energie.lexpansion.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8e:e8:3b:28:e0:a5:b0:f2:60:0f:7b:50:74:cb:35:7f:aa was issued on by Let's Encrypt.

With 38 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=energie.lexpansion.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8e:e8:3b:28:e0:a5:b0:f2:60:0f:7b:50:74:cb:35:7f:aa
Serial Number (int): 309965641967685527280426153849421288538026
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1e:2d:a1:c2:bc:f2:5e:29:1e:d6:61:8e:64:64:a1:fc:ce:20:25:c8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 76:84:78:be:0a:bf:f1:34:92:ba:e7:e2:20:d7:5d:09:05:0b:1b:84
Fingerprint (sha256): 71:07:a0:4e:e2:c8:83:29:df:b5:3f:3c:86:ac:8c:e5:63:d1:c6:98:8b:0a:ce:45:bc:90:b8:8f:8f:4c:79:25

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate energie.lexpansion.com

38

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for energie.lexpansion.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

100jours-pour-convaincre.lesechos.fr
100premiers-jours.lesechos.fr
actuenligne.com
berluti.obsession.nouvelobs.com
bubble-game.lemonde.fr
capgemini.ft.com
dsi.lemonde.fr
edf-pulse.lefigaro.fr
elles-defient-le-temps.lemonde.fr
en.takepart-media.com
energie.lexpansion.com
galice.nouvelobs.com
greenweez-magazine.com
hyatt.lefigaro.fr
innovation-sap.lemonde.fr
jaguarlandrover.lesechos.fr
lesclesdedemain.lemonde.fr
macao.madame.lefigaro.fr
marieclaire-loves-divine.fr
microsoftie10.nouvelobs.com
mobile.planete-plus-intelligente.lemonde.fr
mobile.zoe.nouvelobs.com
newsteam.scienceatstake.com
norvege.nouvelobs.com
nouvellepassat.lefigaro.fr
planetebusiness.lemonde.fr
regard-de-pro.lemonde.fr
scienceatstake.com
scitizen.com
strategies-entrepreneur.lesechos.fr
takepart-media.com
visionmarketing.e-marketing.fr
www.actuenligne.com
www.en.takepart-media.com
www.marieclaire-loves-divine.fr
www.scitizen.com
www.takepart-media.com
zoe.nouvelobs.com

Other certificates including the domain name lexpansion.com

(limited to 100 certificates)
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
www.scitizen.com
scienceatstake.com
scienceatstake.com
loisirs.lexpansion.com
scienceatstake.com
dsi.lemonde.fr
scienceatstake.com
scienceatstake.com
energie.lexpansion.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com

