linemedia.preprod.richemont.com

- Richemont International SA -

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 0d:24:02:5d:61:ce:a6:c4:8b:f8:93:4f:e0:20:a7:ef was issued on by DigiCert Inc.

With 69 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Richemont International SA

Organization: Richemont International SA
Organization unit: RIC Akamai
State / Province: Genève
Locality: Bellevue
Country: CH

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:24:02:5d:61:ce:a6:c4:8b:f8:93:4f:e0:20:a7:ef
Serial Number (int): 17466934595419353482295887166825342959
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 60:78:68:ee:ca:8c:ad:af:ed:98:03:3f:f5:12:de:b4:ee:1f:ff:88
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): 35:6c:18:46:0f:85:4d:86:81:6d:32:b0:66:7d:0e:0b:13:df:07:00
Fingerprint (sha256): 05:82:49:f3:28:57:17:d3:9e:6e:f8:2a:59:ab:46:3e:9d:d2:ad:a8:f1:75:53:df:e1:92:84:a7:60:92:ab:b3

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate linemedia.preprod.richemont.com

69

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for linemedia.preprod.richemont.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

yyvdaycampaign.quality.montblanc.cn
xianskp.rdu.quality.richemont.cn
www.preprod2.panerai.com
www.comeforashine.quality.piaget.cn
whenelegancemeetsart.quality.vancleefarpels.com
weixin.quality.vacheron-constantin.cn
weixin.quality.cartier.cn
weboutique.quality.vacheron-constantin.cn
weboutique.preprod.vancleefarpels.com
weboutique.preprod.vacheron-constantin.cn
weboutique.preprod.piaget.cn
weboutique.preprod.panerai.cn
weboutique.preprod.montblanc.cn
weboutique.preprod.jaeger-lecoultre.com
weboutique.preprod.jaeger-lecoultre.cn
weboutique.preprod.iwc.cn
weboutique.preprod.cartier.cn
vcaballet.quality.vancleefarpels.com
summit2.quality.montblanc.cn
starcrm.quality.montblanc.cn
rogerdubuis.quality.richemont.cn
productminisite.quality.vacheron-constantin.cn
preprod-watch-live.hautehorlogerie.org
preprod-journal.hautehorlogerie.org
preprod-fhhcertification.hautehorlogerie.org
preprod-fhhacademy.hautehorlogerie.org
preprod-bowatchlive.hautehorlogerie.org
newbinding.quality.cartier.cn
media.weboutique.preprod.vancleefarpels.com
media.weboutique.preprod.vacheron-constantin.cn
media.weboutique.preprod.piaget.cn
media.weboutique.preprod.panerai.cn
media.weboutique.preprod.montblanc.cn
media.weboutique.preprod.jaeger-lecoultre.com
media.weboutique.preprod.jaeger-lecoultre.cn
media.weboutique.preprod.iwc.cn
media.weboutique.preprod.cartier.cn
lovedeclaration.quality.cartier.cn
llp.quality.montblanc.cn
linemedia.preprod.richemont.com
lbs.quality.iwc.cn
holidayseason.quality.piaget.cn
highartistrykx.quality.montblanc.cn
greatwallh5.quality.vacheron-constantin.cn
dunwb.quality.richemont.cn
csbarometer.quality.vacheron-constantin.cn
crm.llp.quality.montblanc.cn
clientbarometerqnr.quality.vacheron-constantin.cn
clientbarometercrm.quality.vacheron-constantin.cn
chinabrandbook.quality.cartier.cn
ceb.quality.cartier.cn
boutique.quality.vacheron-constantin.cn
boheme.quality.montblanc.cn
bjexpo.quality.vancleefarpels.com
astronomyphoto.quality.vacheron-constantin.cn
article.quality.vacheron-constantin.cn
api.weboutique.preprod.vancleefarpels.com
api.weboutique.preprod.vacheron-constantin.cn
api.weboutique.preprod.piaget.cn
api.weboutique.preprod.panerai.cn
api.weboutique.preprod.montblanc.cn
api.weboutique.preprod.jaeger-lecoultre.com
api.weboutique.preprod.jaeger-lecoultre.cn
api.weboutique.preprod.iwc.cn
api.weboutique.preprod.cartier.cn
altiplano.quality.piaget.cn
4810collection.quality.montblanc.cn
2019cny.quality.vacheron-constantin.cn
2018cny.quality.vacheron-constantin.cn

