1.1, 2.23.140.1.5.1.3, 2.23.140.1.5.2.3, 2.23.140.1.5.3.3, 2.23.140.1.5.4.3
- AIA OCSP: http://ocsp.certigna.com
- AIA CA Issuers: http://cert.certigna.com/CertignaEmailProtectionRootCA.cer
- CRL Distribution Points: http://crl.certigna.com/CertignaEmailProtectionRootCA.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings


- [current] error e_mailbox_validated_allowed_subjectdn_attributes: 

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_path_len_constraint
- has_key_usage
- has_eku
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### Certigna Email Protection Legal Person EU CA

- Subject: countryName=FR, organizationName=Certigna, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Email Protection Legal Person EU CA
- Issuer: countryName=FR, organizationName=Certigna, commonName=Certigna Email Protection EU Root CA
- Serial: 7A71A1ED4FA23E4893E04ACA44F1B73B1277B7DB
- SHA-256: 265D8FCCBF57E4D6F7CD538732F76543752A78920FE8F98D223919A9FFB946FA
- SPKI SHA-256: FA6967805A551041CD8DF90E271E3968C5464231D60A9EE411DFD45C9DCCA409
- Validity: 2025-02-28 to 2040-02-27
- Key: RSA 4096
- Signature Algorithm: RSA-SHA384

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: https://crl.certigna.com/CertignaEmailProtectionLegalPersonEUCA.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: 0
- Key Usage: keyCertSign, cRLSign
- EKU: E-mail Protection
- Certificate Policies: 2.23.140.1.5.1.3, 2.23.140.1.5.2.3, 2.23.140.1.5.3.3, 2.23.140.1.5.4.3, 1.2.250.1.177.17.0.1.1
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: -
- CRL DP: http://crl.certigna.com/CertignaEmailProtectionEURootCA.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:71:a1:ed:4f:a2:3e:48:93:e0:4a:ca:44:f1:b7:3b:12:77:b7:db
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C = FR, O = Certigna, CN = Certigna Email Protection EU Root CA
        Validity
            Not Before: Feb 28 09:49:38 2025 GMT
            Not After : Feb 27 09:49:37 2040 GMT
        Subject: C = FR, O = Certigna, organizationIdentifier = NTRFR-48146308100036, CN = Certigna Email Protection Legal Person EU CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access:
                CA Issuers - URI:http://cert.certigna.com/CertignaEmailProtectionEURootCA.cer
            X509v3 Authority Key Identifier:
                CE:8D:E0:B1:C3:A4:67:85:BC:9B:78:2C:94:BF:1B:66:D0:C7:FB:02
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies:
                Policy: 2.23.140.1.5.1.3
                Policy: 2.23.140.1.5.2.3
                Policy: 2.23.140.1.5.3.3
                Policy: 2.23.140.1.5.4.3
                Policy: 1.2.250.1.177.17.0.1.1
                  CPS: http://cps.certigna.com
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.com/CertignaEmailProtectionEURootCA.crl
            X509v3 Extended Key Usage:
                E-mail Protection
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                0F:98:A6:56:11:F9:C9:C8:A5:B0:DB:74:27:C4:0F:95:2F:D6:ED:C1
    Signature Algorithm: sha384WithRSAEncryption
    SHA256 Fingerprint: 265D8FCCBF57E4D6F7CD538732F76543752A78920FE8F98D223919A9FFB946FA
    SPKI SHA256: FA6967805A551041CD8DF90E271E3968C5464231D60A9EE411DFD45C9DCCA409
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":0}
- Key Usage: keyCertSign, cRLSign
- EKU: E-mail Protection
- Certificate Policies: 2.23.140.1.5.1.3, 2.23.140.1.5.2.3, 2.23.140.1.5.3.3, 2.23.140.1.5.4.3, 1.2.250.1.177.17.0.1.1
- AIA OCSP: -
- AIA CA Issuers: http://cert.certigna.com/CertignaEmailProtectionEURootCA.cer
- CRL Distribution Points: http://crl.certigna.com/CertignaEmailProtectionEURootCA.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings


- [current] error e_mailbox_validated_allowed_subjectdn_attributes: 

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_path_len_constraint
- has_key_usage
- has_eku
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_aia_ca_issuers

### Certigna Email Protection Natural Person CA

- Subject: countryName=FR, organizationName=Certigna, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Email Protection Natural Person CA
- Issuer: countryName=FR, organizationName=Certigna, commonName=Certigna Email Protection Root CA
- Serial: 4356A03E8245A978DD93B74BA2FECF6AD9692F7A
- SHA-256: DB5BEB1CC21662FCD645DA9856D76F42CA833CE46DF0399D8DCCC4ADB4D107D7
- SPKI SHA-256: 6CD53F7B84B85F51627C46C2AB7D4706A1F2FBE1C99AB8D3F053AA70322DA3B5
- Validity: 2024-03-13 to 2039-03-12
- Key: RSA 4096
- Signature Algorithm: RSA-SHA384

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: https://crl.certigna.com/CertignaEmailProtectionNaturalPersonCA.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: 0
- Key Usage: keyCertSign, cRLSign
- EKU: E-mail Protection
- Certificate Policies: 1.2.250.1.177.8.0.1.1, 2.23.140.1.5.1.3, 2.23.140.1.5.2.3, 2.23.140.1.5.3.3, 2.23.140.1.5.4.3
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://ocsp.certigna.com
- CRL DP: http://crl.certigna.com/CertignaEmailProtectionRootCA.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:56:a0:3e:82:45:a9:78:dd:93:b7:4b:a2:fe:cf:6a:d9:69:2f:7a
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C = FR, O = Certigna, CN = Certigna Email Protection Root CA
        Validity
            Not Before: Mar 13 10:16:59 2024 GMT
            Not After : Mar 12 10:16:58 2039 GMT
        Subject: C = FR, O = Certigna, organizationIdentifier = NTRFR-48146308100036, CN = Certigna Email Protection Natural Person CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access:
                CA Issuers - URI:http://cert.certigna.com/CertignaEmailProtectionRootCA.cer
                OCSP - URI:http://ocsp.certigna.com
            X509v3 Authority Key Identifier:
                66:A8:33:C8:E3:14:9B:49:A9:F7:53:F6:AC:BD:05:F1:B5:3F:61:1D
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies:
                Policy: 1.2.250.1.177.8.0.1.1
                  CPS: http://cps.certigna.com
                Policy: 2.23.140.1.5.1.3
                Policy: 2.23.140.1.5.2.3
                Policy: 2.23.140.1.5.3.3
                Policy: 2.23.140.1.5.4.3
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.com/CertignaEmailProtectionRootCA.crl
            X509v3 Extended Key Usage:
                E-mail Protection
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                3F:2A:0D:0D:9D:E3:1B:8F:1B:11:E4:1D:69:8C:61:90:35:8F:4D:01
    Signature Algorithm: sha384WithRSAEncryption
    SHA256 Fingerprint: DB5BEB1CC21662FCD645DA9856D76F42CA833CE46DF0399D8DCCC4ADB4D107D7
    SPKI SHA256: 6CD53F7B84B85F51627C46C2AB7D4706A1F2FBE1C99AB8D3F053AA70322DA3B5
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":0}
- Key Usage: keyCertSign, cRLSign
- EKU: E-mail Protection
- Certificate Policies: 1.2.250.1.177.8.0.1.1, 2.23.140.1.5.1.3, 2.23.140.1.5.2.3, 2.23.140.1.5.3.3, 2.23.140.1.5.4.3
- AIA OCSP: http://ocsp.certigna.com
- AIA CA Issuers: http://cert.certigna.com/CertignaEmailProtectionRootCA.cer
- CRL Distribution Points: http://crl.certigna.com/CertignaEmailProtectionRootCA.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings


- [current] error e_mailbox_validated_allowed_subjectdn_attributes: 

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_path_len_constraint
- has_key_usage
- has_eku
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### Certigna Email Protection Natural Person EU CA

- Subject: countryName=FR, organizationName=Certigna, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Email Protection Natural Person EU CA
- Issuer: countryName=FR, organizationName=Certigna, commonName=Certigna Email Protection EU Root CA
- Serial: 3E980B1DAF5FFB87C9AA054EDD14C941F2D9BC17
- SHA-256: DDB37A81F7B208BD6F4C0892444889CF95AC3F7FFD6A32399DC563F2E4C47E69
- SPKI SHA-256: 80B165BF60099BEDAD1AE1CCA23661407EB840DC39F3621D79956AED7FE1EB6F
- Validity: 2025-02-28 to 2040-02-27
- Key: RSA 4096
- Signature Algorithm: RSA-SHA384

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://cps.certigna.com/DPCCertignaSMIMECA.pdf
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.certigna.com/CertignaEmailProtectionNaturalPersonEUCA.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: 0
- Key Usage: keyCertSign, cRLSign
- EKU: E-mail Protection
- Certificate Policies: 2.23.140.1.5.1.3, 2.23.140.1.5.2.3, 2.23.140.1.5.3.3, 2.23.140.1.5.4.3, 1.2.250.1.177.17.0.1.1
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: -
- CRL DP: http://crl.certigna.com/CertignaEmailProtectionEURootCA.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:98:0b:1d:af:5f:fb:87:c9:aa:05:4e:dd:14:c9:41:f2:d9:bc:17
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C = FR, O = Certigna, CN = Certigna Email Protection EU Root CA
        Validity
            Not Before: Feb 28 09:49:40 2025 GMT
            Not After : Feb 27 09:49:39 2040 GMT
        Subject: C = FR, O = Certigna, organizationIdentifier = NTRFR-48146308100036, CN = Certigna Email Protection Natural Person EU CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access:
                CA Issuers - URI:http://cert.certigna.com/CertignaEmailProtectionEURootCA.cer
            X509v3 Authority Key Identifier:
                CE:8D:E0:B1:C3:A4:67:85:BC:9B:78:2C:94:BF:1B:66:D0:C7:FB:02
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies:
                Policy: 2.23.140.1.5.1.3
                Policy: 2.23.140.1.5.2.3
                Policy: 2.23.140.1.5.3.3
                Policy: 2.23.140.1.5.4.3
                Policy: 1.2.250.1.177.17.0.1.1
                  CPS: http://cps.certigna.com
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.com/CertignaEmailProtectionEURootCA.crl
            X509v3 Extended Key Usage:
                E-mail Protection
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                C2:48:67:BE:89:E2:5A:D6:1F:A2:54:58:6B:3D:0B:18:88:F7:A2:54
    Signature Algorithm: sha384WithRSAEncryption
    SHA256 Fingerprint: DDB37A81F7B208BD6F4C0892444889CF95AC3F7FFD6A32399DC563F2E4C47E69
    SPKI SHA256: 80B165BF60099BEDAD1AE1CCA23661407EB840DC39F3621D79956AED7FE1EB6F
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":0}
- Key Usage: keyCertSign, cRLSign
- EKU: E-mail Protection
- Certificate Policies: 2.23.140.1.5.1.3, 2.23.140.1.5.2.3, 2.23.140.1.5.3.3, 2.23.140.1.5.4.3, 1.2.250.1.177.17.0.1.1
- AIA OCSP: -
- AIA CA Issuers: http://cert.certigna.com/CertignaEmailProtectionEURootCA.cer
- CRL Distribution Points: http://crl.certigna.com/CertignaEmailProtectionEURootCA.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings


- [current] error e_mailbox_validated_allowed_subjectdn_attributes: 

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_path_len_constraint
- has_key_usage
- has_eku
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_aia_ca_issuers

### Certigna Entity CA

- Subject: countryName=FR, organizationName=DHIMYOTIS, organizationalUnitName=0002 48146308100036, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Entity CA
- Issuer: countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 48146308100036, commonName=Certigna Root CA
- Serial: 95481B6CE6322142FE8499830E7C5AE5
- SHA-256: 1CC358A6DFA0A76BB5470660D78F3B25F23CCD6395667E49CCFC8201DA3D192D
- SPKI SHA-256: D048B2AEBFB0148A7526A4A1B57CCD0AD26DDB2514D3E8FF9839CBC24D7E0079
- Validity: 2015-11-25 to 2033-06-03
- Key: RSA 4096
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://cps.certigna.com/DPCCertignaMultipurposeCA.pdf
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.certigna.fr/entityca.crl, http://crl.dhimyotis.com/entityca.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: 0
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.2.0.1.1
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: -
- CRL DP: http://crl.certigna.fr/certignarootca.crl, http://crl.dhimyotis.com/certignarootca.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            95:48:1b:6c:e6:32:21:42:fe:84:99:83:0e:7c:5a:e5
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, OU = 0002 48146308100036, CN = Certigna Root CA
        Validity
            Not Before: Nov 25 10:27:54 2015 GMT
            Not After : Jun  3 10:27:54 2033 GMT
        Subject: C = FR, O = DHIMYOTIS, OU = 0002 48146308100036, organizationIdentifier = NTRFR-48146308100036, CN = Certigna Entity CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                A5:3F:1E:24:4C:6C:F8:8B:D2:1B:72:98:46:50:CA:E8:86:55:B9:D8
            X509v3 Authority Key Identifier:
                18:87:56:E0:6E:77:EE:24:35:3C:4E:73:9A:1F:D6:E1:E2:79:7E:2B
            X509v3 Certificate Policies:
                Policy: 1.2.250.1.177.2.0.1.1
                  CPS: https://www.certigna.fr/autorites/
            Authority Information Access:
                CA Issuers - URI:http://autorite.certigna.fr/certignarootca.der
                CA Issuers - URI:http://autorite.dhimyotis.com/certignarootca.der
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.fr/certignarootca.crl
                Full Name:
                  URI:http://crl.dhimyotis.com/certignarootca.crl
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 1CC358A6DFA0A76BB5470660D78F3B25F23CCD6395667E49CCFC8201DA3D192D
    SPKI SHA256: D048B2AEBFB0148A7526A4A1B57CCD0AD26DDB2514D3E8FF9839CBC24D7E0079
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":0}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.2.0.1.1
- AIA OCSP: -
- AIA CA Issuers: http://autorite.certigna.fr/certignarootca.der, http://autorite.dhimyotis.com/certignarootca.der
- CRL Distribution Points: http://crl.certigna.fr/certignarootca.crl, http://crl.dhimyotis.com/certignarootca.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_path_len_constraint
- has_key_usage
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_aia_ca_issuers

### Certigna Entity CA

- Subject: countryName=FR, organizationName=DHIMYOTIS, organizationalUnitName=0002 48146308100036, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Entity CA
- Issuer: countryName=FR, organizationName=Dhimyotis, commonName=Certigna
- Serial: F94F88B4F30739A909D36F8ED64C59A6
- SHA-256: EBBF4DC600C17DA04381DEFDCFC119C3F34EFB4A04D0860910B813C7792D7585
- SPKI SHA-256: D048B2AEBFB0148A7526A4A1B57CCD0AD26DDB2514D3E8FF9839CBC24D7E0079
- Validity: 2015-11-25 to 2025-11-22
- Key: RSA 4096
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: true
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.certigna.fr/entityca.crl, http://crl.dhimyotis.com/entityca.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: false
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: 0
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.1.0.1.2
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: -
- CRL DP: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f9:4f:88:b4:f3:07:39:a9:09:d3:6f:8e:d6:4c:59:a6
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, CN = Certigna
        Validity
            Not Before: Nov 25 10:24:07 2015 GMT
            Not After : Nov 22 10:24:07 2025 GMT
        Subject: C = FR, O = DHIMYOTIS, OU = 0002 48146308100036, organizationIdentifier = NTRFR-48146308100036, CN = Certigna Entity CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                A5:3F:1E:24:4C:6C:F8:8B:D2:1B:72:98:46:50:CA:E8:86:55:B9:D8
            X509v3 Authority Key Identifier:
                keyid:1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11
                DirName:/C=FR/O=Dhimyotis/CN=Certigna
                serial:FE:DC:E3:01:0F:C9:48:FF
            X509v3 Certificate Policies:
                Policy: 1.2.250.1.177.1.0.1.2
                  CPS: https://www.certigna.fr/autorites/
            Authority Information Access:
                CA Issuers - URI:http://autorite.certigna.fr/certigna.der
                CA Issuers - URI:http://autorite.dhimyotis.com/certigna.der
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.fr/certigna.crl
                Full Name:
                  URI:http://crl.dhimyotis.com/certigna.crl
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: EBBF4DC600C17DA04381DEFDCFC119C3F34EFB4A04D0860910B813C7792D7585
    SPKI SHA256: D048B2AEBFB0148A7526A4A1B57CCD0AD26DDB2514D3E8FF9839CBC24D7E0079
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":0}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.1.0.1.2
- AIA OCSP: -
- AIA CA Issuers: http://autorite.certigna.fr/certigna.der, http://autorite.dhimyotis.com/certigna.der
- CRL Distribution Points: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.


