linemedia.preprod.richemont.com

Issued by R3

About this certificate

This digital certificate with serial number 03:ee:6e:54:2f:8e:73:eb:ac:39:d2:ed:5b:5a:6c:e3:0e:30 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=linemedia.preprod.richemont.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ee:6e:54:2f:8e:73:eb:ac:39:d2:ed:5b:5a:6c:e3:0e:30
Serial Number (int): 342470713319496078051359878769786568773168
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ea:b8:12:fe:35:db:25:53:5c:23:c0:1e:aa:4a:51:68:f1:88:0b:89
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7f:e4:aa:f2:6e:ae:85:f4:2e:e8:f4:01:1e:2c:6d:3a:54:39:e0:62
Fingerprint (sha256): 19:ab:9c:0f:a5:ae:1c:94:28:bc:f2:8c:7b:d1:c1:b8:a3:4f:c1:11:52:70:50:21:6d:e7:5c:14:9d:df:be:a0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate linemedia.preprod.richemont.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for linemedia.preprod.richemont.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.weboutique.preprod.vancleefarpels.cn
cabinotiers.quality.vacheron-constantin.com
connect.preprod.cartier.com
delivery.ocp.richemont.com
demainsenmains.quality.vancleefarpels.com
dev.cartierhighjewellery-sixiemesens.com
dev.comehomeagain.cartier.com
galleries-val.ocp.richemont.com
inside.preprod.rogerdubuis.com
intranet.preprod.dunhill.com
intranet.preprod.iwc.com
intranet.preprod.jaeger-lecoultre.com
intranet.preprod.montblanc.com
intranet.preprod.panerai.com
intranet.preprod.piaget.com
intranet.preprod.richemont.com
intranet.preprod.vancleefarpels.com
linemedia.preprod.richemont.com
madein.preprod.chloe.com
media.weboutique.preprod.vancleefarpels.cn
mosaic.preprod.vacheron-constantin.com
payment.dev.baume-et-mercier.com
payment.preprod.alange-soehne.com
payment.preprod.baume-et-mercier.com
payment.preprod.cartier.com
payment.preprod.chloe.com
payment.preprod.dunhill.com
payment.preprod.iwc.com
payment.preprod.jaeger-lecoultre.com
payment.preprod.montblanc.com
payment.preprod.panerai.com
payment.preprod.piaget.com
payment.preprod.rogerdubuis.com
payment.preprod.vacheron-constantin.com
payment.preprod.vancleefarpels.com
payment.quality.baume-et-mercier.com
payment.staging.alange-soehne.com
payment.staging.baume-et-mercier.com
payment.staging.cartier.com
payment.staging.chloe.com
payment.staging.dunhill.com
payment.staging.iwc.com
payment.staging.jaeger-lecoultre.com
payment.staging.montblanc.com
payment.staging.panerai.com
payment.staging.piaget.com
payment.staging.rogerdubuis.com
payment.staging.vacheron-constantin.com
payment.staging.vancleefarpels.com
payment.val.alange-soehne.com
payment.val.baume-et-mercier.com
payment.val.cartier.com
payment.val.chloe.com
payment.val.dunhill.com
payment.val.iwc.com
payment.val.jaeger-lecoultre.com
payment.val.montblanc.com
payment.val.panerai.com
payment.val.piaget.com
payment.val.rogerdubuis.com
payment.val.vacheron-constantin.com
payment.val.vancleefarpels.com
preprod.time-nature-love-riyadh.vancleefarpels.com
preprod.watchesandwonders.cn
preprod.watchesandwonders.com
qua-cdn.ma.richemont.cn
services.preprod.rogerdubuis.cn
services.preprod.rogerdubuis.com
services.preprod2.rogerdubuis.cn
services.preprod2.rogerdubuis.com
services.staging.rogerdubuis.cn
services.staging.rogerdubuis.com
shse.quality.richemont.cn
staging.cartierhighjewellery-sixiemesens.com
staging.comehomeagain.cartier.com
val-delivery.ocp.richemont.cn
val-delivery.ocp.richemont.com
weboutique.preprod.alange-soehne.com
weboutique.preprod.rogerdubuis.com
weboutique.preprod.vancleefarpels.cn
weboutique.stg.alange-soehne.com
weboutique.stg.rogerdubuis.com
www.dev.cartierhighjewellery-sixiemesens.com
www.preprod.buccellati.com.cn
www.preprod.cms-one.richemont.com
www.preprod.rogerdubuis.cn
www.preprod3.montblanc.cn
www.preprod3.montblanc.com
www.prod.richemont.cn
www.prod.richemont.com
www.prod2.vancleefarpels.cn
www.prod2.vancleefarpels.com
www.prod3.montblanc.cn
www.prod3.montblanc.com
www.quality.rogerdubuis.cn
www.quality2.lecolevancleefarpels.com
www.staging.buccellati.com.cn
www.staging.cartierhighjewellery-sixiemesens.com
www.staging3.montblanc.cn
www.staging3.montblanc.com

