stage.lululemon.com

- Lululemon Athletica Canada Inc. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 09:ab:b5:40:6e:49:e5:6f:01:15:75:5b:4c:98:69:b9 was issued on by DigiCert Inc.

With 80 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Lululemon Athletica Canada Inc.

Organization: Lululemon Athletica Canada Inc.
State / Province: British Columbia
Locality: Vancouver
Country: CA

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:ab:b5:40:6e:49:e5:6f:01:15:75:5b:4c:98:69:b9
Serial Number (int): 12854610945747046380648411277645343161
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 04:a4:69:f5:c8:03:71:93:e4:6b:bb:13:b0:a0:6c:97:e7:04:01:44
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 4f:c3:5c:11:f4:fd:ad:b6:5a:0b:53:9a:08:0b:67:90:7f:ac:8f:69
Fingerprint (sha256): 24:2d:d4:a8:79:dd:7e:82:00:df:bb:b8:36:f3:ba:a5:1c:f2:fb:c8:d3:1f:f2:cd:cf:bd:6f:49:2c:62:e5:bc

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate stage.lululemon.com

80

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stage.lululemon.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fr-test-shop.lululemon.com
fr.stage-gsr.lululemon.com
fr.stage.info.lululemon.com
fr.stage.lululemon.com
perf2.lululemon.com
preview-stage2.lululemon.com
register-dev.seawheeze.com
shop-stage2.lululemon.com
stage-fr.info.lululemon.com
stage-globalstaticassets.lululemon.com
stage-gsr.lululemon.com
stage-mobileapi-gsr.lululemon.com
stage-mobileshopapi.eu.lululemon.com
stage-mobileshopapi.lululemon.ch
stage-mobileshopapi.lululemon.co.nz
stage-mobileshopapi.lululemon.co.uk
stage-mobileshopapi.lululemon.com.au
stage-mobileshopapi.lululemon.com.hk
stage-partners.lululemon.com.au
stage-pnimages.lululemon.com
stage-preprod.lululemon.com
stage-preview-gsr.lululemon.com
stage-preview.lululemon.cn
stage-preview.lululemon.com
stage-register.seawheeze.com
stage-search-gsr.lululemon.com
stage-strategicsales.lululemon.com
stage.apis.lululemon.com
stage.eu.lululemon.com
stage.info.eu.lululemon.com
stage.info.ivivva.com
stage.info.lululemon.ch
stage.info.lululemon.cn
stage.info.lululemon.co.nz
stage.info.lululemon.co.uk
stage.info.lululemon.com
stage.info.lululemon.com.au
stage.info.lululemon.com.hk
stage.ivivva.com
stage.lululemon.ch
stage.lululemon.cn
stage.lululemon.co.nz
stage.lululemon.co.uk
stage.lululemon.com
stage.lululemon.com.au
stage.lululemon.com.hk
stage.partners.lululemon.com.au
stage.seawheeze.com
stage10.ivivva.com
stage10.lululemon.co.nz
stage10.lululemon.com
stage10.lululemon.com.au
stage62-info.eu.lululemon.com
stage62-info.lululemon.ch
stage62-info.lululemon.cn
stage62-info.lululemon.co.nz
stage62-info.lululemon.co.uk
stage62-info.lululemon.com
stage62-info.lululemon.com.au
stage62-info.lululemon.com.hk
stagefailover-intl.lululemon.com
stagefailover-partners.lululemon.com.au
stagefailover.ivivva.com
stagegsr-partners.lululemon.com.au
stagegsr.eu.lululemon.com
stagegsr.lululemon.ch
stagegsr.lululemon.co.nz
stagegsr.lululemon.co.uk
stagegsr.lululemon.com.au
stagegsr.lululemon.com.hk
stagegsr.partners.lululemon.com.au
test-partners.lululemon.com.au
test-shop.eu.lululemon.com
test-shop.ivivva.com
test-shop.lululemon.ch
test-shop.lululemon.co.nz
test-shop.lululemon.co.uk
test-shop.lululemon.com
test-shop.lululemon.com.au
test-shop.lululemon.com.hk

