icimedias.agencetolle.com

Issued by R3

About this certificate

This digital certificate with serial number 03:b2:6f:3d:ca:aa:1c:33:20:29:37:95:9b:c8:f1:29:8d:07 was issued on by Let's Encrypt.

With 76 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=icimedias.agencetolle.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b2:6f:3d:ca:aa:1c:33:20:29:37:95:9b:c8:f1:29:8d:07
Serial Number (int): 322054984255372537675160251848261060103431
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d7:0f:b2:b2:58:a0:3d:79:92:f0:52:06:3e:b1:8e:cc:e3:6e:d2:7b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c1:8b:b5:78:7b:c2:bd:61:a2:ec:5d:44:7b:2d:7a:6c:7d:0a:6d:4c
Fingerprint (sha256): 0a:4c:87:97:72:97:45:03:d1:e0:14:92:c2:c5:83:f2:9b:cc:47:52:a8:cc:10:54:e8:21:a6:d9:1d:c0:06:0a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate icimedias.agencetolle.com

76

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for icimedias.agencetolle.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.staging-abonnements-icimedias.agencetolle.com
beaucemedia.ca
beaucemedia.com
beaucemedia.icimedias.agencetolle.com
canadafrancais.icimedias.agencetolle.com
cornwallseawaynews.icimedias.agencetolle.com
coupdoeil.icimedias.agencetolle.com
coupdoeil.info
courrierfrontenac.icimedias.agencetolle.com
courrierfrontenac.qc.ca
granbyexpress.com
granbyexpress.icimedias.agencetolle.com
icimedias.agencetolle.com
journalleguide.com
journalleguide.icimedias.agencetolle.com
lanouvelle.icimedias.agencetolle.com
lanouvelle.net
laveniretdesrivieres.com
laveniretdesrivieres.icimedias.agencetolle.com
lavoixdusud.ca
lavoixdusud.com
lavoixdusud.icimedias.agencetolle.com
lechodelatuque.ca
lechodelatuque.com
lechodelatuque.icimedias.agencetolle.com
lechodemaskinonge.ca
lechodemaskinonge.com
lechodemaskinonge.icimedias.agencetolle.com
leclaireurprogres.ca
leclaireurprogres.com
leclaireurprogres.icimedias.agencetolle.com
lecourriersud.ca
lecourriersud.com
lecourriersud.icimedias.agencetolle.com
leprogres.icimedias.agencetolle.com
leprogres.net
lerefletdulac.ca
lerefletdulac.com
lerefletdulac.icimedias.agencetolle.com
lerichelieu.ca
lerichelieu.icimedias.agencetolle.com
lhebdodustmaurice.com
lhebdodustmaurice.icimedias.agencetolle.com
lhebdojournal.ca
lhebdojournal.com
lhebdojournal.icimedias.agencetolle.com
lhebdomekinacdeschenaux.ca
lhebdomekinacdeschenaux.icimedias.agencetolle.com
staging-abonnements-icimedias.agencetolle.com
staging-icimedias.agencetolle.com
www.beaucemedia.ca
www.beaucemedia.com
www.coupdoeil.info
www.courrierfrontenac.qc.ca
www.granbyexpress.com
www.journalleguide.com
www.lanouvelle.net
www.laveniretdesrivieres.com
www.lavoixdusud.ca
www.lavoixdusud.com
www.lechodelatuque.ca
www.lechodelatuque.com
www.lechodemaskinonge.ca
www.lechodemaskinonge.com
www.leclaireurprogres.ca
www.leclaireurprogres.com
www.lecourriersud.ca
www.lecourriersud.com
www.leprogres.net
www.lerefletdulac.ca
www.lerefletdulac.com
www.lerichelieu.ca
www.lhebdodustmaurice.com
www.lhebdojournal.ca
www.lhebdojournal.com
www.lhebdomekinacdeschenaux.ca

Other certificates including the domain name agencetolle.com

(limited to 100 certificates)
icimedias.agencetolle.com
agencetolle.com
versants.com
icimedias.agencetolle.com
agencetolle.com
abonnements-icimedias.agencetolle.com
abonnements-icimedias.agencetolle.com
admin.staging-abonnements-icimedias.agencetolle.com
admin.staging-abonnements-icimedias.agencetolle.com
journaldechambly.com
ithq.agencetolle.com
agencetolle.com
versants.com
agencetolle.com
abonnements-icimedias.agencetolle.com
admin.staging-abonnements-icimedias.agencetolle.com
journaldecarignan.com
icimedias.agencetolle.com
agencetolle.com
abonnements-icimedias.agencetolle.com
icimedias.agencetolle.com
versants.com
agencetolle.com
agencetolle.com
genytech.agencetolle.com
icimedias.agencetolle.com
journaldechambly.com
mallette.agencetolle.com

