tls02.novagence.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:38:42:8d:78:b7:5d:71:84:9c:5e:a5:a1:b7:c1:d8:12:98 was issued on by Let's Encrypt.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls02.novagence.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:38:42:8d:78:b7:5d:71:84:9c:5e:a5:a1:b7:c1:d8:12:98
Serial Number (int): 280481133952848977271206664636827956679320
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1a:46:42:01:56:36:23:96:78:3d:57:e0:c7:2e:35:59:ce:49:a8:84
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ce:bb:85:5b:ee:02:24:a5:57:b0:67:3d:71:4d:8f:19:f3:71:e4:1b
Fingerprint (sha256): 3b:69:7e:03:e2:e5:61:2d:bb:22:0a:f3:15:e6:99:bf:6b:a2:e9:92:f4:8b:70:82:27:2a:47:5c:00:72:aa:3f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls02.novagence.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls02.novagence.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aci-resistance.com
aci-resistance.fr
ain-fibres.com
ain-fibres.fr
bellignat.com
bellignat.fr
billion-plasticsmachinery.com
billion.fr
ch-pontamousson.fr
devaud-france.com
devaud-france.fr
devaudfrance.com
devaudfrance.fr
dma-groupe.com
dma-groupe.de
dma-groupe.fr
dma-machines.com
dma-machines.fr
dma-print.com
dma-print.fr
dmagroupe.com
dmagroupe.de
dmagroupe.fr
dml-tolerie.com
dml-tolerie.fr
enseignes01.com
enseignes01.fr
fibres-techniques.com
fibres-techniques.fr
hopital-pompey.fr
idprint3d.fr
isolationconfort.com
isolationconfort.fr
jccolombo.com
jccolombo.fr
lesplastiquesdecores.com
lesplastiquesdecores.fr
maestro-project.eu
magento.sandbox.mon-projet-internet.com
marmeth.com
marmeth.fr
motoculture01.mon-projet-internet.com
recyclage-ain.com
recyclage-ain.fr
sandbox.mon-projet-internet.com
serrand-recyclage.com
serrand-recyclage.fr
tls02.novagence.com
www.aci-resistance.com
www.aci-resistance.fr
www.ain-fibres.com
www.ain-fibres.fr
www.bellignat.com
www.bellignat.fr
www.billion-plasticsmachinery.com
www.billion.fr
www.ch-pontamousson.fr
www.devaud-france.com
www.devaud-france.fr
www.devaudfrance.com
www.devaudfrance.fr
www.dma-groupe.com
www.dma-groupe.de
www.dma-groupe.fr
www.dma-machines.com
www.dma-machines.fr
www.dma-print.com
www.dma-print.fr
www.dmagroupe.com
www.dmagroupe.de
www.dmagroupe.fr
www.dml-tolerie.com
www.dml-tolerie.fr
www.enseignes01.com
www.enseignes01.fr
www.fibres-techniques.com
www.fibres-techniques.fr
www.hopital-pompey.fr
www.idprint3d.fr
www.isolationconfort.com
www.isolationconfort.fr
www.jccolombo.com
www.jccolombo.fr
www.lesplastiquesdecores.com
www.lesplastiquesdecores.fr
www.maestro-project.eu
www.marmeth.com
www.marmeth.fr
www.recyclage-ain.com
www.recyclage-ain.fr
www.serrand-recyclage.com
www.serrand-recyclage.fr

Other certificates including the domain name novagence.com

(limited to 100 certificates)
tls01.novagence.com
tls03.novagence.com
tls05.novagence.com
tls02.novagence.com
tls03.novagence.com
tls02.novagence.com
tls03.novagence.com
parking.novagence.fr
tls04.novagence.com
tls03.novagence.com
tls02.novagence.com
tls03.novagence.com
tls01.novagence.com
tls04.novagence.com
tls01.novagence.com
tls02.novagence.com
tls02.novagence.com
novagence.eu
tls04.novagence.com
tls04.novagence.com
novagence.eu
tls01.novagence.com
tls01.novagence.com
tls03.novagence.com
tls05.novagence.com
tls05.novagence.com
parking.novagence.fr
tls04.novagence.com
tls01.novagence.com
tls03.novagence.com
novagence.eu
tls01.novagence.com
parking.novagence.fr
tls06.novagence.com
novagence.eu
tls01.novagence.com
tls03.novagence.com
tls03.novagence.com
tls04.novagence.com
tls02.novagence.com
parking.novagence.fr
tls01.novagence.com
parking.novagence.fr
tls04.novagence.com
tls02.novagence.com
tls05.novagence.com
tls02.novagence.com
tls04.novagence.com
novagence.eu
parking.novagence.fr
tls02.novagence.com
tls05.novagence.com
tls01.novagence.com
tls05.novagence.com
tls01.novagence.com
tls02.novagence.com
tls06.novagence.com
tls05.novagence.com
tls01.novagence.com
tls05.novagence.com
tls04.novagence.com
tls02.novagence.com
tls02.novagence.com
tls03.novagence.com
tls05.novagence.com
tls01.novagence.com
parking.novagence.fr
tls02.novagence.com
tls02.novagence.com
tls04.novagence.com
tls02.novagence.com
tls04.novagence.com
tls03.novagence.com
tls05.novagence.com
tls02.novagence.com
tls01.novagence.com
tls04.novagence.com
tls05.novagence.com
tls04.novagence.com
tls02.novagence.com
parking.novagence.fr
parking.novagence.fr
tls04.novagence.com
parking.novagence.fr
tls03.novagence.com
tls04.novagence.com
tls01.novagence.com
tls03.novagence.com
tls03.novagence.com
tls02.novagence.com
parking.novagence.fr
tls04.novagence.com
tls02.novagence.com
tls03.novagence.com
parking.novagence.fr
tls04.novagence.com
tls04.novagence.com
tls03.novagence.com
tls03.novagence.com
tls05.novagence.com

