tls02.novagence.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cf:6f:79:50:02:90:91:4e:13:dc:1f:42:de:93:db:dd:66 was issued on by Let's Encrypt.

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls02.novagence.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cf:6f:79:50:02:90:91:4e:13:dc:1f:42:de:93:db:dd:66
Serial Number (int): 331923481946162976374356832692984012856678
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 29:82:df:2a:09:c6:91:8f:82:51:17:95:9c:d2:cf:71:ba:35:ce:d9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 83:fe:b4:5c:8e:da:7c:d8:c7:83:f9:ec:61:d4:2f:0f:86:02:a5:c9
Fingerprint (sha256): 5d:62:79:dd:00:b4:a5:95:78:bf:f4:c5:39:07:47:3c:0d:d1:26:2c:f2:65:f8:d9:a3:11:20:1d:6a:74:31:56

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls02.novagence.com

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls02.novagence.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

4jchaudronnerie.com
4jchaudronnerie.fr
aci.mon-projet-internet.com
ain-fibres.com
ain-fibres.fr
bellignat.com
bellignat.fr
billion-plasticsmachinery.com
billion.fr
ch-pontamousson.fr
cphb.mon-projet-internet.com
cvi.mon-projet-internet.com
devaud.mon-projet-internet.com
dma-groupe.com
dma-groupe.de
dma-groupe.fr
dma-machines.com
dma-machines.fr
dma-print.com
dma-print.fr
dmagroupe.com
dmagroupe.de
dmagroupe.fr
dml-tolerie.com
dml-tolerie.fr
edb.mon-projet-internet.com
enseignes01.mon-projet-internet.com
hopital-pompey.fr
idprint3d.mon-projet-internet.com
isolationconfort.com
isolationconfort.fr
jccolombo.com
jccolombo.fr
lesplastiquesdecores.com
lesplastiquesdecores.fr
maestro-project.eu
magento.sandbox.mon-projet-internet.com
marmeth.com
marmeth.fr
marmeth.mon-projet-internet.com
motoculture01.mon-projet-internet.com
plastdecor.mon-projet-internet.com
prp.mon-projet-internet.com
recyclage-ain.com
recyclage-ain.fr
sandbox.mon-projet-internet.com
serrand-recyclage.com
serrand-recyclage.fr
serrand.mon-projet-internet.com
stavem.mon-projet-internet.com
tls02.novagence.com
www.4jchaudronnerie.com
www.4jchaudronnerie.fr
www.ain-fibres.com
www.ain-fibres.fr
www.bellignat.com
www.bellignat.fr
www.billion-plasticsmachinery.com
www.billion.fr
www.ch-pontamousson.fr
www.dma-groupe.com
www.dma-groupe.de
www.dma-groupe.fr
www.dma-machines.com
www.dma-machines.fr
www.dma-print.com
www.dma-print.fr
www.dmagroupe.com
www.dmagroupe.de
www.dmagroupe.fr
www.dml-tolerie.com
www.dml-tolerie.fr
www.hopital-pompey.fr
www.isolationconfort.com
www.isolationconfort.fr
www.jccolombo.com
www.jccolombo.fr
www.lesplastiquesdecores.com
www.lesplastiquesdecores.fr
www.maestro-project.eu
www.marmeth.com
www.marmeth.fr
www.recyclage-ain.com
www.recyclage-ain.fr
www.serrand-recyclage.com
www.serrand-recyclage.fr

Other certificates including the domain name novagence.com

(limited to 100 certificates)
tls01.novagence.com
tls03.novagence.com
tls05.novagence.com
tls02.novagence.com
tls03.novagence.com
tls02.novagence.com
tls03.novagence.com
parking.novagence.fr
tls04.novagence.com
tls03.novagence.com
tls02.novagence.com
tls03.novagence.com
tls01.novagence.com
tls04.novagence.com
tls01.novagence.com
tls02.novagence.com
tls02.novagence.com
novagence.eu
tls04.novagence.com
tls04.novagence.com
novagence.eu
tls01.novagence.com
tls01.novagence.com
tls03.novagence.com
tls05.novagence.com
tls05.novagence.com
parking.novagence.fr
tls04.novagence.com
tls01.novagence.com
tls03.novagence.com
novagence.eu
tls01.novagence.com
parking.novagence.fr
tls06.novagence.com
novagence.eu
tls01.novagence.com
tls03.novagence.com
tls03.novagence.com
tls04.novagence.com
tls02.novagence.com
parking.novagence.fr
tls01.novagence.com
parking.novagence.fr
tls04.novagence.com
tls02.novagence.com
tls05.novagence.com
tls02.novagence.com
tls04.novagence.com
novagence.eu
parking.novagence.fr
tls02.novagence.com
tls05.novagence.com
tls01.novagence.com
tls05.novagence.com
tls01.novagence.com
tls02.novagence.com
tls06.novagence.com
tls05.novagence.com
tls01.novagence.com
tls05.novagence.com
tls04.novagence.com
tls02.novagence.com
tls02.novagence.com
tls03.novagence.com
tls05.novagence.com
tls01.novagence.com
parking.novagence.fr
tls02.novagence.com
tls02.novagence.com
tls04.novagence.com
tls02.novagence.com
tls04.novagence.com
tls03.novagence.com
tls05.novagence.com
tls02.novagence.com
tls01.novagence.com
tls04.novagence.com
tls05.novagence.com
tls04.novagence.com
tls02.novagence.com
parking.novagence.fr
parking.novagence.fr
tls04.novagence.com
parking.novagence.fr
tls03.novagence.com
tls04.novagence.com
tls01.novagence.com
tls03.novagence.com
tls03.novagence.com
tls02.novagence.com
parking.novagence.fr
tls04.novagence.com
tls02.novagence.com
tls03.novagence.com
parking.novagence.fr
tls04.novagence.com
tls04.novagence.com
tls03.novagence.com
tls03.novagence.com
tls05.novagence.com

