www.yves-rocher.fr

- Laboratoires de Biologie Vegetale Yves Rocher -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 3b:f0:63:34:52:d3:3f:a8:00:00:00:00:51:00:65:6e was issued on by Entrust, Inc..

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Laboratoires de Biologie Vegetale Yves Rocher

Organization: Laboratoires de Biologie Vegetale Yves Rocher
Locality: Morbihan
Country: FR

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3b:f0:63:34:52:d3:3f:a8:00:00:00:00:51:00:65:6e
Serial Number (int): 79672615101406762150719868881223050606
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: ca:24:ad:4e:11:ab:9a:5f:41:d7:9c:05:1d:75:85:2b:80:ad:31:44
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 92:af:b1:b0:b6:fa:fd:bf:6f:e5:08:94:f9:ba:d4:15:04:15:0a:b0
Fingerprint (sha256): 0c:00:3e:6b:5e:eb:a8:48:f5:c3:74:0d:01:b5:8b:d4:9e:7b:60:d8:9c:4b:7b:d3:b9:86:21:38:0f:de:2b:6e

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate www.yves-rocher.fr

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.yves-rocher.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.yves-rocher.fr
yves-rocher.fr
m.yves-rocher.fr
www.yves-rocher.de
m.yves-rocher.de
www.yves-rocher.at
m.yves-rocher.at
yves-rocher.at
www.yves-rocher.ch
m.yves-rocher.ch
yves-rocher.ch
kundenerfahrungen.yves-rocher.de
kundenerfahrungen.yves-rocher.at
kundenerfahrungen.yves-rocher.ch
blog.yves-rocher.de
wiki.yves-rocher.de
wiki.yves-rocher.at
wiki.yves-rocher.ch
search.yves-rocher.fr
search.yves-rocher.de
search.yves-rocher.at
search.yves-rocher.ch
geschenke-finden.yves-rocher.de
geschenke-finden.yves-rocher.at
geschenke-finden.yves-rocher.ch
yves-rocher.de
www.yves-rocher.es
m.yves-rocher.es
t-w.yves-rocher.es
t-m.yves-rocher.es
yves-rocher.es
www.yves-rocher.fi
www.yves-rocher.no
www.yves-rocher.se
www.yves-rocher.dk
www.yves-rocher.nl
www.yves-rocher.be
m.yves-rocher.fi
m.yves-rocher.no
m.yves-rocher.se
m.yves-rocher.dk
m.yves-rocher.nl
m.yves-rocher.be
t-w.yves-rocher.fi
t-w.yves-rocher.no
t-w.yves-rocher.se
t-w.yves-rocher.dk
t-w.yves-rocher.nl
t-w.yves-rocher.be
t-m.yves-rocher.fi
t-m.yves-rocher.no
t-m.yves-rocher.se
t-m.yves-rocher.dk
t-m.yves-rocher.nl
t-m.yves-rocher.be
www.yvesrocherusa.com
m.yvesrocherusa.com
t-w.yvesrocherusa.com
t-m.yvesrocherusa.com
yvesrocherusa.com
www.yvesrocher.ca
m.yvesrocher.ca
t-w.yvesrocher.ca
t-m.yvesrocher.ca
yvesrocher.ca
www.yvesrocher.com.tr
m.yvesrocher.com.tr
t-w.yvesrocher.com.tr
t-m.yvesrocher.com.tr
yvesrocher.com.tr
t-w.yves-rocher.de
t-m.yves-rocher.de
t-w.yves-rocher.at
t-m.yves-rocher.at
t-w.yves-rocher.ch
t-m.yves-rocher.ch
yves-rocher.no
yves-rocher.se
yves-rocher.fi
yves-rocher.dk
yves-rocher.be
yves-rocher.nl
www.yves-rocher-kz.com
www.yves-rocher.ru
www.yves-rocher.ua
m.yves-rocher-kz.com
m.yves-rocher.ru
m.yves-rocher.ua
t-w.yves-rocher-kz.com
t-w.yves-rocher.ru
t-w.yves-rocher.ua
t-w.yves-rocher.fr
t-m.yves-rocher-kz.com
t-m.yves-rocher.ru
t-m.yves-rocher.ua
yves-rocher.ru
yves-rocher.ua
yves-rocher-kz.com
t-m.yves-rocher.fr

