TLSA records of mail.apteo.com don't match its certs.

[vdukhovni]

apteo.com
apteo.fr
bajoo.be
bajoo.biz
bajoo.eu
bajoo.fr
bajoo.info
bajoo.net
bajoo.org
bjsecurite.be
bjsecurite.biz
bjsecurite.com
bjsecurite.eu
bjsecurite.fr
bjsecurite.info
bjsecurite.net
bjsecurite.org
bjsoft.biz
colliat-acker.com
colliat-acker.fr
colliat.com
colliat.fr
colpic.be
colpic.biz
colpic.com
colpic.eu
colpic.fr
colpic.info
colpic.net
colpic.org
digyneo.be
digyneo.biz
digyneo.com
digyneo.fr
digyneo.info
digyneo.net
digyneo.org
digyneo.shop
dixit-call.be
dixit-call.biz
dixit-call.com
dixit-call.eu
dixit-call.fr
dixit-call.info
dixit-call.net
dixit-call.org
dixitcall.be
dixitcall.biz
dixitcall.com
dixitcall.eu
dixitcall.fr
dixitcall.info
dixitcall.net
dixitcall.org
imprimdirect.fr
imprimshop.com
imprimshop.fr
moncrm.eu
moncrm.net
moncrm.org
security-and-serenity.be
security-and-serenity.biz
security-and-serenity.com
security-and-serenity.eu
security-and-serenity.fr
security-and-serenity.info
security-and-serenity.net
security-and-serenity.org
trydent.be
trydent.biz
trydent.fr
trydent.info

[desh-se]

It wasn't overly easy to find contacts for those domains, but I've emailed postmaster@ and contacted one of the domains on https://www.bajoo.fr/en/contact-us/

[vdukhovni]

I've done the same. This is not the first time these domains have had incorrect DANE TLSA records. Also slow to resolve some of the previous times (2015/10/29, 2016/08/01, 2016/10/02 and 2017/11/16).