linemedia.preprod.richemont.com

Issued by R3

About this certificate

This digital certificate with serial number 04:12:92:67:a2:86:09:f0:e1:d7:ae:81:c2:69:60:ff:42:5f was issued on by Let's Encrypt.

With 77 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=linemedia.preprod.richemont.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:12:92:67:a2:86:09:f0:e1:d7:ae:81:c2:69:60:ff:42:5f
Serial Number (int): 354768831721948911875804248116345543017055
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 4e:30:b2:c1:8e:83:58:1d:df:1a:e6:de:34:09:d7:10:6b:b0:85:70
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e8:47:d4:19:a5:46:f3:59:43:6c:33:1c:2f:37:1f:94:43:0b:d0:7b
Fingerprint (sha256): 11:6c:d5:bd:3a:9f:f2:2d:6f:76:cf:af:5a:07:2c:e5:28:b6:ac:c6:ce:e7:8c:d3:e0:c5:5e:80:b0:79:2f:89

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate linemedia.preprod.richemont.com

77

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for linemedia.preprod.richemont.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cabinotiers.quality.vacheron-constantin.com
connect.preprod.cartier.com
dev.cartierhighjewellery-sixiemesens.com
dev.comehomeagain.cartier.com
inside.preprod.rogerdubuis.com
intranet.preprod.dunhill.com
intranet.preprod.iwc.com
intranet.preprod.jaeger-lecoultre.com
intranet.preprod.montblanc.com
intranet.preprod.panerai.com
intranet.preprod.piaget.com
intranet.preprod.richemont.com
intranet.preprod.vancleefarpels.com
linemedia.preprod.richemont.com
madein.preprod.chloe.com
mosaic.preprod.vacheron-constantin.com
payment.dev.baume-et-mercier.com
payment.preprod.alange-soehne.com
payment.preprod.baume-et-mercier.com
payment.preprod.cartier.com
payment.preprod.chloe.com
payment.preprod.dunhill.com
payment.preprod.iwc.com
payment.preprod.jaeger-lecoultre.com
payment.preprod.montblanc.com
payment.preprod.panerai.com
payment.preprod.piaget.com
payment.preprod.rogerdubuis.com
payment.preprod.vacheron-constantin.com
payment.preprod.vancleefarpels.com
payment.quality.baume-et-mercier.com
payment.staging.alange-soehne.com
payment.staging.baume-et-mercier.com
payment.staging.cartier.com
payment.staging.chloe.com
payment.staging.dunhill.com
payment.staging.iwc.com
payment.staging.jaeger-lecoultre.com
payment.staging.montblanc.com
payment.staging.panerai.com
payment.staging.piaget.com
payment.staging.rogerdubuis.com
payment.staging.vacheron-constantin.com
payment.staging.vancleefarpels.com
preprod.watchesandwonders.cn
preprod.watchesandwonders.com
services.preprod.rogerdubuis.cn
services.preprod.rogerdubuis.com
services.preprod2.rogerdubuis.cn
services.preprod2.rogerdubuis.com
services.staging.rogerdubuis.cn
services.staging.rogerdubuis.com
shse.quality.richemont.cn
staging.cartierhighjewellery-sixiemesens.com
staging.comehomeagain.cartier.com
weboutique.preprod.alange-soehne.com
weboutique.preprod.rogerdubuis.com
weboutique.stg.alange-soehne.com
weboutique.stg.rogerdubuis.com
www.dev.cartierhighjewellery-sixiemesens.com
www.preprod.buccellati.com.cn
www.preprod.cms-one.richemont.com
www.preprod.rogerdubuis.cn
www.preprod3.montblanc.cn
www.preprod3.montblanc.com
www.prod.richemont.cn
www.prod.richemont.com
www.prod2.vancleefarpels.cn
www.prod2.vancleefarpels.com
www.prod3.montblanc.cn
www.prod3.montblanc.com
www.quality.rogerdubuis.cn
www.quality2.lecolevancleefarpels.com
www.staging.buccellati.com.cn
www.staging.cartierhighjewellery-sixiemesens.com
www.staging3.montblanc.cn
www.staging3.montblanc.com

