abonnements-icimedias.agencetolle.com

Issued by R3

About this certificate

This digital certificate with serial number 04:24:24:4b:60:72:8a:ad:3d:ff:ea:77:2b:96:64:46:e1:f5 was issued on by Let's Encrypt.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=abonnements-icimedias.agencetolle.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:24:24:4b:60:72:8a:ad:3d:ff:ea:77:2b:96:64:46:e1:f5
Serial Number (int): 360747552522493669200167565068296790663669
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2f:bd:2d:7f:e5:c5:27:04:7b:fd:2a:be:fc:e7:a7:23:37:e4:f3:75
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1d:6a:ae:35:d5:d2:ef:31:71:46:8b:d2:09:b9:80:b8:a9:89:9b:ec
Fingerprint (sha256): 58:e5:b4:80:fe:9a:fd:14:dc:9a:66:f1:8e:96:0f:7a:24:7e:75:7b:aa:9a:cc:73:6b:d0:39:20:f5:d6:82:b3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate abonnements-icimedias.agencetolle.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for abonnements-icimedias.agencetolle.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abonnements-icimedias.agencetolle.com
admin.abonnements-icimedias.agencetolle.com
admin.staging-abonnements-icimedias.agencetolle.com
beaucemedia.ca
beaucemedia.icimedias.agencetolle.com
canadafrancais.icimedias.agencetolle.com
cornwallseawaynews.icimedias.agencetolle.com
coupdoeil.icimedias.agencetolle.com
coupdoeil.info
courrierfrontenac.icimedias.agencetolle.com
courrierfrontenac.qc.ca
granbyexpress.com
granbyexpress.icimedias.agencetolle.com
icimedias.agencetolle.com
journaldecarignan.com
journaldechambly.com
journaldechambly.lesversants.agencetolle.com
journaldemarieville.com
journalderichelieu.com
journalderichelieu.lesversants.agencetolle.com
journaldesaintbasile.com
journaldesaintejulie.com
journalleguide.com
journalleguide.icimedias.agencetolle.com
lanouvelle.icimedias.agencetolle.com
lanouvelle.net
laveniretdesrivieres.com
laveniretdesrivieres.icimedias.agencetolle.com
lavoixdusud.ca
lavoixdusud.com
lavoixdusud.icimedias.agencetolle.com
lechodelatuque.ca
lechodelatuque.com
lechodelatuque.icimedias.agencetolle.com
lechodemaskinonge.ca
lechodemaskinonge.com
lechodemaskinonge.icimedias.agencetolle.com
leclaireurprogres.ca
leclaireurprogres.com
leclaireurprogres.icimedias.agencetolle.com
lecourriersud.ca
lecourriersud.com
lecourriersud.icimedias.agencetolle.com
leprogres.icimedias.agencetolle.com
leprogres.net
lerefletdulac.ca
lerefletdulac.com
lerefletdulac.icimedias.agencetolle.com
lerichelieu.ca
lerichelieu.icimedias.agencetolle.com
lesversants.agencetolle.com
lhebdodustmaurice.com
lhebdodustmaurice.icimedias.agencetolle.com
lhebdojournal.ca
lhebdojournal.com
lhebdojournal.icimedias.agencetolle.com
lhebdomekinacdeschenaux.ca
lhebdomekinacdeschenaux.icimedias.agencetolle.com
saintbruno.lesversants.agencetolle.com
sherbrooke.info
staging-abonnements-icimedias.agencetolle.com
staging-icimedias.agencetolle.com
versants.com
www.beaucemedia.ca
www.coupdoeil.info
www.courrierfrontenac.qc.ca
www.granbyexpress.com
www.journaldecarignan.com
www.journaldechambly.com
www.journaldemarieville.com
www.journalderichelieu.com
www.journaldesaintbasile.com
www.journaldesaintejulie.com
www.journalleguide.com
www.lanouvelle.net
www.laveniretdesrivieres.com
www.lavoixdusud.ca
www.lavoixdusud.com
www.lechodelatuque.ca
www.lechodelatuque.com
www.lechodemaskinonge.ca
www.lechodemaskinonge.com
www.leclaireurprogres.ca
www.leclaireurprogres.com
www.lecourriersud.ca
www.lecourriersud.com
www.leprogres.net
www.lerefletdulac.ca
www.lerefletdulac.com
www.lerichelieu.ca
www.lhebdodustmaurice.com
www.lhebdojournal.ca
www.lhebdojournal.com
www.lhebdomekinacdeschenaux.ca
www.sherbrooke.info
www.versants.com

Other certificates including the domain name agencetolle.com

(limited to 100 certificates)
icimedias.agencetolle.com
agencetolle.com
versants.com
icimedias.agencetolle.com
agencetolle.com
abonnements-icimedias.agencetolle.com
abonnements-icimedias.agencetolle.com
admin.staging-abonnements-icimedias.agencetolle.com
admin.staging-abonnements-icimedias.agencetolle.com
journaldechambly.com
ithq.agencetolle.com
agencetolle.com
versants.com
agencetolle.com
abonnements-icimedias.agencetolle.com
admin.staging-abonnements-icimedias.agencetolle.com
journaldecarignan.com
icimedias.agencetolle.com
agencetolle.com
abonnements-icimedias.agencetolle.com
icimedias.agencetolle.com
versants.com
agencetolle.com
agencetolle.com
genytech.agencetolle.com
icimedias.agencetolle.com
journaldechambly.com
mallette.agencetolle.com