- [historical] error e_mp_authority_key_identifier_correct: 

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_path_len_constraint
- has_key_usage
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_aia_ca_issuers
- is_expired

### Certigna Entity Code Signing CA

- Subject: countryName=FR, organizationName=DHIMYOTIS, organizationalUnitName=0002 48146308100036, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Entity Code Signing CA
- Issuer: countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 48146308100036, commonName=Certigna Root CA
- Serial: 1D32D2D720471A769156EA688EC552E0
- SHA-256: 781ACD209D3B873F148F5DB31C680ADADCED40238D8C1BF1A2D553391FA5D0F3
- SPKI SHA-256: BB766F14896466A3900D06E3F406E1DD65C33844ABE2901239DA286FD3A8D982
- Validity: 2016-02-04 to 2033-08-13
- Key: RSA 4096
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: Dhimyotis / Certigna
- CP/CPS: https://cps.certigna.com/DPCCertignaCodeSigningCA.pdf
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.certigna.fr/entitycsca.crl, http://crl.dhimyotis.com/entitycsca.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: 0
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.2.0.1.1
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: -
- CRL DP: http://crl.certigna.fr/certignarootca.crl, http://crl.dhimyotis.com/certignarootca.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:32:d2:d7:20:47:1a:76:91:56:ea:68:8e:c5:52:e0
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, OU = 0002 48146308100036, CN = Certigna Root CA
        Validity
            Not Before: Feb  4 11:10:50 2016 GMT
            Not After : Aug 13 11:10:50 2033 GMT
        Subject: C = FR, O = DHIMYOTIS, OU = 0002 48146308100036, organizationIdentifier = NTRFR-48146308100036, CN = Certigna Entity Code Signing CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                71:90:C5:99:CA:08:12:C9:40:F3:98:D3:A6:B3:0F:C9:FD:AA:C7:D6
            X509v3 Authority Key Identifier:
                18:87:56:E0:6E:77:EE:24:35:3C:4E:73:9A:1F:D6:E1:E2:79:7E:2B
            X509v3 Certificate Policies:
                Policy: 1.2.250.1.177.2.0.1.1
                  CPS: https://www.certigna.fr/autorites/
            Authority Information Access:
                CA Issuers - URI:http://autorite.certigna.fr/certignarootca.der
                CA Issuers - URI:http://autorite.dhimyotis.com/certignarootca.der
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.fr/certignarootca.crl
                Full Name:
                  URI:http://crl.dhimyotis.com/certignarootca.crl
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 781ACD209D3B873F148F5DB31C680ADADCED40238D8C1BF1A2D553391FA5D0F3
    SPKI SHA256: BB766F14896466A3900D06E3F406E1DD65C33844ABE2901239DA286FD3A8D982
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":0}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.2.0.1.1
- AIA OCSP: -
- AIA CA Issuers: http://autorite.certigna.fr/certignarootca.der, http://autorite.dhimyotis.com/certignarootca.der
- CRL Distribution Points: http://crl.certigna.fr/certignarootca.crl, http://crl.dhimyotis.com/certignarootca.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_path_len_constraint
- has_key_usage
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_aia_ca_issuers

### Certigna Entity Code Signing CA

- Subject: countryName=FR, organizationName=DHIMYOTIS, organizationalUnitName=0002 48146308100036, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Entity Code Signing CA
- Issuer: countryName=FR, organizationName=Dhimyotis, commonName=Certigna
- Serial: 75EF5E677076ED0F96FA95A2EC6EF0D7
- SHA-256: 935061BE52C8EA88C034B39ADFD522BB314CBF5304E5A7064735DDBDA3242AAF
- SPKI SHA-256: BB766F14896466A3900D06E3F406E1DD65C33844ABE2901239DA286FD3A8D982
- Validity: 2016-02-04 to 2025-12-13
- Key: RSA 4096
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: Dhimyotis / Certigna
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.certigna.fr/entitycsca.crl, http://crl.dhimyotis.com/entitycsca.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: false
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: 0
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.1.0.1.2
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: -
- CRL DP: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ef:5e:67:70:76:ed:0f:96:fa:95:a2:ec:6e:f0:d7
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, CN = Certigna
        Validity
            Not Before: Feb  4 11:13:33 2016 GMT
            Not After : Dec 13 11:13:33 2025 GMT
        Subject: C = FR, O = DHIMYOTIS, OU = 0002 48146308100036, organizationIdentifier = NTRFR-48146308100036, CN = Certigna Entity Code Signing CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                71:90:C5:99:CA:08:12:C9:40:F3:98:D3:A6:B3:0F:C9:FD:AA:C7:D6
            X509v3 Authority Key Identifier:
                keyid:1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11
                DirName:/C=FR/O=Dhimyotis/CN=Certigna
                serial:FE:DC:E3:01:0F:C9:48:FF
            X509v3 Certificate Policies:
                Policy: 1.2.250.1.177.1.0.1.2
                  CPS: https://www.certigna.fr/autorites/
            Authority Information Access:
                CA Issuers - URI:http://autorite.certigna.fr/certigna.der
                CA Issuers - URI:http://autorite.dhimyotis.com/certigna.der
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.fr/certigna.crl
                Full Name:
                  URI:http://crl.dhimyotis.com/certigna.crl
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 935061BE52C8EA88C034B39ADFD522BB314CBF5304E5A7064735DDBDA3242AAF
    SPKI SHA256: BB766F14896466A3900D06E3F406E1DD65C33844ABE2901239DA286FD3A8D982
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":0}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.1.0.1.2
- AIA OCSP: -
- AIA CA Issuers: http://autorite.certigna.fr/certigna.der, http://autorite.dhimyotis.com/certigna.der
- CRL Distribution Points: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.


- [historical] error e_mp_authority_key_identifier_correct: 

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_path_len_constraint
- has_key_usage
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_aia_ca_issuers
- is_expired

### Certigna Extended Validation SSL

- Subject: countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 481463081, commonName=Certigna Extended Validation SSL, serialNumber=35
- Issuer: countryName=FR, organizationName=Dhimyotis, commonName=Certigna
- Serial: 23
- SHA-256: EEC818746A31C45D3D8E60F7E2BEF9160441C496544208B3E464079AFCAD700E
- SPKI SHA-256: 0E28155C79C8C19A3154B8EEFE18B7D53F8FBCAE3DE70196A67E60500B031281
- Validity: 2011-05-27 to 2021-05-24
- Key: RSA 2048
- Signature Algorithm: RSA-SHA1

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: true
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: -
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: 0
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0, 1.2.250.1.177.1.0.1.1
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: -
- CRL DP: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, CN = Certigna
        Validity
            Not Before: May 27 14:47:30 2011 GMT
            Not After : May 24 14:47:30 2021 GMT
        Subject: C = FR, O = Dhimyotis, OU = 0002 481463081, CN = Certigna Extended Validation SSL, serialNumber = 35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Netscape Cert Type:
                SSL CA
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
                Policy: 1.2.250.1.177.1.0.1.1
            X509v3 Subject Key Identifier:
                FC:78:73:77:D0:A9:1F:0A:91:B1:EE:75:C0:A5:16:56:22:D2:3F:36
            X509v3 Authority Key Identifier:
                keyid:1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11
                DirName:/C=FR/O=Dhimyotis/CN=Certigna
                serial:FE:DC:E3:01:0F:C9:48:FF
            Netscape CA Revocation Url:
                http://crl.certigna.fr/certigna.crl
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.fr/certigna.crl
                Full Name:
                  URI:http://crl.dhimyotis.com/certigna.crl
    Signature Algorithm: sha1WithRSAEncryption
    SHA256 Fingerprint: EEC818746A31C45D3D8E60F7E2BEF9160441C496544208B3E464079AFCAD700E
    SPKI SHA256: 0E28155C79C8C19A3154B8EEFE18B7D53F8FBCAE3DE70196A67E60500B031281
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":0}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0, 1.2.250.1.177.1.0.1.1
- AIA OCSP: -
- AIA CA Issuers: -
- CRL Distribution Points: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_path_len_constraint
- has_key_usage
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- is_expired

### Certigna ID

- Subject: countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 481463081, commonName=Certigna ID, serialNumber=4
- Issuer: countryName=FR, organizationName=Dhimyotis, commonName=Certigna
- Serial: 04
- SHA-256: 045696DC5F29EAE06D2F50389B2A700C859AC2327473A728AD93B7005A418172
- SPKI SHA-256: 58BABA05FA60C46F939F2CA0C5DF1535D39C71566AF3335BFA79DC03D1D8EAF1
- Validity: 2007-07-03 to 2017-07-03
- Key: RSA 2048
- Signature Algorithm: RSA-SHA1

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: true
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: -
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: -
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: -
- CRL DP: http://www.certigna.fr/crl/certigna.crl, http://www.dhimyotis.com/crl/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, CN = Certigna
        Validity
            Not Before: Jul  3 07:59:22 2007 GMT
            Not After : Jul  3 07:59:22 2017 GMT
        Subject: C = FR, O = Dhimyotis, OU = 0002 481463081, CN = Certigna ID, serialNumber = 4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Netscape Cert Type:
                S/MIME CA, Object Signing CA
            X509v3 Subject Key Identifier:
                0B:B5:FE:0B:8E:AE:29:44:E7:8D:42:2F:29:40:86:BB:9C:AA:3D:8D
            X509v3 Authority Key Identifier:
                keyid:1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11
                DirName:/C=FR/O=Dhimyotis/CN=Certigna
                serial:FE:DC:E3:01:0F:C9:48:FF
            Netscape CA Revocation Url:
                http://www.certigna.fr/crl/certigna.crl
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://www.certigna.fr/crl/certigna.crl
                Full Name:
                  URI:http://www.dhimyotis.com/crl/certigna.crl
    Signature Algorithm: sha1WithRSAEncryption
    SHA256 Fingerprint: 045696DC5F29EAE06D2F50389B2A700C859AC2327473A728AD93B7005A418172
    SPKI SHA256: 58BABA05FA60C46F939F2CA0C5DF1535D39C71566AF3335BFA79DC03D1D8EAF1
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: -
- AIA OCSP: -
- AIA CA Issuers: -
- CRL Distribution Points: http://www.certigna.fr/crl/certigna.crl, http://www.dhimyotis.com/crl/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_http_urls
- has_crldp
- is_expired

### Certigna ID Classe 3

- Subject: countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 481463081, commonName=Certigna ID Classe 3, serialNumber=32
- Issuer: countryName=FR, organizationName=Dhimyotis, commonName=Certigna
- Serial: 20
- SHA-256: 77503527BEA1DA2759312E43105E75665C230FC25422E88F85C96B9D49FB732E
- SPKI SHA-256: 2CC4A179306F13E04D65988A94B4C5382407698276799238359879EB6E712ECB
- Validity: 2009-12-09 to 2019-12-07
- Key: RSA 2048
- Signature Algorithm: RSA-SHA1

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: true
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: -
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.1.0.1.1
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: -
- CRL DP: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, CN = Certigna
        Validity
            Not Before: Dec  9 10:26:47 2009 GMT
            Not After : Dec  7 10:26:47 2019 GMT
        Subject: C = FR, O = Dhimyotis, OU = 0002 481463081, CN = Certigna ID Classe 3, serialNumber = 32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Netscape Cert Type:
                S/MIME CA, Object Signing CA
            X509v3 Certificate Policies:
                Policy: 1.2.250.1.177.1.0.1.1
            X509v3 Subject Key Identifier:
                0C:8B:65:B4:D1:0E:4D:E2:A8:73:F5:5E:83:A3:4A:97:57:62:CC:DA
            X509v3 Authority Key Identifier:
                keyid:1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11
                DirName:/C=FR/O=Dhimyotis/CN=Certigna
                serial:FE:DC:E3:01:0F:C9:48:FF
            Netscape CA Revocation Url:
                http://crl.certigna.fr/certigna.crl
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.fr/certigna.crl
                Full Name:
                  URI:http://crl.dhimyotis.com/certigna.crl
    Signature Algorithm: sha1WithRSAEncryption
    SHA256 Fingerprint: 77503527BEA1DA2759312E43105E75665C230FC25422E88F85C96B9D49FB732E
    SPKI SHA256: 2CC4A179306F13E04D65988A94B4C5382407698276799238359879EB6E712ECB
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.1.0.1.1
- AIA OCSP: -
- AIA CA Issuers: -
- CRL Distribution Points: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_http_urls
- has_crldp
- is_expired

### Certigna ID PRIS

- Subject: countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 481463081, commonName=Certigna ID PRIS, serialNumber=21
- Issuer: countryName=FR, organizationName=Dhimyotis, commonName=Certigna
- Serial: 15
- SHA-256: EE1E560340E52F60AC018414FBA5FD48FCC10EDF0644A6407ACF424547AA6AAE
- SPKI SHA-256: 13B5A63D9DED9AB045E74CC9B174127670E7D53D905AADCC4E82487FB2A0CE7B
- Validity: 2008-11-19 to 2018-11-17
- Key: RSA 2048
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: true
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: -
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.1.0.1.1
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: -
- CRL DP: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, CN = Certigna
        Validity
            Not Before: Nov 19 12:07:26 2008 GMT
            Not After : Nov 17 12:07:26 2018 GMT
        Subject: C = FR, O = Dhimyotis, OU = 0002 481463081, CN = Certigna ID PRIS, serialNumber = 21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Netscape Cert Type:
                S/MIME CA, Object Signing CA
            X509v3 Certificate Policies:
                Policy: 1.2.250.1.177.1.0.1.1
            X509v3 Subject Key Identifier:
                6C:36:8B:13:27:CA:B9:BC:15:2A:42:29:82:67:66:97:00:BC:E4:19
            X509v3 Authority Key Identifier:
                keyid:1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11
                DirName:/C=FR/O=Dhimyotis/CN=Certigna
                serial:FE:DC:E3:01:0F:C9:48:FF
            Netscape CA Revocation Url:
                http://crl.certigna.fr/certigna.crl
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.fr/certigna.crl
                Full Name:
                  URI:http://crl.dhimyotis.com/certigna.crl
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: EE1E560340E52F60AC018414FBA5FD48FCC10EDF0644A6407ACF424547AA6AAE
    SPKI SHA256: 13B5A63D9DED9AB045E74CC9B174127670E7D53D905AADCC4E82487FB2A0CE7B
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.1.0.1.1
- AIA OCSP: -
- AIA CA Issuers: -
- CRL Distribution Points: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_http_urls
- has_crldp
- is_expired

### Certigna ID PRIS Pro

- Subject: countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 481463081, commonName=Certigna ID PRIS Pro, serialNumber=22
- Issuer: countryName=FR, organizationName=Dhimyotis, commonName=Certigna
- Serial: 16
- SHA-256: C5B4766CA0236BA7FB224B44B32564D336718FD9D1A0F1664B776397FE18402D
- SPKI SHA-256: 993B2DEF72A687DBCB9BA26D72F6F905E3F21CE9972B954530F3BF5AB5D6A11D
- Validity: 2008-11-19 to 2018-11-17
- Key: RSA 2048
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: http://politique.certigna.fr/PCcertignaracine.pdf
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: -
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: false
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.1.0.1.1
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: -
- CRL DP: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, CN = Certigna
        Validity
            Not Before: Nov 19 12:33:11 2008 GMT
            Not After : Nov 17 12:33:11 2018 GMT
        Subject: C = FR, O = Dhimyotis, OU = 0002 481463081, CN = Certigna ID PRIS Pro, serialNumber = 22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Netscape Cert Type:
                S/MIME CA, Object Signing CA
            X509v3 Certificate Policies:
                Policy: 1.2.250.1.177.1.0.1.1
            X509v3 Subject Key Identifier:
                9A:D9:2A:55:71:64:6B:2E:0A:DE:F2:33:AD:C5:CA:0D:37:AA:AA:C3
            X509v3 Authority Key Identifier:
                keyid:1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11
                DirName:/C=FR/O=Dhimyotis/CN=Certigna
                serial:FE:DC:E3:01:0F:C9:48:FF
            Netscape CA Revocation Url:
                http://crl.certigna.fr/certigna.crl
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.fr/certigna.crl
                Full Name:
                  URI:http://crl.dhimyotis.com/certigna.crl
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: C5B4766CA0236BA7FB224B44B32564D336718FD9D1A0F1664B776397FE18402D
    SPKI SHA256: 993B2DEF72A687DBCB9BA26D72F6F905E3F21CE9972B954530F3BF5AB5D6A11D
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.1.0.1.1
- AIA OCSP: -
- AIA CA Issuers: -
- CRL Distribution Points: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_http_urls
- has_crldp
- is_expired

### Certigna ID PRIS**

- Subject: countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 481463081, commonName=Certigna ID PRIS**, serialNumber=28
- Issuer: countryName=FR, organizationName=Dhimyotis, commonName=Certigna
- Serial: 1C
- SHA-256: 1E7240CF95A7EDE7ABA05C46E747B6DE1369279F2FF64F4939F385D80177CBDA
- SPKI SHA-256: E83E7C4198D59BC9D3106065C0F358F8FA6877C7FF90A7220BA85413473DF1FB
- Validity: 2009-11-02 to 2019-10-31
- Key: RSA 2048
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: true
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: -
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.1.0.1.1
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: -
- CRL DP: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, CN = Certigna
        Validity
            Not Before: Nov  2 10:26:59 2009 GMT
            Not After : Oct 31 10:26:59 2019 GMT
        Subject: C = FR, O = Dhimyotis, OU = 0002 481463081, CN = Certigna ID PRIS**, serialNumber = 28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Netscape Cert Type:
                S/MIME CA, Object Signing CA
            X509v3 Certificate Policies:
                Policy: 1.2.250.1.177.1.0.1.1
            X509v3 Subject Key Identifier:
                CB:E5:6F:15:38:E1:C3:13:5B:B4:BD:C6:DF:25:E0:A6:14:65:5F:3A
            X509v3 Authority Key Identifier:
                keyid:1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11
                DirName:/C=FR/O=Dhimyotis/CN=Certigna
                serial:FE:DC:E3:01:0F:C9:48:FF
            Netscape CA Revocation Url:
                http://crl.certigna.fr/certigna.crl
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.fr/certigna.crl
                Full Name:
                  URI:http://crl.dhimyotis.com/certigna.crl
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 1E7240CF95A7EDE7ABA05C46E747B6DE1369279F2FF64F4939F385D80177CBDA
    SPKI SHA256: E83E7C4198D59BC9D3106065C0F358F8FA6877C7FF90A7220BA85413473DF1FB
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.1.0.1.1
- AIA OCSP: -
- AIA CA Issuers: -
- CRL Distribution Points: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_http_urls
- has_crldp
- is_expired

### Certigna ID PRIS** Pro

- Subject: countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 481463081, commonName=Certigna ID PRIS** Pro, serialNumber=29
- Issuer: countryName=FR, organizationName=Dhimyotis, commonName=Certigna
- Serial: 1D
- SHA-256: C999A43F6EC5E1AE23A694EC53A05E3D2307E3113B286DBA423F2379D114298A
- SPKI SHA-256: E1267F4DB8D01291D5B316F03EC48E7673D2A707C30B68139A0FE7231AB7E608
- Validity: 2009-11-02 to 2019-10-31
- Key: RSA 2048
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: http://politique.certigna.fr/PCcertignaidpris2pro.pdf
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: -
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.1.0.1.1
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: -
- CRL DP: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, CN = Certigna
        Validity
            Not Before: Nov  2 10:57:12 2009 GMT
            Not After : Oct 31 10:57:12 2019 GMT
        Subject: C = FR, O = Dhimyotis, OU = 0002 481463081, CN = Certigna ID PRIS** Pro, serialNumber = 29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Netscape Cert Type:
                S/MIME CA, Object Signing CA
            X509v3 Certificate Policies:
                Policy: 1.2.250.1.177.1.0.1.1
            X509v3 Subject Key Identifier:
                2C:EB:58:EC:DB:6B:52:31:1D:A6:16:2F:AD:64:47:10:65:84:AD:BF
            X509v3 Authority Key Identifier:
                keyid:1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11
                DirName:/C=FR/O=Dhimyotis/CN=Certigna
                serial:FE:DC:E3:01:0F:C9:48:FF
            Netscape CA Revocation Url:
                http://crl.certigna.fr/certigna.crl
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.fr/certigna.crl
                Full Name:
                  URI:http://crl.dhimyotis.com/certigna.crl
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: C999A43F6EC5E1AE23A694EC53A05E3D2307E3113B286DBA423F2379D114298A
    SPKI SHA256: E1267F4DB8D01291D5B316F03EC48E7673D2A707C30B68139A0FE7231AB7E608
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.1.0.1.1
- AIA OCSP: -
- AIA CA Issuers: -
- CRL Distribution Points: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_http_urls
- has_crldp
- is_expired

