www.lvmh.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b8:7f:a2:0e:77:bb:50:50:8f:68:48:ae:8e:47:5d:84:27 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.lvmh.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b8:7f:a2:0e:77:bb:50:50:8f:68:48:ae:8e:47:5d:84:27
Serial Number (int): 324118466709729040756724951999199489917991
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5b:0a:1d:26:55:1d:a8:74:1e:f0:56:0a:ac:e9:9c:fb:53:fb:53:c8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9d:64:bd:ca:b9:9e:ad:92:5f:5e:3e:53:2d:72:19:dc:84:51:07:06
Fingerprint (sha256): 02:2f:bc:a3:e0:a0:fc:28:c6:14:93:00:6d:09:70:80:d7:32:4e:58:7d:37:40:4e:3f:b5:ed:c8:ff:ec:3a:d7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.lvmh.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lvmh.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

allmynet.lvmh-pc.com
api.dior.cn
api.dior.com
at.loropiana.com
back-artofgift.dior.cn
baguette.uat.fendi.com
be.loropiana.com
bg.loropiana.com
cdnakamai.lvmh-pc.com
cdninsideguerlain.lvmh-pc.com
cn.loropiana.com
cy.loropiana.com
cz.loropiana.com
de.loropiana.com
dior.cn
diorinlondon.dior.com
dk.loropiana.com
ee.loropiana.com
ememberclub.dior.cn
es.loropiana.com
fi.loropiana.com
fr.loropiana.com
friendsandfamilysales.loropiana.com
gr.loropiana.com
hr.loropiana.com
hu.loropiana.com
hublot.cn
hublot.com
icom-2018.fendi.com
ie.loropiana.com
ii.loropiana.com
images.uat.fendi.ows.farm
it.loropiana.com
jp.loropiana.com
lt.loropiana.com
lu.loropiana.com
lv.loropiana.com
m.dior.cn
m.dior.com
m.guerlain.com
m.guerlain.com.cn
m.preprod.zenith-watches.com
mc.loropiana.com
media.dior.cn
media.dior.com
media.icom-2018.fendi.com
media.loropiana.com
mt.loropiana.com
nl.loropiana.com
pl.loropiana.com
posh.retail.hublot.com
preprod-akamai.hubmag-ew01.msp.fr.clara.net
preprod-tmc.lvmh.fr
preprod.lvmh-static.com
preprod.lvmh.cn
preprod.lvmh.co.jp
preprod.lvmh.com
preprod.lvmh.fr
preprod.lvmh.it
preprod.lvmh.jp
preprod.lvmh.ru
preprod.zenith-watches.com
pt.loropiana.com
reservation.guerlain.com
retail-preprod.hublot.com
retail.hublot.com
ro.loropiana.com
ru.loropiana.com
se.loropiana.com
secure-m.dior.com
si.loropiana.com
sk.loropiana.com
staging-ps.fendi.com
static.uat.fendi.ows.farm
stores.guerlain.com
straps-preprod.hublot.com
straps.hublot.com
textile.loropiana.com
tutorial.hublot.com
tutorial2.hublot.com
uat-ps.fendi.com
uat.fendi.ows.farm
uk.loropiana.com
us.loropiana.com
vip.hublot.com
wws.dior.com
www.12bis.chaumet.com
www.dior.cn
www.dior.com
www.guerlain.com
www.guerlain.com.cn
www.hublot.cn
www.hublot.com
www.lanature.chaumet.com
www.lvmh.com
www.makeupforever.cn
www.makeupforever.com
www.marcodevincenzo.com
wwws.dior.com

