stg.moethennessy.com

Issued by R3

About this certificate

This digital certificate with serial number 03:92:f2:f1:c9:33:28:74:c1:95:35:d7:5a:85:51:9f:5b:6b was issued on by Let's Encrypt.

With 69 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=stg.moethennessy.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:92:f2:f1:c9:33:28:74:c1:95:35:d7:5a:85:51:9f:5b:6b
Serial Number (int): 311341011965078099312395929611197736770411
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d9:79:e2:f6:94:1f:8a:cc:fb:d4:49:10:0c:20:d4:58:b0:94:8c:26
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9e:dc:03:d0:ec:05:da:21:aa:af:72:08:27:98:cb:30:a6:5f:ea:ae
Fingerprint (sha256): 19:58:96:fa:03:b5:cb:65:e2:f0:60:aa:30:22:3d:bc:87:d8:90:ac:cb:d7:04:2b:1b:84:ce:cf:d2:ab:3d:2d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate stg.moethennessy.com

69

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stg.moethennessy.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pp-travel.hennessy.com
pp2.pressforchampagne.com
stg-api-solaireculture.veuveclicquot.com
stg-api.grapp-hennessy.com
stg-azumamakoto.glenmorangie.com
stg-bo-grapp.hennessy.com
stg-bo.demod9.moethennessy.com
stg-demod9.moethennessy.com
stg-domruinart.ruinart.com
stg-hk.hennessy.com
stg-houseofmoves.hennessy.com
stg-idflowine.moet-hennessy.com
stg-idreportservice.moet-hennessy.com
stg-it4brands.moethennessy.com
stg-jeppehein.ruinart.com
stg-krug-x-lemon-journey.krug.com
stg-lekiosque.ruinart.com
stg-lestwins.hennessy.com
stg-media.mhacademy.com
stg-my.hennessy.com
stg-naturanostra.moet.com
stg-partner.hennessy.com
stg-ph.hennessy.com
stg-pressroom.ruinart.com
stg-private.moethennessy.com
stg-qrcode.champagnemercier.com
stg-qrcode.chandon.com
stg-qrcode.chateaugaloupet.com
stg-qrcode.domperignon.com
stg-qrcode.hennessy.com
stg-qrcode.moet.com
stg-qrcode.moethennessy.com
stg-qrcode.veuveclicquot.com
stg-solaireculture.veuveclicquot.com
stg-specially-yours.moet.com
stg-spiritofthenba-hk.hennessy.com
stg-spiritofthenba-mo.hennessy.com
stg-travel.hennessy.com
stg-unconventionalgallery.ruinart.com
stg-unexpectedwebar-retails.moet.com
stg-unexpectedwebar.moet.com
stg-webar.moet.com
stg-www.cloudybay.com
stg-www.moeteffervescence.com.sg
stg.aoyun-wine.com
stg.boldopendatabase.com
stg.cafe-clicquot-zurich.ch
stg.chandon.com.ar
stg.cravanparis.com
stg.esclans.com
stg.fondsk.com
stg.grapp-hennessy.com
stg.krgblackbook.com
stg.krug.com
stg.krugsingleingredient.com
stg.mhlab.com
stg.moet-hennessy.de
stg.moet.com
stg.moethennessy.com
stg.moethennessy.cz
stg.moethennessy.it
stg.moethennessynordic.com
stg.numanthia.com
stg.skysidewines.com
stg.terrazasdelosandes.com
stg.woodinvillewhiskeyco.com
stg2-www.mhacademy.com
uat-idflowine.moet-hennessy.com
uat-idreportservice.moet-hennessy.com

