tls02.novagence.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:6f:d7:1b:6c:99:b0:9a:3d:94:40:0e:ef:09:c4:46:5a:1f was issued on by Let's Encrypt.

With 91 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls02.novagence.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:6f:d7:1b:6c:99:b0:9a:3d:94:40:0e:ef:09:c4:46:5a:1f
Serial Number (int): 386506412869050895270117184566972612237855
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a6:3e:73:d4:46:c8:6f:0f:1b:3b:fd:0d:1e:a8:c3:7f:7b:af:ef:90
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 73:e9:05:6f:4d:f1:8f:ff:4c:97:cb:7f:21:24:ee:20:df:70:4a:b1
Fingerprint (sha256): 71:91:0b:ef:7d:8e:98:86:f9:db:79:ac:9d:9b:c8:1e:eb:ab:58:ab:04:e4:44:7f:30:c0:c0:5a:22:b1:5a:b1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls02.novagence.com

91

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls02.novagence.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aci-resistance.com
aci-resistance.fr
ain-fibres.com
ain-fibres.fr
bellignat.com
bellignat.fr
billion-plasticsmachinery.com
billion.fr
ch-pontamousson.fr
devaud-france.com
devaud-france.fr
devaudfrance.com
devaudfrance.fr
dma-groupe.com
dma-groupe.de
dma-groupe.fr
dma-machines.com
dma-machines.fr
dma-print.com
dma-print.fr
dmagroupe.com
dmagroupe.de
dmagroupe.fr
dml-tolerie.com
dml-tolerie.fr
enseignes01.com
enseignes01.fr
fibres-techniques.com
fibres-techniques.fr
hopital-pompey.fr
idprint3d.fr
isolationconfort.com
isolationconfort.fr
jccolombo.com
jccolombo.fr
lesplastiquesdecores.com
lesplastiquesdecores.fr
maestro-project.eu
marmeth.com
marmeth.fr
motoculture01.mon-projet-internet.com
recyclage-ain.com
recyclage-ain.fr
sandbox.mon-projet-internet.com
serrand-recyclage.com
serrand-recyclage.fr
tls02.novagence.com
www.aci-resistance.com
www.aci-resistance.fr
www.ain-fibres.com
www.ain-fibres.fr
www.bellignat.com
www.bellignat.fr
www.billion-plasticsmachinery.com
www.billion.fr
www.ch-pontamousson.fr
www.devaud-france.com
www.devaud-france.fr
www.devaudfrance.com
www.devaudfrance.fr
www.dma-groupe.com
www.dma-groupe.de
www.dma-groupe.fr
www.dma-machines.com
www.dma-machines.fr
www.dma-print.com
www.dma-print.fr
www.dmagroupe.com
www.dmagroupe.de
www.dmagroupe.fr
www.dml-tolerie.com
www.dml-tolerie.fr
www.enseignes01.com
www.enseignes01.fr
www.fibres-techniques.com
www.fibres-techniques.fr
www.hopital-pompey.fr
www.idprint3d.fr
www.isolationconfort.com
www.isolationconfort.fr
www.jccolombo.com
www.jccolombo.fr
www.lesplastiquesdecores.com
www.lesplastiquesdecores.fr
www.maestro-project.eu
www.marmeth.com
www.marmeth.fr
www.recyclage-ain.com
www.recyclage-ain.fr
www.serrand-recyclage.com
www.serrand-recyclage.fr

Other certificates including the domain name novagence.com

(limited to 100 certificates)
tls01.novagence.com
tls03.novagence.com
tls05.novagence.com
tls02.novagence.com
tls03.novagence.com
tls02.novagence.com
tls03.novagence.com
parking.novagence.fr
tls04.novagence.com
tls03.novagence.com
tls02.novagence.com
tls03.novagence.com
tls01.novagence.com
tls04.novagence.com
tls01.novagence.com
tls02.novagence.com
tls02.novagence.com
novagence.eu
tls04.novagence.com
tls04.novagence.com
novagence.eu
tls01.novagence.com
tls01.novagence.com
tls03.novagence.com
tls05.novagence.com
tls05.novagence.com
parking.novagence.fr
tls04.novagence.com
tls01.novagence.com
tls03.novagence.com
novagence.eu
tls01.novagence.com
parking.novagence.fr
tls06.novagence.com
novagence.eu
tls01.novagence.com
tls03.novagence.com
tls03.novagence.com
tls04.novagence.com
tls02.novagence.com
parking.novagence.fr
tls01.novagence.com
parking.novagence.fr
tls04.novagence.com
tls02.novagence.com
tls05.novagence.com
tls02.novagence.com
tls04.novagence.com
novagence.eu
parking.novagence.fr
tls02.novagence.com
tls05.novagence.com
tls01.novagence.com
tls05.novagence.com
tls01.novagence.com
tls02.novagence.com
tls06.novagence.com
tls05.novagence.com
tls01.novagence.com
tls05.novagence.com
tls04.novagence.com
tls02.novagence.com
tls02.novagence.com
tls03.novagence.com
tls05.novagence.com
tls01.novagence.com
parking.novagence.fr
tls02.novagence.com
tls02.novagence.com
tls04.novagence.com
tls02.novagence.com
tls04.novagence.com
tls03.novagence.com
tls05.novagence.com
tls02.novagence.com
tls01.novagence.com
tls04.novagence.com
tls05.novagence.com
tls04.novagence.com
tls02.novagence.com
parking.novagence.fr
parking.novagence.fr
tls04.novagence.com
parking.novagence.fr
tls03.novagence.com
tls04.novagence.com
tls01.novagence.com
tls03.novagence.com
tls03.novagence.com
tls02.novagence.com
parking.novagence.fr
tls04.novagence.com
tls02.novagence.com
tls03.novagence.com
parking.novagence.fr
tls04.novagence.com
tls04.novagence.com
tls03.novagence.com
tls03.novagence.com
tls05.novagence.com

