em.grands-meres.net

Issued by R3

About this certificate

This digital certificate with serial number 04:eb:f9:86:cf:48:21:7d:2e:04:a0:9b:ca:5d:95:47:72:5c was issued on by Let's Encrypt.

With 62 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=em.grands-meres.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:eb:f9:86:cf:48:21:7d:2e:04:a0:9b:ca:5d:95:47:72:5c
Serial Number (int): 428747177696364593214932486335314298106460
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 4a:d6:c2:83:67:72:e3:ab:17:dd:1c:cc:6b:c9:9b:b7:a8:13:51:33
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4c:40:58:dd:44:0a:df:62:55:8b:8f:84:ad:09:b1:e5:84:60:b4:75
Fingerprint (sha256): c7:d5:56:0d:88:53:3e:81:42:5d:c3:37:95:eb:c7:92:8b:d0:7c:a7:c5:62:29:51:f5:bc:46:02:9d:5b:0e:46

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate em.grands-meres.net

62

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for em.grands-meres.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

asset.azdmp.com
asset.cardata.fr
em.cybercartes.com
em.grands-meres.net
emnl.thalasseo.com
rtg-sq.hopmailing.com
rtg-sq.mediabeille.com
sq.1jouruneoffre.com
sq.chichaylimona.com
sq.e-sante.fr
sq.easyvoyage.com
sq.jobkiero.com
sq.leclubdesbonsplans.com
sq.medisite.fr
sq.planet.fr
sqa.azandclic.com
sqa.bargain-place.com
sqa.business-crossing.com
sqa.crossing-sale.com
sqa.follow-mail.com
sqa.follow-up-ok.com
sqa.freewayads.com
sqa.goldandclick.com
sqa.inmyway.fr
sqa.likads.com
sqa.sale-palace.com
sqa.viewclic.com
sqd.mdbpodv.fr
sqd.officiel-des-vacances.com
sqdt.futurasciences.fr
sqdt.mconso.fr
squa.avisdebonsplans.com
squa.comptoirdesreducs.eu
squa.comptoirshopping.eu
squa.consommermoinscher.eu
squa.dealexceptionnel.eu
squa.enviedbonsplans.eu
squa.francereduc.eu
squa.ideemaline.eu
squa.lafoireauxaffaires.eu
squa.lagendadesventesprivees.com
squa.lalettredesentrepreneurs.eu
squa.lamaisonindigoo.eu
squa.laselectiondegedeon.com
squa.lastucedejour.eu
squa.lastucieux.eu
squa.lesbonkdo.eu
squa.lesprivileges.net
squa.madestine.eu
squa.maselectionshopping.com
squa.matendanceshopping.eu
squa.mestrucsetastuces.eu
squa.promoenexclu.eu
squa.reducsweekend.eu
squa.shoprivileges.eu
squa.shoptapromo.com
squa.squakon.eu
squa.squatiki.eu
squa.supermalin.eu
squa.temprikon.eu
squa.trk-wm.com
squa.uneproposition.eu

Other certificates including the domain name grands-meres.net

(limited to 100 certificates)
marfeel.map.fastly.net
jc17.grands-meres.net
squa.enviedbonsplans.eu
p19.base-deal.eu
static.grands-meres.net
grands-meres.net
p19.deal-envoi.com
marfeel.map.fastly.net
gm16.grands-meres.net
marfeel.map.fastly.net
grands-meres.net
marfeel.map.fastly.net
marfeel.map.fastly.net
gm16.grands-meres.net
grands-meres.net
jc17.grands-meres.net
static.grands-meres.net
marfeel.map.fastly.net
squad.leservicedesastuces.fr
marfeel.map.fastly.net
marfeel.map.fastly.net
static.grands-meres.net
jc18.grands-meres.net
marfeel.map.fastly.net
grands-meres.net
grands-meres.net
test.openask.net
sdt.grands-meres.net
em.cybercartes.com
em.auto-moto.com
marfeel.map.fastly.net
www.grands-meres.net
grands-meres.net
jc18.grands-meres.net
marfeel.map.fastly.net
marfeel.map.fastly.net
jc18.grands-meres.net
sdt.grands-meres.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
jc17.grands-meres.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
grands-meres.net
www.grands-meres.net
marfeel.map.fastly.net
marfeel.map.fastly.net
em.auto-moto.com
grands-meres.net
em.auto-moto.com
gm16.grands-meres.net
grands-meres.net
asset.azdmp.com
quiz.openask.net
marfeel.map.fastly.net
design-system.digital.mod.uk
em.auto-moto.com
*.grands-meres.net
marfeel.map.fastly.net
jc17.grands-meres.net
grands-meres.net
*.grands-meres.net
jc17.grands-meres.net
marfeel.map.fastly.net
grands-meres.net
jc18.grands-meres.net
grands-meres.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
static.grands-meres.net
grands-meres.net
em.cybercartes.com
static.grands-meres.net
sdt.grands-meres.net
marfeel.map.fastly.net
em.grands-meres.net
sdt.grands-meres.net
jc17.grands-meres.net
em.auto-moto.com
marfeel.map.fastly.net
marfeel.map.fastly.net
jc17.grands-meres.net
gm16.grands-meres.net
marfeel.map.fastly.net
grands-meres.net
sdt.grands-meres.net
jc17.grands-meres.net
grands-meres.net
static.grands-meres.net
marfeel.map.fastly.net
static.grands-meres.net
em.auto-moto.com
marfeel.map.fastly.net
marfeel.map.fastly.net
grands-meres.net
marfeel.map.fastly.net

