www.lvmh.com

Issued by R3

About this certificate

This digital certificate with serial number 03:f1:30:d5:09:6c:44:6d:19:92:77:9f:d2:68:5d:49:6b:a6 was issued on by Let's Encrypt.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.lvmh.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f1:30:d5:09:6c:44:6d:19:92:77:9f:d2:68:5d:49:6b:a6
Serial Number (int): 343409817317374958373478016914207260896166
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 81:1d:d0:12:45:f4:13:69:d2:58:5c:83:41:6e:5d:06:dc:38:cc:1d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b4:56:eb:cf:5f:b3:d2:b8:87:d2:f5:89:2e:8f:dc:44:14:6c:c8:ae
Fingerprint (sha256): 20:9e:d8:43:0f:73:60:2b:43:8b:5a:b5:37:c3:33:56:0e:6a:35:b0:07:28:41:35:0b:19:4a:e7:40:56:a6:f2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.lvmh.com

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lvmh.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin-highjewelry.chaumet.com
api-products.fendi.com
api.heaven.fendi.com
api.loropiana.com
app.fondationlouisvuitton.fr
asset.chaumet.com
asset.olfaplay.com
b-share.berluti.com
baguette.fendi.com
cashmere.theoriginofasecret.loropiana.com
cht.chaumet.com
crownyourlove.chaumet.com
exhibition-tokyo.chaumet.com
fendi.com
fisfor.fendi.com
fred.com
hd.fondationlouisvuitton.fr
highjewelry.chaumet.com
icom.fendi.com
images-test.fendi.com
images.myfendi.com
images.www.fendi.com
insideriviera.cn
insideriviera.com
kr.chaumet.com
kstatic-test.fendi.com
kstatic.www.fendi.com
m.chaumet.cn
m.chaumet.com
m.chaumet.fr
m.cht.chaumet.com
m.kr.chaumet.com
m.zenith-watches.com
makeityours.chaumet.com
media.icom.fendi.com
mobile.chaumet.jp
mobile.fisfor.fendi.com
portal.fendi.com
pp-crownyourlove.chaumet.com
preprod-fisfor.fendi.com
preprod-mobile.fisfor.fendi.com
preprod.chaumet.com
products.fendi.com
ps.fendi.com
r.lvmh-static.com
retailtraining.fendi.com
secure.fendi.com
staging.api.heaven.fendi.com
static-test.fendi.com
static.dior.cn
static.dior.com
static.www.fendi.com
stores.guerlain.com
test-retailtraining.fendi.com
theoriginofasecret.loropiana.com
thevu.fendi.com
tmsprd.loropiana.com
uat-api-heaven.fendi.com
uat-api-products.fendi.com
vap.fendi.com
video.fondationlouisvuitton.fr
westore.fresh-cn.com
ws.loropiana.com
www-prd.fondationlouisvuitton.fr
www-test.fendi.com
www.cha-ling.com
www.chaumet.com
www.chaumet.fr
www.chaumet.jp
www.fendi.com
www.fisfor.fendi.com
www.fondationlouisvuitton.fr
www.fred.cn
www.fred.com
www.insideriviera.cn
www.insideriviera.com
www.loropiana.com
www.lvmh.cn
www.lvmh.co.jp
www.lvmh.com
www.lvmh.fr
www.lvmh.it
www.lvmh.ru
www.mobile.fisfor.fendi.com
www.preprod-fisfor.fendi.com
www.preprod-mobile.fisfor.fendi.com
www.zenith-watches.com