Certificate

The complete raw certificate details for icimedias.agencetolle.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApu2+VP3O1Lac4Zb4qplZ
shIHmF58wB/qGvq65uZ/vmtShY8N5ZvL5LXcXGIYazeLP6tbekW4Olai54EfOuQs
NW6dPExSgtQWcBhMP/m1/C50HTnPeGRy+3AyM2qQur6pAMhS6ezB60sGkl5g6S+1
2jHcKZn1KA3EeYaWdt/5Hw64HTQEfzpTzHxsY9gXXTxt7amAT75S3lVlvL/WbCDQ
15wgvyE/HiM2f1JyxqhKCs5oCZAMvHqT17W0Kdt0gfrjSJDDtg8suAwokZgx/4mV
h9yLo354zRRzCrqDV+b8NVwU6NZBtcP6nb3/tyLqpCZ/crxcQ67u1s3aJwweOzE2
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322054984255372537675160251848261060103431
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-25 14:08:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-24 14:08:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'icimedias.agencetolle.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21072794305940499377169532561283164519473785371168537093332234209121336024380287653085298485151126002495209421845051720080277466894420878137526227620439387453266105122118360584065286870384942035430561960159885465115626771041947524665262273699316044594147624357732990644681478170270686099711812505146187455247323877962765174605108889668092240013245525528807318204240852522024627767864690521881125725340700764035590659461902873588340309241262012384691000675279827256870566846104462972185781269104450669330053174185439800873152141158988131196668876169686098516212746228290846784484840775372710975904847226302439451866753
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d70fb2b258a03d7992f052063eb18ecce36ed27b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.staging-abonnements-icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beaucemedia.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beaucemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beaucemedia.icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadafrancais.icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornwallseawaynews.icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coupdoeil.icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coupdoeil.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courrierfrontenac.icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courrierfrontenac.qc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'granbyexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'granbyexpress.icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journalleguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journalleguide.icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lanouvelle.icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lanouvelle.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laveniretdesrivieres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laveniretdesrivieres.icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lavoixdusud.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lavoixdusud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lavoixdusud.icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lechodelatuque.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lechodelatuque.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lechodelatuque.icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lechodemaskinonge.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lechodemaskinonge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lechodemaskinonge.icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leclaireurprogres.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leclaireurprogres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leclaireurprogres.icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lecourriersud.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lecourriersud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lecourriersud.icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leprogres.icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leprogres.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lerefletdulac.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lerefletdulac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lerefletdulac.icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lerichelieu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lerichelieu.icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lhebdodustmaurice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lhebdodustmaurice.icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lhebdojournal.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lhebdojournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lhebdojournal.icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lhebdomekinacdeschenaux.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lhebdomekinacdeschenaux.icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-abonnements-icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beaucemedia.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beaucemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coupdoeil.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.courrierfrontenac.qc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.granbyexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.journalleguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lanouvelle.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laveniretdesrivieres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lavoixdusud.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lavoixdusud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lechodelatuque.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lechodelatuque.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lechodemaskinonge.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lechodemaskinonge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leclaireurprogres.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leclaireurprogres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lecourriersud.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lecourriersud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leprogres.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lerefletdulac.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lerefletdulac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lerichelieu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lhebdodustmaurice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lhebdojournal.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lhebdojournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lhebdomekinacdeschenaux.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000187b8f57bff0000040300463044022076becac5fd01bd8ed9e5b6b025f88508546bb5d11c7e8c4ab93f3b724365dfa6022040bbf5d9318619482c0b2c83a4ee84b9c0e65bf528a9bc116aaf226592699990007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000187b8f57c2c000004030048304602210094af40c316de06bf2ed8edeb856440c6a43e0635f33f1d5245feb2a2eaa97e020221009f487e92cbdae662d18c6cd71e557514f5c548e12c198dfb8902ad6fbf237b04
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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