dsi.lemonde.fr

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a0:b3:8d:2f:2d:6d:da:84:b4:9f:47:56:cf:0a:8b:09:e6 was issued on by Let's Encrypt.

With 32 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dsi.lemonde.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a0:b3:8d:2f:2d:6d:da:84:b4:9f:47:56:cf:0a:8b:09:e6
Serial Number (int): 316020701384605964169310914589018376833510
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 58:27:c3:06:43:91:cf:83:24:5a:5f:5a:30:00:43:3a:e6:58:fc:03
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 54:64:05:de:33:7f:f1:4d:b9:20:ce:43:ae:90:ca:1a:b1:3c:85:58
Fingerprint (sha256): 55:8c:80:09:3e:2b:cc:88:d5:f6:88:d3:9a:76:b6:6f:d0:04:f9:99:a0:76:d3:bb:80:0e:41:cf:c8:d4:81:59

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate dsi.lemonde.fr

32

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dsi.lemonde.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

actuenligne.com
berluti.obsession.nouvelobs.com
bubble-game.lemonde.fr
capgemini.ft.com
dsi.lemonde.fr
edf-pulse.lefigaro.fr
elles-defient-le-temps.lemonde.fr
en.takepart-media.com
energie.lexpansion.com
galice.nouvelobs.com
hyatt.lefigaro.fr
innovation-sap.lemonde.fr
macao.madame.lefigaro.fr
marieclaire-loves-divine.fr
microsoftie10.nouvelobs.com
mobile.planete-plus-intelligente.lemonde.fr
mobile.zoe.nouvelobs.com
newsteam.scienceatstake.com
norvege.nouvelobs.com
nouvellepassat.lefigaro.fr
planetebusiness.lemonde.fr
regard-de-pro.lemonde.fr
scienceatstake.com
scitizen.com
takepart-media.com
visionmarketing.e-marketing.fr
www.actuenligne.com
www.en.takepart-media.com
www.marieclaire-loves-divine.fr
www.scitizen.com
www.takepart-media.com
zoe.nouvelobs.com

Other certificates including the domain name lemonde.fr

(limited to 100 certificates)
dns-vetting1-jeffg-noah.map.fastly.net
festival-montreal.lemonde.fr
boutique.lemonde.fr
us-paris.eu
www.atanar.net
binette-et-jardin.com
educations.com
formation-professionnelle.lemonde.fr
lettres-modeles.com
s2.shared.global.fastly.net
scienceatstake.com
lesclesdedemain.lemonde.fr
s2.shared.global.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
moncompte.lemonde.fr
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
dicocitations.lemonde.fr
www.atanar.net
dns-vetting1-jeffg-noah.map.fastly.net
s2.shared.global.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
bienecrire.com
s2.shared.global.fastly.net
www.modele-lettre.com
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
www.atanar.net
s2.shared.global.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1i.map.fastly.net
anglais.lemonde.fr
s2.shared.global.fastly.net
lettres-modeles.com
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
*.lemonde.fr
dns-vetting1-jeffg-noah.map.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
paroles2chansons.lemonde.fr
buf.lemonde.fr
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
us-paris.eu
s2.shared.global.fastly.net
dicocitations.lemonde.fr
s2.shared.global.fastly.net
lettres-modeles.com
binette-et-jardin.com
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
scienceatstake.com
s2.shared.global.fastly.net
s2.shared.global.fastly.net
progresser-orthographe.lemonde.fr
dns-vetting1-jeffg-noah.map.fastly.net
voyage-canada.lemonde.fr
bienecrire.com
buf.lemonde.fr
lemonde.fr
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
portail.lemonde.fr
s2.shared.global.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
bienecrire.com
dns-vetting1-jeffg-noah.map.fastly.net
scienceatstake.com
dns-vetting1-jeffg-noah.map.fastly.net
ipe.ivitrack.com
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
abosh.lemonde.fr
*.lemonde.fr
dns-vetting1-jeffg-noah.map.fastly.net
us-paris.eu
s2.shared.global.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
binette-et-jardin.com
dns-vetting1i.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
moncompte.lemonde.fr
dns-vetting1i.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
*.theme-a.com
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
us-paris.eu
s2.shared.global.fastly.net