Certificate

The complete raw certificate details for energie.lexpansion.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJ1zCCCL+gAwIBAgISA47oOyjgpbDyYA97UHTLNX+qMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNjEyMDUxNjMzMDBaFw0x
NzAzMDUxNjMzMDBaMCExHzAdBgNVBAMTFmVuZXJnaWUubGV4cGFuc2lvbi5jb20w
ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDe1EnJ8snHI7vLYOfQ2xUx
PePYWqXggtwggAa+xQmoAQkOCyxLuU3NebbqhGv2QAwaSMCMLdkuiQ+Oc+Vqb8Bn
C46Ms8jCHDGJkTNhnSjEkwP1TSO0lGAdjIG98qrqgBFbCEYgtLGW0s3BVQsucAoW
rxy/4/RA1FqTLfhqnucdEqAbEkqWAuvCW1J3rvXBAYFB4sW3N73qNQ4qFYTWEvvb
48+VAspm5Z985EKRN8z9ZbEO6dh6GndUgmRM+fteyjkHs7S/N3UJWSRxBZiba498
acZtuqKmKuPHb4iZwiFy/9K7gVBdSKsG6GVIsORfN1aFwDM4XRgIZUjfpZS/5QzG
ElNHY0hX+tRDcbQGZQdXVINgIC+jg7PfnWf20nAqnaEParK+dU5xKrXZQ6F5REXn
HM+E702cSOLRobH1W/19JC4Oa9MPqNOq2ILyRtrSNWxvAkpSi4NtsOiIhnQpkfPG
kOU9ojm88/bJ4yp7ELNnKM64SpXrSJNM8+peVSiFcDn1hTOkqJKcJTAnJKnannfu
ZLE7CpotrfL/RIgeCVhJUqCJch9Te3kJH3PNII+hifJIOwvVq2x9uoAZ7LhL3Rw4
0UuOZY8ObNdYeprmSPPePb7hnd44ANjq70hAN1mn1fGQkOebK5NkS/FddJCatBpP
VLYOOR8m9Vc5wNpVn40ASwIDAQABo4IF3jCCBdowDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud
DgQWBBQeLaHCvPJeKR7WYY5kZKH8ziAlyDAfBgNVHSMEGDAWgBSoSmpjBH3duubR
ObemRWXv86jsoTBwBggrBgEFBQcBAQRkMGIwLwYIKwYBBQUHMAGGI2h0dHA6Ly9v
Y3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcvMC8GCCsGAQUFBzAChiNodHRwOi8v
Y2VydC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzCCA+YGA1UdEQSCA90wggPZgiQx
MDBqb3Vycy1wb3VyLWNvbnZhaW5jcmUubGVzZWNob3MuZnKCHTEwMHByZW1pZXJz
LWpvdXJzLmxlc2VjaG9zLmZygg9hY3R1ZW5saWduZS5jb22CH2Jlcmx1dGkub2Jz
ZXNzaW9uLm5vdXZlbG9icy5jb22CFmJ1YmJsZS1nYW1lLmxlbW9uZGUuZnKCEGNh
cGdlbWluaS5mdC5jb22CDmRzaS5sZW1vbmRlLmZyghVlZGYtcHVsc2UubGVmaWdh
cm8uZnKCIWVsbGVzLWRlZmllbnQtbGUtdGVtcHMubGVtb25kZS5mcoIVZW4udGFr
ZXBhcnQtbWVkaWEuY29tghZlbmVyZ2llLmxleHBhbnNpb24uY29tghRnYWxpY2Uu
bm91dmVsb2JzLmNvbYIWZ3JlZW53ZWV6LW1hZ2F6aW5lLmNvbYIRaHlhdHQubGVm
aWdhcm8uZnKCGWlubm92YXRpb24tc2FwLmxlbW9uZGUuZnKCG2phZ3VhcmxhbmRy
b3Zlci5sZXNlY2hvcy5mcoIabGVzY2xlc2RlZGVtYWluLmxlbW9uZGUuZnKCGG1h
Y2FvLm1hZGFtZS5sZWZpZ2Fyby5mcoIbbWFyaWVjbGFpcmUtbG92ZXMtZGl2aW5l
LmZyghttaWNyb3NvZnRpZTEwLm5vdXZlbG9icy5jb22CK21vYmlsZS5wbGFuZXRl
LXBsdXMtaW50ZWxsaWdlbnRlLmxlbW9uZGUuZnKCGG1vYmlsZS56b2Uubm91dmVs
b2JzLmNvbYIbbmV3c3RlYW0uc2NpZW5jZWF0c3Rha2UuY29tghVub3J2ZWdlLm5v
dXZlbG9icy5jb22CGm5vdXZlbGxlcGFzc2F0LmxlZmlnYXJvLmZyghpwbGFuZXRl
YnVzaW5lc3MubGVtb25kZS5mcoIYcmVnYXJkLWRlLXByby5sZW1vbmRlLmZyghJz
Y2llbmNlYXRzdGFrZS5jb22CDHNjaXRpemVuLmNvbYIjc3RyYXRlZ2llcy1lbnRy
ZXByZW5ldXIubGVzZWNob3MuZnKCEnRha2VwYXJ0LW1lZGlhLmNvbYIedmlzaW9u
bWFya2V0aW5nLmUtbWFya2V0aW5nLmZyghN3d3cuYWN0dWVubGlnbmUuY29tghl3
d3cuZW4udGFrZXBhcnQtbWVkaWEuY29tgh93d3cubWFyaWVjbGFpcmUtbG92ZXMt
ZGl2aW5lLmZyghB3d3cuc2NpdGl6ZW4uY29tghZ3d3cudGFrZXBhcnQtbWVkaWEu
Y29tghF6b2Uubm91dmVsb2JzLmNvbTCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB
5gYLKwYBBAGC3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2Vu
Y3J5cHQub3JnMIGrBggrBgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5
IG9ubHkgYmUgcmVsaWVkIHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5
IGluIGFjY29yZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5k
IGF0IGh0dHBzOi8vbGV0c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMA0GCSqGSIb3
DQEBCwUAA4IBAQBQj3D+HBhMIIR+OIe2BuN6Rvw8eKBpG1dkCacbBliJZtckofyo
MRzktXlza2+T4TOldBd5BLpvyRuZDHdtUBSgpBbKdU/9pSQKuo1EApvYDJUH1YLa
U38lEVPskR/3izl3ejX/0ZSSehpn6riaH0T+2or0QLn2Xapk5wg07dQBeIoBddTr
wFFay455uGoOzDIxD8olkhNUOdvCXJDylrweB2P0XqVfGPySgDRFIJ7U3yAUPoSg
8SGvJleYJ1iEaSwO6iiZ+WVPGtdm66sMiaRYsp+gFt92nIx5WI1O4nx6sFYpZ6a3
3v3xU8ZGWSZrnMu1vjD6RNIvg8aIl/LOz9i5
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309965641967685527280426153849421288538026