Other certificates including the domain name lvmh.com

(limited to 100 certificates)
www.lvmh.com
preprod.lvmh.com
www.lvmh.com
accreditation.lumanity.com
alumnicredentials.kcl.ac.uk
preprod.lvmh.com
compliance.lvmh.com
retailerid.lvmh.com
achievements.launchyou.com
www.lvmh.com
achievements.launchyou.com
www.lvmh.com
publiccert.lvmh.com
support12.cdnetworks.net
support12.cdnetworks.net
preprod.lvmh.com
preprod.lvmh.com
gaia.lvmh.com.dev-gcp.lvmh.lbn.fr
virtualapartment.lvmh.com
www.lvmh.com
accreditation.lumanity.com
preprod.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
www.lvmh.com
achievements.launchyou.com
www.lvmh.com
dbt.lvmh.com
preprod.lvmh.com
www.lvmh.com
preprod.lvmh.com
support12.cdnetworks.net
achievements.launchyou.com
www.lvmh.com
support12.cdnetworks.net
accreditation.lumanity.com
www.lvmh.com
cdn06.cdnsvc.com
preprod.lvmh.com
lvmh.fr
www.lvmh.com
www.lvmh.com
cdn06.cdnsvc.com
accreditation.lumanity.com
preprod.lvmh.com
*.lvmh.com
accreditation.lumanity.com
spring.lvmh.com
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
san-13-s50.tlsprovisioning.exacttarget.com
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
www.lvmh.com
www.lvmh.com
support12.cdnetworks.net
www.lvmh.com
san-13-s50.tlsprovisioning.exacttarget.com
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
shero.lvmh.com
preprod.lvmh.com
support12.cdnetworks.net
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
preprod.lvmh.com
support12.cdnetworks.net
lvmh.fr
support12.cdnetworks.net
www.lvmh.com
preprod.lvmh.com
support12.cdnetworks.net
preprod.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
lamaisondesstartups.lvmh.com
www.lvmh.com
living.lvmh.com
game.cybertraining.lvmh.com
support12.cdnetworks.net
san-13-s50.tlsprovisioning.exacttarget.com
preprod.lvmh.com
www.lvmh.com
*.chic.lvmh.com
lvmh.fr
online-media-builder.lvmh.com
support12.cdnetworks.net
cdn06.cdnsvc.com
lvmh.fr
www.lvmh.com
accreditation.lumanity.com
tr.openinnovation.lvmh.com
accreditation.lumanity.com
link.bein.lvmh.com
preprod.lvmh.com

