* Checking ownership of certificate (public key matches private key)... PASSED (Reason: GENEROUS)

* Checking if certificate contains URIs in the subjectAltName field... PASSED

* Found 1 URIs in the certificate (a maximum of 3 will be tested).

* Checking URI 1 (http://bblfish.net/#me)...
  - Trying to fetch and process certificate(s) from webid profile...

* Final conclusion: WebId does not match the certificate.
FATAL: WebId does not match the certificate.

 

Your certificate contains the following WebIDs:

The WebID URI used to claim your identity is:

The WebID URL suffix (to be signed) for your service provider is:

Unless both of those strings map to the same number, your identification experience will vary across clients.

Error code:

 

Your certificate in PEM format:
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----


Your certificate in text format:
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1 (0x1)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Henry Story (home page), O=bblfish.net, ST=France, C=FR, L=Fontainebleau/emailAddress=henry.story@bblfish.net
        Validity
            Not Before: Nov 27 19:36:30 2011 GMT
            Not After : Nov 26 19:36:30 2012 GMT
        Subject: CN=Henry Story (home page), O=bblfish.net, ST=France, C=FR, L=Fontainebleau/emailAddress=henry.story@bblfish.net
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
            RSA Public Key: (2048 bit)
                Modulus (2048 bit):
                    00:cc:a5:83:0a:8b:b6:a3:f2:c5:7c:62:dc:f7:4f:
                    92:e6:f4:e0:f2:e5:89:82:27:d9:30:f2:2d:47:bd:
                    70:95:59:99:84:90:29:ee:39:cc:ad:83:5c:79:b2:
                    d3:2a:c5:42:fe:c0:39:e3:23:96:1c:0a:99:ee:ad:
                    ee:81:f7:dc:31:d8:67:e1:58:53:d9:8d:5e:e5:64:
                    78:5d:48:98:41:7e:34:1f:fe:51:7e:c4:f7:b9:72:
                    fe:a8:04:f9:6a:8f:31:88:06:96:cf:a7:5c:b0:8d:
                    b5:d4:77:78:1c:ee:ac:88:f0:3c:70:f1:62:9a:40:
                    70:78:b0:e4:e7:5a:5f:d5:41:22:af:f1:f4:c3:a3:
                    3f:86:ff:69:7c:b2:18:c9:33:69:3b:4b:aa:ef:c4:
                    1c:c3:35:ae:8f:ac:44:4b:9a:11:83:81:ce:47:d2:
                    72:dc:22:a3:fb:2b:a8:b7:ef:56:fb:b5:5d:bf:e4:
                    28:59:07:e2:6e:bb:01:73:fe:4e:36:25:a5:ab:0d:
                    53:7b:30:09:48:45:3d:5a:8a:03:b9:10:55:38:a2:
                    5b:a5:29:3c:c8:32:75:71:83:f4:3a:72:de:61:0e:
                    58:5e:bf:6c:d8:8e:23:b5:c0:c7:bf:b9:31:2a:b8:
                    51:ec:f3:4a:d9:5e:95:3e:e7:3f:e6:09:b1:8e:21:
                    de:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: critical
                TLS Web Client Authentication
            X509v3 Subject Alternative Name: 
                URI:http://bblfish.net/#me
    Signature Algorithm: sha256WithRSAEncryption
        be:9d:27:c0:a1:64:fe:1a:6d:2f:0d:95:4a:c2:13:0c:a3:a4:
        ee:70:9f:5c:c0:35:41:3b:0e:ac:2a:88:b8:4e:88:9a:aa:04:
        f5:aa:d4:bc:4a:4e:78:8b:c2:33:a2:c5:57:53:e3:ac:7f:0e:
        83:84:04:16:74:3d:28:ee:ac:6b:8a:6c:4b:6d:fd:d6:c6:39:
        3d:77:37:d5:13:d6:dd:86:bb:f9:6c:df:4e:cb:fc:6c:d9:12:
        b8:b9:fe:28:0c:60:10:91:1d:b3:55:35:a8:c0:f3:fa:4b:e5:
        d9:b8:35:b1:fb:75:5b:1b:69:09:dd:1c:98:94:0f:b7:d7:cd:
        7c:52:75:c0:fc:7f:5a:c8:0e:40:27:c7:ea:60:b2:39:dd:30:
        ae:9b:f2:fb:e1:d8:91:9d:79:15:a3:4a:36:36:86:e1:f2:6b:
        f9:b7:38:53:fb:0d:c0:a1:21:e4:81:d2:73:e3:4d:e3:a5:d4:
        da:62:06:cb:31:a7:44:91:2c:5d:dc:ce:56:18:b8:6d:5f:89:
        16:07:29:5f:91:04:5c:7b:91:69:f2:ab:d1:c6:24:ee:eb:53:
        1d:2e:79:bb:d3:d1:42:35:1a:12:4b:4b:fe:8b:f8:74:39:9a:
        15:d7:60:90:b8:cf:ad:46:dc:0c:7b:d0:5b:9f:3c:0c:d2:43:
        35:fd:e2:67