Other certificates including the domain name richemont.com

(limited to 100 certificates)
preprod-iisfarm.richemont.com
careers.richemont.com
booster2.richemont.com
intranet.richemont.com
intranet.richemont.com
richemont.com
xsrna.richemont.com
xs.richemont.com
intranet.richemont.com
dam.richemont.com
intranet.richemont.com
belenus.richemont.com
collaboration.richemont.com
apps2013.richemont.com
linemedia.preprod.richemont.com
api-booster.richemont.com
preprod-apps2016.richemont.com
linemedia.preprod.richemont.com
media.richemont.com
vo1webdisp.richemont.com
wwsip.richemont.com
spark.nprd.val.elb.richemont.com
careers.richemont.com
booster.richemont.com
apps.richemont.com
www.richemont.com
preprod-apps2016.richemont.com
owa.richemont.com
intranet.richemont.com
preprod-apps2016.richemont.com
booster.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
dam.richemont.com
linemedia.preprod.richemont.com
antispam.richemont.com
svn.richemont.com
apps2016.richemont.com
intranet.richemont.com
launchpad.richemont.com
visionnaire.richemont.com
epm-mobile.richemont.com
intranet.richemont.com
mdm.richemont.com
richemont.com
epm-mobile.richemont.com
eusip.richemont.com
www.quality.alange-soehne.com
jobs.richemont.com
jenkins-aws.richemont.com
search.richemont.com
launchpad.richemont.com
cyberjourney.richemont.com
api-booster.richemont.com
linemedia.preprod.richemont.com
admin.pre-booster.richemont.com
pre-booster.richemont.com
owa-sso.richemont.com
id-sso.richemont.com
scn01.richemont.com
intranet.preprod.richemont.com
owa-nosso.richemont.com
linemedia.preprod.richemont.com
epm-mobile.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
owa-nosso.richemont.com
careers.richemont.com
amer-ra.richemont.com
media.richemont.com
iisfarm.richemont.com
preprod-apps2013.richemont.com
emea-ra.richemont.com
xs4.richemont.com
inet.richemont.com
midgard.ch.richemont.com
aegis.ch.richemont.com
collaboration.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
apps2016.richemont.com
owa.richemont.com
fileexchange.richemont.com
creative-academy.com
agile.quality.richemont.com
secure.richemont.com
cs.richemont.com
www.quality.alange-soehne.com
richemont.com
richemont.com
owa.richemont.com
agile.richemont.com
preprod-iisfarm.richemont.com
careers.richemont.com
*.richemont.com
belenus.richemont.com
www.lcboutiquenet.com
*.mytandem.eu
intranet.staging.richemont.com