Certificate

The complete raw certificate details for em.grands-meres.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILQjCCCiqgAwIBAgISBOv5hs9IIX0uBKCbyl2VR3JcMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMDQwNjAwNTJaFw0yNDAzMDMwNjAwNTFaMB4xHDAaBgNVBAMT
E2VtLmdyYW5kcy1tZXJlcy5uZXQwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK
AoICAQCuXU4oWBTkan+fy+J4PaR2rqZ3Ib8yxooLxFTeKn3dpaoSo7xQ6bLFZTfA
epyAmOrdF9wDpgNAyt1ie6aq3cO33EYoTRpZ7QXFr9im5yClT0cNDTqFWY2olQl6
RLiZAOgsL2675kQmjbVnP5bZEwuJmwD+zcOEV4UHV2D4U4059rB1mczOstOsZEPI
uOF55fTytjB6KqLKoog3MejbLv9j6gHr6ZvfAF1/a1JhDA73Regyh1b1zZs0Yysv
4j6ZY/sTJoxAYjUWmG7xnwTPz8RM6RMEwdA5hcK9NBv6WJqkMMwgmc/dmjyPZDnx
LD6v5x4Om4GvgYETUu0P19d4ban+/jzq1HQd3zW7rox7uguStcfcobitpRV/shPj
qEIkg52lGnmI3tJpY1kBC86Fjy6qW/OHpyu+f+P/OxGz7DYEfsbc3PvzZG2Ss+GX
AjOI09d+CgiQ2tM5w/sKgPzUex1Oz434Cv91dUh/gVc5eQtPoh6c4N+IrwQjD2VI
VacApL9S6NriQwGdfLI10CCde9Cr8g5SSIKC7gcyTpF9kHybp8d8/qmsHubUTQXq
L4d4HrRNYfDlFGAhv/HqaAP9Renyx/ItQj0AN8mPN2PzLMkH2QRjfGZj4QWG0+sN
hMQ/ByZMM+Zfp7var4r7PaQb/dSaADS8HSPMUknp7MfDQ0YzBQIDAQABo4IHZDCC
B2AwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRK1sKDZ3LjqxfdHMxryZu3qBNRMzAf
BgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcw
IQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYW
aHR0cDovL3IzLmkubGVuY3Iub3JnLzCCBWwGA1UdEQSCBWMwggVfgg9hc3NldC5h
emRtcC5jb22CEGFzc2V0LmNhcmRhdGEuZnKCEmVtLmN5YmVyY2FydGVzLmNvbYIT
ZW0uZ3JhbmRzLW1lcmVzLm5ldIISZW1ubC50aGFsYXNzZW8uY29tghVydGctc3Eu
aG9wbWFpbGluZy5jb22CFnJ0Zy1zcS5tZWRpYWJlaWxsZS5jb22CFHNxLjFqb3Vy
dW5lb2ZmcmUuY29tghRzcS5jaGljaGF5bGltb25hLmNvbYINc3EuZS1zYW50ZS5m
coIRc3EuZWFzeXZveWFnZS5jb22CD3NxLmpvYmtpZXJvLmNvbYIZc3EubGVjbHVi
ZGVzYm9uc3BsYW5zLmNvbYIOc3EubWVkaXNpdGUuZnKCDHNxLnBsYW5ldC5mcoIR
c3FhLmF6YW5kY2xpYy5jb22CFXNxYS5iYXJnYWluLXBsYWNlLmNvbYIZc3FhLmJ1
c2luZXNzLWNyb3NzaW5nLmNvbYIVc3FhLmNyb3NzaW5nLXNhbGUuY29tghNzcWEu
Zm9sbG93LW1haWwuY29tghRzcWEuZm9sbG93LXVwLW9rLmNvbYISc3FhLmZyZWV3
YXlhZHMuY29tghRzcWEuZ29sZGFuZGNsaWNrLmNvbYIOc3FhLmlubXl3YXkuZnKC
DnNxYS5saWthZHMuY29tghNzcWEuc2FsZS1wYWxhY2UuY29tghBzcWEudmlld2Ns
aWMuY29tgg5zcWQubWRicG9kdi5mcoIdc3FkLm9mZmljaWVsLWRlcy12YWNhbmNl
cy5jb22CFnNxZHQuZnV0dXJhc2NpZW5jZXMuZnKCDnNxZHQubWNvbnNvLmZyghhz
cXVhLmF2aXNkZWJvbnNwbGFucy5jb22CGXNxdWEuY29tcHRvaXJkZXNyZWR1Y3Mu
ZXWCGHNxdWEuY29tcHRvaXJzaG9wcGluZy5ldYIac3F1YS5jb25zb21tZXJtb2lu
c2NoZXIuZXWCGHNxdWEuZGVhbGV4Y2VwdGlvbm5lbC5ldYIXc3F1YS5lbnZpZWRi
b25zcGxhbnMuZXWCE3NxdWEuZnJhbmNlcmVkdWMuZXWCEnNxdWEuaWRlZW1hbGlu
ZS5ldYIac3F1YS5sYWZvaXJlYXV4YWZmYWlyZXMuZXWCIHNxdWEubGFnZW5kYWRl
c3ZlbnRlc3ByaXZlZXMuY29tgiBzcXVhLmxhbGV0dHJlZGVzZW50cmVwcmVuZXVy
cy5ldYIXc3F1YS5sYW1haXNvbmluZGlnb28uZXWCHHNxdWEubGFzZWxlY3Rpb25k
ZWdlZGVvbi5jb22CFXNxdWEubGFzdHVjZWRlam91ci5ldYISc3F1YS5sYXN0dWNp
ZXV4LmV1ghFzcXVhLmxlc2Jvbmtkby5ldYIWc3F1YS5sZXNwcml2aWxlZ2VzLm5l
dIIRc3F1YS5tYWRlc3RpbmUuZXWCHHNxdWEubWFzZWxlY3Rpb25zaG9wcGluZy5j
b22CGnNxdWEubWF0ZW5kYW5jZXNob3BwaW5nLmV1ghlzcXVhLm1lc3RydWNzZXRh
c3R1Y2VzLmV1ghRzcXVhLnByb21vZW5leGNsdS5ldYIVc3F1YS5yZWR1Y3N3ZWVr
ZW5kLmV1ghVzcXVhLnNob3ByaXZpbGVnZXMuZXWCFHNxdWEuc2hvcHRhcHJvbW8u
Y29tgg9zcXVhLnNxdWFrb24uZXWCEHNxdWEuc3F1YXRpa2kuZXWCEnNxdWEuc3Vw
ZXJtYWxpbi5ldYIRc3F1YS50ZW1wcmlrb24uZXWCD3NxdWEudHJrLXdtLmNvbYIW
c3F1YS51bmVwcm9wb3NpdGlvbi5ldTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMG
CisGAQQB1nkCBAIEgfQEgfEA7wB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7
v6s52IRzAAABjDOhOM0AAAQDAEcwRQIhAMrjhkfLU1dEclgZowJc3MOV4451rvpN
BQKHoayWVv9KAiAKIASGl2Sxo5WoR6PEGcl/iEnFJDdiQcECTxHY75nqhgB1AHb/
iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABjDOhObcAAAQDAEYwRAIg
DjsawJhZHSNwSW4yn8wJdpgezEB9aITMEZrdtAcVmUwCIE62RNSPL2O0byv8pb+S
uVnW9ctfMXx7rRGnaJGBD+3lMA0GCSqGSIb3DQEBCwUAA4IBAQAVSj7NTzlqlAnP
Gz7vMJrO+6pSybQZDmGSIw+ly9+l+7XYufr2E4zPfnABLdmLBvssb39o91KRCMZH
3G4L1U1ZTNXaL2kZmKcLQ46XiXiXWJYob9I14jz3v01lg8FSl7owe9NsRMfuy2QB
fvnFm813c2BXqEJytdB0lM6eghlVTpqEsBDPx4a3KsxiZZ+z2ttPhyw/nnU0veFi
zmfUX6pt6c1V8fl1CqmA3rWDYe/RY1QvCSR5eWw889IxHow8i2sQDqWHkZZPQe2q
k7vNFBE73BK02wLuJvkzOsYRSxLX170dDidE3BPn8weTd3ahVnfEnd5RIrpHaiSr
v21ddak6
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 428747177696364593214932486335314298106460
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-04 06:00:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-03 06:00:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'em.grands-meres.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 711344991375788842889212446485572241504105762925490702652599359624247046004809591630376734841769314518761836988550676468601256089367667373211189954591248301423223604314823863685927522788867416260036177094032808439109955721709672643119187061672740619219124554170621741751244724909120078236773142420247584909947969089812337252733628612735389771969727541128025460725284253410947557978992305939141128023162529793520611635605162909195251994343770167006775947755701325535370697516738737135708255651555859740598315509880772869562963409274063781780176232393194189342786900159891224822286598732150488973907720016960516349696013565381661809655098069640345292242963208126483450838993165889123051728407247529765206462407680779321263720507076139214949512797957932530818939274210407719042585284053614245250114968028499725272127904942406393633175299272097067332713495948655821011470799023941972733093284179570457455978198822362409480728861917500840790984718067470226554539119925794740611725631581220971861696400690958422983400772552176891796543843724229318630138745103073809938914435098777460519474440982822148782703991856367768120057450577200551391214520330254771006427475600914391477935959540194801262328173996781856704573663394082121323941081861
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4ad6c2836772e3ab17dd1ccc6bc99bb7a8135133
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1379 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asset.azdmp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asset.cardata.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'em.cybercartes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'em.grands-meres.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emnl.thalasseo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtg-sq.hopmailing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtg-sq.mediabeille.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sq.1jouruneoffre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sq.chichaylimona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sq.e-sante.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sq.easyvoyage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sq.jobkiero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sq.leclubdesbonsplans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sq.medisite.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sq.planet.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sqa.azandclic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sqa.bargain-place.