www.yves-rocher.fr

- Laboratoires de Biologie Vegetale Yves Rocher -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 71:c0:5a:d0:62:b8:be:cf:00:00:00:00:50:f8:f2:0f was issued on by Entrust, Inc..

With 82 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Laboratoires de Biologie Vegetale Yves Rocher

Organization: Laboratoires de Biologie Vegetale Yves Rocher
Locality: Morbihan
Country: FR

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 71:c0:5a:d0:62:b8:be:cf:00:00:00:00:50:f8:f2:0f
Serial Number (int): 151201526447409186541537104811647365647
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: ca:24:ad:4e:11:ab:9a:5f:41:d7:9c:05:1d:75:85:2b:80:ad:31:44
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 5c:1b:9b:4e:41:98:87:29:c4:a5:fa:8f:39:eb:46:0b:48:9c:ea:52
Fingerprint (sha256): 05:62:f5:56:29:67:38:ad:0c:f4:df:ad:ab:b7:cd:99:53:bb:f3:3f:c0:93:30:d6:f7:a2:87:86:8c:e3:99:a7

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate www.yves-rocher.fr

82

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.yves-rocher.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.yves-rocher.fr
yves-rocher.fr
m.yves-rocher.fr
www.yves-rocher.de
m.yves-rocher.de
www.yves-rocher.at
m.yves-rocher.at
yves-rocher.at
www.yves-rocher.ch
m.yves-rocher.ch
yves-rocher.ch
kundenerfahrungen.yves-rocher.de
kundenerfahrungen.yves-rocher.at
kundenerfahrungen.yves-rocher.ch
blog.yves-rocher.de
wiki.yves-rocher.de
wiki.yves-rocher.at
wiki.yves-rocher.ch
search.yves-rocher.fr
search.yves-rocher.de
search.yves-rocher.at
search.yves-rocher.ch
geschenke-finden.yves-rocher.de
geschenke-finden.yves-rocher.at
geschenke-finden.yves-rocher.ch
yves-rocher.de
www.yves-rocher.es
m.yves-rocher.es
t-w.yves-rocher.es
t-m.yves-rocher.es
yves-rocher.es
www.yves-rocher.fi
www.yves-rocher.no
www.yves-rocher.se
www.yves-rocher.dk
www.yves-rocher.nl
www.yves-rocher.be
m.yves-rocher.fi
m.yves-rocher.no
m.yves-rocher.se
m.yves-rocher.dk
m.yves-rocher.nl
m.yves-rocher.be
t-w.yves-rocher.fi
t-w.yves-rocher.no
t-w.yves-rocher.se
t-w.yves-rocher.dk
t-w.yves-rocher.nl
t-w.yves-rocher.be
t-m.yves-rocher.fi
t-m.yves-rocher.no
t-m.yves-rocher.se
t-m.yves-rocher.dk
t-m.yves-rocher.nl
t-m.yves-rocher.be
www.yvesrocherusa.com
m.yvesrocherusa.com
t-w.yvesrocherusa.com
t-m.yvesrocherusa.com
yvesrocherusa.com
www.yvesrocher.ca
m.yvesrocher.ca
t-w.yvesrocher.ca
t-m.yvesrocher.ca
yvesrocher.ca
www.yvesrocher.com.tr
m.yvesrocher.com.tr
t-w.yvesrocher.com.tr
t-m.yvesrocher.com.tr
yvesrocher.com.tr
t-w.yves-rocher.de
t-m.yves-rocher.de
t-w.yves-rocher.at
t-m.yves-rocher.at
t-w.yves-rocher.ch
t-m.yves-rocher.ch
yves-rocher.no
yves-rocher.se
yves-rocher.fi
yves-rocher.dk
yves-rocher.be
yves-rocher.nl