### Certigna ID PRIS***

- Subject: countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 481463081, commonName=Certigna ID PRIS***, serialNumber=23
- Issuer: countryName=FR, organizationName=Dhimyotis, commonName=Certigna
- Serial: 17
- SHA-256: D0DC199FE7CE4562E47328CD0D6EE9CE106C384BABE37641FE33242A22A1BBA6
- SPKI SHA-256: 56ED4FB37C286984D6C38646CCCA2BBA4F4944CC6D60C443DEF87842586E2560
- Validity: 2008-11-19 to 2018-11-17
- Key: RSA 2048
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: true
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: -
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.1.0.1.1
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: -
- CRL DP: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, CN = Certigna
        Validity
            Not Before: Nov 19 13:03:40 2008 GMT
            Not After : Nov 17 13:03:40 2018 GMT
        Subject: C = FR, O = Dhimyotis, OU = 0002 481463081, CN = Certigna ID PRIS***, serialNumber = 23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Netscape Cert Type:
                S/MIME CA, Object Signing CA
            X509v3 Certificate Policies:
                Policy: 1.2.250.1.177.1.0.1.1
            X509v3 Subject Key Identifier:
                13:80:A7:C5:C0:24:4A:FA:B0:DC:73:F4:5B:AE:1A:C2:DD:45:5D:6D
            X509v3 Authority Key Identifier:
                keyid:1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11
                DirName:/C=FR/O=Dhimyotis/CN=Certigna
                serial:FE:DC:E3:01:0F:C9:48:FF
            Netscape CA Revocation Url:
                http://crl.certigna.fr/certigna.crl
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.fr/certigna.crl
                Full Name:
                  URI:http://crl.dhimyotis.com/certigna.crl
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: D0DC199FE7CE4562E47328CD0D6EE9CE106C384BABE37641FE33242A22A1BBA6
    SPKI SHA256: 56ED4FB37C286984D6C38646CCCA2BBA4F4944CC6D60C443DEF87842586E2560
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.1.0.1.1
- AIA OCSP: -
- AIA CA Issuers: -
- CRL Distribution Points: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_http_urls
- has_crldp
- is_expired

### Certigna ID PRIS*** Pro

- Subject: countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 481463081, commonName=Certigna ID PRIS*** Pro, serialNumber=24
- Issuer: countryName=FR, organizationName=Dhimyotis, commonName=Certigna
- Serial: 18
- SHA-256: 341F7CF430E333544BDF438C0C8F058AF3510C59F7F3E1BEA8F8A633F6EACE02
- SPKI SHA-256: 52424A6008E77DADECD65744EE76B4CBB081DE0DA9867CD835F20345AD7A1B1C
- Validity: 2008-11-19 to 2018-11-17
- Key: RSA 2048
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: http://politique.certigna.fr/PCcertignaidpris3pro.pdf
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: -
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: false
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.1.0.1.1
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: -
- CRL DP: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, CN = Certigna
        Validity
            Not Before: Nov 19 13:26:31 2008 GMT
            Not After : Nov 17 13:26:31 2018 GMT
        Subject: C = FR, O = Dhimyotis, OU = 0002 481463081, CN = Certigna ID PRIS*** Pro, serialNumber = 24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Netscape Cert Type:
                S/MIME CA, Object Signing CA
            X509v3 Certificate Policies:
                Policy: 1.2.250.1.177.1.0.1.1
            X509v3 Subject Key Identifier:
                BA:3D:62:30:50:1E:C3:4C:63:45:5B:53:36:15:DC:69:92:D8:FF:5A
            X509v3 Authority Key Identifier:
                keyid:1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11
                DirName:/C=FR/O=Dhimyotis/CN=Certigna
                serial:FE:DC:E3:01:0F:C9:48:FF
            Netscape CA Revocation Url:
                http://crl.certigna.fr/certigna.crl
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.fr/certigna.crl
                Full Name:
                  URI:http://crl.dhimyotis.com/certigna.crl
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 341F7CF430E333544BDF438C0C8F058AF3510C59F7F3E1BEA8F8A633F6EACE02
    SPKI SHA256: 52424A6008E77DADECD65744EE76B4CBB081DE0DA9867CD835F20345AD7A1B1C
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.1.0.1.1
- AIA OCSP: -
- AIA CA Issuers: -
- CRL Distribution Points: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_http_urls
- has_crldp
- is_expired

### Certigna Identity CA

- Subject: countryName=FR, organizationName=DHIMYOTIS, organizationalUnitName=0002 48146308100036, organizationIdentifier=NTRFR-0002 48146308100036, commonName=Certigna Identity CA
- Issuer: countryName=FR, organizationName=Dhimyotis, commonName=Certigna
- Serial: 41120D20002E4B6F9F47D35573E78A77
- SHA-256: 23BCD5D7A96A513A981EAD27936E59A8028A807BD72860418F68B555A2911670
- SPKI SHA-256: 9702640D062DA20906244149317E438EC9025E1D96EDD341447FDE2599568D6A
- Validity: 2015-12-31 to 2025-12-28
- Key: RSA 4096
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: true
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.certigna.fr/identca.crl, http://crl.dhimyotis.com/identca.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: false
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: 0
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.1.0.1.2
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: -
- CRL DP: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:12:0d:20:00:2e:4b:6f:9f:47:d3:55:73:e7:8a:77
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, CN = Certigna
        Validity
            Not Before: Dec 31 10:42:36 2015 GMT
            Not After : Dec 28 10:42:36 2025 GMT
        Subject: C = FR, O = DHIMYOTIS, OU = 0002 48146308100036, organizationIdentifier = NTRFR-0002 48146308100036, CN = Certigna Identity CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                C3:39:FC:67:68:AE:B3:11:D6:19:80:76:B3:D5:BA:08:5E:19:C5:D4
            X509v3 Authority Key Identifier:
                keyid:1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11
                DirName:/C=FR/O=Dhimyotis/CN=Certigna
                serial:FE:DC:E3:01:0F:C9:48:FF
            X509v3 Certificate Policies:
                Policy: 1.2.250.1.177.1.0.1.2
                  CPS: https://www.certigna.fr/autorites/
            Authority Information Access:
                CA Issuers - URI:http://autorite.certigna.fr/certigna.der
                CA Issuers - URI:http://autorite.dhimyotis.com/certigna.der
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.fr/certigna.crl
                Full Name:
                  URI:http://crl.dhimyotis.com/certigna.crl
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 23BCD5D7A96A513A981EAD27936E59A8028A807BD72860418F68B555A2911670
    SPKI SHA256: 9702640D062DA20906244149317E438EC9025E1D96EDD341447FDE2599568D6A
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":0}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.1.0.1.2
- AIA OCSP: -
- AIA CA Issuers: http://autorite.certigna.fr/certigna.der, http://autorite.dhimyotis.com/certigna.der
- CRL Distribution Points: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.


- [historical] error e_mp_authority_key_identifier_correct: 

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_path_len_constraint
- has_key_usage
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_aia_ca_issuers
- is_expired

### Certigna Identity CA

- Subject: countryName=FR, organizationName=DHIMYOTIS, organizationalUnitName=0002 48146308100036, organizationIdentifier=NTRFR-0002 48146308100036, commonName=Certigna Identity CA
- Issuer: countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 48146308100036, commonName=Certigna Root CA
- Serial: 5944CB2DBE6ADEA5134E9A3219410CAE
- SHA-256: B5E4491CF1E0A06C19441FAC295B678226429603FCC414C626E210B2EFC95F00
- SPKI SHA-256: 9702640D062DA20906244149317E438EC9025E1D96EDD341447FDE2599568D6A
- Validity: 2015-12-31 to 2033-07-09
- Key: RSA 4096
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://cps.certigna.com/DPCCertignaMultipurposeCA.pdf
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.certigna.fr/identca.crl, http://crl.dhimyotis.com/identca.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: 0
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.2.0.1.1
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: -
- CRL DP: http://crl.certigna.fr/certignarootca.crl, http://crl.dhimyotis.com/certignarootca.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:44:cb:2d:be:6a:de:a5:13:4e:9a:32:19:41:0c:ae
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, OU = 0002 48146308100036, CN = Certigna Root CA
        Validity
            Not Before: Dec 31 10:46:05 2015 GMT
            Not After : Jul  9 10:46:05 2033 GMT
        Subject: C = FR, O = DHIMYOTIS, OU = 0002 48146308100036, organizationIdentifier = NTRFR-0002 48146308100036, CN = Certigna Identity CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                C3:39:FC:67:68:AE:B3:11:D6:19:80:76:B3:D5:BA:08:5E:19:C5:D4
            X509v3 Authority Key Identifier:
                18:87:56:E0:6E:77:EE:24:35:3C:4E:73:9A:1F:D6:E1:E2:79:7E:2B
            X509v3 Certificate Policies:
                Policy: 1.2.250.1.177.2.0.1.1
                  CPS: https://www.certigna.fr/autorites/
            Authority Information Access:
                CA Issuers - URI:http://autorite.certigna.fr/certignarootca.der
                CA Issuers - URI:http://autorite.dhimyotis.com/certignarootca.der
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.fr/certignarootca.crl
                Full Name:
                  URI:http://crl.dhimyotis.com/certignarootca.crl
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: B5E4491CF1E0A06C19441FAC295B678226429603FCC414C626E210B2EFC95F00
    SPKI SHA256: 9702640D062DA20906244149317E438EC9025E1D96EDD341447FDE2599568D6A
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":0}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.2.0.1.1
- AIA OCSP: -
- AIA CA Issuers: http://autorite.certigna.fr/certignarootca.der, http://autorite.dhimyotis.com/certignarootca.der
- CRL Distribution Points: http://crl.certigna.fr/certignarootca.crl, http://crl.dhimyotis.com/certignarootca.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_path_len_constraint
- has_key_usage
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_aia_ca_issuers

### Certigna Identity Plus CA

- Subject: countryName=FR, organizationName=DHIMYOTIS, organizationalUnitName=0002 48146308100036, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Identity Plus CA
- Issuer: countryName=FR, organizationName=Dhimyotis, commonName=Certigna
- Serial: 2F13DAF1870CD4338F18DBFC376BB27B
- SHA-256: 02C4A300A09C1B893B11F9567659AF95BBB9BBE7953893E36C5BAF17B555CEE3
- SPKI SHA-256: CB0852A75A05DF86DF161781CCA3B72AA6EC5E2FAA41BC9F5EEF7848C601C708
- Validity: 2015-11-25 to 2025-11-22
- Key: RSA 4096
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: true
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.certigna.fr/identityplusca.crl, http://crl.dhimyotis.com/identityplusca.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: false
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: 0
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.1.0.1.2
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: -
- CRL DP: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:13:da:f1:87:0c:d4:33:8f:18:db:fc:37:6b:b2:7b
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, CN = Certigna
        Validity
            Not Before: Nov 25 09:23:25 2015 GMT
            Not After : Nov 22 09:23:25 2025 GMT
        Subject: C = FR, O = DHIMYOTIS, OU = 0002 48146308100036, organizationIdentifier = NTRFR-48146308100036, CN = Certigna Identity Plus CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                66:38:F3:C2:5A:8D:DF:AF:37:AD:61:D9:3C:1A:1D:3E:17:67:07:75
            X509v3 Authority Key Identifier:
                keyid:1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11
                DirName:/C=FR/O=Dhimyotis/CN=Certigna
                serial:FE:DC:E3:01:0F:C9:48:FF
            X509v3 Certificate Policies:
                Policy: 1.2.250.1.177.1.0.1.2
                  CPS: https://www.certigna.fr/autorites/
            Authority Information Access:
                CA Issuers - URI:http://autorite.certigna.fr/certigna.der
                CA Issuers - URI:http://autorite.dhimyotis.com/certigna.der
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.fr/certigna.crl
                Full Name:
                  URI:http://crl.dhimyotis.com/certigna.crl
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 02C4A300A09C1B893B11F9567659AF95BBB9BBE7953893E36C5BAF17B555CEE3
    SPKI SHA256: CB0852A75A05DF86DF161781CCA3B72AA6EC5E2FAA41BC9F5EEF7848C601C708
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":0}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.1.0.1.2
- AIA OCSP: -
- AIA CA Issuers: http://autorite.certigna.fr/certigna.der, http://autorite.dhimyotis.com/certigna.der
- CRL Distribution Points: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.


- [historical] error e_mp_authority_key_identifier_correct: 

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_path_len_constraint
- has_key_usage
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_aia_ca_issuers
- is_expired

### Certigna Identity Plus CA

- Subject: countryName=FR, organizationName=DHIMYOTIS, organizationalUnitName=0002 48146308100036, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Identity Plus CA
- Issuer: countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 48146308100036, commonName=Certigna Root CA
- Serial: C652428C83949C137F5D9FEBF271644D
- SHA-256: 736B996D339684729C43CB397D1BB2B2F3F4A7816A5E3C5D589203F885C5D47C
- SPKI SHA-256: CB0852A75A05DF86DF161781CCA3B72AA6EC5E2FAA41BC9F5EEF7848C601C708
- Validity: 2015-11-25 to 2033-06-03
- Key: RSA 4096
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://cps.certigna.com/DPCCertignaMultipurposeCA.pdf
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.certigna.fr/identityplusca.crl, http://crl.dhimyotis.com/identityplusca.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: 0
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.2.0.1.1
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: -
- CRL DP: http://crl.certigna.fr/certignarootca.crl, http://crl.dhimyotis.com/certignarootca.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c6:52:42:8c:83:94:9c:13:7f:5d:9f:eb:f2:71:64:4d
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, OU = 0002 48146308100036, CN = Certigna Root CA
        Validity
            Not Before: Nov 25 09:30:51 2015 GMT
            Not After : Jun  3 09:30:51 2033 GMT
        Subject: C = FR, O = DHIMYOTIS, OU = 0002 48146308100036, organizationIdentifier = NTRFR-48146308100036, CN = Certigna Identity Plus CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                66:38:F3:C2:5A:8D:DF:AF:37:AD:61:D9:3C:1A:1D:3E:17:67:07:75
            X509v3 Authority Key Identifier:
                18:87:56:E0:6E:77:EE:24:35:3C:4E:73:9A:1F:D6:E1:E2:79:7E:2B
            X509v3 Certificate Policies:
                Policy: 1.2.250.1.177.2.0.1.1
                  CPS: https://www.certigna.fr/autorites/
            Authority Information Access:
                CA Issuers - URI:http://autorite.certigna.fr/certignarootca.der
                CA Issuers - URI:http://autorite.dhimyotis.com/certignarootca.der
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.fr/certignarootca.crl
                Full Name:
                  URI:http://crl.dhimyotis.com/certignarootca.crl
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 736B996D339684729C43CB397D1BB2B2F3F4A7816A5E3C5D589203F885C5D47C
    SPKI SHA256: CB0852A75A05DF86DF161781CCA3B72AA6EC5E2FAA41BC9F5EEF7848C601C708
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":0}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.2.0.1.1
- AIA OCSP: -
- AIA CA Issuers: http://autorite.certigna.fr/certignarootca.der, http://autorite.dhimyotis.com/certignarootca.der
- CRL Distribution Points: http://crl.certigna.fr/certignarootca.crl, http://crl.dhimyotis.com/certignarootca.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_path_len_constraint
- has_key_usage
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_aia_ca_issuers

### Certigna Interne

- Subject: countryName=FR, organizationName=DHIMYOTIS, organizationalUnitName=0002 48146308100036, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Interne
- Issuer: countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 48146308100036, commonName=Certigna Root CA
- Serial: 02DBAC7698CF9F37D8FAE6AB6DD8DEF8
- SHA-256: 859D8C0FE55EDAF50D54C90C28772FD52CA106B785EDA0380DFC3A10CECB21F5
- SPKI SHA-256: 1526CBB90C7C68041D4765B94EDD5A9EBCA5B284FBBAF65E07035ED3870C2822
- Validity: 2015-11-10 to 2033-05-04
- Key: RSA 4096
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: true
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: -
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: 0
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.2.0.1.1
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: -
- CRL DP: http://crl.certigna.fr/certignarootca.crl, http://crl.dhimyotis.com/certignarootca.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:db:ac:76:98:cf:9f:37:d8:fa:e6:ab:6d:d8:de:f8
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, OU = 0002 48146308100036, CN = Certigna Root CA
        Validity
            Not Before: Nov 10 13:20:12 2015 GMT
            Not After : May  4 13:20:12 2033 GMT
        Subject: C = FR, O = DHIMYOTIS, OU = 0002 48146308100036, organizationIdentifier = NTRFR-48146308100036, CN = Certigna Interne
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                86:A7:FC:84:0F:3E:89:73:F6:C7:D9:E0:12:BC:06:64:E2:A1:37:BF
            X509v3 Authority Key Identifier:
                18:87:56:E0:6E:77:EE:24:35:3C:4E:73:9A:1F:D6:E1:E2:79:7E:2B
            X509v3 Certificate Policies:
                Policy: 1.2.250.1.177.2.0.1.1
                  CPS: https://www.certigna.fr/autorites/
            Authority Information Access:
                CA Issuers - URI:http://autorite.certigna.fr/certignarootca.crt
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.fr/certignarootca.crl
                Full Name:
                  URI:http://crl.dhimyotis.com/certignarootca.crl
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 859D8C0FE55EDAF50D54C90C28772FD52CA106B785EDA0380DFC3A10CECB21F5
    SPKI SHA256: 1526CBB90C7C68041D4765B94EDD5A9EBCA5B284FBBAF65E07035ED3870C2822
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":0}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.2.0.1.1
- AIA OCSP: -
- AIA CA Issuers: http://autorite.certigna.fr/certignarootca.crt
- CRL Distribution Points: http://crl.certigna.fr/certignarootca.crl, http://crl.dhimyotis.com/certignarootca.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_path_len_constraint
- has_key_usage
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_aia_ca_issuers

### Certigna Interne

- Subject: countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 481463081, commonName=Certigna Interne, serialNumber=20
- Issuer: countryName=FR, organizationName=Dhimyotis, commonName=Certigna
- Serial: 14
- SHA-256: D3ABF34BF1E192763CA54F3F638AB6FB3EF502CE821CB8E6DE037EE1747EC225
- SPKI SHA-256: 55FE82404276B5218DE4D82E11D3C2DE812DFCE58B9A66E409120B66F63B6B34
- Validity: 2008-09-23 to 2018-09-23
- Key: RSA 2048
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: true
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: -
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: false
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.1.6.1.1
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://certigna.ocsp.certigna.fr, http://certigna.ocsp.dhimyotis.com
- CRL DP: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, CN = Certigna
        Validity
            Not Before: Sep 23 13:23:34 2008 GMT
            Not After : Sep 23 13:23:34 2018 GMT
        Subject: C = FR, O = Dhimyotis, OU = 0002 481463081, CN = Certigna Interne, serialNumber = 20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Netscape Cert Type:
                SSL CA, S/MIME CA, Object Signing CA
            X509v3 Certificate Policies:
                Policy: 1.2.250.1.177.1.6.1.1
            Authority Information Access:
                OCSP - URI:http://certigna.ocsp.certigna.fr
                OCSP - URI:http://certigna.ocsp.dhimyotis.com
            X509v3 Subject Key Identifier:
                25:9A:80:16:93:76:19:D8:52:1B:EE:08:0E:ED:AE:F4:3B:93:47:5F
            X509v3 Authority Key Identifier:
                keyid:1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11
                DirName:/C=FR/O=Dhimyotis/CN=Certigna
                serial:FE:DC:E3:01:0F:C9:48:FF
            Netscape CA Revocation Url:
                http://crl.certigna.fr/certigna.crl
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.fr/certigna.crl
                Full Name:
                  URI:http://crl.dhimyotis.com/certigna.crl
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: D3ABF34BF1E192763CA54F3F638AB6FB3EF502CE821CB8E6DE037EE1747EC225
    SPKI SHA256: 55FE82404276B5218DE4D82E11D3C2DE812DFCE58B9A66E409120B66F63B6B34
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.1.6.1.1
- AIA OCSP: http://certigna.ocsp.certigna.fr, http://certigna.ocsp.dhimyotis.com
- AIA CA Issuers: -
- CRL Distribution Points: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_http_urls
- has_crldp
- has_ocsp
- is_expired

### Certigna Interne

- Subject: countryName=FR, organizationName=DHIMYOTIS, organizationalUnitName=0002 48146308100036, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Interne
- Issuer: countryName=FR, organizationName=Dhimyotis, commonName=Certigna
- Serial: F45E2849E3C6C86F110A302569058213
- SHA-256: 41E9CDBD6470F1853FC304B8F2465D4BAA8836965833D52E983E2AB757973627
- SPKI SHA-256: 1526CBB90C7C68041D4765B94EDD5A9EBCA5B284FBBAF65E07035ED3870C2822
- Validity: 2015-11-10 to 2026-05-06
- Key: RSA 4096
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: true
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: -
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.1.0.1.2
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: -
- CRL DP: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f4:5e:28:49:e3:c6:c8:6f:11:0a:30:25:69:05:82:13
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, CN = Certigna
        Validity
            Not Before: Nov 10 13:58:18 2015 GMT
            Not After : May  6 13:58:18 2026 GMT
        Subject: C = FR, O = DHIMYOTIS, OU = 0002 48146308100036, organizationIdentifier = NTRFR-48146308100036, CN = Certigna Interne
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies:
                Policy: 1.2.250.1.177.1.0.1.2
            X509v3 Subject Key Identifier:
                86:A7:FC:84:0F:3E:89:73:F6:C7:D9:E0:12:BC:06:64:E2:A1:37:BF
            X509v3 Authority Key Identifier:
                keyid:1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11
                DirName:/C=FR/O=Dhimyotis/CN=Certigna
                serial:FE:DC:E3:01:0F:C9:48:FF
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.fr/certigna.crl
                Full Name:
                  URI:http://crl.dhimyotis.com/certigna.crl
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 41E9CDBD6470F1853FC304B8F2465D4BAA8836965833D52E983E2AB757973627
    SPKI SHA256: 1526CBB90C7C68041D4765B94EDD5A9EBCA5B284FBBAF65E07035ED3870C2822
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.1.0.1.2
- AIA OCSP: -
- AIA CA Issuers: -
- CRL Distribution Points: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.


