scienceatstake.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:67:bb:7b:dc:2d:0f:b9:d5:80:c9:40:f3:8a:37:fe:55:b4 was issued on by Let's Encrypt.

With 39 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=scienceatstake.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:67:bb:7b:dc:2d:0f:b9:d5:80:c9:40:f3:8a:37:fe:55:b4
Serial Number (int): 296635150341563027779803687538168340305332
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 30:84:d1:0d:96:fa:bb:b6:80:64:02:4e:30:bf:a9:bc:24:ed:98:0a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3d:af:6b:43:bc:c4:24:bb:14:fd:fd:19:c8:da:49:d0:b9:3f:ee:3a
Fingerprint (sha256): 42:46:c1:ae:41:0e:95:d3:0d:de:1f:d2:69:84:58:84:c1:81:cd:4b:3b:f7:a6:03:49:50:6a:8b:e3:1e:df:93

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate scienceatstake.com

39

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for scienceatstake.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

100jours-pour-convaincre.lesechos.fr
100premiers-jours.lesechos.fr
actuenligne.com
berluti.obsession.nouvelobs.com
bubble-game.lemonde.fr
capgemini.ft.com
dsi.lemonde.fr
edf-pulse.lefigaro.fr
elles-defient-le-temps.lemonde.fr
en.takepart-media.com
energie.lexpansion.com
galice.nouvelobs.com
greenweez-magazine.com
hyatt.lefigaro.fr
innovation-sap.lemonde.fr
jaguarlandrover.lesechos.fr
lesbonsmoments.lefigaro.fr
lesclesdedemain.lemonde.fr
macao.madame.lefigaro.fr
marieclaire-loves-divine.fr
microsoftie10.nouvelobs.com
mobile.planete-plus-intelligente.lemonde.fr
mobile.zoe.nouvelobs.com
newsteam.scienceatstake.com
norvege.nouvelobs.com
nouvellepassat.lefigaro.fr
planetebusiness.lemonde.fr
regard-de-pro.lemonde.fr
scienceatstake.com
scitizen.com
strategies-entrepreneur.lesechos.fr
takepart-media.com
visionmarketing.e-marketing.fr
www.actuenligne.com
www.en.takepart-media.com
www.marieclaire-loves-divine.fr
www.scitizen.com
www.takepart-media.com
zoe.nouvelobs.com

Other certificates including the domain name scienceatstake.com

(limited to 100 certificates)
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
www.scitizen.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
dsi.lemonde.fr
scienceatstake.com
scienceatstake.com
energie.lexpansion.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com