Certificate

The complete raw certificate details for abonnements-icimedias.agencetolle.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzX4CoSZ8I5rR+tYsN9l9
CrT3srch1OuptXxRAYXN7HgtY9daTD8Led6swrt39pBsl0U6bll8J4Pkmdd6mo5d
TEv9QuER4tbK7ss1zBzFq1y5RjKxI+ZftMSYmUFFZRv6SHBJEawU1/Dl+Xp3Acwe
RRfFpkQJ2mpjI2AiHt0TJJMToZiLb/Yma6sXWoEKI+Y7zJf4nP9OHUhEBSOlHV/V
orVy+sALY59l9xBWLCmLHcXiIqZYtBz86a4bZI2b921NPE8tUJGy2p8GiUQahuCi
49ZB+44bDTeVyWozc9j2OnBCww0F8hnlauYq6iL8Em8VlJTACs/pteYISlu/0mQo
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 360747552522493669200167565068296790663669
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-17 11:26:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-16 11:26:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'abonnements-icimedias.agencetolle.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25940990498812669294203280856741491568962965312218768048323198245549422324059626663309899203795762823430778307239532953493675708366130042270422794538837540863087493818655138601167677538878434039463223610358572489936906002141833111889377585913360510417581982120779899627654447067609217273753433195594488630387654657005829922672535041988610357311587141954299104945331484430172431501474109485737850003653908395087123446285811875945381082751284847749585472984435598132986292790088588743175442711296166800249038494342741005413219233159014994048743224437238462851869688812969478520208745553786238381221760374798134483888383
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2fbd2d7fe5c527047bfd2abefce7a72337e4f375
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2729 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abonnements-icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.abonnements-icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.staging-abonnements-icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beaucemedia.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beaucemedia.icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadafrancais.icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornwallseawaynews.icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coupdoeil.icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coupdoeil.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courrierfrontenac.icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courrierfrontenac.qc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'granbyexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'granbyexpress.icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journaldecarignan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journaldechambly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journaldechambly.lesversants.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journaldemarieville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journalderichelieu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journalderichelieu.lesversants.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journaldesaintbasile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journaldesaintejulie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journalleguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journalleguide.icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lanouvelle.icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lanouvelle.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laveniretdesrivieres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laveniretdesrivieres.icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lavoixdusud.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lavoixdusud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lavoixdusud.icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lechodelatuque.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lechodelatuque.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lechodelatuque.icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lechodemaskinonge.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lechodemaskinonge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lechodemaskinonge.icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leclaireurprogres.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leclaireurprogres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leclaireurprogres.icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lecourriersud.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lecourriersud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lecourriersud.icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leprogres.icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leprogres.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lerefletdulac.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lerefletdulac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lerefletdulac.icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lerichelieu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lerichelieu.icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesversants.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lhebdodustmaurice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lhebdodustmaurice.icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lhebdojournal.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lhebdojournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lhebdojournal.icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lhebdomekinacdeschenaux.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lhebdomekinacdeschenaux.icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintbruno.lesversants.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sherbrooke.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-abonnements-icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-icimedias.agencetolle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'versants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beaucemedia.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coupdoeil.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.courrierfrontenac.qc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.granbyexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.journaldecarignan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.journaldechambly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.journaldemarieville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.journalderichelieu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.journaldesaintbasile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.journaldesaintejulie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.journalleguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lanouvelle.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laveniretdesrivieres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lavoixdusud.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lavoixdusud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lechodelatuque.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lechodelatuque.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lechodemaskinonge.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lechodemaskinonge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leclaireurprogres.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leclaireurprogres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lecourriersud.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lecourriersud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leprogres.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lerefletdulac.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lerefletdulac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lerichelieu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lhebdodustmaurice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lhebdojournal.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lhebdojournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lhebdomekinacdeschenaux.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sherbrooke.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.versants.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018eec05fa150000040300483046022100d838b23ed4ec980d6a552555b77005d7baa8b661d86fc853d6f433c6793e4402022100fb5aff234b29cf54c8194d1bf812ca5c2e7e71989e8da42cef3ccdf6a47ab97f00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018eec05fa1a0000040300473045022100fe87f6a8dcb2ed434fe0e1aeb9871787cb088e1e33140865c35a6db3fc44a6ba022076a6553485823055ab6b06b4a8196ccf8aa48431e12feb67391f8bae0c038a5b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0015b2ffa5750cda820a103f6675bdf1fe905a84f3719f7b0d7d57fbc7394bbb7a5a28a3878708bc97481c83b951d0a41cf54b158501859c96b64937caf126b3d5644fb778241e9e2b66773900330963b6f830db1c1ef03756e47228ccbbdd9845787a937fd79a78ad9d978eb4fd8ae2548db6e848b71b2685754185b68e923aedd856e1912aa92c904e8ce7bc9fcd497c5fd53904e6c0289e534106d2d56d38bced2537f671a3a5ca5d7a4fa41c0b2a72d7949c9cda4967916b0d6d76084339010947f7b895d3011272df3f6c257d8b24b077feb8b01507b8cdbcf4efd84672847c99cb54f963caff080003f6294f5ec1af63718a5152c4077e8a1fc1c69c77ce