- [historical] error e_mp_authority_key_identifier_correct: 
- [historical] error e_sub_ca_aia_missing: 
- [historical] warn w_sub_ca_aia_does_not_contain_issuing_ca_url: 

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_http_urls
- has_crldp
- is_expired

### Certigna Root CA

- Subject: countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 48146308100036, commonName=Certigna Root CA
- Issuer: countryName=FR, organizationName=Dhimyotis, commonName=Certigna
- Serial: 645D904626E5F63BBF8FF9577823B22CC18459AC
- SHA-256: 99977BF1CA323FA96047E7DA5F93BD6CBF17010D6D8FBCE03091ECE79C857EFA
- SPKI SHA-256: 8E8046EC4CAC015A507CE0D2D0154A4B40E8E42B3165CFA546571435112D17E5
- Validity: 2025-11-28 to 2027-06-28
- Key: RSA 4096
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: true
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: https://crl.certigna.fr/certignarootca.crl, http://crl.dhimyotis.com/certignarootca.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication
- Certificate Policies: 2.23.140.1.2.2
- anyPolicy: false
- CABF TLS policy OID: 2.23.140.1.2.2 CABF OV
- CPS qualifier: false
- AIA OCSP: -
- CRL DP: http://crl.certigna.com/Certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:5d:90:46:26:e5:f6:3b:bf:8f:f9:57:78:23:b2:2c:c1:84:59:ac
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, CN = Certigna
        Validity
            Not Before: Nov 28 11:28:42 2025 GMT
            Not After : Jun 28 15:13:04 2027 GMT
        Subject: C = FR, O = Dhimyotis, OU = 0002 48146308100036, CN = Certigna Root CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access:
                CA Issuers - URI:http://cert.certigna.com/Certigna.cer
            X509v3 Authority Key Identifier:
                1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Certificate Policies:
                Policy: 2.23.140.1.2.2
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.com/Certigna.crl
            X509v3 Extended Key Usage:
                TLS Web Server Authentication
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                18:87:56:E0:6E:77:EE:24:35:3C:4E:73:9A:1F:D6:E1:E2:79:7E:2B
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 99977BF1CA323FA96047E7DA5F93BD6CBF17010D6D8FBCE03091ECE79C857EFA
    SPKI SHA256: 8E8046EC4CAC015A507CE0D2D0154A4B40E8E42B3165CFA546571435112D17E5
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication
- Certificate Policies: 2.23.140.1.2.2
- AIA OCSP: -
- AIA CA Issuers: http://cert.certigna.com/Certigna.cer
- CRL Distribution Points: http://crl.certigna.com/Certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings


- [current] error e_subj_orgunit_in_ca_cert: The OU attribute in the Subject is prohibited in Root and TLS CA certificates

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_server_auth_eku
- has_certificate_policies
- has_http_urls
- has_cabf_tls_policy_oid
- cabf_tls_policy_oids
- has_crldp
- has_aia_ca_issuers
- expires_within_398_days

### Certigna Server Authentication ACME CA

- Subject: countryName=FR, organizationName=Certigna, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Server Authentication ACME CA
- Issuer: countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 48146308100036, commonName=Certigna Root CA
- Serial: 4AFF12D4EA65B726EEEA907B7CC578738B432710
- SHA-256: 90FAA0DEFAB13D09AC009751C0C3B606A47CD57DE8022E687748199B44474B23
- SPKI SHA-256: 83DEBF4290BA73DE613DED2626E1C00E0A4FCFA46E55AAA31E84528CECAE2FB1
- Validity: 2024-03-13 to 2039-03-12
- Key: RSA 4096
- Signature Algorithm: RSA-SHA384

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: true
- Audit URLs: -
- Audit same as parent: false
- CRLs issued by this CA disclosed in CCADB: -
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: 0
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 1.2.250.1.177.2.0.1.1, 2.23.140.1.1, 2.23.140.1.2.1, 2.23.140.1.2.2
- anyPolicy: false
- CABF TLS policy OID: 2.23.140.1.1 CABF EV, 2.23.140.1.2.1 CABF DV, 2.23.140.1.2.2 CABF OV
- CPS qualifier: true
- AIA OCSP: http://ocsp.certigna.com
- CRL DP: http://crl.certigna.com/CertignaRootCA.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ff:12:d4:ea:65:b7:26:ee:ea:90:7b:7c:c5:78:73:8b:43:27:10
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, OU = 0002 48146308100036, CN = Certigna Root CA
        Validity
            Not Before: Mar 13 10:16:33 2024 GMT
            Not After : Mar 12 10:16:32 2039 GMT
        Subject: C = FR, O = Certigna, organizationIdentifier = NTRFR-48146308100036, CN = Certigna Server Authentication ACME CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access:
                CA Issuers - URI:http://cert.certigna.com/CertignaRootCA.cer
                OCSP - URI:http://ocsp.certigna.com
            X509v3 Authority Key Identifier:
                18:87:56:E0:6E:77:EE:24:35:3C:4E:73:9A:1F:D6:E1:E2:79:7E:2B
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies:
                Policy: 1.2.250.1.177.2.0.1.1
                  CPS: http://cps.certigna.com
                Policy: 2.23.140.1.1
                Policy: 2.23.140.1.2.1
                Policy: 2.23.140.1.2.2
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.com/CertignaRootCA.crl
            X509v3 Extended Key Usage:
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                56:78:72:3F:5F:95:01:91:93:FA:BE:91:91:61:7C:02:9D:CC:5E:1E
    Signature Algorithm: sha384WithRSAEncryption
    SHA256 Fingerprint: 90FAA0DEFAB13D09AC009751C0C3B606A47CD57DE8022E687748199B44474B23
    SPKI SHA256: 83DEBF4290BA73DE613DED2626E1C00E0A4FCFA46E55AAA31E84528CECAE2FB1
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":0}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 1.2.250.1.177.2.0.1.1, 2.23.140.1.1, 2.23.140.1.2.1, 2.23.140.1.2.2
- AIA OCSP: http://ocsp.certigna.com
- AIA CA Issuers: http://cert.certigna.com/CertignaRootCA.cer
- CRL Distribution Points: http://crl.certigna.com/CertignaRootCA.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.


- [historical] error e_ca_multiple_reserved_policy_oids: A Subordinate CA certificate MUST include exactly one Reserved Certificate Policy Identifier
- [historical] error e_ev_organization_id_missing: subject:organizationIdentifier field is present in an EV certificate but the CA/Browser Forum Organization Identifier Field Extension is missing

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_path_len_constraint
- has_key_usage
- has_eku
- has_server_auth_eku
- has_client_auth_eku
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_cabf_tls_policy_oid
- cabf_tls_policy_oids
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### Certigna Server Authentication ACME CA 2024

- Subject: countryName=FR, organizationName=Certigna, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Server Authentication ACME CA 2024
- Issuer: countryName=FR, organizationName=Dhimyotis, commonName=Certigna
- Serial: 1E4F72BFBF96D3F619C1D2AA25AE52B8CEA3F6C8
- SHA-256: A9A63E03F0D498EC7243026A7A8F2BE705D04F2845D49F63D889C9DD0B4A3944
- SPKI SHA-256: E6DE9B504240B58791A832F8C1CD3E04B497DC2CBE5BCD1B35CB8EE33A71D3C4
- Validity: 2024-03-13 to 2039-03-12
- Key: RSA 4096
- Signature Algorithm: RSA-SHA384

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: true
- Audit URLs: -
- Audit same as parent: false
- CRLs issued by this CA disclosed in CCADB: -
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: 0
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 1.2.250.1.177.1.0.1.2, 2.23.140.1.1, 2.23.140.1.2.1, 2.23.140.1.2.2
- anyPolicy: false
- CABF TLS policy OID: 2.23.140.1.1 CABF EV, 2.23.140.1.2.1 CABF DV, 2.23.140.1.2.2 CABF OV
- CPS qualifier: true
- AIA OCSP: http://ocsp.certigna.com
- CRL DP: http://crl.certigna.com/Certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:4f:72:bf:bf:96:d3:f6:19:c1:d2:aa:25:ae:52:b8:ce:a3:f6:c8
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, CN = Certigna
        Validity
            Not Before: Mar 13 10:16:28 2024 GMT
            Not After : Mar 12 10:16:27 2039 GMT
        Subject: C = FR, O = Certigna, organizationIdentifier = NTRFR-48146308100036, CN = Certigna Server Authentication ACME CA 2024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access:
                CA Issuers - URI:http://cert.certigna.com/Certigna.cer
                OCSP - URI:http://ocsp.certigna.com
            X509v3 Authority Key Identifier:
                1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies:
                Policy: 1.2.250.1.177.1.0.1.2
                  CPS: http://cps.certigna.com
                Policy: 2.23.140.1.1
                Policy: 2.23.140.1.2.1
                Policy: 2.23.140.1.2.2
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.com/Certigna.crl
            X509v3 Extended Key Usage:
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                02:63:E6:0B:CD:99:33:4B:EB:94:5D:94:DD:78:09:A8:F3:DB:2B:52
    Signature Algorithm: sha384WithRSAEncryption
    SHA256 Fingerprint: A9A63E03F0D498EC7243026A7A8F2BE705D04F2845D49F63D889C9DD0B4A3944
    SPKI SHA256: E6DE9B504240B58791A832F8C1CD3E04B497DC2CBE5BCD1B35CB8EE33A71D3C4
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":0}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 1.2.250.1.177.1.0.1.2, 2.23.140.1.1, 2.23.140.1.2.1, 2.23.140.1.2.2
- AIA OCSP: http://ocsp.certigna.com
- AIA CA Issuers: http://cert.certigna.com/Certigna.cer
- CRL Distribution Points: http://crl.certigna.com/Certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.


- [historical] error e_ca_multiple_reserved_policy_oids: A Subordinate CA certificate MUST include exactly one Reserved Certificate Policy Identifier
- [historical] error e_ev_organization_id_missing: subject:organizationIdentifier field is present in an EV certificate but the CA/Browser Forum Organization Identifier Field Extension is missing

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_path_len_constraint
- has_key_usage
- has_eku
- has_server_auth_eku
- has_client_auth_eku
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_cabf_tls_policy_oid
- cabf_tls_policy_oids
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### Certigna Server Authentication ACME CA G1

- Subject: countryName=FR, organizationName=Certigna, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Server Authentication ACME CA G1
- Issuer: countryName=FR, organizationName=Dhimyotis, commonName=Certigna
- Serial: 67681609953D9C61AD6B056494E6E6CA7B4A54FC
- SHA-256: B1C8E470CA1F4885DDDEE0FE80B805F2CA823770EC6071C1CCEB77F70A0FB6C2
- SPKI SHA-256: AEF2BAE708FFCC456E75DCDFB063A30F5DF95A1D8C20BA006D7BBB90AC4DC283
- Validity: 2024-03-26 to 2027-06-28
- Key: RSA 4096
- Signature Algorithm: RSA-SHA384

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: true
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.certigna.com/CertignaServerAuthenticationACMECAG1.crl
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: 0
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Client Authentication, TLS Web Server Authentication
- Certificate Policies: 1.2.250.1.177.1.0.1.2, 2.23.140.1.1, 2.23.140.1.2.1, 2.23.140.1.2.2
- anyPolicy: false
- CABF TLS policy OID: 2.23.140.1.1 CABF EV, 2.23.140.1.2.1 CABF DV, 2.23.140.1.2.2 CABF OV
- CPS qualifier: true
- AIA OCSP: http://ocsp.certigna.com
- CRL DP: http://crl.certigna.com/Certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:68:16:09:95:3d:9c:61:ad:6b:05:64:94:e6:e6:ca:7b:4a:54:fc
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, CN = Certigna
        Validity
            Not Before: Mar 26 09:32:55 2024 GMT
            Not After : Jun 28 09:32:54 2027 GMT
        Subject: C = FR, O = Certigna, organizationIdentifier = NTRFR-48146308100036, CN = Certigna Server Authentication ACME CA G1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access:
                CA Issuers - URI:http://cert.certigna.com/Certigna.cer
                OCSP - URI:http://ocsp.certigna.com
            X509v3 Authority Key Identifier:
                1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies:
                Policy: 1.2.250.1.177.1.0.1.2
                  CPS: http://cps.certigna.com
                Policy: 2.23.140.1.1
                Policy: 2.23.140.1.2.1
                Policy: 2.23.140.1.2.2
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.com/Certigna.crl
            X509v3 Extended Key Usage:
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                ED:5A:42:2E:B4:B2:C9:2D:3B:3A:50:D3:15:2B:C8:4C:BB:DD:C5:CA
    Signature Algorithm: sha384WithRSAEncryption
    SHA256 Fingerprint: B1C8E470CA1F4885DDDEE0FE80B805F2CA823770EC6071C1CCEB77F70A0FB6C2
    SPKI SHA256: AEF2BAE708FFCC456E75DCDFB063A30F5DF95A1D8C20BA006D7BBB90AC4DC283
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":0}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Client Authentication, TLS Web Server Authentication
- Certificate Policies: 1.2.250.1.177.1.0.1.2, 2.23.140.1.1, 2.23.140.1.2.1, 2.23.140.1.2.2
- AIA OCSP: http://ocsp.certigna.com
- AIA CA Issuers: http://cert.certigna.com/Certigna.cer
- CRL Distribution Points: http://crl.certigna.com/Certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.


- [historical] error e_ca_multiple_reserved_policy_oids: A Subordinate CA certificate MUST include exactly one Reserved Certificate Policy Identifier
- [historical] error e_ev_organization_id_missing: subject:organizationIdentifier field is present in an EV certificate but the CA/Browser Forum Organization Identifier Field Extension is missing

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_path_len_constraint
- has_key_usage
- has_eku
- has_server_auth_eku
- has_client_auth_eku
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_cabf_tls_policy_oid
- cabf_tls_policy_oids
- has_crldp
- has_ocsp
- has_aia_ca_issuers
- expires_within_398_days

### Certigna Server Authentication ACME CA G2

- Subject: countryName=FR, organizationName=Certigna, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Server Authentication ACME CA G2
- Issuer: countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 48146308100036, commonName=Certigna Root CA
- Serial: 20FE2FFC7E61DBD15F54D02ED75D5839380287F0
- SHA-256: 60FD1DF177AB8EDE87472E8E728307F56EC41A60CCAD794C4FDB6D1CB7D40D56
- SPKI SHA-256: 44AAD1B85CB0B9BC2A50A48B438FCEBA30754D870F2D12ACD460C2837E756A4A
- Validity: 2024-03-26 to 2033-09-29
- Key: RSA 4096
- Signature Algorithm: RSA-SHA384

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: true
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.certigna.com/CertignaServerAuthenticationACMECAG2.crl
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: 0
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Client Authentication, TLS Web Server Authentication
- Certificate Policies: 1.2.250.1.177.2.0.1.1, 2.23.140.1.1, 2.23.140.1.2.1, 2.23.140.1.2.2
- anyPolicy: false
- CABF TLS policy OID: 2.23.140.1.1 CABF EV, 2.23.140.1.2.1 CABF DV, 2.23.140.1.2.2 CABF OV
- CPS qualifier: true
- AIA OCSP: http://ocsp.certigna.com
- CRL DP: http://crl.certigna.com/CertignaRootCA.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:fe:2f:fc:7e:61:db:d1:5f:54:d0:2e:d7:5d:58:39:38:02:87:f0
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, OU = 0002 48146308100036, CN = Certigna Root CA
        Validity
            Not Before: Mar 26 09:33:02 2024 GMT
            Not After : Sep 29 09:33:01 2033 GMT
        Subject: C = FR, O = Certigna, organizationIdentifier = NTRFR-48146308100036, CN = Certigna Server Authentication ACME CA G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access:
                CA Issuers - URI:http://cert.certigna.com/CertignaRootCA.cer
                OCSP - URI:http://ocsp.certigna.com
            X509v3 Authority Key Identifier:
                18:87:56:E0:6E:77:EE:24:35:3C:4E:73:9A:1F:D6:E1:E2:79:7E:2B
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies:
                Policy: 1.2.250.1.177.2.0.1.1
                  CPS: http://cps.certigna.com
                Policy: 2.23.140.1.1
                Policy: 2.23.140.1.2.1
                Policy: 2.23.140.1.2.2
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.com/CertignaRootCA.crl
            X509v3 Extended Key Usage:
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                C9:E9:AA:91:C9:9A:C6:97:EF:E9:B4:41:C9:4D:2F:59:C0:C7:76:B9
    Signature Algorithm: sha384WithRSAEncryption
    SHA256 Fingerprint: 60FD1DF177AB8EDE87472E8E728307F56EC41A60CCAD794C4FDB6D1CB7D40D56
    SPKI SHA256: 44AAD1B85CB0B9BC2A50A48B438FCEBA30754D870F2D12ACD460C2837E756A4A
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":0}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Client Authentication, TLS Web Server Authentication
- Certificate Policies: 1.2.250.1.177.2.0.1.1, 2.23.140.1.1, 2.23.140.1.2.1, 2.23.140.1.2.2
- AIA OCSP: http://ocsp.certigna.com
- AIA CA Issuers: http://cert.certigna.com/CertignaRootCA.cer
- CRL Distribution Points: http://crl.certigna.com/CertignaRootCA.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.