Other certificates including the domain name yves-rocher.fr

(limited to 100 certificates)
t.newsletters.yves-rocher.fr
www.ambassadeur.yves-rocher.fr
datayr.yves-rocher.fr
images.yves-rocher.fr
macif-ecartecadeau.yves-rocher.fr
www.yves-rocher.fr
franchise.yves-rocher.fr
image.care-chemicals.basf.com
securepayment.yves-rocher.fr
image.care-chemicals.basf.com
t.newsletters.yves-rocher.fr
www.franchise.yves-rocher.fr
newsletter.yves-rocher.fr
franchise.yves-rocher.fr
san-5-s50.tlsprovisioning.exacttarget.com
www.yves-rocher.fr
www.yves-rocher.fr
survey.yves-rocher.fr
search.yves-rocher.at
www.yves-rocher.fr
www.yves-rocher.fr
securepayment.yves-rocher.fr
ambassadeur.yves-rocher.fr
k.yves-rocher.fr
securepayment.yves-rocher.fr
survey.yves-rocher.fr
secureorder.yves-rocher.fr
ambassadeur.yves-rocher.fr
images.yves-rocher.fr
survey.yves-rocher.fr
survey.yves-rocher.fr
secureorder.yves-rocher.fr
secureorder.yves-rocher.fr
survey.yves-rocher.fr
san-5-s50.tlsprovisioning.exacttarget.com
www.yves-rocher.fr
newsletter.yves-rocher.fr
search.yves-rocher.fr
ambassadeur.yves-rocher.fr
securepayment.yves-rocher.fr
securepayment.yves-rocher.fr
ambassadeur.yves-rocher.fr
www.yves-rocher.com
image.care-chemicals.basf.com
t.nl.yves-rocher.de
survey.yves-rocher.fr
survey.yves-rocher.fr
search.yves-rocher.at
t.nl.yves-rocher.de
secure.yves-rocher.fr
san-5-s50.tlsprovisioning.exacttarget.com
secureorder.yves-rocher.fr
www.franchise.yves-rocher.fr
www.yves-rocher.fr
t.nl.yves-rocher.de
www.yves-rocher.fr
image.care-chemicals.basf.com
e-cartecadeau.yves-rocher.fr
survey.yves-rocher.fr
secureorder.m.yves-rocher.fr
coordo-campagnes.yves-rocher.fr
survey.yves-rocher.fr
search.yves-rocher.at
recrutement.yves-rocher.fr
franchise.yves-rocher.fr
www.franchise.yves-rocher.fr
ambassadeur.yves-rocher.fr
secureorder.yves-rocher.fr
*.crm.yves-rocher.fr
e-cartecadeau.yves-rocher.fr
www.yves-rocher.fr
e-cartecadeau.yves-rocher.fr
securepayment.yves-rocher.fr
secureorder.m.yves-rocher.fr
image.care-chemicals.basf.com
image.care-chemicals.basf.com
newsletter.yves-rocher.fr
datayr.yves-rocher.fr
franchise.yves-rocher.fr
image.care-chemicals.basf.com
www.yves-rocher.fr
www.yves-rocher.fr
vpc.yves-rocher.fr
k.yves-rocher.fr
datayr.yves-rocher.fr
e-cartecadeau.yves-rocher.fr
image.care-chemicals.basf.com
www.yves-rocher.fr
www.yves-rocher.fr
image.care-chemicals.basf.com
www.yves-rocher.fr
t.nl.yves-rocher.de
securepayment.yves-rocher.fr
images.yves-rocher.fr
secureorder.yves-rocher.fr
image.care-chemicals.basf.com
www.franchise.yves-rocher.fr
ambassadeur.yves-rocher.fr
nocdn-w.yves-rocher.fr
preprod.e-cartecadeau.yves-rocher.fr