Certificate

The complete raw certificate details for linemedia.preprod.richemont.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZBaQnbsTZZssn7bPykh
hD0hKfc559fb99IkDelwkMK6o0kYxbZAzy38dpwi+U8L5PDdcaBSIA48SHpQR/Xf
hg6mi33wOd1/q2PmMDkTpAzWvADxdqkMEZAbdgIx9/fEJBZhRy5s6vUbqNJHghaM
Rejmzm6V4Jo/hzH4pfle9ObjHZyMEhjqTCmCJ/7xzKvrFDebsplH8be1AcFWVsz4
uXwAtZq+NB3s/rUIGfV8GtX6N7DyHVhzzsropKEn+yZjaYklyE40cdL8MWWBR8hv
3PTglYrxQDBDFtBnAF5kxwY+0TSg3P2I5E5PNwrpxL7olwEKZ2Ibq2IPLfOhGfjJ
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342470713319496078051359878769786568773168
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-10 10:33:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-08 10:33:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'linemedia.preprod.richemont.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24435175767027858996056110427243151148060253945946368877651564858400579192669104074476844637892745710391479883200384521698947960344854941345373319204435424397682479688556601236294349151989921049662958454841128603067657904991264955111244889404426796978475196543011092899890263613679909982413860490247646533910442333109720885693768950056229227890966192235353101184269147334446571051857087122060900302889849842900387823813856409490164864686506120355183530275065544111174063954834616624749378480674331867820568696602153429915419775445452405973402266139376814460924699696717362570228521883749763433467112713097280111560977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eab812fe35db25535c23c01eaa4a5168f1880b89
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.preprod.vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabinotiers.quality.vacheron-constantin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.preprod.cartier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery.ocp.richemont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demainsenmains.quality.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cartierhighjewellery-sixiemesens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.comehomeagain.cartier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galleries-val.ocp.richemont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.preprod.rogerdubuis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.preprod.dunhill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.preprod.iwc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.preprod.jaeger-lecoultre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.preprod.montblanc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.preprod.panerai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.preprod.piaget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.preprod.richemont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.preprod.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linemedia.preprod.richemont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madein.preprod.chloe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.preprod.vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mosaic.preprod.vacheron-constantin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.dev.baume-et-mercier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.alange-soehne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.baume-et-mercier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.cartier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.chloe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.dunhill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.iwc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.jaeger-lecoultre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.montblanc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.panerai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.piaget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.rogerdubuis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.vacheron-constantin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.quality.baume-et-mercier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.alange-soehne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.baume-et-mercier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.cartier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.chloe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.dunhill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.iwc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.jaeger-lecoultre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.montblanc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.panerai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.piaget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.rogerdubuis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.vacheron-constantin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.val.alange-soehne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.val.baume-et-mercier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.val.cartier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.val.chloe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.val.dunhill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.val.iwc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.val.jaeger-lecoultre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.val.montblanc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.val.panerai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.val.piaget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.val.rogerdubuis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.val.vacheron-constantin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.val.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.time-nature-love-riyadh.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.watchesandwonders.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.watchesandwonders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qua-cdn.ma.richemont.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.preprod.rogerdubuis.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.preprod.rogerdubuis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.preprod2.rogerdubuis.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.preprod2.rogerdubuis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.staging.rogerdubuis.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.staging.rogerdubuis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shse.quality.richemont.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.cartierhighjewellery-sixiemesens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.comehomeagain.cartier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'val-delivery.ocp.richemont.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'val-delivery.ocp.richemont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.alange-soehne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.rogerdubuis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.stg.alange-soehne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.stg.rogerdubuis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev.cartierhighjewellery-sixiemesens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preprod.buccellati.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preprod.cms-one.richemont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preprod.rogerdubuis.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preprod3.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preprod3.montblanc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prod.richemont.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prod.richemont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prod2.vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prod2.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prod3.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prod3.montblanc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quality.rogerdubuis.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quality2.lecolevancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.buccellati.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.cartierhighjewellery-sixiemesens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging3.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging3.montblanc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bb901ee9400000403004730450221009891e32230fad40ea9de9a18988afe06406200bf8f17739469159c3a121d2f9002204d1f2de740156a1e5a4baa6c053b9e4519f485367c69f2e1b747b319157ba5d400770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018bb901eefc0000040300483046022100c5a706d7cb10c0c4ff569e522fbba2db85c49d2a542b49071278d563c22b6b02022100edcd99e9396e1712967d7a32b0ce5ab19fa8a86d9528f831cf5b52b513a126ef
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002a067d4dc5c2d097d29ae50c3023d12d2fbc3fe3f03f76b449eaa7d33d43ec9a74432d27e0150f7bb7e7b25ee5de39392adfb56d113e1f46dd0b0f54cf0577a792dcba260b97847d133ce339123d9af5172d2386d0a0a6d41d80f9c399f9a2bc3c0fd91b5ce28341541bf44850aeba0d739e207e6d70fc4730fb6c3824f6b0fef5a5daba0c790cd5dbaf7db3a028d410ac6a79866876bf00590d711993982ecbe828ead7411afffe82fa988c583a43893615d6c27f7f6041284b1f4df58180918dfe1d4d0f5e806a1fba39c0133cb63c0c848490528ea3eef3e3e126c5151bedc6ba9b0b382d2d305ed0af581db6f629a69cd4165ee9c865963e18ae028d26bf