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-05 16:33:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-05 16:33:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'energie.lexpansion.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 909064031732491210265086581372084295295346342877171639663987814961197849139845108197267358202623908962065375662824212684818430606144853584984125364518065409962468965268200324662803354496089707995471416483026139972185267030534658866266000693313077608370518266099629884325087366862357568513245920237216546621793134280097836525218822120322083515041468480409800971590076914082271435328044214836845902215897647366213764832487410069870309468145610815546300409262565743616633838235566407414623733277131998842362787405749235544870389275400923755309232457369770397698446673933859336499869827929346624175761192145819730060078295361486654635068728596344117702355824518704503797275130999045478801163724283042663993810647830880996229204826684861309932091708041798167346813228619891399666739011685945236506531089082066967187284945878896073560419238734551557941062035693345227983944872526080529033921671732853822278726927702613167966526019479896853978085146708194124216677889459372709484420221742707956288050160117131393697728339222791192432303355450692674330443263530559019451626929856855134756058507660875058954630177622912386064340205461252428575543591753913856478641633609562180420504713070213013144411021725094789122170258059074904491438178379
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1e2da1c2bcf25e291ed6618e6464a1fcce2025c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (989 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '100jours-pour-convaincre.lesechos.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '100premiers-jours.lesechos.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actuenligne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berluti.obsession.nouvelobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bubble-game.lemonde.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capgemini.ft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsi.lemonde.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edf-pulse.lefigaro.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elles-defient-le-temps.lemonde.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'en.takepart-media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energie.lexpansion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galice.nouvelobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenweez-magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyatt.lefigaro.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovation-sap.lemonde.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaguarlandrover.lesechos.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesclesdedemain.lemonde.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macao.madame.lefigaro.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marieclaire-loves-divine.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsoftie10.nouvelobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.planete-plus-intelligente.lemonde.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.zoe.nouvelobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsteam.scienceatstake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norvege.nouvelobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nouvellepassat.lefigaro.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planetebusiness.lemonde.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regard-de-pro.lemonde.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scienceatstake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scitizen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strategies-entrepreneur.lesechos.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takepart-media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visionmarketing.e-marketing.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.actuenligne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.en.takepart-media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marieclaire-loves-divine.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scitizen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.takepart-media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zoe.nouvelobs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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