Certificate

The complete raw certificate details for tls02.novagence.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMdzCCC1+gAwIBAgISBG/XG2yZsJo9lEAO7wnERlofMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMDYyMTEyMDhaFw0y
MDA1MDYyMTEyMDhaMB4xHDAaBgNVBAMTE3RsczAyLm5vdmFnZW5jZS5jb20wggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/sKo0Vo0tNifHbTDsIxK9/Ese
13hoFN5g2ANO9JMNGblG2wVuXl4hUCXU4yeVzS/ISjc1Ilow+w8/CBcZF80bizE9
KhdBKQHyvxdyJ5MM23Ymn/Y80GnAjpqU0+oFm1QVtE4Ii0iXnNFZZXSjDfLqfAe8
r11+76VwUSkP3SqYkofL1PLHHAMyMgbHhMrfqYL+O4ZeQwJUwQkmqlcXtUsYCE+k
DUky844dRuUsB0STU5vMqONtqi+z00EYKozr8PR7QlWDQEDGbfpVaKu9+emHW93H
UugSBULItrAyWNlqEZYozqaYX3uTVh5G+qrML+Jb75okI8ditUxbhrhDDbqRAgMB
AAGjggmBMIIJfTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFKY+c9RGyG8PGzv9DR6o
w397r++QMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUF
BwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNy
eXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNy
eXB0Lm9yZy8wggc0BgNVHREEggcrMIIHJ4ISYWNpLXJlc2lzdGFuY2UuY29tghFh
Y2ktcmVzaXN0YW5jZS5mcoIOYWluLWZpYnJlcy5jb22CDWFpbi1maWJyZXMuZnKC
DWJlbGxpZ25hdC5jb22CDGJlbGxpZ25hdC5mcoIdYmlsbGlvbi1wbGFzdGljc21h
Y2hpbmVyeS5jb22CCmJpbGxpb24uZnKCEmNoLXBvbnRhbW91c3Nvbi5mcoIRZGV2
YXVkLWZyYW5jZS5jb22CEGRldmF1ZC1mcmFuY2UuZnKCEGRldmF1ZGZyYW5jZS5j
b22CD2RldmF1ZGZyYW5jZS5mcoIOZG1hLWdyb3VwZS5jb22CDWRtYS1ncm91cGUu
ZGWCDWRtYS1ncm91cGUuZnKCEGRtYS1tYWNoaW5lcy5jb22CD2RtYS1tYWNoaW5l
cy5mcoINZG1hLXByaW50LmNvbYIMZG1hLXByaW50LmZygg1kbWFncm91cGUuY29t
ggxkbWFncm91cGUuZGWCDGRtYWdyb3VwZS5mcoIPZG1sLXRvbGVyaWUuY29tgg5k
bWwtdG9sZXJpZS5mcoIPZW5zZWlnbmVzMDEuY29tgg5lbnNlaWduZXMwMS5mcoIV
ZmlicmVzLXRlY2huaXF1ZXMuY29tghRmaWJyZXMtdGVjaG5pcXVlcy5mcoIRaG9w
aXRhbC1wb21wZXkuZnKCDGlkcHJpbnQzZC5mcoIUaXNvbGF0aW9uY29uZm9ydC5j
b22CE2lzb2xhdGlvbmNvbmZvcnQuZnKCDWpjY29sb21iby5jb22CDGpjY29sb21i
by5mcoIYbGVzcGxhc3RpcXVlc2RlY29yZXMuY29tghdsZXNwbGFzdGlxdWVzZGVj
b3Jlcy5mcoISbWFlc3Ryby1wcm9qZWN0LmV1ggttYXJtZXRoLmNvbYIKbWFybWV0
aC5mcoIlbW90b2N1bHR1cmUwMS5tb24tcHJvamV0LWludGVybmV0LmNvbYIRcmVj
eWNsYWdlLWFpbi5jb22CEHJlY3ljbGFnZS1haW4uZnKCH3NhbmRib3gubW9uLXBy
b2pldC1pbnRlcm5ldC5jb22CFXNlcnJhbmQtcmVjeWNsYWdlLmNvbYIUc2VycmFu
ZC1yZWN5Y2xhZ2UuZnKCE3RsczAyLm5vdmFnZW5jZS5jb22CFnd3dy5hY2ktcmVz
aXN0YW5jZS5jb22CFXd3dy5hY2ktcmVzaXN0YW5jZS5mcoISd3d3LmFpbi1maWJy
ZXMuY29tghF3d3cuYWluLWZpYnJlcy5mcoIRd3d3LmJlbGxpZ25hdC5jb22CEHd3
dy5iZWxsaWduYXQuZnKCIXd3dy5iaWxsaW9uLXBsYXN0aWNzbWFjaGluZXJ5LmNv
bYIOd3d3LmJpbGxpb24uZnKCFnd3dy5jaC1wb250YW1vdXNzb24uZnKCFXd3dy5k
ZXZhdWQtZnJhbmNlLmNvbYIUd3d3LmRldmF1ZC1mcmFuY2UuZnKCFHd3dy5kZXZh
dWRmcmFuY2UuY29tghN3d3cuZGV2YXVkZnJhbmNlLmZyghJ3d3cuZG1hLWdyb3Vw
ZS5jb22CEXd3dy5kbWEtZ3JvdXBlLmRlghF3d3cuZG1hLWdyb3VwZS5mcoIUd3d3
LmRtYS1tYWNoaW5lcy5jb22CE3d3dy5kbWEtbWFjaGluZXMuZnKCEXd3dy5kbWEt
cHJpbnQuY29tghB3d3cuZG1hLXByaW50LmZyghF3d3cuZG1hZ3JvdXBlLmNvbYIQ
d3d3LmRtYWdyb3VwZS5kZYIQd3d3LmRtYWdyb3VwZS5mcoITd3d3LmRtbC10b2xl
cmllLmNvbYISd3d3LmRtbC10b2xlcmllLmZyghN3d3cuZW5zZWlnbmVzMDEuY29t
ghJ3d3cuZW5zZWlnbmVzMDEuZnKCGXd3dy5maWJyZXMtdGVjaG5pcXVlcy5jb22C
GHd3dy5maWJyZXMtdGVjaG5pcXVlcy5mcoIVd3d3LmhvcGl0YWwtcG9tcGV5LmZy
ghB3d3cuaWRwcmludDNkLmZyghh3d3cuaXNvbGF0aW9uY29uZm9ydC5jb22CF3d3
dy5pc29sYXRpb25jb25mb3J0LmZyghF3d3cuamNjb2xvbWJvLmNvbYIQd3d3Lmpj
Y29sb21iby5mcoIcd3d3Lmxlc3BsYXN0aXF1ZXNkZWNvcmVzLmNvbYIbd3d3Lmxl
c3BsYXN0aXF1ZXNkZWNvcmVzLmZyghZ3d3cubWFlc3Ryby1wcm9qZWN0LmV1gg93
d3cubWFybWV0aC5jb22CDnd3dy5tYXJtZXRoLmZyghV3d3cucmVjeWNsYWdlLWFp
bi5jb22CFHd3dy5yZWN5Y2xhZ2UtYWluLmZyghl3d3cuc2VycmFuZC1yZWN5Y2xh
Z2UuY29tghh3d3cuc2VycmFuZC1yZWN5Y2xhZ2UuZnIwTAYDVR0gBEUwQzAIBgZn
gQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5s
ZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwBep3P531bA
57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAXAcj3YLAAAEAwBIMEYCIQCwYAJ3
gLuMB+Gsa68uPIRCrEmJOrCTA5q5mAMPEdKxjAIhAPkseoOhSKsAwD+KXQtn8BEt
ndo4i4UJ7cFeYl25LKPvAHYAB7dcG+V9aP/xsMYdIxXHuuZXfFeUt2ruvGE6GmnT
ohwAAAFwHI92NAAABAMARzBFAiEA0nSd21Mcu2bjiGAWc1qkJZ3hscWxOs0TOju8
HMjRq8wCICmqHGjlnYJlOxKGDKYdG0VyoXnSROOs7IHiVKlMDxGLMA0GCSqGSIb3
DQEBCwUAA4IBAQAP8o/a01eZWGTlZlxY1ZoMFI/4MKCAtFu7KiUZeQqm0u5LTCeK
sp5KTcSapOeNWzzHxWX0cGWqF9dXuwglrb81RLFjaY2LWgckDtht4GbMIG+c/1hk
9zJHi7wtno/M3C7ndTEJZWavo/8lWy0Qf9TEZqY2ldS4Ulol59xEusetenTdkb8T
