www.yves-rocher.com

Issued by R3

About this certificate

This digital certificate with serial number 03:77:a6:c6:11:99:00:c5:35:e0:96:c5:6b:a5:ae:93:21:0b was issued on by Let's Encrypt.

With 42 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.yves-rocher.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:77:a6:c6:11:99:00:c5:35:e0:96:c5:6b:a5:ae:93:21:0b
Serial Number (int): 302052139737873813562361421215758619451659
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4c:33:df:c8:86:15:57:d3:a6:b7:95:bf:a7:c4:94:c7:44:b3:39:4a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 95:15:93:f6:b7:5f:a0:6c:11:b4:3a:ef:35:ba:5a:dc:1f:3a:03:93
Fingerprint (sha256): 10:2b:20:a5:b9:e3:73:db:18:5c:97:13:7a:e9:ce:a6:02:c0:3d:a3:cb:23:ba:2a:4f:d2:b3:9d:30:f0:e2:d7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.yves-rocher.com

42

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.yves-rocher.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.groupe-rocher.com
apisvc03-prd.groupe-rocher.com
bacontact.yves-rocher.com
bi.yvesrocher.com.mx
deal.yrg.se
descubre.yves-rocher.com.mx
eimv3-statics.yves-rocher.com
eimv3.yves-rocher.com
flow.yves-rocher.com
gestorcomercial.yvesrocher.com.mx
media.aod-care.com
ordenesdecompra.yvesrocher.com.mx
pcv-lcda.groupe-rocher.com
pim.yves-rocher.com
s.yrg.se
samy-it.yves-rocher.com
samy-yrbe.yves-rocher.com
samy-yrca.yves-rocher.com
samy-yrce.yves-rocher.com
samy-yres.yves-rocher.com
samy-yrfr.yves-rocher.com
samy-yrit.yves-rocher.com
services.ricaud.com
services.yves-rocher.com
stanhome-lcda.groupe-rocher.com
storelocator.yves-rocher.com
studio-rennes.groupe-rocher.com
tilkal-prd.petit-bateau.com
vpci.ricaud.com
vpci.yves-rocher.com
www.cosmetovigilance.groupe-rocher.com
www.extracteur-donnees-mag-yr.com
www.fondation-danieljouvance.org
www.reconnect-to-nature.com
www.stanfacil.es
www.stanhome.com
www.stanhomeperte.it
www.yves-rocher.co.th
www.yves-rocher.com
www.yves-rocher.com.mx
www.yvesrocher.com.mx
www.yvesrocher.jo