Other certificates including the domain name lululemon.com

(limited to 100 certificates)
vanity22.jiveon.com
*.strategicsales.lululemon.com
lululemon.com
stage.lululemon.com
lululemon.com
vanity22.jiveon.com
stage.lululemon.com
eu.lululemon.com
*.lululemon.com
leapfrog-ssl-28.gcs-web.com
whatwelove.lululemon.com
secure5s.scene7.com
*.lululemon.com
imperva.com
cdn.lululemon.com.au
test.preprod-apis.lululemon.com
smetrics.lululemon.com
vanity22.jiveon.com
cdn.lululemon.com.au
preview.apis.lululemon.com
grin.lululemon.com
sso-signing.lululemon.com
sni.cloudflaressl.com
lululemon.com.au
lululemon.com
stage.lululemon.com
sni.cloudflaressl.com
ehc-dev.lululemon.com
*.lululemon.com
imperva.com
akamai-san90.exacttarget.com
imperva.com
stage.lululemon.com
vanity22.jiveon.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-28.gcs-web.com
click.e.lululemon.com
stage.lululemon.com
whatwelove.lululemon.com
whatwelove.lululemon.com
akamai-san90.exacttarget.com
*.lllatg.com
vanity22.jiveon.com
investor.lululemon.com
lululemon.com
lululemon.ca
ehc-dev.lululemon.com
delivery.lululemon.com
lululemon.com
cdn.lululemon.com.au
eu.lululemon.com
vanity22.jiveon.com
smetrics.lululemon.com
secure5s.scene7.com
secure5s.scene7.com
ehc-dev.lululemon.com
akamai-san90.exacttarget.com
cloudflare-sandbox.lululemon.com
lll.flow.anaplan.qa.lululemon.com
sni.cloudflaressl.com
www.lululemon.com
repair.lululemon.com
secure5s.scene7.com
lululemon.com
ehc-dev.lululemon.com
test.preprod-apis.lululemon.com
vanity22.jiveon.com
leapfrog-ssl-28.gcs-web.com
*.atg.lululemon.com
leapfrog-ssl-28.gcs-web.com
*.lululemon.com
apim-stage.tokenapi.lululemon.com
cdn.lululemon.com.au
stage.lululemon.com
theghostrace.lululemon.com
grin.lululemon.com
vanity22.jiveon.com
prod.apis.lllext.com
lululemon.com
owa.lululemon.com
leapfrog-ssl-28.gcs-web.com
www.lululemon.com
ehc-dev.lululemon.com
cdn.lululemon.com.au
vanity22.jiveon.com
lululemon.ca
vanity22.jiveon.com
ehc-dev.lululemon.com
sso-encryption.lululemon.com
www.lululemon.com
eu.lululemon.com
lululemon.com
apim-stage.tokenapi.lululemon.com
prod.apis.lllext.com
vanity22.jiveon.com
www.lululemon.com
sni.cloudflaressl.com
www.lululemon.com
cloud.e.lululemon.com
view.e.lululemon.com

Certificate

The complete raw certificate details for stage.lululemon.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yZv8Qhlh42HQr9tg+FR
mThp9sqmSukmCh1gqxrfjvQfXLC/sb+JUIxX7XsBYOs4+FAVAFjMYBVv3SEyrIiL
PFsVERXTJhnDl8Kq9gJcCSBRQGtMB//wONKpGSYnXy5VgLSrPcYvENk5s6P9acpj
GX44YqGygmngaonu5+u9PcbbI9ZwiDC5uLhx7o14sG+Ou4IwOTwih5B7eUXWcZI6
vLggmBXsE5lk2bR6+sORujV5J7ZKd7qkkASM/A7JJn85VlM+5Jx960yN2Jh7DR/0
DGpSt6hyOVIb8YwUuspj5awU9l7Zldm4tsDb3aJ8nRK19civ53oHz4dyMHbSkUMX
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12854610945747046380648411277645343161
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'British Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vancouver'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lululemon Athletica Canada Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stage.lululemon.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26655236472903436316543330890741540846629733262757645194221028034825882198095598025733639131426612315314527309142611698254915270198336513054021548909297945739513630660787428220896000821039086324563422990981296784658655968507436468522399889131456213966103353401358189145491032469117457648723447450237053086136660427771628705087021806331286778147272747589371993666372003356428177021568539163467335280091332869505097352817826814413109553705251934113427299504575102643136503610521520104198260118129139387431149141593653003090284635699264494175460351221955185553907476529332650588469637179369998606654958146368223200876339
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							04a469f5c8037193e46bbb13b0a06c97e7040144
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2268 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr-test-shop.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.stage-gsr.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.stage.info.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.stage.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf2.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview-stage2.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register-dev.seawheeze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-stage2.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-fr.info.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-globalstaticassets.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-gsr.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-mobileapi-gsr.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-mobileshopapi.eu.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-mobileshopapi.lululemon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-mobileshopapi.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-mobileshopapi.lululemon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-mobileshopapi.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-mobileshopapi.lululemon.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-partners.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-pnimages.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-preprod.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-preview-gsr.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-preview.lululemon.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-preview.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-register.seawheeze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-search-gsr.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-strategicsales.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.apis.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.eu.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.info.eu.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.info.ivivva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.info.lululemon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.info.lululemon.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.info.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.info.lululemon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.info.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.info.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.info.lululemon.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.ivivva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.lululemon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.lululemon.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.lululemon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.lululemon.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.partners.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.seawheeze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage10.ivivva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage10.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage10.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage10.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage62-info.eu.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage62-info.lululemon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage62-info.lululemon.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage62-info.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage62-info.lululemon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage62-info.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage62-info.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage62-info.lululemon.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagefailover-intl.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagefailover-partners.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagefailover.ivivva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagegsr-partners.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagegsr.eu.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagegsr.lululemon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagegsr.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagegsr.lululemon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagegsr.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagegsr.lululemon.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagegsr.partners.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-partners.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-shop.eu.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-shop.ivivva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-shop.lululemon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-shop.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-shop.lululemon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-shop.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-shop.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-shop.lululemon.com.hk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a0077002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017bf5c4451b0000040300483046022100bb4fea025c0efca0bafe082fad36e4813df1814716573ff8fd8571908e8fe118022100ae9cc9e1428a9f9f7943a1eb95af6da20858f37e5039d71101cf890c11afe4e100760051a3b0f5fd01799c566db837788f0ca47acc1b27cbf79e88429a0dfed48b05e50000017bf5c44541000004030047304502203280dec8dc4e984300b6411e70228de3afd304a2f1ad1468b57ea21aac790f430221008de4b231a606551c22ea6c7d1f9a54d8ff9817dc58b498164d918003c324eb2f00770041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017bf5c4451100000403004830460221009bb4775002fd84d9ae42065a56651425e0b48f872deaa0ad76a38b271bdf623f022100e84b3481a81e0b4fdedb119ab8f55f55f8ab2156e06c3c6f2e3888fb56f0b3cd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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