- [historical] error e_ca_multiple_reserved_policy_oids: A Subordinate CA certificate MUST include exactly one Reserved Certificate Policy Identifier
- [historical] error e_ev_organization_id_missing: subject:organizationIdentifier field is present in an EV certificate but the CA/Browser Forum Organization Identifier Field Extension is missing

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_path_len_constraint
- has_key_usage
- has_eku
- has_server_auth_eku
- has_client_auth_eku
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_cabf_tls_policy_oid
- cabf_tls_policy_oids
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### Certigna Server Authentication ACME FR CA

- Subject: countryName=FR, organizationName=Certigna, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Server Authentication ACME FR CA
- Issuer: countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 48146308100036, commonName=Certigna Root CA
- Serial: 5696BF307A56CB563150D225DBB77EB59D6C5F99
- SHA-256: E050F55B5563E435DD36023A3A3B4ACBEAB44C3964F1804879CC3111E287D81B
- SPKI SHA-256: CE437D517028F22FD5994DA68E90943AD79FFB98E4B7E28F977D9F22A074B4D1
- Validity: 2024-03-13 to 2039-03-12
- Key: RSA 4096
- Signature Algorithm: RSA-SHA384

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: true
- Audit URLs: -
- Audit same as parent: false
- CRLs issued by this CA disclosed in CCADB: -
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: 0
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 1.2.250.1.177.2.0.1.1, 2.23.140.1.1, 2.23.140.1.2.1, 2.23.140.1.2.2
- anyPolicy: false
- CABF TLS policy OID: 2.23.140.1.1 CABF EV, 2.23.140.1.2.1 CABF DV, 2.23.140.1.2.2 CABF OV
- CPS qualifier: true
- AIA OCSP: http://ocsp.certigna.com
- CRL DP: http://crl.certigna.com/CertignaRootCA.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:96:bf:30:7a:56:cb:56:31:50:d2:25:db:b7:7e:b5:9d:6c:5f:99
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, OU = 0002 48146308100036, CN = Certigna Root CA
        Validity
            Not Before: Mar 13 10:16:35 2024 GMT
            Not After : Mar 12 10:16:34 2039 GMT
        Subject: C = FR, O = Certigna, organizationIdentifier = NTRFR-48146308100036, CN = Certigna Server Authentication ACME FR CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access:
                CA Issuers - URI:http://cert.certigna.com/CertignaRootCA.cer
                OCSP - URI:http://ocsp.certigna.com
            X509v3 Authority Key Identifier:
                18:87:56:E0:6E:77:EE:24:35:3C:4E:73:9A:1F:D6:E1:E2:79:7E:2B
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies:
                Policy: 1.2.250.1.177.2.0.1.1
                  CPS: http://cps.certigna.com
                Policy: 2.23.140.1.1
                Policy: 2.23.140.1.2.1
                Policy: 2.23.140.1.2.2
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.com/CertignaRootCA.crl
            X509v3 Extended Key Usage:
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                09:B0:8F:09:7F:62:1D:06:3F:89:29:38:11:1A:4D:C2:25:AC:50:11
    Signature Algorithm: sha384WithRSAEncryption
    SHA256 Fingerprint: E050F55B5563E435DD36023A3A3B4ACBEAB44C3964F1804879CC3111E287D81B
    SPKI SHA256: CE437D517028F22FD5994DA68E90943AD79FFB98E4B7E28F977D9F22A074B4D1
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":0}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 1.2.250.1.177.2.0.1.1, 2.23.140.1.1, 2.23.140.1.2.1, 2.23.140.1.2.2
- AIA OCSP: http://ocsp.certigna.com
- AIA CA Issuers: http://cert.certigna.com/CertignaRootCA.cer
- CRL Distribution Points: http://crl.certigna.com/CertignaRootCA.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.


- [historical] error e_ca_multiple_reserved_policy_oids: A Subordinate CA certificate MUST include exactly one Reserved Certificate Policy Identifier
- [historical] error e_ev_organization_id_missing: subject:organizationIdentifier field is present in an EV certificate but the CA/Browser Forum Organization Identifier Field Extension is missing

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_path_len_constraint
- has_key_usage
- has_eku
- has_server_auth_eku
- has_client_auth_eku
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_cabf_tls_policy_oid
- cabf_tls_policy_oids
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### Certigna Server Authentication ACME FR CA 2024

- Subject: countryName=FR, organizationName=Certigna, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Server Authentication ACME FR CA 2024
- Issuer: countryName=FR, organizationName=Dhimyotis, commonName=Certigna
- Serial: 3947167A9E79CC500F1AA1E5085E49E4124A1227
- SHA-256: 58C2942C41B908F009E900FE62D1130BBEA7A5A8836F20899089A7A951C64327
- SPKI SHA-256: 0E84C0F62DDC677B02A32224058BF428DF6BC63BDEDFE1752CE2F484C4C48E9F
- Validity: 2024-03-13 to 2039-03-12
- Key: RSA 4096
- Signature Algorithm: RSA-SHA384

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: true
- Audit URLs: -
- Audit same as parent: false
- CRLs issued by this CA disclosed in CCADB: -
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: 0
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 1.2.250.1.177.1.0.1.2, 2.23.140.1.1, 2.23.140.1.2.1, 2.23.140.1.2.2
- anyPolicy: false
- CABF TLS policy OID: 2.23.140.1.1 CABF EV, 2.23.140.1.2.1 CABF DV, 2.23.140.1.2.2 CABF OV
- CPS qualifier: true
- AIA OCSP: http://ocsp.certigna.com
- CRL DP: http://crl.certigna.com/Certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:47:16:7a:9e:79:cc:50:0f:1a:a1:e5:08:5e:49:e4:12:4a:12:27
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, CN = Certigna
        Validity
            Not Before: Mar 13 10:16:29 2024 GMT
            Not After : Mar 12 10:16:28 2039 GMT
        Subject: C = FR, O = Certigna, organizationIdentifier = NTRFR-48146308100036, CN = Certigna Server Authentication ACME FR CA 2024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access:
                CA Issuers - URI:http://cert.certigna.com/Certigna.cer
                OCSP - URI:http://ocsp.certigna.com
            X509v3 Authority Key Identifier:
                1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies:
                Policy: 1.2.250.1.177.1.0.1.2
                  CPS: http://cps.certigna.com
                Policy: 2.23.140.1.1
                Policy: 2.23.140.1.2.1
                Policy: 2.23.140.1.2.2
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.com/Certigna.crl
            X509v3 Extended Key Usage:
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                15:AC:AE:00:FD:BA:F9:A2:16:EC:4D:E0:BB:B3:01:16:0E:FA:A5:5A
    Signature Algorithm: sha384WithRSAEncryption
    SHA256 Fingerprint: 58C2942C41B908F009E900FE62D1130BBEA7A5A8836F20899089A7A951C64327
    SPKI SHA256: 0E84C0F62DDC677B02A32224058BF428DF6BC63BDEDFE1752CE2F484C4C48E9F
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":0}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 1.2.250.1.177.1.0.1.2, 2.23.140.1.1, 2.23.140.1.2.1, 2.23.140.1.2.2
- AIA OCSP: http://ocsp.certigna.com
- AIA CA Issuers: http://cert.certigna.com/Certigna.cer
- CRL Distribution Points: http://crl.certigna.com/Certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.


- [historical] error e_ca_multiple_reserved_policy_oids: A Subordinate CA certificate MUST include exactly one Reserved Certificate Policy Identifier
- [historical] error e_ev_organization_id_missing: subject:organizationIdentifier field is present in an EV certificate but the CA/Browser Forum Organization Identifier Field Extension is missing

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_path_len_constraint
- has_key_usage
- has_eku
- has_server_auth_eku
- has_client_auth_eku
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_cabf_tls_policy_oid
- cabf_tls_policy_oids
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### Certigna Server Authentication ACME FR CA G1

- Subject: countryName=FR, organizationName=Certigna, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Server Authentication ACME FR CA G1
- Issuer: countryName=FR, organizationName=Dhimyotis, commonName=Certigna
- Serial: 69332B7B99ABA1A5FF9BDEF6FAC6377BAB90736D
- SHA-256: CA1FF54E031186F9006BB148F8CE6A53F05742A4B6CE8FFE79DFD2AE471EBAA5
- SPKI SHA-256: 390CCA224351ABC91080791E947386148198568A76FF376A0060A1BA76AB8514
- Validity: 2024-03-26 to 2027-06-28
- Key: RSA 4096
- Signature Algorithm: RSA-SHA384

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: true
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.certigna.com/CertignaServerAuthenticationACMEFRCAG1.crl
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: 0
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Client Authentication, TLS Web Server Authentication
- Certificate Policies: 1.2.250.1.177.1.0.1.2, 2.23.140.1.1, 2.23.140.1.2.1, 2.23.140.1.2.2
- anyPolicy: false
- CABF TLS policy OID: 2.23.140.1.1 CABF EV, 2.23.140.1.2.1 CABF DV, 2.23.140.1.2.2 CABF OV
- CPS qualifier: true
- AIA OCSP: http://ocsp.certigna.com
- CRL DP: http://crl.certigna.com/Certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:33:2b:7b:99:ab:a1:a5:ff:9b:de:f6:fa:c6:37:7b:ab:90:73:6d
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, CN = Certigna
        Validity
            Not Before: Mar 26 09:32:59 2024 GMT
            Not After : Jun 28 09:32:58 2027 GMT
        Subject: C = FR, O = Certigna, organizationIdentifier = NTRFR-48146308100036, CN = Certigna Server Authentication ACME FR CA G1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access:
                CA Issuers - URI:http://cert.certigna.com/Certigna.cer
                OCSP - URI:http://ocsp.certigna.com
            X509v3 Authority Key Identifier:
                1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies:
                Policy: 1.2.250.1.177.1.0.1.2
                  CPS: http://cps.certigna.com
                Policy: 2.23.140.1.1
                Policy: 2.23.140.1.2.1
                Policy: 2.23.140.1.2.2
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.com/Certigna.crl
            X509v3 Extended Key Usage:
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                6D:7A:B8:CB:C8:8E:90:BC:FA:6F:93:FD:43:E0:A0:1C:2C:0E:B7:EE
    Signature Algorithm: sha384WithRSAEncryption
    SHA256 Fingerprint: CA1FF54E031186F9006BB148F8CE6A53F05742A4B6CE8FFE79DFD2AE471EBAA5
    SPKI SHA256: 390CCA224351ABC91080791E947386148198568A76FF376A0060A1BA76AB8514
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":0}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Client Authentication, TLS Web Server Authentication
- Certificate Policies: 1.2.250.1.177.1.0.1.2, 2.23.140.1.1, 2.23.140.1.2.1, 2.23.140.1.2.2
- AIA OCSP: http://ocsp.certigna.com
- AIA CA Issuers: http://cert.certigna.com/Certigna.cer
- CRL Distribution Points: http://crl.certigna.com/Certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.


- [historical] error e_ca_multiple_reserved_policy_oids: A Subordinate CA certificate MUST include exactly one Reserved Certificate Policy Identifier
- [historical] error e_ev_organization_id_missing: subject:organizationIdentifier field is present in an EV certificate but the CA/Browser Forum Organization Identifier Field Extension is missing

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_path_len_constraint
- has_key_usage
- has_eku
- has_server_auth_eku
- has_client_auth_eku
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_cabf_tls_policy_oid
- cabf_tls_policy_oids
- has_crldp
- has_ocsp
- has_aia_ca_issuers
- expires_within_398_days

### Certigna Server Authentication ACME FR CA G2

- Subject: countryName=FR, organizationName=Certigna, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Server Authentication ACME FR CA G2
- Issuer: countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 48146308100036, commonName=Certigna Root CA
- Serial: 55672BE637DEC08F282C06964A184398E9922EC5
- SHA-256: 4E42E2D88C4E4DB5919C79004D1C9C0E9C2D6FBB453DA1D642D3D30F78C0572E
- SPKI SHA-256: 50BCB8900634EDBA19BCB443A2EC5F7C735572C1871901429C4B8292AF9C3024
- Validity: 2024-03-26 to 2033-09-29
- Key: RSA 4096
- Signature Algorithm: RSA-SHA384

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: true
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.certigna.com/CertignaServerAuthenticationACMEFRCAG2.crl
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: 0
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Client Authentication, TLS Web Server Authentication
- Certificate Policies: 1.2.250.1.177.2.0.1.1, 2.23.140.1.1, 2.23.140.1.2.1, 2.23.140.1.2.2
- anyPolicy: false
- CABF TLS policy OID: 2.23.140.1.1 CABF EV, 2.23.140.1.2.1 CABF DV, 2.23.140.1.2.2 CABF OV
- CPS qualifier: true
- AIA OCSP: http://ocsp.certigna.com
- CRL DP: http://crl.certigna.com/CertignaRootCA.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:67:2b:e6:37:de:c0:8f:28:2c:06:96:4a:18:43:98:e9:92:2e:c5
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, OU = 0002 48146308100036, CN = Certigna Root CA
        Validity
            Not Before: Mar 26 09:33:05 2024 GMT
            Not After : Sep 29 09:33:04 2033 GMT
        Subject: C = FR, O = Certigna, organizationIdentifier = NTRFR-48146308100036, CN = Certigna Server Authentication ACME FR CA G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access:
                CA Issuers - URI:http://cert.certigna.com/CertignaRootCA.cer
                OCSP - URI:http://ocsp.certigna.com
            X509v3 Authority Key Identifier:
                18:87:56:E0:6E:77:EE:24:35:3C:4E:73:9A:1F:D6:E1:E2:79:7E:2B
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies:
                Policy: 1.2.250.1.177.2.0.1.1
                  CPS: http://cps.certigna.com
                Policy: 2.23.140.1.1
                Policy: 2.23.140.1.2.1
                Policy: 2.23.140.1.2.2
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.com/CertignaRootCA.crl
            X509v3 Extended Key Usage:
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                8F:94:64:B5:4A:BE:01:DB:F3:93:87:19:04:C1:38:0B:26:6B:BE:B7
    Signature Algorithm: sha384WithRSAEncryption
    SHA256 Fingerprint: 4E42E2D88C4E4DB5919C79004D1C9C0E9C2D6FBB453DA1D642D3D30F78C0572E
    SPKI SHA256: 50BCB8900634EDBA19BCB443A2EC5F7C735572C1871901429C4B8292AF9C3024
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":0}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Client Authentication, TLS Web Server Authentication
- Certificate Policies: 1.2.250.1.177.2.0.1.1, 2.23.140.1.1, 2.23.140.1.2.1, 2.23.140.1.2.2
- AIA OCSP: http://ocsp.certigna.com
- AIA CA Issuers: http://cert.certigna.com/CertignaRootCA.cer
- CRL Distribution Points: http://crl.certigna.com/CertignaRootCA.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.


- [historical] error e_ca_multiple_reserved_policy_oids: A Subordinate CA certificate MUST include exactly one Reserved Certificate Policy Identifier
- [historical] error e_ev_organization_id_missing: subject:organizationIdentifier field is present in an EV certificate but the CA/Browser Forum Organization Identifier Field Extension is missing

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_path_len_constraint
- has_key_usage
- has_eku
- has_server_auth_eku
- has_client_auth_eku
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_cabf_tls_policy_oid
- cabf_tls_policy_oids
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### Certigna Server Authentication Auto CA

- Subject: countryName=FR, organizationName=Certigna, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Server Authentication Auto CA
- Issuer: countryName=FR, organizationName=Certigna, commonName=Certigna Server Authentication Root CA
- Serial: 35C6B6C33ABFD08DCB6BA13FAFEE85FF73EE5419
- SHA-256: 5AC4F884B6332F7D128F6695CE46F881922A58FC3D65E9D718EBB2B1CFC658AA
- SPKI SHA-256: 0936F03DEBFA35299DE67EE3A82C337B28DD8E3C975158219C9B1C93BA078961
- Validity: 2024-03-13 to 2039-03-12
- Key: RSA 4096
- Signature Algorithm: RSA-SHA384

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: true
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: https://crl.certigna.com/CertignaServerAuthenticationAutoCA.crl
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: 0
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 1.2.250.1.177.6.0.1.1, 2.23.140.1.1, 2.23.140.1.2.1, 2.23.140.1.2.2
- anyPolicy: false
- CABF TLS policy OID: 2.23.140.1.1 CABF EV, 2.23.140.1.2.1 CABF DV, 2.23.140.1.2.2 CABF OV
- CPS qualifier: true
- AIA OCSP: http://ocsp.certigna.com
- CRL DP: http://crl.certigna.com/CertignaServerAuthenticationRootCA.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:c6:b6:c3:3a:bf:d0:8d:cb:6b:a1:3f:af:ee:85:ff:73:ee:54:19
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C = FR, O = Certigna, CN = Certigna Server Authentication Root CA
        Validity
            Not Before: Mar 13 10:16:45 2024 GMT
            Not After : Mar 12 10:16:44 2039 GMT
        Subject: C = FR, O = Certigna, organizationIdentifier = NTRFR-48146308100036, CN = Certigna Server Authentication Auto CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access:
                CA Issuers - URI:http://cert.certigna.com/CertignaServerAuthenticationRootCA.cer
                OCSP - URI:http://ocsp.certigna.com
            X509v3 Authority Key Identifier:
                D6:92:98:E7:9D:1D:AD:E1:E6:0A:4A:96:04:87:6B:EE:FB:29:1A:BA
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies:
                Policy: 1.2.250.1.177.6.0.1.1
                  CPS: http://cps.certigna.com
                Policy: 2.23.140.1.1
                Policy: 2.23.140.1.2.1
                Policy: 2.23.140.1.2.2
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.com/CertignaServerAuthenticationRootCA.crl
            X509v3 Extended Key Usage:
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                6F:6C:B1:78:4E:B7:9A:B3:E4:19:1E:E1:62:65:14:92:62:C7:71:14
    Signature Algorithm: sha384WithRSAEncryption
    SHA256 Fingerprint: 5AC4F884B6332F7D128F6695CE46F881922A58FC3D65E9D718EBB2B1CFC658AA
    SPKI SHA256: 0936F03DEBFA35299DE67EE3A82C337B28DD8E3C975158219C9B1C93BA078961
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":0}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 1.2.250.1.177.6.0.1.1, 2.23.140.1.1, 2.23.140.1.2.1, 2.23.140.1.2.2
- AIA OCSP: http://ocsp.certigna.com
- AIA CA Issuers: http://cert.certigna.com/CertignaServerAuthenticationRootCA.cer
- CRL Distribution Points: http://crl.certigna.com/CertignaServerAuthenticationRootCA.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.