Other certificates including the domain name yves-rocher.com

(limited to 100 certificates)
services.yves-rocher.com
medianet.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
abspace-re7.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
incapsula.com
www.yves-rocher.fr
www.yves-rocher.com
eimv3-statics.yves-rocher.com
www.yves-rocher.com
birdplan.yves-rocher.com
san-16-s50.tlsprovisioning.exacttarget.com
admin-rec.easy-ext.yves-rocher.com
sec.yr-fr-rec1.easy-ext.yves-rocher.com
*.yves-rocher.com
www.yves-rocher.fr
www.yves-rocher.com
dyrectperso.yves-rocher.com
san-16-s50.tlsprovisioning.exacttarget.com
imperva.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
pim.yves-rocher.com
secure-vpci.yves-rocher.com
secure-vpci.yves-rocher.com
incapsula.com
dyrectperso.yves-rocher.com
incapsula.com
specif-ac.yves-rocher.com
www-npe.yves-rocher.com
incapsula.com
incapsula.com
incapsula.com
dyrectperso.yves-rocher.com
san-16-s50.tlsprovisioning.exacttarget.com
www-npe.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
sec.yr-fr-rec1.easy-ext.yves-rocher.com
secure-vpci.yves-rocher.com
myreport.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
www.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
incapsula.com
san-11-s50.tlsprovisioning.exacttarget.com
services.yves-rocher.com
imperva.com
san-16-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
*.statics-easy-ext.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-16-s50.tlsprovisioning.exacttarget.com
*.yves-rocher.com
dyrectperso.yves-rocher.com
pim.yves-rocher.com
dyrectperso.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
medianet.yves-rocher.com
admin-rec.easy-ext.yves-rocher.com
*.yves-rocher.com
ftp-pao.yves-rocher.com
*.yves-rocher.com
services.yves-rocher.com
incapsula.com
samy.yves-rocher.com
newsroom.yves-rocher.com
www.yves-rocher.fr
dyrectperso.yves-rocher.com
services.yves-rocher.com
specif-ac.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
www.yves-rocher.com
dyrectperso.yves-rocher.com
newsroom.yves-rocher.com
www-npe.yves-rocher.com
dkb.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
pim.yves-rocher.com
specif-ac.yves-rocher.com
*.yves-rocher.com
flow.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
*.yves-rocher.com
portailmag-rec.yves-rocher.com
*.dev-spark-ext.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
services.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
specif-ac.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for www.yves-rocher.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwboXZivNlFuA8C1y+WZ8
T+GcSb2W+53vpIVEJvMa+UQoW3VdZWikx7z0kn808xyH/tUx6yRHbzOkGzq84AyJ
fuMa6I0f2kxQP7z5IUj0MVb0110L/QwQQV2gqkiwBcc/oeMtCW1cZseVham+kTEF
GAE1z5JQb9q1md0DygLY6JzXV4pqT5QfocQHE8As9sgg4sVerwkSW3m4+Iye05ld
DkK2oVTdReBNrwN+oRBPNlVfbnC9xNG8jgZOsniKXBRQNmdVOfmNTicSAwmC36sv
UXN/UUhcY2jjNIK8AbQO4r3SadHfu771/GXr3xoO4br8dK87lgCtwuAJ/jKz22as
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302052139737873813562361421215758619451659
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-14 09:01:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-13 09:01:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.yves-rocher.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24455757949280735601402509697266857240723994843916815517018602232267469712325086340772149792521557248111833691849835148941918443832751099680418758942402996530537404627049178898272888774150354228952339404903874043846820236541469072491690459625618065450426089549052804406765355400162332689968756713645331064993509850920364530696420633757483079672993313622362519765792829393476695831436098201341813358497162270628927745744189212613005614689150742715694000223390528558979457787450819771519538890481438101676972282882158499942969555484719145904314724984812764289648510925306026541316926737733494234503861939841173465508951
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4c33dfc8861557d3a6b795bfa7c494c744b3394a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1079 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.groupe-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apisvc03-prd.groupe-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bacontact.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.yvesrocher.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deal.yrg.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'descubre.yves-rocher.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eimv3-statics.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eimv3.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flow.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gestorcomercial.yvesrocher.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.aod-care.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ordenesdecompra.yvesrocher.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcv-lcda.groupe-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pim.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.yrg.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samy-it.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samy-yrbe.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samy-yrca.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samy-yrce.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samy-yres.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samy-yrfr.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samy-yrit.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.ricaud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanhome-lcda.groupe-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storelocator.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio-rennes.groupe-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tilkal-prd.petit-bateau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpci.ricaud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpci.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cosmetovigilance.groupe-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.extracteur-donnees-mag-yr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fondation-danieljouvance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reconnect-to-nature.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanfacil.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanhomeperte.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yvesrocher.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yvesrocher.jo'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a9323d6380000040300483046022100e750c16a9aaaca97f1eaf559754fc212f6a3ccbcdd54d7f1d6e3d197f2109c3802210090364e4b472c769e7a6d7e7df48c0729526aac16f1b1dfee48fa7468fd01f9a5007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a9323d6980000040300473045022100c833caf164bcf3fed38d875e75d33fbeb4cb57ba1899882d4d98b5058bcbb01c0220289435bc72f02d44faf6881dda6f55f98dbf2fcc0f2417c2b1f9a47c4a9035f7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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