Certificate

The complete raw certificate details for dsi.lemonde.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJFDCCB/ygAwIBAgISA6CzjS8tbdqEtJ9HVs8KiwnmMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzA0MDQxOTAzMDBaFw0x
NzA3MDMxOTAzMDBaMBkxFzAVBgNVBAMTDmRzaS5sZW1vbmRlLmZyMIICIjANBgkq
hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnkV6t4pQrNXiBZFG5C3TSFcVKnElHOSG
KAMCzlyopNF4/Sb25XlFhD297w9VI8T3p5Az29xVkRMTjb5k4dItePujA2Quoxb4
98sl9pO3LKPrMkBDcZQtMT/NVgUGf6lLSpBvn1Hv58kKoi/jMC8sdENWch+/gC9g
cHf7/YCmr4H7q9xdUm3urkfW/6HODIhR1gCPfvqGsu2PqeUNGmMmMbddCOcD8c7o
8HT/vmC0tchdKPmlLofnMkEKL+a85G7lbNKTY4MYKutvrxR55LNdDOVZ/RoKrGRK
58ksLVH2p9ELg+NBcQySOXyDTduWYi0Ztw1puX2QhNNRRbu6Csu+Pcqswlue0x78
e4QBWxXr6ODnWlYmHAJs7MJ0KFsJ78XZguWhbqOr+bTKtFagHVlI7IMglxrpHsuT
CzbkYiKhyQssQZ1rd1jDckM7Cn9XhY0H0ymZAGY09uwvlGliMwYl91kC83FQMn/G
eh4PpxkEbwRTHoG90LHZrEKHquhl15NRaltSBDX8s6qeHdor+yShYrjgaLSXv6/7
Shy6YD0eVncYnI1+Rf8v0pZ1E9kwgq2u1Ir1x17jPSfsBoGpb83D9FdmEsEHpuNc
oaPyVhnQ000r87IleHjV2Kq8Nbd6DtQC/NbYY4nJA99PFQiL7xC0uKhg+ZYyIwx1
MqqF/Z1GPZUCAwEAAaOCBSMwggUfMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUWCfD
BkORz4MkWl9aMABDOuZY/AMwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo
7KEwcAYIKwYBBQUHAQEEZDBiMC8GCCsGAQUFBzABhiNodHRwOi8vb2NzcC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnLzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZy8wggMrBgNVHREEggMiMIIDHoIPYWN0dWVubGln
bmUuY29tgh9iZXJsdXRpLm9ic2Vzc2lvbi5ub3V2ZWxvYnMuY29tghZidWJibGUt
Z2FtZS5sZW1vbmRlLmZyghBjYXBnZW1pbmkuZnQuY29tgg5kc2kubGVtb25kZS5m
coIVZWRmLXB1bHNlLmxlZmlnYXJvLmZygiFlbGxlcy1kZWZpZW50LWxlLXRlbXBz
LmxlbW9uZGUuZnKCFWVuLnRha2VwYXJ0LW1lZGlhLmNvbYIWZW5lcmdpZS5sZXhw
YW5zaW9uLmNvbYIUZ2FsaWNlLm5vdXZlbG9icy5jb22CEWh5YXR0LmxlZmlnYXJv
LmZyghlpbm5vdmF0aW9uLXNhcC5sZW1vbmRlLmZyghhtYWNhby5tYWRhbWUubGVm
aWdhcm8uZnKCG21hcmllY2xhaXJlLWxvdmVzLWRpdmluZS5mcoIbbWljcm9zb2Z0
aWUxMC5ub3V2ZWxvYnMuY29tgittb2JpbGUucGxhbmV0ZS1wbHVzLWludGVsbGln
ZW50ZS5sZW1vbmRlLmZyghhtb2JpbGUuem9lLm5vdXZlbG9icy5jb22CG25ld3N0
ZWFtLnNjaWVuY2VhdHN0YWtlLmNvbYIVbm9ydmVnZS5ub3V2ZWxvYnMuY29tghpu
b3V2ZWxsZXBhc3NhdC5sZWZpZ2Fyby5mcoIacGxhbmV0ZWJ1c2luZXNzLmxlbW9u
ZGUuZnKCGHJlZ2FyZC1kZS1wcm8ubGVtb25kZS5mcoISc2NpZW5jZWF0c3Rha2Uu
Y29tggxzY2l0aXplbi5jb22CEnRha2VwYXJ0LW1lZGlhLmNvbYIedmlzaW9ubWFy
a2V0aW5nLmUtbWFya2V0aW5nLmZyghN3d3cuYWN0dWVubGlnbmUuY29tghl3d3cu
ZW4udGFrZXBhcnQtbWVkaWEuY29tgh93d3cubWFyaWVjbGFpcmUtbG92ZXMtZGl2
aW5lLmZyghB3d3cuc2NpdGl6ZW4uY29tghZ3d3cudGFrZXBhcnQtbWVkaWEuY29t
ghF6b2Uubm91dmVsb2JzLmNvbTCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB5gYL
KwYBBAGC3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5
cHQub3JnMIGrBggrBgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9u
bHkgYmUgcmVsaWVkIHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5IGlu
IGFjY29yZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0
IGh0dHBzOi8vbGV0c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMA0GCSqGSIb3DQEB
CwUAA4IBAQBKFYkGFtR0yuCj79bvYgtdIppsi3cZogqVbXbS1nbtoHmNIsj/HyTx
xesb4Oi3HF52S8s2QN5Ik4y6/yFLMEb2xltYQSDMHoul5LYoZL33cD3zgp73cp+P
i/lLQoVciCRv3fJ4vwB/3KesMA7HKTgiC7fufppuhg1kBn+Mmsnmzh/BXpZP6Bk3
vHyXtt0VR5p88NfTqW08IkRHZyo38anOQHQHQDXlZ+s7kiMdpw7JheLz/W98MRRV
2TeIIWr4Jb6Luxt80FWk73uk5EOPcHBrO8fseNw6ISQfsdaUItdg5yk5XcLXvehq
l07tDAejhmliGpjFeZ/bIHSlUJ5uo1Fq
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316020701384605964169310914589018376833510