Certificate

The complete raw certificate details for www.yves-rocher.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoU3RQGIHnjRaFKI0DtkP
92hYLzT4MM54QXsMW097mfTwxM2yO2aPbFzsIhKswX1w+xaUHp5ZBhLdNyMUhh0/
w+qOZQfT9KakQtcCGiRu87v0CyrVCN+9wboxVMjxJT0xlLlWFpQWpjfTNMsmDJIM
pz84FcfYDG2krs2jkjpzmQfDI2h1MiwnDWHKu4axFBmTlCRsdKPZb+0dghqIIKd1
ULhTqbaM6oc+ANi3aPXLYBD5Ay9EkrULG/VYxWm1GTNq/Qawn1g2/J8vJ94aV3wC
Bg7W6GnFhM5W6/eRFUUtok9CW2HqR4BB8NMDatRb24PtyfplDZGduzVt/BIchWSf
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 79672615101406762150719868881223050606
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-11 08:26:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-26 08:56:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Morbihan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Laboratoires de Biologie Vegetale Yves Rocher'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.yves-rocher.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20362740284069652897711350983633110954166881241502460694119952187681267743514914693912533521318335810916848752301922668382567130368408061292197377020078433008094798031546432193045534324627646090641853639132829970239791712567092424494480794540724236594803457611002067827450378601777140539930918413257439636971214280045818124367334212315351018630512942652979745797137440716597974184638611760728457857596024824463975362610565593619073501033624746433804405221386712861064977771543824568178521314504424052942148017364445500258119349346888402193157239267171549070157470306976289576037055569322363292262786461840838215639029
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2024 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yves-rocher.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yves-rocher.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yves-rocher.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kundenerfahrungen.yves-rocher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kundenerfahrungen.yves-rocher.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kundenerfahrungen.yves-rocher.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.yves-rocher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.yves-rocher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.yves-rocher.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.yves-rocher.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.yves-rocher.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.yves-rocher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.yves-rocher.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.yves-rocher.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geschenke-finden.yves-rocher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geschenke-finden.yves-rocher.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geschenke-finden.yves-rocher.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yves-rocher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-w.yves-rocher.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-m.yves-rocher.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yves-rocher.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-w.yves-rocher.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-w.yves-rocher.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-w.yves-rocher.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-w.yves-rocher.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-w.yves-rocher.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-w.yves-rocher.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-m.yves-rocher.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-m.yves-rocher.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-m.yves-rocher.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-m.yves-rocher.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-m.yves-rocher.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-m.yves-rocher.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yvesrocherusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yvesrocherusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-w.yvesrocherusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-m.yvesrocherusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yvesrocherusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yvesrocher.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yvesrocher.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-w.yvesrocher.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-m.yvesrocher.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yvesrocher.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yvesrocher.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yvesrocher.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-w.yvesrocher.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-m.yvesrocher.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yvesrocher.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-w.yves-rocher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-m.yves-rocher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-w.yves-rocher.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-m.yves-rocher.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-w.yves-rocher.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-m.yves-rocher.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yves-rocher.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yves-rocher.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yves-rocher.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yves-rocher.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yves-rocher.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yves-rocher.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher-kz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher-kz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-w.yves-rocher-kz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-w.yves-rocher.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-w.yves-rocher.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-w.yves-rocher.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-m.yves-rocher-kz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-m.yves-rocher.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-m.yves-rocher.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yves-rocher.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yves-rocher.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yves-rocher-kz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-m.yves-rocher.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ca24ad4e11ab9a5f41d79c051d75852b80ad3144
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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