Certificate

The complete raw certificate details for scienceatstake.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJ7zCCCNegAwIBAgISA2e7e9wtD7nVgMlA84o3/lW0MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNjA3MDYxNjMzMDBaFw0x
NjEwMDQxNjMzMDBaMB0xGzAZBgNVBAMTEnNjaWVuY2VhdHN0YWtlLmNvbTCCAiIw
DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMHjGNrP/id05vSEoRPWRH9TqIor
B01UST3ZUqT1FLO29N1SViR7P4KZFGLlfLMHSskSUubLl+8iqzaFdFrgpc/SnvjE
G9o3M+Wyv3lbrCQZESrs8cwrAlFc7MhZcP3icgN327R//riqCRnBsOtiOSNGixrC
5hA6Htm0TkcaEEY4CIGZVn5ExvTtMGDQkPDcWBXZVjQolYQBx+mofERL1I7zov9l
co0SsJZUFiyACU0l5Rt10Qj8tD5Prv8iLxCe21hLV3kwujDZpvjc06tFavvf/qnG
VwrWb33CGTdpgJdV38bqieYM/6WDdZ0ZPjPRqphddr4h+lHKvPkwQydDPsfv6zw6
6G+IvAQxVFnJTiYcjHkU5KhyvCq67XZZFfs4izRL25uMZKoYEB+1ffMatFXLE+SU
Xa2BzTCMCBJCzooVPU23WUsMGGN0FS2R3haNm4J31SeW1mbJpLqShvluKjpcoKC4
2X3U9jVTS9rlXJc4kqv894j5Jp6D63Xq/VttXGXpWIcU6WOpasFyu/agBMIdpmPA
cuOWHKkHBygpnzzkDH3DKA4u6GdJbv20lrXLG02HXuIn2+jGKZT0K/295S6ArPFS
xuoDgUcVG+SiB5iwJNKXlm/k7lRvITnKZWPy0nsJVTROAiDZ6teii35tOHAZ+dGg
uUfiTB11TBo1Jy6hAgMBAAGjggX6MIIF9jAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FDCE0Q2W+ru2gGQCTjC/qbwk7ZgKMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF
Ze/zqOyhMHAGCCsGAQUFBwEBBGQwYjAvBggrBgEFBQcwAYYjaHR0cDovL29jc3Au
aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0
LmludC14My5sZXRzZW5jcnlwdC5vcmcvMIIEAgYDVR0RBIID+TCCA/WCJDEwMGpv
dXJzLXBvdXItY29udmFpbmNyZS5sZXNlY2hvcy5mcoIdMTAwcHJlbWllcnMtam91
cnMubGVzZWNob3MuZnKCD2FjdHVlbmxpZ25lLmNvbYIfYmVybHV0aS5vYnNlc3Np
b24ubm91dmVsb2JzLmNvbYIWYnViYmxlLWdhbWUubGVtb25kZS5mcoIQY2FwZ2Vt
aW5pLmZ0LmNvbYIOZHNpLmxlbW9uZGUuZnKCFWVkZi1wdWxzZS5sZWZpZ2Fyby5m
coIhZWxsZXMtZGVmaWVudC1sZS10ZW1wcy5sZW1vbmRlLmZyghVlbi50YWtlcGFy
dC1tZWRpYS5jb22CFmVuZXJnaWUubGV4cGFuc2lvbi5jb22CFGdhbGljZS5ub3V2
ZWxvYnMuY29tghZncmVlbndlZXotbWFnYXppbmUuY29tghFoeWF0dC5sZWZpZ2Fy
by5mcoIZaW5ub3ZhdGlvbi1zYXAubGVtb25kZS5mcoIbamFndWFybGFuZHJvdmVy
Lmxlc2VjaG9zLmZyghpsZXNib25zbW9tZW50cy5sZWZpZ2Fyby5mcoIabGVzY2xl
c2RlZGVtYWluLmxlbW9uZGUuZnKCGG1hY2FvLm1hZGFtZS5sZWZpZ2Fyby5mcoIb
bWFyaWVjbGFpcmUtbG92ZXMtZGl2aW5lLmZyghttaWNyb3NvZnRpZTEwLm5vdXZl
bG9icy5jb22CK21vYmlsZS5wbGFuZXRlLXBsdXMtaW50ZWxsaWdlbnRlLmxlbW9u
ZGUuZnKCGG1vYmlsZS56b2Uubm91dmVsb2JzLmNvbYIbbmV3c3RlYW0uc2NpZW5j
ZWF0c3Rha2UuY29tghVub3J2ZWdlLm5vdXZlbG9icy5jb22CGm5vdXZlbGxlcGFz
c2F0LmxlZmlnYXJvLmZyghpwbGFuZXRlYnVzaW5lc3MubGVtb25kZS5mcoIYcmVn
YXJkLWRlLXByby5sZW1vbmRlLmZyghJzY2llbmNlYXRzdGFrZS5jb22CDHNjaXRp
emVuLmNvbYIjc3RyYXRlZ2llcy1lbnRyZXByZW5ldXIubGVzZWNob3MuZnKCEnRh
a2VwYXJ0LW1lZGlhLmNvbYIedmlzaW9ubWFya2V0aW5nLmUtbWFya2V0aW5nLmZy
ghN3d3cuYWN0dWVubGlnbmUuY29tghl3d3cuZW4udGFrZXBhcnQtbWVkaWEuY29t
gh93d3cubWFyaWVjbGFpcmUtbG92ZXMtZGl2aW5lLmZyghB3d3cuc2NpdGl6ZW4u
Y29tghZ3d3cudGFrZXBhcnQtbWVkaWEuY29tghF6b2Uubm91dmVsb2JzLmNvbTCB
/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC3xMBAQEwgdYwJgYIKwYB
BQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIGrBggrBgEFBQcCAjCB
ngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkgYmUgcmVsaWVkIHVwb24gYnkg
UmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0aGUg
Q2VydGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5cHQu
b3JnL3JlcG9zaXRvcnkvMA0GCSqGSIb3DQEBCwUAA4IBAQAJ802yFNQAmhqxGW2e
o67Nk6dJFcqiNHvVp5WNCalV1O+149B84I3mIKs+s0zxZhGL2q/z9A9IHYSISE1V
pFwXEYayNlemzXVqO2haX4VwohK8k85I5LnN9T85fky/Lh72K6ZWJ8OpyPZXzf+o
nlmLRYARe7yoa0816Tv6O4UkWJ6Fhq1hpJnEQln9r+rr4Xiz+7toqYTjFoWYQChl
6d7yFPNeid18r39H8s9UrzArIFhdsBywuYJ9y28V1f+Nqw6J/Za6f2HCacadP2RG
WAzTiq6B0oYvlyKv9lnnmE30bYVf+JmGMGRtx3ffafm8Jg4A3RcGQmn1imexvj/n
bIIj
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296635150341563027779803687538168340305332