- [historical] error e_ca_multiple_reserved_policy_oids: A Subordinate CA certificate MUST include exactly one Reserved Certificate Policy Identifier
- [historical] error e_ev_organization_id_missing: subject:organizationIdentifier field is present in an EV certificate but the CA/Browser Forum Organization Identifier Field Extension is missing

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_path_len_constraint
- has_key_usage
- has_eku
- has_server_auth_eku
- has_client_auth_eku
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_cabf_tls_policy_oid
- cabf_tls_policy_oids
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### Certigna Server Authentication Auto FR CA

- Subject: countryName=FR, organizationName=Certigna, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Server Authentication Auto FR CA
- Issuer: countryName=FR, organizationName=Certigna, commonName=Certigna Server Authentication Root CA
- Serial: 02A39CF165C426F091F7F40C5EF3901ED5190D9C
- SHA-256: 8AE04D0DB06176FAD66F95B14903AA0768361AC4F4B21F3D93AF246519BB0AE4
- SPKI SHA-256: 730C7BFD5B6AF9CD6F7E79A6759136E203A4760D50BA495E72EAD918CE5FA91A
- Validity: 2024-03-13 to 2039-03-12
- Key: RSA 4096
- Signature Algorithm: RSA-SHA384

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: true
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: https://crl.certigna.com/CertignaServerAuthenticationAutoFRCA.crl
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: 0
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 1.2.250.1.177.6.0.1.1, 2.23.140.1.1, 2.23.140.1.2.1, 2.23.140.1.2.2
- anyPolicy: false
- CABF TLS policy OID: 2.23.140.1.1 CABF EV, 2.23.140.1.2.1 CABF DV, 2.23.140.1.2.2 CABF OV
- CPS qualifier: true
- AIA OCSP: http://ocsp.certigna.com
- CRL DP: http://crl.certigna.com/CertignaServerAuthenticationRootCA.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:a3:9c:f1:65:c4:26:f0:91:f7:f4:0c:5e:f3:90:1e:d5:19:0d:9c
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C = FR, O = Certigna, CN = Certigna Server Authentication Root CA
        Validity
            Not Before: Mar 13 10:16:46 2024 GMT
            Not After : Mar 12 10:16:45 2039 GMT
        Subject: C = FR, O = Certigna, organizationIdentifier = NTRFR-48146308100036, CN = Certigna Server Authentication Auto FR CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access:
                CA Issuers - URI:http://cert.certigna.com/CertignaServerAuthenticationRootCA.cer
                OCSP - URI:http://ocsp.certigna.com
            X509v3 Authority Key Identifier:
                D6:92:98:E7:9D:1D:AD:E1:E6:0A:4A:96:04:87:6B:EE:FB:29:1A:BA
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies:
                Policy: 1.2.250.1.177.6.0.1.1
                  CPS: http://cps.certigna.com
                Policy: 2.23.140.1.1
                Policy: 2.23.140.1.2.1
                Policy: 2.23.140.1.2.2
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.com/CertignaServerAuthenticationRootCA.crl
            X509v3 Extended Key Usage:
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                EF:DD:14:03:B9:92:02:A0:FD:90:18:C9:70:45:4C:7F:89:24:6C:59
    Signature Algorithm: sha384WithRSAEncryption
    SHA256 Fingerprint: 8AE04D0DB06176FAD66F95B14903AA0768361AC4F4B21F3D93AF246519BB0AE4
    SPKI SHA256: 730C7BFD5B6AF9CD6F7E79A6759136E203A4760D50BA495E72EAD918CE5FA91A
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":0}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 1.2.250.1.177.6.0.1.1, 2.23.140.1.1, 2.23.140.1.2.1, 2.23.140.1.2.2
- AIA OCSP: http://ocsp.certigna.com
- AIA CA Issuers: http://cert.certigna.com/CertignaServerAuthenticationRootCA.cer
- CRL Distribution Points: http://crl.certigna.com/CertignaServerAuthenticationRootCA.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.


- [historical] error e_ca_multiple_reserved_policy_oids: A Subordinate CA certificate MUST include exactly one Reserved Certificate Policy Identifier
- [historical] error e_ev_organization_id_missing: subject:organizationIdentifier field is present in an EV certificate but the CA/Browser Forum Organization Identifier Field Extension is missing

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_path_len_constraint
- has_key_usage
- has_eku
- has_server_auth_eku
- has_client_auth_eku
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_cabf_tls_policy_oid
- cabf_tls_policy_oids
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### Certigna Server Authentication Auto OVCP CA

- Subject: countryName=FR, organizationName=Certigna, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Server Authentication Auto OVCP CA
- Issuer: countryName=FR, organizationName=Certigna, commonName=Certigna Server Authentication Root CA
- Serial: 5B8791622A78770D0750C590B50EC59047AF5627
- SHA-256: 42FA9A38CC62EC69617AC8207979600725C8A90F6A5D82634500252EDD51C6D8
- SPKI SHA-256: 791F321E32ED276F236F0C2EC3A88775BD1D1933192497490F10391FBD94A5E6
- Validity: 2025-02-28 to 2039-03-12
- Key: RSA 4096
- Signature Algorithm: RSA-SHA384

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: true
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.certigna.com/CertignaServerAuthenticationAutoOVCPCA.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: 0
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.23.140.1.2.2, 1.2.250.1.177.6.0.1.1
- anyPolicy: false
- CABF TLS policy OID: 2.23.140.1.2.2 CABF OV
- CPS qualifier: true
- AIA OCSP: -
- CRL DP: http://crl.certigna.com/CertignaServerAuthenticationRootCA.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:87:91:62:2a:78:77:0d:07:50:c5:90:b5:0e:c5:90:47:af:56:27
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C = FR, O = Certigna, CN = Certigna Server Authentication Root CA
        Validity
            Not Before: Feb 28 09:58:03 2025 GMT
            Not After : Mar 12 09:58:02 2039 GMT
        Subject: C = FR, O = Certigna, organizationIdentifier = NTRFR-48146308100036, CN = Certigna Server Authentication Auto OVCP CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access:
                CA Issuers - URI:http://cert.certigna.com/CertignaServerAuthenticationRootCA.cer
            X509v3 Authority Key Identifier:
                D6:92:98:E7:9D:1D:AD:E1:E6:0A:4A:96:04:87:6B:EE:FB:29:1A:BA
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies:
                Policy: 2.23.140.1.2.2
                Policy: 1.2.250.1.177.6.0.1.1
                  CPS: http://cps.certigna.com
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.com/CertignaServerAuthenticationRootCA.crl
            X509v3 Extended Key Usage:
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                1B:46:22:39:F6:74:98:0F:E5:B7:C5:EC:82:2F:F4:5F:4F:AA:FA:27
    Signature Algorithm: sha384WithRSAEncryption
    SHA256 Fingerprint: 42FA9A38CC62EC69617AC8207979600725C8A90F6A5D82634500252EDD51C6D8
    SPKI SHA256: 791F321E32ED276F236F0C2EC3A88775BD1D1933192497490F10391FBD94A5E6
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":0}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.23.140.1.2.2, 1.2.250.1.177.6.0.1.1
- AIA OCSP: -
- AIA CA Issuers: http://cert.certigna.com/CertignaServerAuthenticationRootCA.cer
- CRL Distribution Points: http://crl.certigna.com/CertignaServerAuthenticationRootCA.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_path_len_constraint
- has_key_usage
- has_eku
- has_server_auth_eku
- has_client_auth_eku
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_cabf_tls_policy_oid
- cabf_tls_policy_oids
- has_crldp
- has_aia_ca_issuers

### Certigna Server Authentication Auto OVCP EU CA

- Subject: countryName=FR, organizationName=Certigna, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Server Authentication Auto OVCP EU CA
- Issuer: countryName=FR, organizationName=Certigna, commonName=Certigna Server Authentication EU Root CA
- Serial: 15AC97C3D6360B432990218CB211D700CFF0DA7F
- SHA-256: 78A5737D8D0E02ADA81D99DE0AD8D7BF0405DD54EF9084E64B0080AAAA8209F0
- SPKI SHA-256: AB0EDA7AA863F3F4A779D3CE335BFE441F07352797E0E9C303C8E696671234E8
- Validity: 2025-02-28 to 2040-02-27
- Key: RSA 4096
- Signature Algorithm: RSA-SHA384

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: true
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.certigna.com/CertignaServerAuthenticationAutoOVCPEUCA.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: 0
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.23.140.1.2.2, 1.2.250.1.177.14.0.1.1
- anyPolicy: false
- CABF TLS policy OID: 2.23.140.1.2.2 CABF OV
- CPS qualifier: true
- AIA OCSP: -
- CRL DP: http://crl.certigna.com/CertignaServerAuthenticationEURootCA.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ac:97:c3:d6:36:0b:43:29:90:21:8c:b2:11:d7:00:cf:f0:da:7f
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C = FR, O = Certigna, CN = Certigna Server Authentication EU Root CA
        Validity
            Not Before: Feb 28 09:49:14 2025 GMT
            Not After : Feb 27 09:49:13 2040 GMT
        Subject: C = FR, O = Certigna, organizationIdentifier = NTRFR-48146308100036, CN = Certigna Server Authentication Auto OVCP EU CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access:
                CA Issuers - URI:http://cert.certigna.com/CertignaServerAuthenticationEURootCA.cer
            X509v3 Authority Key Identifier:
                37:0B:6A:1C:32:83:6A:A8:35:F2:A6:D9:1C:EA:59:5B:11:88:31:90
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies:
                Policy: 2.23.140.1.2.2
                Policy: 1.2.250.1.177.14.0.1.1
                  CPS: http://cps.certigna.com
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.com/CertignaServerAuthenticationEURootCA.crl
            X509v3 Extended Key Usage:
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                A9:5C:FA:DE:AF:44:58:AA:1E:4F:B5:53:8F:81:C0:7B:CC:A3:49:8E
    Signature Algorithm: sha384WithRSAEncryption
    SHA256 Fingerprint: 78A5737D8D0E02ADA81D99DE0AD8D7BF0405DD54EF9084E64B0080AAAA8209F0
    SPKI SHA256: AB0EDA7AA863F3F4A779D3CE335BFE441F07352797E0E9C303C8E696671234E8
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":0}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.23.140.1.2.2, 1.2.250.1.177.14.0.1.1
- AIA OCSP: -
- AIA CA Issuers: http://cert.certigna.com/CertignaServerAuthenticationEURootCA.cer
- CRL Distribution Points: http://crl.certigna.com/CertignaServerAuthenticationEURootCA.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_path_len_constraint
- has_key_usage
- has_eku
- has_server_auth_eku
- has_client_auth_eku
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_cabf_tls_policy_oid
- cabf_tls_policy_oids
- has_crldp
- has_aia_ca_issuers

### Certigna Server Authentication Auto QCP CA

- Subject: countryName=FR, organizationName=Certigna, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Server Authentication Auto QCP CA
- Issuer: countryName=FR, organizationName=Certigna, commonName=Certigna Server Authentication Root CA
- Serial: 1757953A2EBA562E92F31905425FA945A1C2DA4C
- SHA-256: 54483CA2EAEB99897052BD7527BD0CFD097413EC2DFD7F5B5490BCCAD2F294B8
- SPKI SHA-256: 7EC3CE2B62C926BBD8833B1257B9A5CF15FEEEEBF33BE4C0DBE64D396F438C7B
- Validity: 2025-02-28 to 2039-03-12
- Key: RSA 4096
- Signature Algorithm: RSA-SHA384

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: true
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.certigna.com/CertignaServerAuthenticationAutoQCPCA.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: 0
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.23.140.1.2.2, 1.2.250.1.177.6.0.1.1
- anyPolicy: false
- CABF TLS policy OID: 2.23.140.1.2.2 CABF OV
- CPS qualifier: true
- AIA OCSP: -
- CRL DP: http://crl.certigna.com/CertignaServerAuthenticationRootCA.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:57:95:3a:2e:ba:56:2e:92:f3:19:05:42:5f:a9:45:a1:c2:da:4c
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C = FR, O = Certigna, CN = Certigna Server Authentication Root CA
        Validity
            Not Before: Feb 28 09:58:06 2025 GMT
            Not After : Mar 12 09:58:05 2039 GMT
        Subject: C = FR, O = Certigna, organizationIdentifier = NTRFR-48146308100036, CN = Certigna Server Authentication Auto QCP CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access:
                CA Issuers - URI:http://cert.certigna.com/CertignaServerAuthenticationRootCA.cer
            X509v3 Authority Key Identifier:
                D6:92:98:E7:9D:1D:AD:E1:E6:0A:4A:96:04:87:6B:EE:FB:29:1A:BA
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies:
                Policy: 2.23.140.1.2.2
                Policy: 1.2.250.1.177.6.0.1.1
                  CPS: http://cps.certigna.com
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.com/CertignaServerAuthenticationRootCA.crl
            X509v3 Extended Key Usage:
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                CC:AA:48:93:D2:03:F3:35:F1:FD:18:A6:66:F9:97:10:F2:D6:F8:2A
    Signature Algorithm: sha384WithRSAEncryption
    SHA256 Fingerprint: 54483CA2EAEB99897052BD7527BD0CFD097413EC2DFD7F5B5490BCCAD2F294B8
    SPKI SHA256: 7EC3CE2B62C926BBD8833B1257B9A5CF15FEEEEBF33BE4C0DBE64D396F438C7B
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":0}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.23.140.1.2.2, 1.2.250.1.177.6.0.1.1
- AIA OCSP: -
- AIA CA Issuers: http://cert.certigna.com/CertignaServerAuthenticationRootCA.cer
- CRL Distribution Points: http://crl.certigna.com/CertignaServerAuthenticationRootCA.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_path_len_constraint
- has_key_usage
- has_eku
- has_server_auth_eku
- has_client_auth_eku
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_cabf_tls_policy_oid
- cabf_tls_policy_oids
- has_crldp
- has_aia_ca_issuers

### Certigna Server Authentication CA

- Subject: countryName=FR, organizationName=Certigna, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Server Authentication CA
- Issuer: countryName=FR, organizationName=Certigna, commonName=Certigna Server Authentication Root CA
- Serial: 6590AE42E9556D771F63AAF29A72201253F54852
- SHA-256: F5B4F968DB2AE25141F5AB06A8CF521BC0A116FB122B0627FFDD2FB990D8CAD4
- SPKI SHA-256: E80A761FCCF636A69DF4BE796074DABF2F036D279AC6A794F3D41D8118EA45E4
- Validity: 2024-03-13 to 2039-03-12
- Key: RSA 4096
- Signature Algorithm: RSA-SHA384

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: true
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: https://crl.certigna.com/CertignaServerAuthenticationCA.crl
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: 0
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 1.2.250.1.177.6.0.1.1, 2.23.140.1.1, 2.23.140.1.2.1, 2.23.140.1.2.2
- anyPolicy: false
- CABF TLS policy OID: 2.23.140.1.1 CABF EV, 2.23.140.1.2.1 CABF DV, 2.23.140.1.2.2 CABF OV
- CPS qualifier: true
- AIA OCSP: http://ocsp.certigna.com
- CRL DP: http://crl.certigna.com/CertignaServerAuthenticationRootCA.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:90:ae:42:e9:55:6d:77:1f:63:aa:f2:9a:72:20:12:53:f5:48:52
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C = FR, O = Certigna, CN = Certigna Server Authentication Root CA
        Validity
            Not Before: Mar 13 10:16:44 2024 GMT
            Not After : Mar 12 10:16:43 2039 GMT
        Subject: C = FR, O = Certigna, organizationIdentifier = NTRFR-48146308100036, CN = Certigna Server Authentication CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access:
                CA Issuers - URI:http://cert.certigna.com/CertignaServerAuthenticationRootCA.cer
                OCSP - URI:http://ocsp.certigna.com
            X509v3 Authority Key Identifier:
                D6:92:98:E7:9D:1D:AD:E1:E6:0A:4A:96:04:87:6B:EE:FB:29:1A:BA
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies:
                Policy: 1.2.250.1.177.6.0.1.1
                  CPS: http://cps.certigna.com
                Policy: 2.23.140.1.1
                Policy: 2.23.140.1.2.1
                Policy: 2.23.140.1.2.2
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.com/CertignaServerAuthenticationRootCA.crl
            X509v3 Extended Key Usage:
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                C5:4C:78:59:A2:4E:1C:17:5F:F0:A9:E4:19:6F:63:51:A7:C6:01:65
    Signature Algorithm: sha384WithRSAEncryption
    SHA256 Fingerprint: F5B4F968DB2AE25141F5AB06A8CF521BC0A116FB122B0627FFDD2FB990D8CAD4
    SPKI SHA256: E80A761FCCF636A69DF4BE796074DABF2F036D279AC6A794F3D41D8118EA45E4
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":0}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 1.2.250.1.177.6.0.1.1, 2.23.140.1.1, 2.23.140.1.2.1, 2.23.140.1.2.2
- AIA OCSP: http://ocsp.certigna.com
- AIA CA Issuers: http://cert.certigna.com/CertignaServerAuthenticationRootCA.cer
- CRL Distribution Points: http://crl.certigna.com/CertignaServerAuthenticationRootCA.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.