Other certificates including the domain name yves-rocher.fr

(limited to 100 certificates)
t.newsletters.yves-rocher.fr
www.ambassadeur.yves-rocher.fr
datayr.yves-rocher.fr
images.yves-rocher.fr
macif-ecartecadeau.yves-rocher.fr
www.yves-rocher.fr
franchise.yves-rocher.fr
image.care-chemicals.basf.com
securepayment.yves-rocher.fr
image.care-chemicals.basf.com
t.newsletters.yves-rocher.fr
www.franchise.yves-rocher.fr
newsletter.yves-rocher.fr
franchise.yves-rocher.fr
san-5-s50.tlsprovisioning.exacttarget.com
www.yves-rocher.fr
www.yves-rocher.fr
survey.yves-rocher.fr
search.yves-rocher.at
www.yves-rocher.fr
www.yves-rocher.fr
securepayment.yves-rocher.fr
ambassadeur.yves-rocher.fr
k.yves-rocher.fr
securepayment.yves-rocher.fr
survey.yves-rocher.fr
secureorder.yves-rocher.fr
ambassadeur.yves-rocher.fr
images.yves-rocher.fr
survey.yves-rocher.fr
survey.yves-rocher.fr
secureorder.yves-rocher.fr
secureorder.yves-rocher.fr
survey.yves-rocher.fr
san-5-s50.tlsprovisioning.exacttarget.com
www.yves-rocher.fr
newsletter.yves-rocher.fr
search.yves-rocher.fr
ambassadeur.yves-rocher.fr
securepayment.yves-rocher.fr
securepayment.yves-rocher.fr
ambassadeur.yves-rocher.fr
www.yves-rocher.com
image.care-chemicals.basf.com
t.nl.yves-rocher.de
survey.yves-rocher.fr
survey.yves-rocher.fr
search.yves-rocher.at
t.nl.yves-rocher.de
secure.yves-rocher.fr
san-5-s50.tlsprovisioning.exacttarget.com
secureorder.yves-rocher.fr
www.franchise.yves-rocher.fr
www.yves-rocher.fr
t.nl.yves-rocher.de
www.yves-rocher.fr
image.care-chemicals.basf.com
e-cartecadeau.yves-rocher.fr
survey.yves-rocher.fr
secureorder.m.yves-rocher.fr
coordo-campagnes.yves-rocher.fr
survey.yves-rocher.fr
search.yves-rocher.at
recrutement.yves-rocher.fr
franchise.yves-rocher.fr
www.franchise.yves-rocher.fr
ambassadeur.yves-rocher.fr
secureorder.yves-rocher.fr
*.crm.yves-rocher.fr
e-cartecadeau.yves-rocher.fr
www.yves-rocher.fr
e-cartecadeau.yves-rocher.fr
securepayment.yves-rocher.fr
secureorder.m.yves-rocher.fr
image.care-chemicals.basf.com
image.care-chemicals.basf.com
newsletter.yves-rocher.fr
datayr.yves-rocher.fr
franchise.yves-rocher.fr
image.care-chemicals.basf.com
www.yves-rocher.fr
www.yves-rocher.fr
vpc.yves-rocher.fr
k.yves-rocher.fr
datayr.yves-rocher.fr
e-cartecadeau.yves-rocher.fr
image.care-chemicals.basf.com
www.yves-rocher.fr
www.yves-rocher.fr
image.care-chemicals.basf.com
www.yves-rocher.fr
t.nl.yves-rocher.de
securepayment.yves-rocher.fr
images.yves-rocher.fr
secureorder.yves-rocher.fr
image.care-chemicals.basf.com
www.franchise.yves-rocher.fr
ambassadeur.yves-rocher.fr
nocdn-w.yves-rocher.fr
preprod.e-cartecadeau.yves-rocher.fr

Certificate

The complete raw certificate details for www.yves-rocher.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoU3RQGIHnjRaFKI0DtkP
92hYLzT4MM54QXsMW097mfTwxM2yO2aPbFzsIhKswX1w+xaUHp5ZBhLdNyMUhh0/
w+qOZQfT9KakQtcCGiRu87v0CyrVCN+9wboxVMjxJT0xlLlWFpQWpjfTNMsmDJIM
pz84FcfYDG2krs2jkjpzmQfDI2h1MiwnDWHKu4axFBmTlCRsdKPZb+0dghqIIKd1
ULhTqbaM6oc+ANi3aPXLYBD5Ay9EkrULG/VYxWm1GTNq/Qawn1g2/J8vJ94aV3wC
Bg7W6GnFhM5W6/eRFUUtok9CW2HqR4BB8NMDatRb24PtyfplDZGduzVt/BIchWSf
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 151201526447409186541537104811647365647
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-21 14:46:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-26 15:16:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Morbihan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Laboratoires de Biologie Vegetale Yves Rocher'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.yves-rocher.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20362740284069652897711350983633110954166881241502460694119952187681267743514914693912533521318335810916848752301922668382567130368408061292197377020078433008094798031546432193045534324627646090641853639132829970239791712567092424494480794540724236594803457611002067827450378601777140539930918413257439636971214280045818124367334212315351018630512942652979745797137440716597974184638611760728457857596024824463975362610565593619073501033624746433804405221386712861064977771543824568178521314504424052942148017364445500258119349346888402193157239267171549070157470306976289576037055569322363292262786461840838215639029
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1682 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yves-rocher.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yves-rocher.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yves-rocher.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kundenerfahrungen.yves-rocher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kundenerfahrungen.yves-rocher.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kundenerfahrungen.yves-rocher.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.yves-rocher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.yves-rocher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.yves-rocher.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.yves-rocher.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.yves-rocher.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.yves-rocher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.yves-rocher.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.yves-rocher.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geschenke-finden.yves-rocher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geschenke-finden.yves-rocher.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geschenke-finden.yves-rocher.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yves-rocher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-w.yves-rocher.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-m.yves-rocher.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yves-rocher.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-w.yves-rocher.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-w.yves-rocher.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-w.yves-rocher.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-w.yves-rocher.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-w.yves-rocher.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-w.yves-rocher.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-m.yves-rocher.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-m.yves-rocher.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-m.yves-rocher.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-m.yves-rocher.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-m.yves-rocher.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-m.yves-rocher.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yvesrocherusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yvesrocherusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-w.yvesrocherusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-m.yvesrocherusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yvesrocherusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yvesrocher.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yvesrocher.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-w.yvesrocher.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-m.yvesrocher.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yvesrocher.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yvesrocher.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yvesrocher.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-w.yvesrocher.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-m.yvesrocher.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yvesrocher.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-w.yves-rocher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-m.yves-rocher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-w.yves-rocher.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-m.yves-rocher.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-w.yves-rocher.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-m.yves-rocher.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yves-rocher.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yves-rocher.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yves-rocher.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yves-rocher.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yves-rocher.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yves-rocher.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ca24ad4e11ab9a5f41d79c051d75852b80ad3144
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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