Other certificates including the domain name lvmh.com

(limited to 100 certificates)
www.lvmh.com
preprod.lvmh.com
www.lvmh.com
accreditation.lumanity.com
alumnicredentials.kcl.ac.uk
preprod.lvmh.com
compliance.lvmh.com
retailerid.lvmh.com
achievements.launchyou.com
www.lvmh.com
achievements.launchyou.com
www.lvmh.com
publiccert.lvmh.com
support12.cdnetworks.net
support12.cdnetworks.net
preprod.lvmh.com
preprod.lvmh.com
gaia.lvmh.com.dev-gcp.lvmh.lbn.fr
virtualapartment.lvmh.com
www.lvmh.com
accreditation.lumanity.com
preprod.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
www.lvmh.com
achievements.launchyou.com
www.lvmh.com
dbt.lvmh.com
preprod.lvmh.com
www.lvmh.com
preprod.lvmh.com
support12.cdnetworks.net
achievements.launchyou.com
www.lvmh.com
support12.cdnetworks.net
accreditation.lumanity.com
www.lvmh.com
cdn06.cdnsvc.com
preprod.lvmh.com
lvmh.fr
www.lvmh.com
www.lvmh.com
cdn06.cdnsvc.com
accreditation.lumanity.com
preprod.lvmh.com
*.lvmh.com
accreditation.lumanity.com
spring.lvmh.com
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
san-13-s50.tlsprovisioning.exacttarget.com
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
www.lvmh.com
www.lvmh.com
support12.cdnetworks.net
www.lvmh.com
san-13-s50.tlsprovisioning.exacttarget.com
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
shero.lvmh.com
preprod.lvmh.com
support12.cdnetworks.net
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
preprod.lvmh.com
support12.cdnetworks.net
lvmh.fr
support12.cdnetworks.net
www.lvmh.com
preprod.lvmh.com
support12.cdnetworks.net
preprod.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
lamaisondesstartups.lvmh.com
www.lvmh.com
living.lvmh.com
game.cybertraining.lvmh.com
support12.cdnetworks.net
san-13-s50.tlsprovisioning.exacttarget.com
preprod.lvmh.com
www.lvmh.com
*.chic.lvmh.com
lvmh.fr
online-media-builder.lvmh.com
support12.cdnetworks.net
cdn06.cdnsvc.com
lvmh.fr
www.lvmh.com
accreditation.lumanity.com
tr.openinnovation.lvmh.com
accreditation.lumanity.com
link.bein.lvmh.com
preprod.lvmh.com

Certificate

The complete raw certificate details for www.lvmh.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnW9POB3oKgdJoI+3p2vZ
gqX8K85v1IBdxX5T3qEzcwEE0edc3MDshVH615zixzRZOJKbnFNsvZe1meFMav6G
lCRriFThhBo0NtHmMYF4mUByNlOU8tuRrFHZXLzeD4DNRGDUlPijN6RRoJOWivG7
BKE0k8wni0EAU2Qft0oEH+82zWDDJchuPWvMEfwI7yyuaKTPdgJ0744Ii7jVK0eU
8qggN0emzhccxQpS6/swHAfyfU8NQtPzuo2/B1pbAs0z0qrSjp2Sb5icxnmG9gM9
y3SHNYt9QTJ4WBXLiegdXSGVF0zof3OVZ+ti/c0CyOMumRelTC9JcXj1l/pROu/g
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324118466709729040756724951999199489917991
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-05 16:56:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-06 16:56:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lvmh.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19874302615209610247387395596900754889568479038202729945646656359816277910238416321608538472181615833394983313660734686416354866023840885505213797234628411912889304026693026995507537806879592006116799114202439447815172187217776470468018524873353658724086630137578664242965854490096385110748535801228932783418203412520624706552523277037647782058743545938343954854336818044839427616623114375141954498374094908962071732413051410845445497244777369414505354177571937988274760607938230653167090038023122217838606825954163635397546428936032466867496335805958684128575654425573738137822185598419769702967643238548671432745059
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5b0a1d26551da8741ef0560aace99cfb53fb53c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1947 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allmynet.lvmh-pc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.dior.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.dior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'at.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'back-artofgift.dior.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baguette.uat.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bg.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdnakamai.lvmh-pc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdninsideguerlain.lvmh-pc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cy.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cz.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dior.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diorinlondon.dior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dk.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ee.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ememberclub.dior.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fi.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friendsandfamilysales.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gr.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hr.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hu.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hublot.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hublot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icom-2018.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ie.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ii.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.uat.fendi.ows.farm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jp.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lt.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lu.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lv.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.dior.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.dior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.guerlain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.guerlain.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.preprod.zenith-watches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mc.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.dior.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.dior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.icom-2018.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mt.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nl.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'posh.retail.hublot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-akamai.hubmag-ew01.msp.fr.clara.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-tmc.lvmh.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh-static.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.zenith-watches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pt.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservation.guerlain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retail-preprod.hublot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retail.hublot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ro.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ru.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'se.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-m.dior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'si.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sk.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-ps.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.uat.fendi.ows.farm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.guerlain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'straps-preprod.hublot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'straps.hublot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'textile.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tutorial.hublot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tutorial2.hublot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-ps.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.fendi.ows.farm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vip.hublot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wws.dior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.12bis.chaumet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dior.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guerlain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guerlain.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hublot.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hublot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lanature.chaumet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lvmh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.makeupforever.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.makeupforever.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marcodevincenzo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwws.dior.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000168bece3c6b00000403004630440220222f3c62250a35d2a97abb90e17cdfd98538e1efba07b4fcf3826f63aaf77a5802202d19ac663c6d883296faa65faec3ee1571dfa94cb5acf7520bbc82aad5e2cf9000770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000168bece3c6c0000040300483046022100cbd7bee917baedfa3b8fd7efceac3f0fcef052fdebaab229c9c87efefb2d4ed70221009ad742e5be71750c81f5571165d6537632544641f06ccfc49765f4f80adae293
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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