- [historical] error e_ca_multiple_reserved_policy_oids: A Subordinate CA certificate MUST include exactly one Reserved Certificate Policy Identifier
- [historical] error e_ev_organization_id_missing: subject:organizationIdentifier field is present in an EV certificate but the CA/Browser Forum Organization Identifier Field Extension is missing

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_path_len_constraint
- has_key_usage
- has_eku
- has_server_auth_eku
- has_client_auth_eku
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_cabf_tls_policy_oid
- cabf_tls_policy_oids
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### Certigna Server Authentication OVCP CA

- Subject: countryName=FR, organizationName=Certigna, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Server Authentication OVCP CA
- Issuer: countryName=FR, organizationName=Certigna, commonName=Certigna Server Authentication Root CA
- Serial: 1840F7855308EF4CCBF92AFB03652B9C5EA888B4
- SHA-256: E1D1C043DEA7676A4A8F3636E915066CE716723B446D43DE128C3F16887D4593
- SPKI SHA-256: 98643FD7F74606AD6933385BD6FC310A0B869DAC286A1006DBD17B7DC6005ED7
- Validity: 2025-02-28 to 2039-03-12
- Key: RSA 4096
- Signature Algorithm: RSA-SHA384

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: true
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.certigna.com/CertignaServerAuthenticationOVCPCA.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: 0
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.23.140.1.2.2, 1.2.250.1.177.6.0.1.1
- anyPolicy: false
- CABF TLS policy OID: 2.23.140.1.2.2 CABF OV
- CPS qualifier: true
- AIA OCSP: -
- CRL DP: http://crl.certigna.com/CertignaServerAuthenticationRootCA.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:40:f7:85:53:08:ef:4c:cb:f9:2a:fb:03:65:2b:9c:5e:a8:88:b4
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C = FR, O = Certigna, CN = Certigna Server Authentication Root CA
        Validity
            Not Before: Feb 28 09:58:02 2025 GMT
            Not After : Mar 12 09:58:01 2039 GMT
        Subject: C = FR, O = Certigna, organizationIdentifier = NTRFR-48146308100036, CN = Certigna Server Authentication OVCP CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access:
                CA Issuers - URI:http://cert.certigna.com/CertignaServerAuthenticationRootCA.cer
            X509v3 Authority Key Identifier:
                D6:92:98:E7:9D:1D:AD:E1:E6:0A:4A:96:04:87:6B:EE:FB:29:1A:BA
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies:
                Policy: 2.23.140.1.2.2
                Policy: 1.2.250.1.177.6.0.1.1
                  CPS: http://cps.certigna.com
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.com/CertignaServerAuthenticationRootCA.crl
            X509v3 Extended Key Usage:
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                52:77:B5:26:9D:38:E2:AB:5F:32:06:2A:17:7E:86:4B:EB:E3:EF:7F
    Signature Algorithm: sha384WithRSAEncryption
    SHA256 Fingerprint: E1D1C043DEA7676A4A8F3636E915066CE716723B446D43DE128C3F16887D4593
    SPKI SHA256: 98643FD7F74606AD6933385BD6FC310A0B869DAC286A1006DBD17B7DC6005ED7
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":0}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.23.140.1.2.2, 1.2.250.1.177.6.0.1.1
- AIA OCSP: -
- AIA CA Issuers: http://cert.certigna.com/CertignaServerAuthenticationRootCA.cer
- CRL Distribution Points: http://crl.certigna.com/CertignaServerAuthenticationRootCA.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_path_len_constraint
- has_key_usage
- has_eku
- has_server_auth_eku
- has_client_auth_eku
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_cabf_tls_policy_oid
- cabf_tls_policy_oids
- has_crldp
- has_aia_ca_issuers

### Certigna Server Authentication OVCP CA G1

- Subject: countryName=FR, organizationName=Certigna, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Server Authentication OVCP CA G1
- Issuer: countryName=FR, organizationName=Dhimyotis, commonName=Certigna
- Serial: 28EB7E430DE722586CEEB7F73076460747606575
- SHA-256: 0A67E28F7167457C8F14D2C95F8A280ABF42FA433910679891E47BAF9CE756C6
- SPKI SHA-256: C9BC86DE632BA44216203967F45D4342C3EB1750C5896F82FD087F57DBD7FA64
- Validity: 2025-02-28 to 2027-06-28
- Key: RSA 4096
- Signature Algorithm: RSA-SHA384

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: true
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.certigna.com/CertignaServerAuthenticationOVCPCAG1.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Not Trusted","microsoft":"Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: 0
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.23.140.1.2.2, 1.2.250.1.177.1.0.1.2
- anyPolicy: false
- CABF TLS policy OID: 2.23.140.1.2.2 CABF OV
- CPS qualifier: true
- AIA OCSP: -
- CRL DP: http://crl.certigna.com/Certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:eb:7e:43:0d:e7:22:58:6c:ee:b7:f7:30:76:46:07:47:60:65:75
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, CN = Certigna
        Validity
            Not Before: Feb 28 09:49:03 2025 GMT
            Not After : Jun 28 09:49:02 2027 GMT
        Subject: C = FR, O = Certigna, organizationIdentifier = NTRFR-48146308100036, CN = Certigna Server Authentication OVCP CA G1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access:
                CA Issuers - URI:http://cert.certigna.com/Certigna.cer
            X509v3 Authority Key Identifier:
                1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies:
                Policy: 2.23.140.1.2.2
                Policy: 1.2.250.1.177.1.0.1.2
                  CPS: http://cps.certigna.com
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.com/Certigna.crl
            X509v3 Extended Key Usage:
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                29:1C:98:0B:81:CB:29:F3:F9:6D:9B:0A:31:55:DE:E4:2A:40:84:F3
    Signature Algorithm: sha384WithRSAEncryption
    SHA256 Fingerprint: 0A67E28F7167457C8F14D2C95F8A280ABF42FA433910679891E47BAF9CE756C6
    SPKI SHA256: C9BC86DE632BA44216203967F45D4342C3EB1750C5896F82FD087F57DBD7FA64
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":0}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.23.140.1.2.2, 1.2.250.1.177.1.0.1.2
- AIA OCSP: -
- AIA CA Issuers: http://cert.certigna.com/Certigna.cer
- CRL Distribution Points: http://crl.certigna.com/Certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_path_len_constraint
- has_key_usage
- has_eku
- has_server_auth_eku
- has_client_auth_eku
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_cabf_tls_policy_oid
- cabf_tls_policy_oids
- has_crldp
- has_aia_ca_issuers
- expires_within_398_days

### Certigna Server Authentication OVCP EU CA

- Subject: countryName=FR, organizationName=Certigna, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Server Authentication OVCP EU CA
- Issuer: countryName=FR, organizationName=Certigna, commonName=Certigna Server Authentication EU Root CA
- Serial: 761E1FD0794D123527FF2BA1FDF2A998ECF83C8B
- SHA-256: 0D05B192695CDDA3B1ACC1F360749FF42C2E93C7FFEF69158F67229EA2095109
- SPKI SHA-256: 2A08587289CBC85A7935CDE0574AC61C718F68E17CA7FDAEB16779FBB8703BD5
- Validity: 2025-02-28 to 2040-02-27
- Key: RSA 4096
- Signature Algorithm: RSA-SHA384

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://cps.certigna.com/PCCertignaTLSCA.md
- CP/CPS same as parent: true
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.certigna.com/CertignaServerAuthenticationOVCPEUCA.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: 0
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.23.140.1.2.2, 1.2.250.1.177.14.0.1.1
- anyPolicy: false
- CABF TLS policy OID: 2.23.140.1.2.2 CABF OV
- CPS qualifier: true
- AIA OCSP: -
- CRL DP: http://crl.certigna.com/CertignaServerAuthenticationEURootCA.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:1e:1f:d0:79:4d:12:35:27:ff:2b:a1:fd:f2:a9:98:ec:f8:3c:8b
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C = FR, O = Certigna, CN = Certigna Server Authentication EU Root CA
        Validity
            Not Before: Feb 28 09:49:11 2025 GMT
            Not After : Feb 27 09:49:10 2040 GMT
        Subject: C = FR, O = Certigna, organizationIdentifier = NTRFR-48146308100036, CN = Certigna Server Authentication OVCP EU CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access:
                CA Issuers - URI:http://cert.certigna.com/CertignaServerAuthenticationEURootCA.cer
            X509v3 Authority Key Identifier:
                37:0B:6A:1C:32:83:6A:A8:35:F2:A6:D9:1C:EA:59:5B:11:88:31:90
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies:
                Policy: 2.23.140.1.2.2
                Policy: 1.2.250.1.177.14.0.1.1
                  CPS: http://cps.certigna.com
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.com/CertignaServerAuthenticationEURootCA.crl
            X509v3 Extended Key Usage:
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                7E:69:19:04:F6:12:61:23:2D:6A:E5:63:2D:C0:27:D0:65:63:8E:1E
    Signature Algorithm: sha384WithRSAEncryption
    SHA256 Fingerprint: 0D05B192695CDDA3B1ACC1F360749FF42C2E93C7FFEF69158F67229EA2095109
    SPKI SHA256: 2A08587289CBC85A7935CDE0574AC61C718F68E17CA7FDAEB16779FBB8703BD5
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":0}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.23.140.1.2.2, 1.2.250.1.177.14.0.1.1
- AIA OCSP: -
- AIA CA Issuers: http://cert.certigna.com/CertignaServerAuthenticationEURootCA.cer
- CRL Distribution Points: http://crl.certigna.com/CertignaServerAuthenticationEURootCA.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_path_len_constraint
- has_key_usage
- has_eku
- has_server_auth_eku
- has_client_auth_eku
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_cabf_tls_policy_oid
- cabf_tls_policy_oids
- has_crldp
- has_aia_ca_issuers

### Certigna Server Authentication OVCP EU CA G1

- Subject: countryName=FR, organizationName=Certigna, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Server Authentication OVCP EU CA G1
- Issuer: countryName=FR, organizationName=Dhimyotis, commonName=Certigna
- Serial: 642FE71C5DA9A2EA8E64409CF496337A18D6DE40
- SHA-256: 1A209DB499625B4EA29F597BE7744BA1E240B8C7629F75B41A3373339FD7EDDF
- SPKI SHA-256: E4903BEB18456A476F1C7968D87E45A82DC8C5FE471AB2EAE9890D9FB24331E5
- Validity: 2025-02-28 to 2027-06-28
- Key: RSA 4096
- Signature Algorithm: RSA-SHA384

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: true
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.certigna.com/CertignaServerAuthenticationOVCPEUCAG1.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Not Trusted","microsoft":"Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: 0
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.23.140.1.2.2, 1.2.250.1.177.1.0.1.2
- anyPolicy: false
- CABF TLS policy OID: 2.23.140.1.2.2 CABF OV
- CPS qualifier: true
- AIA OCSP: -
- CRL DP: http://crl.certigna.com/Certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:2f:e7:1c:5d:a9:a2:ea:8e:64:40:9c:f4:96:33:7a:18:d6:de:40
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, CN = Certigna
        Validity
            Not Before: Feb 28 09:49:04 2025 GMT
            Not After : Jun 28 09:49:03 2027 GMT
        Subject: C = FR, O = Certigna, organizationIdentifier = NTRFR-48146308100036, CN = Certigna Server Authentication OVCP EU CA G1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access:
                CA Issuers - URI:http://cert.certigna.com/Certigna.cer
            X509v3 Authority Key Identifier:
                1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies:
                Policy: 2.23.140.1.2.2
                Policy: 1.2.250.1.177.1.0.1.2
                  CPS: http://cps.certigna.com
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.com/Certigna.crl
            X509v3 Extended Key Usage:
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                A0:72:E6:46:C4:30:5C:E4:AD:C2:1C:C2:D5:62:38:98:81:5A:54:A6
    Signature Algorithm: sha384WithRSAEncryption
    SHA256 Fingerprint: 1A209DB499625B4EA29F597BE7744BA1E240B8C7629F75B41A3373339FD7EDDF
    SPKI SHA256: E4903BEB18456A476F1C7968D87E45A82DC8C5FE471AB2EAE9890D9FB24331E5
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":0}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.23.140.1.2.2, 1.2.250.1.177.1.0.1.2
- AIA OCSP: -
- AIA CA Issuers: http://cert.certigna.com/Certigna.cer
- CRL Distribution Points: http://crl.certigna.com/Certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_path_len_constraint
- has_key_usage
- has_eku
- has_server_auth_eku
- has_client_auth_eku
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_cabf_tls_policy_oid
- cabf_tls_policy_oids
- has_crldp
- has_aia_ca_issuers
- expires_within_398_days

### Certigna Server Authentication QCP CA

- Subject: countryName=FR, organizationName=Certigna, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Server Authentication QCP CA
- Issuer: countryName=FR, organizationName=Certigna, commonName=Certigna Server Authentication Root CA
- Serial: 2F2F558E5C5855D2E9C28979AA15819BAC2921A3
- SHA-256: 4BE7ACA4F318C52FEA84B2ED7FB08E45C425C7DE9AD7C2E775DD0CCD9F8DD0E2
- SPKI SHA-256: 6920359CDCDD1A8EB9AA1D3A4B4336B694BABE8B8D0089126B4495AB070B1EE6
- Validity: 2025-02-28 to 2039-03-12
- Key: RSA 4096
- Signature Algorithm: RSA-SHA384

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: true
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.certigna.com/CertignaServerAuthenticationQCPCA.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: 0
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.23.140.1.2.2, 1.2.250.1.177.6.0.1.1
- anyPolicy: false
- CABF TLS policy OID: 2.23.140.1.2.2 CABF OV
- CPS qualifier: true
- AIA OCSP: -
- CRL DP: http://crl.certigna.com/CertignaServerAuthenticationRootCA.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:2f:55:8e:5c:58:55:d2:e9:c2:89:79:aa:15:81:9b:ac:29:21:a3
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C = FR, O = Certigna, CN = Certigna Server Authentication Root CA
        Validity
            Not Before: Feb 28 09:58:04 2025 GMT
            Not After : Mar 12 09:58:03 2039 GMT
        Subject: C = FR, O = Certigna, organizationIdentifier = NTRFR-48146308100036, CN = Certigna Server Authentication QCP CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access:
                CA Issuers - URI:http://cert.certigna.com/CertignaServerAuthenticationRootCA.cer
            X509v3 Authority Key Identifier:
                D6:92:98:E7:9D:1D:AD:E1:E6:0A:4A:96:04:87:6B:EE:FB:29:1A:BA
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies:
                Policy: 2.23.140.1.2.2
                Policy: 1.2.250.1.177.6.0.1.1
                  CPS: http://cps.certigna.com
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.com/CertignaServerAuthenticationRootCA.crl
            X509v3 Extended Key Usage:
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                75:32:52:F9:DA:8D:AD:4F:51:C9:32:B8:C3:5F:1F:64:4B:30:E3:03
    Signature Algorithm: sha384WithRSAEncryption
    SHA256 Fingerprint: 4BE7ACA4F318C52FEA84B2ED7FB08E45C425C7DE9AD7C2E775DD0CCD9F8DD0E2
    SPKI SHA256: 6920359CDCDD1A8EB9AA1D3A4B4336B694BABE8B8D0089126B4495AB070B1EE6
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":0}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.23.140.1.2.2, 1.2.250.1.177.6.0.1.1
- AIA OCSP: -
- AIA CA Issuers: http://cert.certigna.com/CertignaServerAuthenticationRootCA.cer
- CRL Distribution Points: http://crl.certigna.com/CertignaServerAuthenticationRootCA.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_path_len_constraint
- has_key_usage
- has_eku
- has_server_auth_eku
- has_client_auth_eku
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_cabf_tls_policy_oid
- cabf_tls_policy_oids
- has_crldp
- has_aia_ca_issuers

### Certigna Serveur Client

- Subject: countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 481463081, commonName=Certigna Serveur Client, serialNumber=31
- Issuer: countryName=FR, organizationName=Dhimyotis, commonName=Certigna
- Serial: 1F
- SHA-256: 7CFEFB8F6107533C5EBD66A61CA515B6239B1B0B2C957FE82C6BC2D3BD973195
- SPKI SHA-256: BB168187A610039CF9C31D4D2293C602779F4616675AA628B373B9CED27C0257
- Validity: 2009-11-02 to 2019-10-31
- Key: RSA 2048
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: http://politique.certigna.fr/PCcertignaserveurclient.pdf
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: -
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.1.0.1.1
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: -
- CRL DP: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, CN = Certigna
        Validity
            Not Before: Nov  2 11:39:28 2009 GMT
            Not After : Oct 31 11:39:28 2019 GMT
        Subject: C = FR, O = Dhimyotis, OU = 0002 481463081, CN = Certigna Serveur Client, serialNumber = 31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies:
                Policy: 1.2.250.1.177.1.0.1.1
            X509v3 Subject Key Identifier:
                39:BF:7B:11:0B:DF:30:E2:43:7B:6B:47:54:68:DB:A4:F9:09:AD:24
            X509v3 Authority Key Identifier:
                keyid:1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11
                DirName:/C=FR/O=Dhimyotis/CN=Certigna
                serial:FE:DC:E3:01:0F:C9:48:FF
            Netscape CA Revocation Url:
                http://crl.certigna.fr/certigna.crl
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.fr/certigna.crl
                Full Name:
                  URI:http://crl.dhimyotis.com/certigna.crl
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 7CFEFB8F6107533C5EBD66A61CA515B6239B1B0B2C957FE82C6BC2D3BD973195
    SPKI SHA256: BB168187A610039CF9C31D4D2293C602779F4616675AA628B373B9CED27C0257
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.1.0.1.1
- AIA OCSP: -
- AIA CA Issuers: -
- CRL Distribution Points: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_http_urls
- has_crldp
- is_expired

### Certigna Services CA

- Subject: countryName=FR, organizationName=DHIMYOTIS, organizationalUnitName=0002 48146308100036, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Services CA
- Issuer: countryName=FR, organizationName=Dhimyotis, commonName=Certigna
- Serial: 6F82FA28ACD6F784BB5B120BA87367AD
- SHA-256: 71E653BFBF5E72515B4099BBD5EC8872812B47C6EC1FA9ADD327E1C92C9EA16D
- SPKI SHA-256: 56FCAF838F9B3846C8E9A3BB2B6F22A15B147DC90BA8248AAA522A653101FEE1
- Validity: 2015-11-25 to 2025-11-22
- Key: RSA 4096
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: true
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.certigna.fr/servicesca.crl, http://crl.dhimyotis.com/servicesca.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: false
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: 0
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.1.0.1.2
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: -
- CRL DP: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:82:fa:28:ac:d6:f7:84:bb:5b:12:0b:a8:73:67:ad
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, CN = Certigna
        Validity
            Not Before: Nov 25 11:33:52 2015 GMT
            Not After : Nov 22 11:33:52 2025 GMT
        Subject: C = FR, O = DHIMYOTIS, OU = 0002 48146308100036, organizationIdentifier = NTRFR-48146308100036, CN = Certigna Services CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                AC:EC:86:8F:4B:37:1C:B8:7F:17:1B:19:D0:AE:E8:4E:E3:34:5C:12
            X509v3 Authority Key Identifier:
                keyid:1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11
                DirName:/C=FR/O=Dhimyotis/CN=Certigna
                serial:FE:DC:E3:01:0F:C9:48:FF
            X509v3 Certificate Policies:
                Policy: 1.2.250.1.177.1.0.1.2
                  CPS: https://www.certigna.fr/autorites/
            Authority Information Access:
                CA Issuers - URI:http://autorite.certigna.fr/certigna.der
                CA Issuers - URI:http://autorite.dhimyotis.com/certigna.der
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.fr/certigna.crl
                Full Name:
                  URI:http://crl.dhimyotis.com/certigna.crl
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 71E653BFBF5E72515B4099BBD5EC8872812B47C6EC1FA9ADD327E1C92C9EA16D
    SPKI SHA256: 56FCAF838F9B3846C8E9A3BB2B6F22A15B147DC90BA8248AAA522A653101FEE1
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":0}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.1.0.1.2
- AIA OCSP: -
- AIA CA Issuers: http://autorite.certigna.fr/certigna.der, http://autorite.dhimyotis.com/certigna.der
- CRL Distribution Points: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.