Other certificates including the domain name moethennessy.com

(limited to 100 certificates)
www.lvmh.com
www.lvmh.com
preprod.lvmh.com
image.e.grandamerica.com
www.lvmh.com
image.e.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
preprod.lvmh.com
image.e.grandamerica.com
preprod.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
moethennessy.com
image.e.grandamerica.com
www.lvmh.com
san-4-s7.tlsprovisioning.exacttarget.com
www.lvmh.com
connect.moethennessy.com
image.e.grandamerica.com
www.lvmh.com
www.lvmh.com
san-1-s50.tlsprovisioning.exacttarget.com
image.20210419.201008.s50.et.yellsatcloud.com
uat.moethennessy.com
www.lvmh.com
www.lvmh.com
www.lvmh.com
image.e.grandamerica.com
qual-dam.moethennessy.com
www.lvmh.com
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
image.e.grandamerica.com
*.moethennessy.com
image.e.grandamerica.com
uat.moethennessy.com
preprod.lvmh.com
preprod.lvmh.com
www.lvmh.com
tr.communication.moethennessy.com
www.lvmh.com
preprod.lvmh.com
san-8-s7.tlsprovisioning.exacttarget.com
preprod.lvmh.com
stg.moethennessy.com
image.e.grandamerica.com
www.lvmh.com
image.e.grandamerica.com
uat.moethennessy.com
preprod.lvmh.com
image.e.grandamerica.com
mycybersafejourney.moethennessy.com
image.20210419.201008.s50.et.yellsatcloud.com
preprod.lvmh.com
image.e.grandamerica.com
preprod.lvmh.com
uat.moethennessy.com
prd2.moethennessy.com
preprod.lvmh.com
image.e.grandamerica.com
qual-dam.moethennessy.com
uat.moethennessy.com
www.lvmh.com
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
preprod.lvmh.com
secure6s.scene7.com
www.lvmh.com
www.lvmh.com
image.e.grandamerica.com
preprod.lvmh.com
www.lvmh.com
image.e.grandamerica.com
preprod.lvmh.com
image.20210419.201008.s50.et.yellsatcloud.com
preprod.lvmh.com
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
qual-dam-author.moethennessy.com
qual-dam-author.moethennessy.com
www.lvmh.com
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
secure6s.scene7.com
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
preprod.lvmh.com
san-8-s7.tlsprovisioning.exacttarget.com
image.20210419.201008.s50.et.yellsatcloud.com
image.e.grandamerica.com
www.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
san-1-s50.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for stg.moethennessy.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbcGIlrIzrFLoWEj7f6w
3pVJqvYGW6/f5Izd4VNNUqr8uq3+gyVGYX43L240VgO39IxIC3uYXNChFq3lpSiP
YaTEDTIuViLgC2HxIYSKgqyMYBbuSYDqAFEQSbFl5FnZ+lMzRwL5CEUhXRre8sVq
nHkUM3wNpEGTn3tRCDY4K1cSGACRPgW9O7g6T9YrUfBqLx9Ns1X0vETsJ/TaCjrj
BYSIJdymw5o1vNvfh0rSayVOGXTephtnMWcNEzeaY0KdWcV1PpC8qCgS2hFMD4xE
MBx3icHO6mh68/om9rb9uceGElD1js/qReGexteaYITENb+HNcwF8KrMo2W9SIDQ
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311341011965078099312395929611197736770411
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-25 09:48:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-23 09:48:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stg.moethennessy.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20919572798674841620102170713201617381854571139878350834186650779485442384858875065843822332813605871512472750368204887990008455531779591517122269126804256549049092059130206132006813329336537775300305882528298063364807002481461044886298850284018276377849562064584794493535693322425382000345585879469249885342875394992219883666515894546572443757938487455796529335948368654019559229366839868354082463228251192473795008757495106016476302664383601552696141493240781256286124405077147109346596793034834732214114147444402670567624400605736580746034024022064475674811296058635818891571172714676408857434970360389446901223599
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d979e2f6941f8accfbd449100c20d458b0948c26
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1872 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pp-travel.hennessy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pp2.pressforchampagne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-api-solaireculture.veuveclicquot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-api.grapp-hennessy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-azumamakoto.glenmorangie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-bo-grapp.hennessy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-bo.demod9.moethennessy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-demod9.moethennessy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-domruinart.ruinart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-hk.hennessy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-houseofmoves.hennessy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-idflowine.moet-hennessy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-idreportservice.moet-hennessy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-it4brands.moethennessy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-jeppehein.ruinart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-krug-x-lemon-journey.krug.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-lekiosque.ruinart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-lestwins.hennessy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-media.mhacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-my.hennessy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-naturanostra.moet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-partner.hennessy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-ph.hennessy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-pressroom.ruinart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-private.moethennessy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-qrcode.champagnemercier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-qrcode.chandon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-qrcode.chateaugaloupet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-qrcode.domperignon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-qrcode.hennessy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-qrcode.moet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-qrcode.moethennessy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-qrcode.veuveclicquot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-solaireculture.veuveclicquot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-specially-yours.moet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-spiritofthenba-hk.hennessy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-spiritofthenba-mo.hennessy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-travel.hennessy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-unconventionalgallery.ruinart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-unexpectedwebar-retails.moet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-unexpectedwebar.moet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-webar.moet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-www.cloudybay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-www.moeteffervescence.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.aoyun-wine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.boldopendatabase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.cafe-clicquot-zurich.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.chandon.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.cravanparis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.esclans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.fondsk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.grapp-hennessy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.krgblackbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.krug.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.krugsingleingredient.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.mhlab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.moet-hennessy.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.moet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.moethennessy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.moethennessy.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.moethennessy.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.moethennessynordic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.numanthia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.skysidewines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.terrazasdelosandes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.woodinvillewhiskeyco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg2-www.mhacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-idflowine.moet-hennessy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-idreportservice.moet-hennessy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001898caa643f0000040300473045022016fca2a3146c4f07437a69490118883efa9dfaa6a17652397ae303382cb6e641022100988421c411bfccd234fd76c772a9123d8cb3b98427816e25417847e4a2702deb007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001898caa6422000004030047304502203d5bbd48c6ac4dd280f6c7aa25e8016b3ca6df62989d13b4acf6f462d56ec2ee022100c4d6fb7d00cb7db0d7d650edc51a84c482dc3b7402ddb824f6c8d81b628e5c5a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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