Certificate

The complete raw certificate details for www.lvmh.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMZDCCC0ygAwIBAgISA/Ew1QlsRG0Zknef0mhdSWumMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTAzMDQxNTI1MjRaFw0yMTA2MDIxNTI1MjRaMBcxFTATBgNVBAMT
DHd3dy5sdm1oLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMxV
EwV0nxPL1O+k+6rBM61uKSLW+4Mrt1uAZMYkRB5ApwTCyBcbmOh5tT/+4EGBIEpf
8QuzW5JTdrAJBizm7qAUPPZTSp63exlBIlcnl1GiwkyYowxQsBM113asgnY6w7pJ
GgS3wlo6HeCHk6mMq0FYn5bpOSarH8lyCwxY0eaSCS+xAm/z1w6BCVdXiNOkqQro
iZ9lU0VboXiOELAKYJA4sW6MZ+eYd+5WVSAjtPTT+poa2NP6wyRFc4LJdm/MsWLZ
gV+c6b1twd6/+yobOCpKzbJ5PSXAdA9LQs8uO1Dl/xmbybftYvD01N4LNgmnEEEJ
MbYsFougC4za/jDWCwMCAwEAAaOCCY0wggmJMA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E
FgQUgR3QEkX0E2nSWFyDQW5dBtw4zB0wHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA
5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMu
by5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8w
ggdbBgNVHREEggdSMIIHToIdYWRtaW4taGlnaGpld2VscnkuY2hhdW1ldC5jb22C
FmFwaS1wcm9kdWN0cy5mZW5kaS5jb22CFGFwaS5oZWF2ZW4uZmVuZGkuY29tghFh
cGkubG9yb3BpYW5hLmNvbYIcYXBwLmZvbmRhdGlvbmxvdWlzdnVpdHRvbi5mcoIR
YXNzZXQuY2hhdW1ldC5jb22CEmFzc2V0Lm9sZmFwbGF5LmNvbYITYi1zaGFyZS5i
ZXJsdXRpLmNvbYISYmFndWV0dGUuZmVuZGkuY29tgiljYXNobWVyZS50aGVvcmln
aW5vZmFzZWNyZXQubG9yb3BpYW5hLmNvbYIPY2h0LmNoYXVtZXQuY29tghljcm93
bnlvdXJsb3ZlLmNoYXVtZXQuY29tghxleGhpYml0aW9uLXRva3lvLmNoYXVtZXQu
Y29tgglmZW5kaS5jb22CEGZpc2Zvci5mZW5kaS5jb22CCGZyZWQuY29tghtoZC5m
b25kYXRpb25sb3Vpc3Z1aXR0b24uZnKCF2hpZ2hqZXdlbHJ5LmNoYXVtZXQuY29t
gg5pY29tLmZlbmRpLmNvbYIVaW1hZ2VzLXRlc3QuZmVuZGkuY29tghJpbWFnZXMu
bXlmZW5kaS5jb22CFGltYWdlcy53d3cuZmVuZGkuY29tghBpbnNpZGVyaXZpZXJh
LmNughFpbnNpZGVyaXZpZXJhLmNvbYIOa3IuY2hhdW1ldC5jb22CFmtzdGF0aWMt
dGVzdC5mZW5kaS5jb22CFWtzdGF0aWMud3d3LmZlbmRpLmNvbYIMbS5jaGF1bWV0
LmNugg1tLmNoYXVtZXQuY29tggxtLmNoYXVtZXQuZnKCEW0uY2h0LmNoYXVtZXQu
Y29tghBtLmtyLmNoYXVtZXQuY29tghRtLnplbml0aC13YXRjaGVzLmNvbYIXbWFr
ZWl0eW91cnMuY2hhdW1ldC5jb22CFG1lZGlhLmljb20uZmVuZGkuY29tghFtb2Jp
bGUuY2hhdW1ldC5qcIIXbW9iaWxlLmZpc2Zvci5mZW5kaS5jb22CEHBvcnRhbC5m
ZW5kaS5jb22CHHBwLWNyb3dueW91cmxvdmUuY2hhdW1ldC5jb22CGHByZXByb2Qt
ZmlzZm9yLmZlbmRpLmNvbYIfcHJlcHJvZC1tb2JpbGUuZmlzZm9yLmZlbmRpLmNv
bYITcHJlcHJvZC5jaGF1bWV0LmNvbYIScHJvZHVjdHMuZmVuZGkuY29tggxwcy5m
ZW5kaS5jb22CEXIubHZtaC1zdGF0aWMuY29tghhyZXRhaWx0cmFpbmluZy5mZW5k
aS5jb22CEHNlY3VyZS5mZW5kaS5jb22CHHN0YWdpbmcuYXBpLmhlYXZlbi5mZW5k
aS5jb22CFXN0YXRpYy10ZXN0LmZlbmRpLmNvbYIOc3RhdGljLmRpb3IuY26CD3N0
YXRpYy5kaW9yLmNvbYIUc3RhdGljLnd3dy5mZW5kaS5jb22CE3N0b3Jlcy5ndWVy
bGFpbi5jb22CHXRlc3QtcmV0YWlsdHJhaW5pbmcuZmVuZGkuY29tgiB0aGVvcmln
aW5vZmFzZWNyZXQubG9yb3BpYW5hLmNvbYIPdGhldnUuZmVuZGkuY29tghR0bXNw
cmQubG9yb3BpYW5hLmNvbYIYdWF0LWFwaS1oZWF2ZW4uZmVuZGkuY29tghp1YXQt
YXBpLXByb2R1Y3RzLmZlbmRpLmNvbYINdmFwLmZlbmRpLmNvbYIedmlkZW8uZm9u
ZGF0aW9ubG91aXN2dWl0dG9uLmZyghR3ZXN0b3JlLmZyZXNoLWNuLmNvbYIQd3Mu
bG9yb3BpYW5hLmNvbYIgd3d3LXByZC5mb25kYXRpb25sb3Vpc3Z1aXR0b24uZnKC
End3dy10ZXN0LmZlbmRpLmNvbYIQd3d3LmNoYS1saW5nLmNvbYIPd3d3LmNoYXVt
ZXQuY29tgg53d3cuY2hhdW1ldC5mcoIOd3d3LmNoYXVtZXQuanCCDXd3dy5mZW5k
aS5jb22CFHd3dy5maXNmb3IuZmVuZGkuY29tghx3d3cuZm9uZGF0aW9ubG91aXN2
dWl0dG9uLmZyggt3d3cuZnJlZC5jboIMd3d3LmZyZWQuY29tghR3d3cuaW5zaWRl
cml2aWVyYS5jboIVd3d3Lmluc2lkZXJpdmllcmEuY29tghF3d3cubG9yb3BpYW5h
LmNvbYILd3d3Lmx2bWguY26CDnd3dy5sdm1oLmNvLmpwggx3d3cubHZtaC5jb22C
C3d3dy5sdm1oLmZyggt3d3cubHZtaC5pdIILd3d3Lmx2bWgucnWCG3d3dy5tb2Jp
bGUuZmlzZm9yLmZlbmRpLmNvbYIcd3d3LnByZXByb2QtZmlzZm9yLmZlbmRpLmNv
bYIjd3d3LnByZXByb2QtbW9iaWxlLmZpc2Zvci5mZW5kaS5jb22CFnd3dy56ZW5p
dGgtd2F0Y2hlcy5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMB
AQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEE
BgorBgEEAdZ5AgQCBIH1BIHyAPAAdgBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkG
jbIImjfZEwAAAXf+DuRCAAAEAwBHMEUCIEo2pdLe1ribq2Ouw1k4CrjdtLWjI16a
uQ7zTf2Rn1drAiEAoYpQFCqFJVNis9juzythhjRr2HSXtx8NQXw9NJGEM1AAdgD2
XJQv0XcwIhRUGAgwlFaO400TGTO/3wwvIAvMTvFk4wAAAXf+DuQTAAAEAwBHMEUC
ICRlljx0RF5kMHgXuNcWR2cVFV0OVeH3ICTRmNwZvBTOAiEAxxN559B3H3VsYL78
ypqfeNKgeYnH7QNlopFva3p/JK4wDQYJKoZIhvcNAQELBQADggEBAJzpRiweK79/
LNZ2edfGF8qHz3deFN32QreSw731MFhKtAtAYVU1YGHBG8d3nzUi9VHI6JMpZDQE
yG8wP5KhiBYkQN+Zwq9MQL0GtYEYbBGbYpiAv2VUr0TonkSC0nxIj9ifESy39tjd
TCoxttd5xxNE+q9+OHUzgPs248td4FTd0r0ssTqedZhZDgFZkNNayVVqq2dTBOOx
GxqkRiLSH/iBMH/E/DlZrfBPZ04/YVFf8ubuvHzMYEHMBjy8sTflOA04WuOSD6xM
/60kbjOZ+ZDTWusQ22X5oeDbBKFtcDxHI0MduXP3ACLdcI0haGMWmEEBSNU3ZYbW
V6rziALiLks=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFUTBXSfE8vU76T7qsEz
rW4pItb7gyu3W4BkxiREHkCnBMLIFxuY6Hm1P/7gQYEgSl/xC7NbklN2sAkGLObu
oBQ89lNKnrd7GUEiVyeXUaLCTJijDFCwEzXXdqyCdjrDukkaBLfCWjod4IeTqYyr
QVifluk5JqsfyXILDFjR5pIJL7ECb/PXDoEJV1eI06SpCuiJn2VTRVuheI4QsApg
kDixboxn55h37lZVICO09NP6mhrY0/rDJEVzgsl2b8yxYtmBX5zpvW3B3r/7Khs4
KkrNsnk9JcB0D0tCzy47UOX/GZvJt+1i8PTU3gs2CacQQQkxtiwWi6ALjNr+MNYL
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343409817317374958373478016914207260896166
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-04 15:25:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-02 15:25:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lvmh.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25794565914951094894607448299346473659966532981317513094357820171431914149408299794544674391420871331810530530632605985320621845408986436838266517549384127938008953361882155284055157151775392933504636091938576504247951272367016533462647565912063661639755358662269088694886552506872668309450513783035755348391646629230247048458897912174106556264151649669464205133402032445281044192445255873204561175240627074225603361309986236836578897333567944855703497620110370400993121745572536495520195810184973414575099299039655720580675787243660681060472160706610402642454591867922889039345671199381453195245645200270940439972611