- [historical] error e_mp_authority_key_identifier_correct: 

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_path_len_constraint
- has_key_usage
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_aia_ca_issuers
- is_expired

### Certigna Services CA

- Subject: countryName=FR, organizationName=DHIMYOTIS, organizationalUnitName=0002 48146308100036, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Services CA
- Issuer: countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 48146308100036, commonName=Certigna Root CA
- Serial: FD30CF04344FC38DD90C4E70753D0623
- SHA-256: 07F2CE55CA1AA6CB992719B1E423C1D02C1EA759A6E2EAB4E150C88282E22550
- SPKI SHA-256: 56FCAF838F9B3846C8E9A3BB2B6F22A15B147DC90BA8248AAA522A653101FEE1
- Validity: 2015-11-25 to 2033-06-03
- Key: RSA 4096
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: true
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.certigna.fr/servicesca.crl, http://crl.dhimyotis.com/servicesca.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: 0
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.2.0.1.1
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: -
- CRL DP: http://crl.certigna.fr/certignarootca.crl, http://crl.dhimyotis.com/certignarootca.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            fd:30:cf:04:34:4f:c3:8d:d9:0c:4e:70:75:3d:06:23
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, OU = 0002 48146308100036, CN = Certigna Root CA
        Validity
            Not Before: Nov 25 11:37:21 2015 GMT
            Not After : Jun  3 11:37:21 2033 GMT
        Subject: C = FR, O = DHIMYOTIS, OU = 0002 48146308100036, organizationIdentifier = NTRFR-48146308100036, CN = Certigna Services CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                AC:EC:86:8F:4B:37:1C:B8:7F:17:1B:19:D0:AE:E8:4E:E3:34:5C:12
            X509v3 Authority Key Identifier:
                18:87:56:E0:6E:77:EE:24:35:3C:4E:73:9A:1F:D6:E1:E2:79:7E:2B
            X509v3 Certificate Policies:
                Policy: 1.2.250.1.177.2.0.1.1
                  CPS: https://www.certigna.fr/autorites/
            Authority Information Access:
                CA Issuers - URI:http://autorite.certigna.fr/certignarootca.der
                CA Issuers - URI:http://autorite.dhimyotis.com/certignarootca.der
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.fr/certignarootca.crl
                Full Name:
                  URI:http://crl.dhimyotis.com/certignarootca.crl
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 07F2CE55CA1AA6CB992719B1E423C1D02C1EA759A6E2EAB4E150C88282E22550
    SPKI SHA256: 56FCAF838F9B3846C8E9A3BB2B6F22A15B147DC90BA8248AAA522A653101FEE1
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":0}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.2.0.1.1
- AIA OCSP: -
- AIA CA Issuers: http://autorite.certigna.fr/certignarootca.der, http://autorite.dhimyotis.com/certignarootca.der
- CRL Distribution Points: http://crl.certigna.fr/certignarootca.crl, http://crl.dhimyotis.com/certignarootca.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_path_len_constraint
- has_key_usage
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_aia_ca_issuers

### Certigna SSL

- Subject: countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 481463081, commonName=Certigna SSL, serialNumber=3
- Issuer: countryName=FR, organizationName=Dhimyotis, commonName=Certigna
- Serial: 03
- SHA-256: D29C2E677DD4F9D1847C3E8CC778D8CCAEB234EE56BCD022041503993EA2B600
- SPKI SHA-256: E80C5F2095BA2B87DE9F088AA6AC06C1BFBBB07FD20547FA43A5DCFAA968A1B4
- Validity: 2007-07-03 to 2017-07-03
- Key: RSA 2048
- Signature Algorithm: RSA-SHA1

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: true
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: -
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: -
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: -
- CRL DP: http://www.certigna.fr/crl/certigna.crl, http://www.dhimyotis.com/crl/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, CN = Certigna
        Validity
            Not Before: Jul  3 07:52:15 2007 GMT
            Not After : Jul  3 07:52:15 2017 GMT
        Subject: C = FR, O = Dhimyotis, OU = 0002 481463081, CN = Certigna SSL, serialNumber = 3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Netscape Cert Type:
                SSL CA
            X509v3 Subject Key Identifier:
                7D:63:78:02:CA:4F:56:30:1A:0B:03:CB:91:5F:0E:3B:C8:AE:4C:B8
            X509v3 Authority Key Identifier:
                keyid:1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11
                DirName:/C=FR/O=Dhimyotis/CN=Certigna
                serial:FE:DC:E3:01:0F:C9:48:FF
            Netscape CA Revocation Url:
                http://www.certigna.fr/crl/certigna.crl
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://www.certigna.fr/crl/certigna.crl
                Full Name:
                  URI:http://www.dhimyotis.com/crl/certigna.crl
    Signature Algorithm: sha1WithRSAEncryption
    SHA256 Fingerprint: D29C2E677DD4F9D1847C3E8CC778D8CCAEB234EE56BCD022041503993EA2B600
    SPKI SHA256: E80C5F2095BA2B87DE9F088AA6AC06C1BFBBB07FD20547FA43A5DCFAA968A1B4
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: -
- AIA OCSP: -
- AIA CA Issuers: -
- CRL Distribution Points: http://www.certigna.fr/crl/certigna.crl, http://www.dhimyotis.com/crl/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_http_urls
- has_crldp
- is_expired

### Certigna SSL PRIS

- Subject: countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 481463081, commonName=Certigna SSL PRIS, serialNumber=7
- Issuer: countryName=FR, organizationName=Dhimyotis, commonName=Certigna
- Serial: 07
- SHA-256: 69ED7F333236C9371DFEB2DA5343D6E1AA11783FF872E2D97C7C4274FEE09E9A
- SPKI SHA-256: 833DC1B012572493F5B91A9455934CD40BDD2C514D316BE9392E837F52252EAA
- Validity: 2008-06-20 to 2018-06-20
- Key: RSA 2048
- Signature Algorithm: RSA-SHA1

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: true
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: -
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: -
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: -
- CRL DP: http://www.certigna.fr/crl/certigna.crl, http://www.dhimyotis.com/crl/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, CN = Certigna
        Validity
            Not Before: Jun 20 07:57:20 2008 GMT
            Not After : Jun 20 07:57:20 2018 GMT
        Subject: C = FR, O = Dhimyotis, OU = 0002 481463081, CN = Certigna SSL PRIS, serialNumber = 7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Netscape Cert Type:
                SSL CA
            X509v3 Subject Key Identifier:
                CE:9E:AC:1F:9B:E3:61:F6:C6:6A:52:F0:19:C2:F0:5D:89:F0:1B:4A
            X509v3 Authority Key Identifier:
                keyid:1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11
                DirName:/C=FR/O=Dhimyotis/CN=Certigna
                serial:FE:DC:E3:01:0F:C9:48:FF
            Netscape CA Revocation Url:
                http://www.certigna.fr/crl/certigna.crl
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://www.certigna.fr/crl/certigna.crl
                Full Name:
                  URI:http://www.dhimyotis.com/crl/certigna.crl
    Signature Algorithm: sha1WithRSAEncryption
    SHA256 Fingerprint: 69ED7F333236C9371DFEB2DA5343D6E1AA11783FF872E2D97C7C4274FEE09E9A
    SPKI SHA256: 833DC1B012572493F5B91A9455934CD40BDD2C514D316BE9392E837F52252EAA
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: -
- AIA OCSP: -
- AIA CA Issuers: -
- CRL Distribution Points: http://www.certigna.fr/crl/certigna.crl, http://www.dhimyotis.com/crl/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_http_urls
- has_crldp
- is_expired

### Certigna SSL PRIS

- Subject: countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 481463081, commonName=Certigna SSL PRIS, serialNumber=25
- Issuer: countryName=FR, organizationName=Dhimyotis, commonName=Certigna
- Serial: 19
- SHA-256: 35A90DEB8BF4BD7C23BDE61E065B6EBED236172F342D8F29C65D97F3EC0E10E4
- SPKI SHA-256: B1083B84D532E5AF5BA2FFD7EB6B33536CF784CB5E1BE57FC31A3D2825C6AA69
- Validity: 2008-11-19 to 2018-11-17
- Key: RSA 2048
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: http://politique.certigna.fr/PCcertignasslpris.pdf
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: -
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: false
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.1.0.1.1
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: -
- CRL DP: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, CN = Certigna
        Validity
            Not Before: Nov 19 13:52:32 2008 GMT
            Not After : Nov 17 13:52:32 2018 GMT
        Subject: C = FR, O = Dhimyotis, OU = 0002 481463081, CN = Certigna SSL PRIS, serialNumber = 25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Netscape Cert Type:
                SSL CA
            X509v3 Certificate Policies:
                Policy: 1.2.250.1.177.1.0.1.1
            X509v3 Subject Key Identifier:
                93:CD:26:DC:DA:AB:25:8F:06:20:A7:D7:F1:D2:03:AB:FF:AE:40:6B
            X509v3 Authority Key Identifier:
                keyid:1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11
                DirName:/C=FR/O=Dhimyotis/CN=Certigna
                serial:FE:DC:E3:01:0F:C9:48:FF
            Netscape CA Revocation Url:
                http://crl.certigna.fr/certigna.crl
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.fr/certigna.crl
                Full Name:
                  URI:http://crl.dhimyotis.com/certigna.crl
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 35A90DEB8BF4BD7C23BDE61E065B6EBED236172F342D8F29C65D97F3EC0E10E4
    SPKI SHA256: B1083B84D532E5AF5BA2FFD7EB6B33536CF784CB5E1BE57FC31A3D2825C6AA69
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.1.0.1.1
- AIA OCSP: -
- AIA CA Issuers: -
- CRL Distribution Points: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_http_urls
- has_crldp
- is_expired

### Certigna Wild CA

- Subject: countryName=FR, organizationName=DHIMYOTIS, organizationalUnitName=0002 48146308100036, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Wild CA
- Issuer: countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 48146308100036, commonName=Certigna Root CA
- Serial: E372E91B19B6FC27E1C4318CC68D09EB
- SHA-256: B8D5D65C23FF9D8C902FFE6BEC1DD2F20693AF20E98AE47751F1ECB298127B6E
- SPKI SHA-256: E8FB011F657ABF153FC3A0E74B2638129A9061E17C42B620A2163E7D631F8661
- Validity: 2015-11-25 to 2033-06-03
- Key: RSA 4096
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: true
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.certigna.fr/wildca.crl, http://crl.dhimyotis.com/wildca.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: 0
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.2.0.1.1
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: -
- CRL DP: http://crl.certigna.fr/certignarootca.crl, http://crl.dhimyotis.com/certignarootca.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            e3:72:e9:1b:19:b6:fc:27:e1:c4:31:8c:c6:8d:09:eb
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, OU = 0002 48146308100036, CN = Certigna Root CA
        Validity
            Not Before: Nov 25 11:10:00 2015 GMT
            Not After : Jun  3 11:10:00 2033 GMT
        Subject: C = FR, O = DHIMYOTIS, OU = 0002 48146308100036, organizationIdentifier = NTRFR-48146308100036, CN = Certigna Wild CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                8E:7C:17:B7:BC:F7:C3:B4:98:D6:B6:35:99:22:2A:C4:C3:9E:24:67
            X509v3 Authority Key Identifier:
                18:87:56:E0:6E:77:EE:24:35:3C:4E:73:9A:1F:D6:E1:E2:79:7E:2B
            X509v3 Certificate Policies:
                Policy: 1.2.250.1.177.2.0.1.1
                  CPS: https://www.certigna.fr/autorites/
            Authority Information Access:
                CA Issuers - URI:http://autorite.certigna.fr/certignarootca.der
                CA Issuers - URI:http://autorite.dhimyotis.com/certignarootca.der
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.fr/certignarootca.crl
                Full Name:
                  URI:http://crl.dhimyotis.com/certignarootca.crl
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: B8D5D65C23FF9D8C902FFE6BEC1DD2F20693AF20E98AE47751F1ECB298127B6E
    SPKI SHA256: E8FB011F657ABF153FC3A0E74B2638129A9061E17C42B620A2163E7D631F8661
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":0}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.2.0.1.1
- AIA OCSP: -
- AIA CA Issuers: http://autorite.certigna.fr/certignarootca.der, http://autorite.dhimyotis.com/certignarootca.der
- CRL Distribution Points: http://crl.certigna.fr/certignarootca.crl, http://crl.dhimyotis.com/certignarootca.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_path_len_constraint
- has_key_usage
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_aia_ca_issuers

### Certigna Wild CA

- Subject: countryName=FR, organizationName=DHIMYOTIS, organizationalUnitName=0002 48146308100036, organizationIdentifier=NTRFR-48146308100036, commonName=Certigna Wild CA
- Issuer: countryName=FR, organizationName=Dhimyotis, commonName=Certigna
- Serial: AB078DEEDDDAC72305F5ED8C5084F895
- SHA-256: 211F3083B9E77A01D0828565897A1CE945EEAAE04942CCC369087D8080C9E4A6
- SPKI SHA-256: E8FB011F657ABF153FC3A0E74B2638129A9061E17C42B620A2163E7D631F8661
- Validity: 2015-11-25 to 2025-11-22
- Key: RSA 4096
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: true
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.certigna.fr/wildca.crl, http://crl.dhimyotis.com/wildca.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: false
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: 0
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.1.0.1.2
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: -
- CRL DP: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ab:07:8d:ee:dd:da:c7:23:05:f5:ed:8c:50:84:f8:95
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, CN = Certigna
        Validity
            Not Before: Nov 25 11:06:35 2015 GMT
            Not After : Nov 22 11:06:35 2025 GMT
        Subject: C = FR, O = DHIMYOTIS, OU = 0002 48146308100036, organizationIdentifier = NTRFR-48146308100036, CN = Certigna Wild CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                8E:7C:17:B7:BC:F7:C3:B4:98:D6:B6:35:99:22:2A:C4:C3:9E:24:67
            X509v3 Authority Key Identifier:
                keyid:1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11
                DirName:/C=FR/O=Dhimyotis/CN=Certigna
                serial:FE:DC:E3:01:0F:C9:48:FF
            X509v3 Certificate Policies:
                Policy: 1.2.250.1.177.1.0.1.2
                  CPS: https://www.certigna.fr/autorites/
            Authority Information Access:
                CA Issuers - URI:http://autorite.certigna.fr/certigna.der
                CA Issuers - URI:http://autorite.dhimyotis.com/certigna.der
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.fr/certigna.crl
                Full Name:
                  URI:http://crl.dhimyotis.com/certigna.crl
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 211F3083B9E77A01D0828565897A1CE945EEAAE04942CCC369087D8080C9E4A6
    SPKI SHA256: E8FB011F657ABF153FC3A0E74B2638129A9061E17C42B620A2163E7D631F8661
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":0}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.1.0.1.2
- AIA OCSP: -
- AIA CA Issuers: http://autorite.certigna.fr/certigna.der, http://autorite.dhimyotis.com/certigna.der
- CRL Distribution Points: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.


- [historical] error e_mp_authority_key_identifier_correct: 

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_path_len_constraint
- has_key_usage
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_aia_ca_issuers
- is_expired

### Dova SAN

- Subject: countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 481463081, commonName=Dova SAN, serialNumber=34
- Issuer: countryName=FR, organizationName=Dhimyotis, commonName=Certigna
- Serial: 22
- SHA-256: F2BFD57E835695FE35E6EF129D99A81B6C9DFA9646ACE222423077CE1D3BAC78
- SPKI SHA-256: 481595F0E3631C4DC1B69202AFF7CB65F365CDA303E4B89C0661FAA9412CE012
- Validity: 2010-05-11 to 2020-05-08
- Key: RSA 2048
- Signature Algorithm: RSA-SHA1

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: true
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: -
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: -
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: -
- CRL DP: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, CN = Certigna
        Validity
            Not Before: May 11 13:04:29 2010 GMT
            Not After : May  8 13:04:29 2020 GMT
        Subject: C = FR, O = Dhimyotis, OU = 0002 481463081, CN = Dova SAN, serialNumber = 34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Netscape Cert Type:
                SSL CA
            X509v3 Subject Key Identifier:
                D4:F7:C5:E8:E5:72:3F:B2:43:A0:A0:19:07:BF:DB:92:FA:C8:CA:0F
            X509v3 Authority Key Identifier:
                keyid:1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11
                DirName:/C=FR/O=Dhimyotis/CN=Certigna
                serial:FE:DC:E3:01:0F:C9:48:FF
            Netscape CA Revocation Url:
                http://crl.certigna.fr/certigna.crl
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.fr/certigna.crl
                Full Name:
                  URI:http://crl.dhimyotis.com/certigna.crl
    Signature Algorithm: sha1WithRSAEncryption
    SHA256 Fingerprint: F2BFD57E835695FE35E6EF129D99A81B6C9DFA9646ACE222423077CE1D3BAC78
    SPKI SHA256: 481595F0E3631C4DC1B69202AFF7CB65F365CDA303E4B89C0661FAA9412CE012
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: -
- AIA OCSP: -
- AIA CA Issuers: -
- CRL Distribution Points: http://crl.certigna.fr/certigna.crl, http://crl.dhimyotis.com/certigna.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_http_urls
- has_crldp
- is_expired

### FR03

- Subject: countryName=FR, organizationName=DHIMYOTIS, organizationalUnitName=0002 48146308100036, commonName=FR03
- Issuer: countryName=FR, organizationName=Dhimyotis, organizationalUnitName=0002 48146308100036, commonName=Certigna Root CA
- Serial: 889C41F0BEB4313F330F9E2EDB8271EC
- SHA-256: 080E7E36B3C7FA96ECC67DB7F4D41CECE1D194401AF196A4A47B79BDC4970574
- SPKI SHA-256: E5A5CE7AEDA47050F88116A320BA200789C3CCDC7ED19B0697F559249E0171C9
- Validity: 2015-02-20 to 2033-02-15
- Key: RSA 4096
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://cps.certigna.com/DPCCertignaMultipurposeCA.pdf
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.certigna.fr/2ddoc.crl, http://crl.dhimyotis.com/2ddoc.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: 0
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.2.0.1.1
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: -
- CRL DP: http://crl.certigna.fr/certignarootca.crl, http://crl.dhimyotis.com/certignarootca.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            88:9c:41:f0:be:b4:31:3f:33:0f:9e:2e:db:82:71:ec
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = FR, O = Dhimyotis, OU = 0002 48146308100036, CN = Certigna Root CA
        Validity
            Not Before: Feb 20 10:24:45 2015 GMT
            Not After : Feb 15 10:24:45 2033 GMT
        Subject: C = FR, O = DHIMYOTIS, OU = 0002 48146308100036, CN = FR03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                4D:83:84:50:D0:7D:A3:DE:E0:02:96:46:28:A5:F7:46:A1:AD:28:7A
            X509v3 Authority Key Identifier:
                18:87:56:E0:6E:77:EE:24:35:3C:4E:73:9A:1F:D6:E1:E2:79:7E:2B
            X509v3 Certificate Policies:
                Policy: 1.2.250.1.177.2.0.1.1
                  CPS: https://www.certigna.fr/autorites/
            Authority Information Access:
                CA Issuers - URI:http://autorite.certigna.fr/certignarootca.crt
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.certigna.fr/certignarootca.crl
                Full Name:
                  URI:http://crl.dhimyotis.com/certignarootca.crl
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 080E7E36B3C7FA96ECC67DB7F4D41CECE1D194401AF196A4A47B79BDC4970574
    SPKI SHA256: E5A5CE7AEDA47050F88116A320BA200789C3CCDC7ED19B0697F559249E0171C9
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":0}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.2.250.1.177.2.0.1.1
- AIA OCSP: -
- AIA CA Issuers: http://autorite.certigna.fr/certignarootca.crt
- CRL Distribution Points: http://crl.certigna.fr/certignarootca.crl, http://crl.dhimyotis.com/certignarootca.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_path_len_constraint
- has_key_usage
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_aia_ca_issuers