Certificate

The complete raw certificate details for tls02.novagence.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRVrr4cbvNJIWUS2kMM2
rJpEWMbQusr9c2M+fzCE8aWRxujikPeCTrC0f7Ol2YcJX/cab/jzX/Hx450BmZRw
aRt3VYdVIG9OPViT9i3DDhlBKRTB+sTxPcp5hLcgR/wj9UI72hBBMowvBru+DU60
oa+sq7a95QKflHg38wGECU/VQ0uQthRbd4qsUtrs5yQ6TahuuHljfwK9c1KJwHex
YUzgCHuiRnor6BhsrAYFfIauzxk78ecveUW5/yWUidLeRQfz+i88AcxODe0wfRAN
q6T4wC4sBt+NAc5NCYR49IjOIOF0/YWH31SqIjyLS2sUw/RLHFl4t84pZPLCVv9Y
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331923481946162976374356832692984012856678
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-29 15:36:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-29 15:36:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls02.novagence.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25384462212943664244352869403273608000458763786721961141758038349846215866128151070134928138357363671767325411732017439564132820793588862807829048712676228966685238028265501652098059951716265394026558163007194783081185169543023726740138133665099802307761263090978887041624119076960435840357222982820225241972921414574634285576280614237163768798065711288147192201237510470323996523647024454782993352859258507642163657278394239915348061172841422197082099592271708730997255028439675008641639229168169658497568489391843636012288463686536004459503489306812962351761276063178970897791169817639328836322129942087530929150139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2982df2a09c6918f825117959cd2cf71ba35ced9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1900 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4jchaudronnerie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4jchaudronnerie.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aci.mon-projet-internet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ain-fibres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ain-fibres.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellignat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellignat.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billion-plasticsmachinery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billion.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ch-pontamousson.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cphb.mon-projet-internet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvi.mon-projet-internet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devaud.mon-projet-internet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dma-groupe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dma-groupe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dma-groupe.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dma-machines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dma-machines.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dma-print.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dma-print.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmagroupe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmagroupe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmagroupe.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dml-tolerie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dml-tolerie.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edb.mon-projet-internet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enseignes01.mon-projet-internet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hopital-pompey.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idprint3d.mon-projet-internet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isolationconfort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isolationconfort.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jccolombo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jccolombo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesplastiquesdecores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesplastiquesdecores.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maestro-project.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magento.sandbox.mon-projet-internet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marmeth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marmeth.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marmeth.mon-projet-internet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motoculture01.mon-projet-internet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plastdecor.mon-projet-internet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prp.mon-projet-internet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recyclage-ain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recyclage-ain.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.mon-projet-internet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serrand-recyclage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serrand-recyclage.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serrand.mon-projet-internet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stavem.mon-projet-internet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls02.novagence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.4jchaudronnerie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.4jchaudronnerie.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ain-fibres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ain-fibres.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bellignat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bellignat.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.billion-plasticsmachinery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.billion.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ch-pontamousson.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dma-groupe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dma-groupe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dma-groupe.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dma-machines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dma-machines.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dma-print.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dma-print.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dmagroupe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dmagroupe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dmagroupe.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dml-tolerie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dml-tolerie.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hopital-pompey.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.isolationconfort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.isolationconfort.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jccolombo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jccolombo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lesplastiquesdecores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lesplastiquesdecores.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maestro-project.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marmeth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marmeth.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recyclage-ain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recyclage-ain.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.serrand-recyclage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.serrand-recyclage.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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