tls02.novagence.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:80:f5:b4:ca:2e:d3:3d:dd:3d:7a:ce:70:20:55:2e:d8:21 was issued on by Let's Encrypt.

With 91 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls02.novagence.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:80:f5:b4:ca:2e:d3:3d:dd:3d:7a:ce:70:20:55:2e:d8:21
Serial Number (int): 305219600334319315460636195182790503749665
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 60:43:a9:a8:fc:66:54:57:7c:32:22:de:6b:32:8a:5b:5f:b0:9f:7b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f8:1a:71:1c:cb:12:7a:49:68:09:f7:7d:25:f9:ef:4a:60:a2:92:99
Fingerprint (sha256): 69:5b:cf:9e:9a:22:7e:21:0f:74:3b:f3:e9:28:ef:ad:c0:ea:13:3f:3f:c1:a5:0d:32:fe:15:66:56:8e:73:ed

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls02.novagence.com

91

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls02.novagence.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aci-resistance.com
aci-resistance.fr
ain-fibres.com
ain-fibres.fr
bellignat.com
bellignat.fr
billion-plasticsmachinery.com
billion.fr
ch-pontamousson.fr
devaud-france.com
devaud-france.fr
devaudfrance.com
devaudfrance.fr
dma-groupe.com
dma-groupe.de
dma-groupe.fr
dma-machines.com
dma-machines.fr
dma-print.com
dma-print.fr
dmagroupe.com
dmagroupe.de
dmagroupe.fr
dml-tolerie.com
dml-tolerie.fr
enseignes01.com
enseignes01.fr
fibres-techniques.com
fibres-techniques.fr
hopital-pompey.fr
idprint3d.fr
isolationconfort.com
isolationconfort.fr
jccolombo.com
jccolombo.fr
lesplastiquesdecores.com
lesplastiquesdecores.fr
maestro-project.eu
marmeth.com
marmeth.fr
motoculture01.mon-projet-internet.com
recyclage-ain.com
recyclage-ain.fr
sandbox.mon-projet-internet.com
serrand-recyclage.com
serrand-recyclage.fr
tls02.novagence.com
www.aci-resistance.com
www.aci-resistance.fr
www.ain-fibres.com
www.ain-fibres.fr
www.bellignat.com
www.bellignat.fr
www.billion-plasticsmachinery.com
www.billion.fr
www.ch-pontamousson.fr
www.devaud-france.com
www.devaud-france.fr
www.devaudfrance.com
www.devaudfrance.fr
www.dma-groupe.com
www.dma-groupe.de
www.dma-groupe.fr
www.dma-machines.com
www.dma-machines.fr
www.dma-print.com
www.dma-print.fr
www.dmagroupe.com
www.dmagroupe.de
www.dmagroupe.fr
www.dml-tolerie.com
www.dml-tolerie.fr
www.enseignes01.com
www.enseignes01.fr
www.fibres-techniques.com
www.fibres-techniques.fr
www.hopital-pompey.fr
www.idprint3d.fr
www.isolationconfort.com
www.isolationconfort.fr
www.jccolombo.com
www.jccolombo.fr
www.lesplastiquesdecores.com
www.lesplastiquesdecores.fr
www.maestro-project.eu
www.marmeth.com
www.marmeth.fr
www.recyclage-ain.com
www.recyclage-ain.fr
www.serrand-recyclage.com
www.serrand-recyclage.fr

Other certificates including the domain name novagence.com

(limited to 100 certificates)
tls01.novagence.com
tls03.novagence.com
tls05.novagence.com
tls02.novagence.com
tls03.novagence.com
tls02.novagence.com
tls03.novagence.com
parking.novagence.fr
tls04.novagence.com
tls03.novagence.com
tls02.novagence.com
tls03.novagence.com
tls01.novagence.com
tls04.novagence.com
tls01.novagence.com
tls02.novagence.com
tls02.novagence.com
novagence.eu
tls04.novagence.com
tls04.novagence.com
novagence.eu
tls01.novagence.com
tls01.novagence.com
tls03.novagence.com
tls05.novagence.com
tls05.novagence.com
parking.novagence.fr
tls04.novagence.com
tls01.novagence.com
tls03.novagence.com
novagence.eu
tls01.novagence.com
parking.novagence.fr
tls06.novagence.com
novagence.eu
tls01.novagence.com
tls03.novagence.com
tls03.novagence.com
tls04.novagence.com
tls02.novagence.com
parking.novagence.fr
tls01.novagence.com
parking.novagence.fr
tls04.novagence.com
tls02.novagence.com
tls05.novagence.com
tls02.novagence.com
tls04.novagence.com
novagence.eu
parking.novagence.fr
tls02.novagence.com
tls05.novagence.com
tls01.novagence.com
tls05.novagence.com
tls01.novagence.com
tls02.novagence.com
tls06.novagence.com
tls05.novagence.com
tls01.novagence.com
tls05.novagence.com
tls04.novagence.com
tls02.novagence.com
tls02.novagence.com
tls03.novagence.com
tls05.novagence.com
tls01.novagence.com
parking.novagence.fr
tls02.novagence.com
tls02.novagence.com
tls04.novagence.com
tls02.novagence.com
tls04.novagence.com
tls03.novagence.com
tls05.novagence.com
tls02.novagence.com
tls01.novagence.com
tls04.novagence.com
tls05.novagence.com
tls04.novagence.com
tls02.novagence.com
parking.novagence.fr
parking.novagence.fr
tls04.novagence.com
parking.novagence.fr
tls03.novagence.com
tls04.novagence.com
tls01.novagence.com
tls03.novagence.com
tls03.novagence.com
tls02.novagence.com
parking.novagence.fr
tls04.novagence.com
tls02.novagence.com
tls03.novagence.com
parking.novagence.fr
tls04.novagence.com
tls04.novagence.com
tls03.novagence.com
tls03.novagence.com
tls05.novagence.com