RfhVN6oU89AIY+cYiApKU/rLt7H2cerJUwgj0LqS/LyAiGxCOc27VApJAV/hTo3l
IUakGyokZfMQSDvFTf7qejG2VZlI3qKmk86jGScYiKre7tBDLuLGSqiaKFJzZOel
oZTksEvjz9GPzFE2MivVKKZtT7a8iCdW0Ult
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7CqNFaNLTYnx20w7CMS
vfxLHtd4aBTeYNgDTvSTDRm5RtsFbl5eIVAl1OMnlc0vyEo3NSJaMPsPPwgXGRfN
G4sxPSoXQSkB8r8XcieTDNt2Jp/2PNBpwI6alNPqBZtUFbROCItIl5zRWWV0ow3y
6nwHvK9dfu+lcFEpD90qmJKHy9TyxxwDMjIGx4TK36mC/juGXkMCVMEJJqpXF7VL
GAhPpA1JMvOOHUblLAdEk1ObzKjjbaovs9NBGCqM6/D0e0JVg0BAxm36VWirvfnp
h1vdx1LoEgVCyLawMljZahGWKM6mmF97k1YeRvqqzC/iW++aJCPHYrVMW4a4Qw26
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 386506412869050895270117184566972612237855
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-06 21:12:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-06 21:12:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls02.novagence.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24198632938416944878928694086524762194710163936815265770362908107503917927224763265105669374870357450957307350482678424350044240725625586159536677616023170275887763501374546495511521406251325399096148579162243525796667304743490068790836835075717567562488679054703272096484166979769476666853125089762272913739241898680161403754588115164231440371834461842076772688131253701658505363736687446413277633794464958827402313264862406814211525199902034288977904756237663061999517160819815514700182646243999102689492480580739331032167415045368404330621189210055935091546950342076365691771419671614968866016648037836081708513937
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a63e73d446c86f0f1b3bfd0d1ea8c37f7bafef90
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1835 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aci-resistance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aci-resistance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ain-fibres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ain-fibres.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellignat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellignat.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billion-plasticsmachinery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billion.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ch-pontamousson.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devaud-france.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devaud-france.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devaudfrance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devaudfrance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dma-groupe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dma-groupe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dma-groupe.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dma-machines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dma-machines.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dma-print.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dma-print.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmagroupe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmagroupe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmagroupe.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dml-tolerie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dml-tolerie.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enseignes01.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enseignes01.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fibres-techniques.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fibres-techniques.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hopital-pompey.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idprint3d.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isolationconfort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isolationconfort.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jccolombo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jccolombo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesplastiquesdecores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesplastiquesdecores.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maestro-project.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marmeth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marmeth.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motoculture01.mon-projet-internet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recyclage-ain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recyclage-ain.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.mon-projet-internet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serrand-recyclage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serrand-recyclage.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls02.novagence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aci-resistance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aci-resistance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ain-fibres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ain-fibres.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bellignat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bellignat.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.billion-plasticsmachinery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.billion.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ch-pontamousson.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devaud-france.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devaud-france.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devaudfrance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devaudfrance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dma-groupe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dma-groupe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dma-groupe.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dma-machines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dma-machines.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dma-print.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dma-print.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dmagroupe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dmagroupe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dmagroupe.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dml-tolerie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dml-tolerie.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enseignes01.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enseignes01.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fibres-techniques.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fibres-techniques.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hopital-pompey.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idprint3d.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.isolationconfort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.isolationconfort.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jccolombo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jccolombo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lesplastiquesdecores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lesplastiquesdecores.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maestro-project.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marmeth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marmeth.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recyclage-ain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recyclage-ain.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.serrand-recyclage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.serrand-recyclage.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001701c8f760b0000040300483046022100b060027780bb8c07e1ac6baf2e3c8442ac49893ab093039ab998030f11d2b18c022100f92c7a83a148ab00c03f8a5d0b67f0112d9dda388b8509edc15e625db92ca3ef00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001701c8f76340000040300473045022100d2749ddb531cbb66e3886016735aa4259de1b1c5b13acd133a3bbc1cc8d1abcc022029aa1c68e59d82653b12860ca61d1b4572a179d244e3acec81e254a94c0f118b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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