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							811dd01245f41369d2585c83416e5d06dc38cc1d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1874 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-highjewelry.chaumet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-products.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.heaven.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.fondationlouisvuitton.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asset.chaumet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asset.olfaplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-share.berluti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baguette.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashmere.theoriginofasecret.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cht.chaumet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crownyourlove.chaumet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exhibition-tokyo.chaumet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fisfor.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fred.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hd.fondationlouisvuitton.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highjewelry.chaumet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icom.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-test.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.myfendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.www.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insideriviera.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insideriviera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kr.chaumet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kstatic-test.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kstatic.www.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.chaumet.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.chaumet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.chaumet.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.cht.chaumet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.kr.chaumet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.zenith-watches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makeityours.chaumet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.icom.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.chaumet.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.fisfor.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pp-crownyourlove.chaumet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-fisfor.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-mobile.fisfor.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.chaumet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'products.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r.lvmh-static.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retailtraining.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.api.heaven.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-test.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.dior.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.dior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.www.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.guerlain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-retailtraining.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theoriginofasecret.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thevu.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tmsprd.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-api-heaven.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-api-products.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vap.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.fondationlouisvuitton.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westore.fresh-cn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-prd.fondationlouisvuitton.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-test.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cha-ling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chaumet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chaumet.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chaumet.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fisfor.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fondationlouisvuitton.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fred.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fred.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insideriviera.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insideriviera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lvmh.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lvmh.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lvmh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lvmh.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lvmh.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lvmh.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mobile.fisfor.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preprod-fisfor.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preprod-mobile.fisfor.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zenith-watches.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000177fe0ee442000004030047304502204a36a5d2ded6b89bab63aec359380ab8ddb4b5a3235e9ab90ef34dfd919f576b022100a18a50142a85255362b3d8eecf2b6186346bd87497b71f0d417c3d3491843350007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000177fe0ee413000004030047304502202465963c74445e64307817b8d716476715155d0e55e1f72024d198dc19bc14ce022100c71379e7d0771f756c60befcca9a9f78d2a07989c7ed0365a2916f6b7a7f24ae
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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