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-04 19:03:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-03 19:03:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dsi.lemonde.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 645690993495349721534533284021318791896931736912368875876245379537229910356155315366000832355729866207176460427361950724406787447952733169638453469243089789992698402773870569027217275769871841414778747650362866817351694143957859773533894954027903555096027868626855180465553457577180943493402135658576039662645074525077196666317760714755457918166701332998048883330301771775054054459055930902374676201450299630075199809663695786594125590718906407777515565373304227952746609909648874103240933055339135230495897009598883318070714186151404906003812201988539278199722516815615986859011935937534395816951550383175653239019036410552551804603586831908915259214036507327822942203393294636061032333069499835605652980037092738304039337576844736793037177627877751090028955563064837715044660099535743595236716125567960640028344484836057026379389306463177619610191149281090583711698414042646079554559273565855356933211647947183887548137198833238793169689595865788367371940015730603682892930662218412160413606314246930130692091682108786633757523301969690608695094503199925692501304034073526129798312144106595536818879495117669694706097699655032864331144626815344940000588441176989345378190126336800015570674331789120639598294107916980691890252168597
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5827c3064391cf83245a5f5a3000433ae658fc03
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (802 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actuenligne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berluti.obsession.nouvelobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bubble-game.lemonde.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capgemini.ft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsi.lemonde.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edf-pulse.lefigaro.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elles-defient-le-temps.lemonde.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'en.takepart-media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energie.lexpansion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galice.nouvelobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyatt.lefigaro.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovation-sap.lemonde.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macao.madame.lefigaro.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marieclaire-loves-divine.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsoftie10.nouvelobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.planete-plus-intelligente.lemonde.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.zoe.nouvelobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsteam.scienceatstake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norvege.nouvelobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nouvellepassat.lefigaro.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planetebusiness.lemonde.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regard-de-pro.lemonde.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scienceatstake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scitizen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takepart-media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visionmarketing.e-marketing.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.actuenligne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.en.takepart-media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marieclaire-loves-divine.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scitizen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.takepart-media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zoe.nouvelobs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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