xianskp.rdu.richemont.cn
Issued by R3
About this certificate
This digital certificate with serial number 03:53:f6:80:61:c6:2b:4b:c3:bf:20:38:da:ad:81:fb:e2:74 was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=xianskp.rdu.richemont.cn
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:53:f6:80:61:c6:2b:4b:c3:bf:20:38:da:ad:81:fb:e2:74Serial Number (int): 289907950933773921351284852390048193831540
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 12:18:ec:c0:15:7e:71:7f:6d:12:70:5d:6b:1d:b8:8d:98:44:3d:6e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): a1:b2:df:93:22:96:60:90:de:65:ad:4f:d1:18:62:22:bb:79:5e:89
Fingerprint (sha256): 1f:51:e5:49:4e:91:aa:6d:7f:a4:05:95:f9:2a:47:bb:b5:06:d5:b5:64:96:e4:40:38:cb:06:1a:61:eb:1b:d0
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate xianskp.rdu.richemont.cn
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for xianskp.rdu.richemont.cn
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
admin.www.rogerdubuis.cn
org-xianskp.rdu.richemont.cn
rogerdubuis.cn
xianskp.rdu.richemont.cn
org-xianskp.rdu.richemont.cn
rogerdubuis.cn
xianskp.rdu.richemont.cn
Other certificates including the domain name richemont.cn
(limited to 100 certificates)
careers.richemont.com
wechat-oauth.richemont.cn
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
ws.richemont.cn
wechat-oauth.preprod.richemont.cn
api.rcdc.richemont.cn
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
dev.api.warm.richemont.cn
intranet.richemont.com
xianskp.rdu.quality.richemont.cn
www.quality.alange-soehne.com
linemedia.preprod.richemont.com
nexus.richemont.cn
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
careers.richemont.com
linemedia.preprod.richemont.com
chloefayeday.richemont.cn
www.rogerdubuis.com
www.quality.alange-soehne.com
xianskp.rdu.richemont.cn
*.richemont.cn
www.quality.alange-soehne.com
careers.richemont.com
dev.api.warm.richemont.cn
wechat-oauth.quality.richemont.cn
api.warm.richemont.cn
careers.richemont.com
xianskp.rdu.richemont.cn
xianskp.rdu.quality.richemont.cn
xianskp.rdu.richemont.cn
xianskp.rdu.richemont.cn
cn-ra.richemont.cn
linemedia.preprod.richemont.com
ws.preprod.richemont.cn
www.quality.alange-soehne.com
rogerdubuis.richemont.cn
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
ws.richemont.cn
xianskp.rdu.richemont.cn
remoteaccess.richemont.com
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
ws.quality.richemont.cn
intranet.richemont.com
ws.richemont.cn
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
preprod.api.warm.richemont.cn
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
intranet.richemont.com
intranet.richemont.com
ws.dev.richemont.cn
careers.richemont.com
ws.quality.richemont.cn
search.preprod.digital.richemont.cn
quality.api.warm.richemont.cn
linemedia.preprod.richemont.com
www.rogerdubuis.com
linemedia.preprod.richemont.com
intranet.richemont.com
ws.richemont.cn
nexus.richemont.cn
kronos.richemont.cn
linemedia.preprod.richemont.com
intranet.richemont.com
www.preprod.cms-one.richemont.cn
xianskp.rdu.richemont.cn
linemedia.preprod.richemont.com
xianskp.rdu.richemont.cn
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
ws.preprod.richemont.cn
ws.quality.richemont.cn
www.quality.alange-soehne.com
api.warm.richemont.cn
www.quality.alange-soehne.com
richemont.cn
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
careers.richemont.com
careers.richemont.com