Certificate

The complete raw certificate details for tls02.novagence.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7rcqrqZZMDo0NKDm7b5/
/p6ortCrJnl9t2On4PDV+9vwMCdV2tuZM8D4qCL3z8LJzxiS/N8mfdc0RP2cS51n
f1z1wM7FGJpz3XjuDZG4n20MIAqFlQv+AzNOoE9sbLHfs3d3HLX1L/4/JhTNKYdJ
7H6Lu/4dW8PRsmLOqXAhfRynqI3TU/mSqd44400Qog02SyTb4QnmWT/bgW24fvZz
7bXJijEb/zo6EahHPDe5cLWcIbPpgRGhQXUhP9kI3QqgwEaE9lOv0HSs7KCmmb+R
vVrMc4uZGR4VQ8+QfNIECcGqdlSFGKvfHmbkhWV2r3BptjQFzBURlM41l0B9pg3A
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280481133952848977271206664636827956679320
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-30 12:35:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-29 12:35:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls02.novagence.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30135039461604629289636172117159762814714142162843126151467547285270000543314761956825982170829760544785649814335080524395679286913198706323739471161926805896370509752468506269784586803200266228142494361250321159088608410641711154836419692188735394890360129510641281832227715397406546164197722066875755964943240195627763368843346836507639573232608636841174314978696576383528780113672707590220448938232066549542928877657230041177043360592666674481416284122371901812875665456396790597651088147795594197553478169870237081779999106609390425625746696533630602663123664370899741655951648566756231304570131278788834465005591
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1a46420156362396783d57e0c72e3559ce49a884
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1876 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aci-resistance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aci-resistance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ain-fibres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ain-fibres.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellignat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellignat.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billion-plasticsmachinery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billion.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ch-pontamousson.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devaud-france.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devaud-france.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devaudfrance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devaudfrance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dma-groupe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dma-groupe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dma-groupe.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dma-machines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dma-machines.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dma-print.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dma-print.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmagroupe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmagroupe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmagroupe.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dml-tolerie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dml-tolerie.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enseignes01.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enseignes01.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fibres-techniques.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fibres-techniques.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hopital-pompey.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idprint3d.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isolationconfort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isolationconfort.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jccolombo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jccolombo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesplastiquesdecores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesplastiquesdecores.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maestro-project.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magento.sandbox.mon-projet-internet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marmeth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marmeth.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motoculture01.mon-projet-internet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recyclage-ain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recyclage-ain.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.mon-projet-internet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serrand-recyclage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serrand-recyclage.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls02.novagence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aci-resistance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aci-resistance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ain-fibres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ain-fibres.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bellignat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bellignat.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.billion-plasticsmachinery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.billion.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ch-pontamousson.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devaud-france.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devaud-france.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devaudfrance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devaudfrance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dma-groupe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dma-groupe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dma-groupe.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dma-machines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dma-machines.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dma-print.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dma-print.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dmagroupe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dmagroupe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dmagroupe.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dml-tolerie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dml-tolerie.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enseignes01.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enseignes01.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fibres-techniques.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fibres-techniques.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hopital-pompey.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idprint3d.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.isolationconfort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.isolationconfort.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jccolombo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jccolombo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lesplastiquesdecores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lesplastiquesdecores.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maestro-project.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marmeth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marmeth.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recyclage-ain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recyclage-ain.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.serrand-recyclage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.serrand-recyclage.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a6e74f15800000403004630440220024d5414a519ceb43281f6ced33b94574571852cc89c3e2ea8575663a242ea5f0220195254541361a6fadb2180607b0133b2ba1071ab1508dfade942fc5783fe10b6007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a6e74f1490000040300483046022100f5f4f3af0713f71f9e847df4b779bc08bec759ca3ea5926cbc9f4bd32690a001022100d1267625162c9aa683f4a79ff383c4be305dd2e89a394a1ba016b7a7794df996
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00377f7f04b2551745af0bf3ad15083751757ee66691b030177aa7b8cd4616a323fb21b8235da2bdd7a1394ce338e1a25ce452bd002c7c18b6bac75497ae982033dd6a3d2fd42204468c920b8e537fa155ccb86242f8f3e44361f974ab03b35b523ac5e13eea04fc89dfb2eac9004103511cdbc4e03c7d376779eaff3d4da06559b2945566cf2297793e05e68a1d8fc3ae163061a3cf2aa15d26db3c950bf2fe860145c4938fb009bc97a3a3f8739fc407e9c63aaa1929c7d0f9bd289615d2ab2c786b486be2f4a6979cf23f1067b770928601f7a4b6e20aadb5e0800252d5896bd9f6c0a7f1ed1a6a0663bfcb8a7660e30e0779298b684930543de58c98015809