sourdline.com

Issued by R3

About this certificate

This digital certificate with serial number 04:a5:52:e5:ce:2e:50:d4:ae:63:d1:ca:cc:57:a4:05:85:6c was issued on by Let's Encrypt.

With 68 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sourdline.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:a5:52:e5:ce:2e:50:d4:ae:63:d1:ca:cc:57:a4:05:85:6c
Serial Number (int): 404705924182476690379550299470686111237484
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b5:95:6a:15:ad:51:89:5e:8d:5e:03:79:32:db:83:7f:56:77:5f:d3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 50:df:bc:0a:43:25:5b:fc:5b:d3:d1:50:b2:36:45:e5:e1:d7:2a:e0
Fingerprint (sha256): 77:04:2c:c5:76:a6:4d:d5:0f:8f:d4:4b:af:76:da:bf:84:7a:a9:b5:c5:15:75:28:86:f2:12:1a:dc:9e:0d:49

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sourdline.com

68

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sourdline.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aesio.sourdline.com
afg.sourdline.com
auchan.sourdline.com
biocoop.sourdline.com
bonduelle.sourdline.com
bricodepot.sourdline.com
btbd.sourdline.com
but.sourdline.com
carglass.sourdline.com
cassegrain.sourdline.com
castorama.sourdline.com
chevillylarue.sourdline.com
cnp.sourdline.com
cogedim.sourdline.com
conforama.sourdline.com
cora.sourdline.com
coriolis.sourdline.com
dacia.sourdline.com
dashboard.sourdline.com
dior-couture.sourdline.com
dior-parfums.sourdline.com
eit.sourdline.com
galeries-lafayette.sourdline.com
gestion.sourdline.com
grandreims.sourdline.com
guerlain.sourdline.com
harmonie-mutuelle.sourdline.com
hautsdeseinehabitat.sourdline.com
huawei.sourdline.com
kiabi-es.sourdline.com
kiabi-it.sourdline.com
kiabi.sourdline.com
lacoste.sourdline.com
lagarennecolombes.sourdline.com
laredoute.sourdline.com
leclerc.sourdline.com
leroymerlin.sourdline.com
louisvuitton.sourdline.com
macif.sourdline.com
marionnaud.sourdline.com
matmut.sourdline.com
mr-bricolage.sourdline.com
nanterre.sourdline.com
norauto-contact.sourdline.com
norauto.sourdline.com
partage.sourdline.com
pimkie.sourdline.com
reims.sourdline.com
renault.sourdline.com
sephora.sourdline.com
sony.sourdline.com
sonyelectronics.sourdline.com
sonymobile.sourdline.com
sonyplaystation.sourdline.com
sourdline.com
sourdline.dacia.fr
sourdline.renault.fr
startpeople.sourdline.com
totalenergies.sourdline.com
upsa.sourdline.com
veepee-es.sourdline.com
veepee-it.sourdline.com
veepee.sourdline.com
villedepau.sourdline.com
www.sourdline.com
yves-rocher.sourdline.com
zara.sourdline.com
zoom.test.sourdline.com

Other certificates including the domain name sourdline.com

(limited to 100 certificates)
sourdline.com
sourdline.com
sourdline.com
sourdline.com
sourdline.com
sourdline.com
sourdline.com
sourdline.com
sourdline.com
sourdline.com
sourdline.com
sourdline.com
sourdline.com
sourdline.com
sourdline.com
sourdline.com
*.sourdline.com
sourdline.com
jenkins.sourdline.com
sourdline.com
*.sourdline.com
sourdline.com
sourdline.com
sourdline.com
kanboard.sourdline.com
sourdline.com
sourdline.com
sourdline.com
sourdline.com
sourdline.com
sourdline.com
sourdline.com
sourdline.com
sourdline.com
sourdline.com
sourdline.com
sourdline.com
*.sourdline.com
sourdline.com
sourdline.com
sourdline.com
gitlab.sourdline.com
sourdline.com
sourdline.com
sourdline.com
sourdline.com
sourdline.com
sourdline.com
sourdline.com
*.sourdline.com
sourdline.com
sourdline.com
sourdline.com
sourdline.com
sourdline.com
sourdline.com
sourdline.com
sourdline.com
sourdline.com
sourdline.com
sourdline.com
sourdline.com
sourdline.com
rancher.sourdline.com
sourdline.com
sourdline.com
sourdline.com
sourdline.com
*.sourdline.com
www.sourdline.com
sourdline.com
sourdline.com
sourdline.com
sourdline.com

Certificate

The complete raw certificate details for sourdline.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0obrvHL8Yh9X2/ItS6UW
iroE/HjRdKY1QLm/wyoX+Gq+eVCV/+1GO4h5zLJCZ+k0B6BiyQyIBOthNmoxi4Dd
JWY+jDQ5NlBZ+DmFeq4NZFh+GRY/q+DeD0vIl1+1Hr3IzJabBQ+LcX5QCo1zVBZh
ON8w94UXIP67bQT3OuNTGDT4U7nLwEfQDViCBYNxIdV/2pk0EnR3vVJcF2eY0AMn
9+K0Pvxc2yebu3YaYshsS401Brp1TElggGerXVA/te6k7imNvapgwC0CkvPsee64
1Iodc1ndTSkLO/+JOU8CrpFz3VxIpS/x0ZMmayvI/gU6UFHyjQLebXAL5jbBdfpV
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 404705924182476690379550299470686111237484
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-05 15:44:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-04 15:44:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sourdline.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26576575990854621412301535905134416931992803335597634146725409963453336631928292930835206718009048069052650935092473596308255409072668510615206744064401139000992978015547944131790149027029278907564630036349986706755821808926989440581044151388799249191977879012225895908306397297368511057392090014848780146516009205310779522395979176111808146245993478451402537734258665303142725861196942209328579836739731643210355322146625224143228701751463553264247045618194195017434855761906342909749964808087989152488259236675162248425742966169829414659333301690721696804541167177458036558912185711648975898128424105223771972588891
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b5956a15ad51895e8d5e037932db837f56775fd3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1657 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aesio.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afg.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auchan.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biocoop.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonduelle.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bricodepot.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btbd.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'but.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carglass.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cassegrain.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castorama.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chevillylarue.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnp.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogedim.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conforama.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cora.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coriolis.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dacia.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dior-couture.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dior-parfums.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eit.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galeries-lafayette.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gestion.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandreims.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guerlain.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harmonie-mutuelle.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hautsdeseinehabitat.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huawei.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiabi-es.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiabi-it.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiabi.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacoste.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagarennecolombes.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laredoute.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leclerc.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leroymerlin.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'louisvuitton.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macif.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marionnaud.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matmut.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mr-bricolage.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanterre.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norauto-contact.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norauto.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partage.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pimkie.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reims.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renault.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sephora.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sony.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonyelectronics.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonymobile.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonyplaystation.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourdline.dacia.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourdline.renault.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startpeople.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totalenergies.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upsa.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veepee-es.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veepee-it.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veepee.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'villedepau.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yves-rocher.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zara.sourdline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zoom.test.sourdline.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018eaf254ed400000403004630440220372b7b1f569a79de828bf8006193a7c66c80f0cbf23565eb0055d4daad1deafc022036c1f81e5460e9a6bf8ffeac3c164c0b8069f312a15c5551797e3b7508453fe9007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018eaf254fcd00000403004730450221008d3125cf36a4e3cdfb91f2af514ef47e1c3c956b911115bc78538381e04307d302203ec45dc04c55bead1ef42a0b955a59d9b8584bbf54332969f60d643f32a48362
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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