xianskp.rdu.richemont.cn
linemedia.preprod.richemont.com
xianskp.rdu.richemont.cn
wechat-oauth.richemont.cn
careers.richemont.com
careers.richemont.com
rogerdubuis.richemont.cn
www.quality.alange-soehne.com
rogerdubuis.richemont.cn
wechat-oauth.richemont.cn
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
ws.richemont.cn
wechat-oauth.preprod.richemont.cn
api.rcdc.richemont.cn
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
dev.api.warm.richemont.cn
intranet.richemont.com
xianskp.rdu.quality.richemont.cn
www.quality.alange-soehne.com
linemedia.preprod.richemont.com
nexus.richemont.cn
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
careers.richemont.com
linemedia.preprod.richemont.com
chloefayeday.richemont.cn
www.rogerdubuis.com
www.quality.alange-soehne.com
xianskp.rdu.richemont.cn
*.richemont.cn
www.quality.alange-soehne.com
careers.richemont.com
dev.api.warm.richemont.cn
wechat-oauth.quality.richemont.cn
api.warm.richemont.cn
careers.richemont.com
xianskp.rdu.richemont.cn
xianskp.rdu.quality.richemont.cn
xianskp.rdu.richemont.cn
xianskp.rdu.richemont.cn
cn-ra.richemont.cn
linemedia.preprod.richemont.com
ws.preprod.richemont.cn
www.quality.alange-soehne.com
rogerdubuis.richemont.cn
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
ws.richemont.cn
xianskp.rdu.richemont.cn
remoteaccess.richemont.com
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
ws.quality.richemont.cn
intranet.richemont.com
ws.richemont.cn
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
preprod.api.warm.richemont.cn
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
intranet.richemont.com
intranet.richemont.com
ws.dev.richemont.cn
careers.richemont.com
ws.quality.richemont.cn
search.preprod.digital.richemont.cn
quality.api.warm.richemont.cn
linemedia.preprod.richemont.com
www.rogerdubuis.com
linemedia.preprod.richemont.com
intranet.richemont.com
ws.richemont.cn
nexus.richemont.cn
kronos.richemont.cn
linemedia.preprod.richemont.com
intranet.richemont.com
www.preprod.cms-one.richemont.cn
xianskp.rdu.richemont.cn
linemedia.preprod.richemont.com
xianskp.rdu.richemont.cn
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
ws.preprod.richemont.cn
ws.quality.richemont.cn
www.quality.alange-soehne.com
api.warm.richemont.cn
www.quality.alange-soehne.com
richemont.cn
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
careers.richemont.com
careers.richemont.com
xianskp.rdu.richemont.cn
linemedia.preprod.richemont.com
xianskp.rdu.richemont.cn
wechat-oauth.richemont.cn
careers.richemont.com
careers.richemont.com
rogerdubuis.richemont.cn
www.quality.alange-soehne.com
rogerdubuis.richemont.cn
Certificate
The complete raw certificate details for xianskp.rdu.richemont.cn in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgISA1P2gGHGK0vDvyA42q2B++J0MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA5MDcwMjE4NTdaFw0yMzEyMDYwMjE4NTZaMCMxITAfBgNVBAMT GHhpYW5za3AucmR1LnJpY2hlbW9udC5jbjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAPJFrNpYjQ/XldrF6tFfrPiSCOyosMJHuaQAcrdZNyBV4kersQWr SdNb/Z1FRQI9ofXsiL5qIS7DdezK9CI3z/MK8Ldt6UWxMoeEtMqc2qy8BQXUf4sK VuLdv5cbulUf8fpjCfUV+65jRmdhwkbz3XN9Zuf1kRE4U0U++955y7a1w9PqOJhy fyQOQmRx7HX23yX6f5A7FZAEi8BGBdEzPJfROJb9y/zRtj/0KSSoR/fVIa9X7TEx hPbsip6DZTFxGVg7gflWnbjy0eTF6moLFeeld0EF3aRVP+6Wp4J31QsIocgAmrdw s6fURHiBzM0qHwDyuXAcNScHN6yLnhFDXDsCAwEAAaOCAmEwggJdMA4GA1UdDwEB /wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/ BAIwADAdBgNVHQ4EFgQUEhjswBV+cX9tEnBdax24jZhEPW4wHwYDVR0jBBgwFoAU FC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzAB hhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5p LmxlbmNyLm9yZy8wawYDVR0RBGQwYoIYYWRtaW4ud3d3LnJvZ2VyZHVidWlzLmNu ghxvcmcteGlhbnNrcC5yZHUucmljaGVtb250LmNugg5yb2dlcmR1YnVpcy5jboIY eGlhbnNrcC5yZHUucmljaGVtb250LmNuMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIB AwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvS K8E6V6NS61IAAAGKbaZqXwAABAMARjBEAiBZRvMkSW1tlBVQb/wd4tViIPwmY4Z1 /vgnmIATEVfOzAIgVRQPkKTfpYabUT2kgCTDK9lFWEvo/XjVHQkUlZifZG4AdgDo PtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYptpmpyAAAEAwBHMEUC IFALekvmNQJf3kmv60huCx5/xPkJb7upBFeS7YwHSdScAiEAzxbyExzCn6j6qtcx D+XmHQV6mvWhWEEyqPUDKF3ydjkwDQYJKoZIhvcNAQELBQADggEBAF+hPPzNc2oV I8eqYWA8on2/38R+/eGO8b4ipTwlTy9D7DBud2Vd3QfovtFhy9h2Mmxww7jEOOgO HK+4e+tBqtBO7abi6NkWwC8mAt43v2R5duJ1dKzoFGrJNObtjhVP2sgj9RkB1vDY bm+MWsHbFwIx/2WCl1EmN+B+WPt/ZHHPWRE7fm7euYjZ7xH4lxuT2Jkdiso7ws1t Ehvg4eXgRahoZ83qjn6CBD3lL9dB0+gf3v+QwQUIpr2MrLx4AhsvS5CRzI+Ewzt3 oW1ZkSv6cXqJ3Doqsh1UlwARtnFkm8nVUvVCcC67PU3R9WBZgb+hCb+tpibpvoEd dY2UUYmpaMw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8kWs2liND9eV2sXq0V+s +JII7Kiwwke5pAByt1k3IFXiR6uxBatJ01v9nUVFAj2h9eyIvmohLsN17Mr0IjfP 8wrwt23pRbEyh4S0ypzarLwFBdR/iwpW4t2/lxu6VR/x+mMJ9RX7rmNGZ2HCRvPd c31m5/WREThTRT773nnLtrXD0+o4mHJ/JA5CZHHsdfbfJfp/kDsVkASLwEYF0TM8 l9E4lv3L/NG2P/QpJKhH99Uhr1ftMTGE9uyKnoNlMXEZWDuB+VaduPLR5MXqagsV 56V3QQXdpFU/7pangnfVCwihyACat3Czp9REeIHMzSofAPK5cBw1Jwc3rIueEUNc OwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 289907950933773921351284852390048193831540 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-07 02:18:57 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-06 02:18:56 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xianskp.rdu.richemont.cn' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30584027926751885464056051253275482895489678053652316136119847754440505611227441966793073171892665845270730323356683159331722710274274359973949742160611529758239979762767584657371645711940434556890708863722091005763352377619460359364519900260218806171495701340586721855080397270172712331895550747421691284525740576111530569888187384877439121048807978487820863991171977402470101154728641108906634840669965090621715333238594135348919471259333366920480441312266217770118655838725411397212533650545005745028515621790259536082446998374248902862988751518885292338153009868576303088201154849128911838414307817691583453813819 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1218ecc0157e717f6d12705d6b1db88d98443d6e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.www.rogerdubuis.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'org-xianskp.rdu.richemont.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rogerdubuis.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xianskp.rdu.richemont.cn' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a6da66a5f000004030046304402205946f324496d6d9415506ffc1de2d56220fc26638675fef8279880131157cecc022055140f90a4dfa5869b513da48024c32bd945584be8fd78d51d091495989f646e007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018a6da66a7200000403004730450220500b7a4be635025fde49afeb486e0b1e7fc4f9096fbba9045792ed8c0749d49c022100cf16f2131cc29fa8faaad7310fe5e61d057a9af5a1584132a8f503285df27639 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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