Other certificates including the domain name richemont.com

(limited to 100 certificates)
preprod-iisfarm.richemont.com
careers.richemont.com
booster2.richemont.com
intranet.richemont.com
intranet.richemont.com
richemont.com
xsrna.richemont.com
xs.richemont.com
intranet.richemont.com
dam.richemont.com
intranet.richemont.com
belenus.richemont.com
collaboration.richemont.com
apps2013.richemont.com
linemedia.preprod.richemont.com
api-booster.richemont.com
preprod-apps2016.richemont.com
linemedia.preprod.richemont.com
media.richemont.com
vo1webdisp.richemont.com
wwsip.richemont.com
spark.nprd.val.elb.richemont.com
careers.richemont.com
booster.richemont.com
apps.richemont.com
www.richemont.com
preprod-apps2016.richemont.com
owa.richemont.com
intranet.richemont.com
preprod-apps2016.richemont.com
booster.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
dam.richemont.com
linemedia.preprod.richemont.com
antispam.richemont.com
svn.richemont.com
apps2016.richemont.com
intranet.richemont.com
launchpad.richemont.com
visionnaire.richemont.com
epm-mobile.richemont.com
intranet.richemont.com
mdm.richemont.com
richemont.com
epm-mobile.richemont.com
eusip.richemont.com
www.quality.alange-soehne.com
jobs.richemont.com
jenkins-aws.richemont.com
search.richemont.com
launchpad.richemont.com
cyberjourney.richemont.com
api-booster.richemont.com
linemedia.preprod.richemont.com
admin.pre-booster.richemont.com
pre-booster.richemont.com
owa-sso.richemont.com
id-sso.richemont.com
scn01.richemont.com
intranet.preprod.richemont.com
owa-nosso.richemont.com
linemedia.preprod.richemont.com
epm-mobile.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
owa-nosso.richemont.com
careers.richemont.com
amer-ra.richemont.com
media.richemont.com
iisfarm.richemont.com
preprod-apps2013.richemont.com
emea-ra.richemont.com
xs4.richemont.com
inet.richemont.com
midgard.ch.richemont.com
aegis.ch.richemont.com
collaboration.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
apps2016.richemont.com
owa.richemont.com
fileexchange.richemont.com
creative-academy.com
agile.quality.richemont.com
secure.richemont.com
cs.richemont.com
www.quality.alange-soehne.com
richemont.com
richemont.com
owa.richemont.com
agile.richemont.com
preprod-iisfarm.richemont.com
careers.richemont.com
*.richemont.com
belenus.richemont.com
www.lcboutiquenet.com
*.mytandem.eu
intranet.staging.richemont.com

Certificate

The complete raw certificate details for linemedia.preprod.richemont.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRdbstia3IA1/548uk+b
AndKjdopbJlhDWHhPNfVs2ljc28MZ0sUt0ZK2FVmlnEfgy0mPiQCOcd4pHpfLpNC
ZmOaWXAMf8Q9Ph1D7rotgASpy5rIEzFrx2lKgvpF2AzDB5B4J/vdLSJicjPirr1o
I1Nce4x5DGVM2PaBMFwZeJztDjZots9n2wLdFCY7CyBwMYAnFV4UBBuq8OycjsN0
fr3aZeaqao6MfDtD4JYuCXTDo8hFcVARBpsq1ChHIj3zDdVs2LgfV9sXlYlWkNiM
/fHeyXcZ9F2GcX1vNmSMa7YSjwkjSZflP5vrej85KdEgrZ4UWyiuDaeh0SZ7uf4N
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17466934595419353482295887166825342959
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-06 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Genève'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bellevue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Richemont International SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RIC Akamai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'linemedia.preprod.richemont.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23365604775314127517939198689714106628784360026539621902953514982395621405180449346210179774402505688487157877740427121365844137916299830606840394307348647004485734962548562507261739682396657708273217246138438440240767650010847080272571467486733303854617525054153714728581037560193487290536030077838224900331326175999988939761197257229572323830449133976852725205168296000918370744844659869903148388415609409945682146005170370846353621391496032992775942739647234093344413826654871097998922764640143717079653557181554515988230108426342895884659120913974317529781939481723722185889908778435697158780644139592332179541329
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							607868eeca8cadafed98033ff512deb4ee1fff88
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2576 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yyvdaycampaign.quality.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xianskp.rdu.quality.richemont.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preprod2.panerai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comeforashine.quality.piaget.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whenelegancemeetsart.quality.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weixin.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weixin.quality.cartier.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.piaget.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.panerai.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.jaeger-lecoultre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.jaeger-lecoultre.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.iwc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.cartier.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcaballet.quality.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summit2.quality.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starcrm.quality.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rogerdubuis.quality.richemont.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productminisite.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-watch-live.hautehorlogerie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-journal.hautehorlogerie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-fhhcertification.hautehorlogerie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-fhhacademy.hautehorlogerie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-bowatchlive.hautehorlogerie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newbinding.quality.cartier.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.preprod.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.preprod.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.preprod.piaget.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.preprod.panerai.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.preprod.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.preprod.jaeger-lecoultre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.preprod.jaeger-lecoultre.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.preprod.iwc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.preprod.cartier.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lovedeclaration.quality.cartier.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llp.quality.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linemedia.preprod.richemont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lbs.quality.iwc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holidayseason.quality.piaget.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highartistrykx.quality.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatwallh5.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dunwb.quality.richemont.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csbarometer.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.llp.quality.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientbarometerqnr.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientbarometercrm.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinabrandbook.quality.cartier.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceb.quality.cartier.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boutique.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boheme.quality.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bjexpo.quality.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astronomyphoto.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'article.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.preprod.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.preprod.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.preprod.piaget.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.preprod.panerai.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.preprod.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.preprod.jaeger-lecoultre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.preprod.jaeger-lecoultre.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.preprod.iwc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.preprod.cartier.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altiplano.quality.piaget.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4810collection.quality.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2019cny.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2018cny.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016b4fffa2190000040300483046022100bfbf426ff3d67aeab76052f38b50a350f04342401eb1d1861182a1e570a733ac022100e94eeaebf5d08962f4e745f434b49107397fc150f4b506cab8445dbd292c73a30075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016b4fffa28c000004030046304402202d7a9d291cfbce26f7b24b434f2af974fd504253840da7a3100fa9ba55f62c4402200b523a019f6598dee5c9de79ad6cb221749b283e8c3d5ae7f7401accd60a9b4e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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