Other certificates including the domain name richemont.com

(limited to 100 certificates)
preprod-iisfarm.richemont.com
careers.richemont.com
booster2.richemont.com
intranet.richemont.com
intranet.richemont.com
richemont.com
xsrna.richemont.com
xs.richemont.com
intranet.richemont.com
dam.richemont.com
intranet.richemont.com
belenus.richemont.com
collaboration.richemont.com
apps2013.richemont.com
linemedia.preprod.richemont.com
api-booster.richemont.com
preprod-apps2016.richemont.com
linemedia.preprod.richemont.com
media.richemont.com
vo1webdisp.richemont.com
wwsip.richemont.com
spark.nprd.val.elb.richemont.com
careers.richemont.com
booster.richemont.com
apps.richemont.com
www.richemont.com
preprod-apps2016.richemont.com
owa.richemont.com
intranet.richemont.com
preprod-apps2016.richemont.com
booster.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
dam.richemont.com
linemedia.preprod.richemont.com
antispam.richemont.com
svn.richemont.com
apps2016.richemont.com
intranet.richemont.com
launchpad.richemont.com
visionnaire.richemont.com
epm-mobile.richemont.com
intranet.richemont.com
mdm.richemont.com
richemont.com
epm-mobile.richemont.com
eusip.richemont.com
www.quality.alange-soehne.com
jobs.richemont.com
jenkins-aws.richemont.com
search.richemont.com
launchpad.richemont.com
cyberjourney.richemont.com
api-booster.richemont.com
linemedia.preprod.richemont.com
admin.pre-booster.richemont.com
pre-booster.richemont.com
owa-sso.richemont.com
id-sso.richemont.com
scn01.richemont.com
intranet.preprod.richemont.com
owa-nosso.richemont.com
linemedia.preprod.richemont.com
epm-mobile.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
owa-nosso.richemont.com
careers.richemont.com
amer-ra.richemont.com
media.richemont.com
iisfarm.richemont.com
preprod-apps2013.richemont.com
emea-ra.richemont.com
xs4.richemont.com
inet.richemont.com
midgard.ch.richemont.com
aegis.ch.richemont.com
collaboration.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
apps2016.richemont.com
owa.richemont.com
fileexchange.richemont.com
creative-academy.com
agile.quality.richemont.com
secure.richemont.com
cs.richemont.com
www.quality.alange-soehne.com
richemont.com
richemont.com
owa.richemont.com
agile.richemont.com
preprod-iisfarm.richemont.com
careers.richemont.com
*.richemont.com
belenus.richemont.com
www.lcboutiquenet.com
*.mytandem.eu
intranet.staging.richemont.com

Certificate

The complete raw certificate details for linemedia.preprod.richemont.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hymCbYEDt1LxNPQArzO
zD4sZOp/uBytqhgAA+TecoHAbInEdx3PxG0lC17cjGBYcZxjHEEJSjlhadsj4lVA
R+Ed/GbCAytCd2tvP8P++6LPrheDyDxqWps32vu1uWn/IRdmmtJWVDVnKsCQxqgF
33n4lbdMznNHB3DtuWOdbGTdDBKNZl3WNeA+myV/L1djoJ+dFgVZJaQl0ooxImfb
DnpLL233PN1SgePbJ77eZTnm2vefYdYAuQz5dqqQ/mXccICRBrBKh92vC6MBdQx+
jKGJ7Dg1iS80kia8C34dqhgLD3JNPFS9Nf2ijI9+3LxckHiECbQhL8AOMzcpaExf
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 354768831721948911875804248116345543017055
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-10 15:47:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-08 15:47:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'linemedia.preprod.richemont.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28039030846588753229940118740524011599677558949459800322911243024981664857963176186879773369124318754326271460029143862768493510788465515461757717702003706759932113230107599208218408551950589365383972636892067474840857391330308472749594689520504961449619568519001332329782077597394488416717277883315601074538720750633684461867008231738175710227218331832832390566772609511988199452932025433299384866779922921996843607747825506985996825653911914296698524954783988989984046058808009763430254847999278897887256208437867013255920442107029260121718519239893001085131709069621826051162471344602169914981942134501611936702391
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4e30b2c18e83581ddf1ae6de3409d7106bb08570
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2512 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabinotiers.quality.vacheron-constantin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.preprod.cartier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cartierhighjewellery-sixiemesens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.comehomeagain.cartier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.preprod.rogerdubuis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.preprod.dunhill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.preprod.iwc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.preprod.jaeger-lecoultre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.preprod.montblanc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.preprod.panerai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.preprod.piaget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.preprod.richemont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.preprod.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linemedia.preprod.richemont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madein.preprod.chloe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mosaic.preprod.vacheron-constantin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.dev.baume-et-mercier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.alange-soehne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.baume-et-mercier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.cartier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.chloe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.dunhill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.iwc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.jaeger-lecoultre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.montblanc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.panerai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.piaget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.rogerdubuis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.vacheron-constantin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.quality.baume-et-mercier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.alange-soehne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.baume-et-mercier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.cartier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.chloe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.dunhill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.iwc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.jaeger-lecoultre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.montblanc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.panerai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.piaget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.rogerdubuis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.vacheron-constantin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.watchesandwonders.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.watchesandwonders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.preprod.rogerdubuis.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.preprod.rogerdubuis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.preprod2.rogerdubuis.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.preprod2.rogerdubuis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.staging.rogerdubuis.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.staging.rogerdubuis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shse.quality.richemont.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.cartierhighjewellery-sixiemesens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.comehomeagain.cartier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.alange-soehne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.rogerdubuis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.stg.alange-soehne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.stg.rogerdubuis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev.cartierhighjewellery-sixiemesens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preprod.buccellati.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preprod.cms-one.richemont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preprod.rogerdubuis.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preprod3.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preprod3.montblanc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prod.richemont.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prod.richemont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prod2.vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prod2.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prod3.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prod3.montblanc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quality.rogerdubuis.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quality2.lecolevancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.buccellati.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.cartierhighjewellery-sixiemesens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging3.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging3.montblanc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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