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-06 16:33:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-04 16:33:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'scienceatstake.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 790990349234298691653721435781034866681669060696828951109564652770082927077852019047216111222077100719848004269618848439160550760622489505872932882940735480351372021365883972168273327844676967308243416593847417308422431204831711889462125248963405784715170716737353546239215520342839849813364108600060449445347233228915672664081434346842773447375215369551448574463840168257020617827671641134569074720645795108000037741503473735556638522781998075455548986514975700244909233487950541813473757735206320252686692958363906888239992430331061977142444026520010816987351612274501463717322596932361451222503069322928456081688016892741282824264517619534332848750306689219954568027565148508479202584673308452538895138041230019658518255132461824087174270141588267986343435700546257143381941764742716773070393381536133263833617277481417594028939343280870884688354753132995843114761183283761259751543021361785619824770068568065286511296477679432135092259147016403287858885103867214893247617458114965586949287282644414817496258820789731045085386259225034741288066585301893139892352320370398489140818014076271950227136758839845844535462963551383546117103167275967187317854573251827387159626348078775109510139532313975540023052032326823709120334868129
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3084d10d96fabbb68064024e30bfa9bc24ed980a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1017 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '100jours-pour-convaincre.lesechos.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '100premiers-jours.lesechos.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actuenligne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berluti.obsession.nouvelobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bubble-game.lemonde.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capgemini.ft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsi.lemonde.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edf-pulse.lefigaro.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elles-defient-le-temps.lemonde.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'en.takepart-media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energie.lexpansion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galice.nouvelobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenweez-magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyatt.lefigaro.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovation-sap.lemonde.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaguarlandrover.lesechos.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesbonsmoments.lefigaro.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesclesdedemain.lemonde.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macao.madame.lefigaro.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marieclaire-loves-divine.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsoftie10.nouvelobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.planete-plus-intelligente.lemonde.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.zoe.nouvelobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsteam.scienceatstake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norvege.nouvelobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nouvellepassat.lefigaro.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planetebusiness.lemonde.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regard-de-pro.lemonde.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scienceatstake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scitizen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strategies-entrepreneur.lesechos.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takepart-media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visionmarketing.e-marketing.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.actuenligne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.en.takepart-media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marieclaire-loves-divine.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scitizen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.takepart-media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zoe.nouvelobs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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