Certificate

The complete raw certificate details for tls02.novagence.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgsjVkQxWjBIUdk3UeEo
Ex+bWrSf0tWteOHxM3D7KvLjec+QATSIA0pxVhARrUkNdjpXHydxKPm5GLGUu/D+
xz7eWwRbg/Sl6pq9r2xJi7Hbpq11C5y9/VXK9KPKozEyFNJW/ar1S65uFveShRRR
nkzg9E00yFgaWaNBOSc9l+t9mP61Iu+diCt93C008B4fdax5jbWttsZ23DeBoqMg
erjYbq5QeUC3oR3eoJXaqIvRUUTMZ5tVigHGbnc9eRboL74JbtgLpZeS1wYI7haY
YaCq0U+abDpUoHN8/P/Z/fKCupc0m7z0GWu8t7qU1Q+ybPQq3K8AKzJ4oQJ8hHgO
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305219600334319315460636195182790503749665
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-17 19:04:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-16 19:04:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls02.novagence.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25000676753076279617329151044629191252072452074108837636365799795699917913991899160432047309900888895825798511521177898653104072252419804550110509211925145983887000440092364093894898199998747392249972201900140932107285017891935802255647553859326047619130739555238412735181208885920811454677318538530072804765862370476611570259141976976398255112991012887671279083034988227284950545942130080300863414666684408440104132571435616845319063993296942563517075942984044210590761404963122701773851766322345800843612471794933810919065402603035712857281078528713635227832935592247323478085831732494497570568059936476767771430629
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6043a9a8fc6654577c3222de6b328a5b5fb09f7b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1835 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aci-resistance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aci-resistance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ain-fibres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ain-fibres.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellignat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellignat.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billion-plasticsmachinery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billion.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ch-pontamousson.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devaud-france.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devaud-france.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devaudfrance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devaudfrance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dma-groupe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dma-groupe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dma-groupe.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dma-machines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dma-machines.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dma-print.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dma-print.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmagroupe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmagroupe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmagroupe.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dml-tolerie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dml-tolerie.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enseignes01.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enseignes01.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fibres-techniques.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fibres-techniques.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hopital-pompey.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idprint3d.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isolationconfort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isolationconfort.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jccolombo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jccolombo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesplastiquesdecores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesplastiquesdecores.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maestro-project.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marmeth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marmeth.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motoculture01.mon-projet-internet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recyclage-ain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recyclage-ain.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.mon-projet-internet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serrand-recyclage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serrand-recyclage.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls02.novagence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aci-resistance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aci-resistance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ain-fibres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ain-fibres.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bellignat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bellignat.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.billion-plasticsmachinery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.billion.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ch-pontamousson.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devaud-france.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devaud-france.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devaudfrance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devaudfrance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dma-groupe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dma-groupe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dma-groupe.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dma-machines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dma-machines.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dma-print.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dma-print.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dmagroupe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dmagroupe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dmagroupe.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dml-tolerie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dml-tolerie.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enseignes01.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enseignes01.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fibres-techniques.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fibres-techniques.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hopital-pompey.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idprint3d.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.isolationconfort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.isolationconfort.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jccolombo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jccolombo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lesplastiquesdecores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lesplastiquesdecores.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maestro-project.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marmeth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marmeth.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recyclage-ain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recyclage-ain.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.serrand-recyclage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.serrand-recyclage.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d40d3429e0000040300473045022100d370f24158ea23146f13d45fe4cbe56b37ddc58ae14fd50bb093f39e992cbdc302200185c5561c3809be9b2d502f725a8fcf58168c24a78f298e20db6b526611a29600770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d40d342b80000040300483046022100df5ac7bdc537697c8f938daa4e684320042b61d928af39ecf1ad2993a0073d31022100adc809cbea1248803ad598f4ef0d55b6eb0cbde7621eddf785b6150d20f1fba3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002bc586b49fa32db37cde8242484b84dbd3ec8412cd8f4596a5063db261831602c46d0ee01e11c9154c1628a3548759485bef4ba878ddb30dfc50bff9d306c158dfbb056f2432f4aa22310c0107ea0649101082287d3e468c1056db0a2b810f5388ae5f63f4b3a46802898bede0a647ab7c4507c1ae4853954f008e859031857f9a616ca388efba2dd5ca1e2e7d7906ce83d80a0b8404077f785e19d23a9fdef314dfd66625ae63a750bdcedb26a47e68edbb57abace3c4dcbe1a7ac96dea47bb91333a767e4993f037fd59a753186bdea29742b9713ffbd1ff374ba8aa81743ec8427f0a9e155df44d4d6baddb1d99acd6be690f0eebc01d71ab133c01b84126