Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:24:d1:99:8b:29:88:41:42:8c:10:49:73:57:29:9d
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA
        Validity
            Not Before: Mar 28 00:00:00 2017 GMT
            Not After : Apr  1 12:00:00 2020 GMT
        Subject: C=FR, ST=FR, L=Paris, O=Biblioth\xC3\xA8que Nationale de France, OU=Ile de France, CN=sentry.bnf.fr
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:82:60:9e:33:18:81:58:e1:dc:91:9f:ee:c4:a9:
                    94:b2:97:bb:a0:8c:8e:20:c4:e6:cd:b0:7a:36:08:
                    4a:65:e6:3f:d4:95:e3:41:7a:6d:2c:a1:1c:7a:06:
                    4d:78:85:10:1a:39:aa:e0:79:4b:3a:64:4c:b3:a6:
                    91:62:3f:a6:05:8e:e3:30:ce:e4:37:5d:71:fd:8d:
                    3f:22:67:97:1e:7c:7a:bd:e8:f6:33:3f:3b:b3:a4:
                    bf:b0:80:44:e3:bc:54:ac:94:14:be:ab:fe:bf:7f:
                    b2:85:e9:56:67:50:11:42:e5:03:2b:a8:52:8e:af:
                    64:61:00:eb:b8:cd:bc:a2:a3:29:49:ea:e9:5a:4d:
                    4c:e5:1f:b3:a0:84:cf:76:7e:d0:c3:63:39:dd:d1:
                    08:42:d0:7a:ef:18:23:22:75:e9:e9:c8:7d:af:35:
                    dc:1b:e5:10:95:4e:38:8b:bd:d8:1e:4a:b9:da:f3:
                    63:1b:f9:1b:70:2b:2a:fe:24:c0:12:d1:bd:bd:2c:
                    fd:c6:5e:da:e5:41:e5:64:2c:ff:eb:21:c0:c9:1c:
                    b3:67:2f:29:e2:5a:bc:95:28:90:64:e3:c7:cc:f1:
                    ea:da:21:95:6b:b7:69:05:7f:63:8b:a5:a9:1e:51:
                    f3:6a:b3:d6:01:5d:fd:d7:46:bf:56:d5:3f:0c:28:
                    88:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                0F:80:61:1C:82:31:61:D5:2F:28:E7:8D:46:38:B4:2C:E1:C6:D9:E2
            X509v3 Subject Key Identifier: 
                CA:35:65:3D:4D:4B:64:D6:74:8E:5B:51:C1:D0:B7:21:7D:AF:8C:4E
            X509v3 Subject Alternative Name: 
                DNS:sentry.bnf.fr
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl3.digicert.com/ssca-sha2-g5.crl
                Full Name:
                  URI:http://crl4.digicert.com/ssca-sha2-g5.crl
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114412.1.1
                  CPS: https://www.digicert.com/CPS
                Policy: 2.23.140.1.2.2
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
            X509v3 Basic Constraints: critical
                CA:FALSE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        4b:d4:13:a6:6a:98:cd:4b:7e:42:40:19:d2:a0:9e:37:f3:7f:
        de:67:e4:c3:c1:65:08:6d:3f:64:cf:6b:6d:6e:ad:a8:f4:53:
        41:4f:cd:65:19:98:dd:79:ec:68:cc:de:f0:48:18:9d:d9:f8:
        87:50:a5:ec:34:c3:05:c6:12:19:16:e0:da:89:13:11:a8:1c:
        6f:45:c0:6d:58:8a:a3:6f:ed:a8:21:3f:46:85:0f:91:0a:7f:
        2c:d7:81:ad:19:f6:ae:d6:a3:85:d3:dd:da:06:bd:8f:fb:9d:
        4c:98:a0:e3:1e:b7:75:5c:5e:0c:df:9f:15:b5:a3:e4:33:e2:
        e4:04:e6:32:50:8c:e9:aa:c9:c2:24:16:26:a3:bc:3d:6f:a4:
        a6:11:55:ee:34:2f:15:df:84:d7:36:dd:d2:68:7c:04:2c:62:
        27:1b:e8:83:18:70:41:ab:3d:a6:d4:3e:58:54:6a:22:8e:3a:
        45:03:5c:0c:e8:f5:6e:fb:05:e4:94:b9:cf:7f:6c:11:35:9d:
        3a:12:38:77:2b:89:37:63:53:4d:1a:b5:6a:a4:d7:3c:44:60:
        2c:a0:6a:8c:90:81:e4:cc:3d:9d:68:1a:96:86:95:dd:14:23:
        4f:ab:0c:c4:b9:0e:6c:08:f5:56:f5:71:66:39:c5:d9:84:14:
        40:0f:f2:ac