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sqa.business-crossing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sqa.crossing-sale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sqa.follow-mail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sqa.follow-up-ok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sqa.freewayads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sqa.goldandclick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sqa.inmyway.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sqa.likads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sqa.sale-palace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sqa.viewclic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sqd.mdbpodv.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sqd.officiel-des-vacances.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sqdt.futurasciences.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sqdt.mconso.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squa.avisdebonsplans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squa.comptoirdesreducs.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squa.comptoirshopping.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squa.consommermoinscher.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squa.dealexceptionnel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squa.enviedbonsplans.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squa.francereduc.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squa.ideemaline.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squa.lafoireauxaffaires.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squa.lagendadesventesprivees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squa.lalettredesentrepreneurs.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squa.lamaisonindigoo.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squa.laselectiondegedeon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squa.lastucedejour.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squa.lastucieux.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squa.lesbonkdo.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squa.lesprivileges.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squa.madestine.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squa.maselectionshopping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squa.matendanceshopping.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squa.mestrucsetastuces.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squa.promoenexclu.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squa.reducsweekend.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squa.shoprivileges.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squa.shoptapromo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squa.squakon.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squa.squatiki.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squa.supermalin.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squa.temprikon.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squa.trk-wm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squa.uneproposition.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c33a138cd0000040300473045022100cae38647cb535744725819a3025cdcc395e38e75aefa4d050287a1ac9656ff4a02200a2004869764b1a395a847a3c419c97f8849c524376241c1024f11d8ef99ea8600750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c33a139b7000004030046304402200e3b1ac098591d2370496e329fcc0976981ecc407d6884cc119addb40715994c02204eb644d48f2f63b46f2bfca5bf92b959d6f5cb5f317c7bad11a76891810fede5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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