www.lululemon.com.hk

- Cloudflare, Inc. -

Issued by Cloudflare Inc RSA CA-2

About this certificate

This digital certificate with serial number 0d:cf:32:e6:4a:84:37:83:fc:7f:4d:4e:de:f2:29:55 was issued on by Cloudflare, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Cloudflare, Inc.

Organization: Cloudflare, Inc.
State / Province: California
Locality: San Francisco
Country: US

Cloudflare, Inc.

Organization: Cloudflare, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:cf:32:e6:4a:84:37:83:fc:7f:4d:4e:de:f2:29:55
Serial Number (int): 18355801760939907631017192045342239061
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 6e:40:ee:18:11:14:b9:42:00:e1:4c:30:f9:97:b9:9a:0f:4c:85:9b
AuthorityKeyId: 18:a9:1a:fc:b2:45:49:c1:6f:30:34:08:2b:d9:87:9c:b0:25:57:7a

Fingerprint (sha1): 6e:5f:99:89:1b:00:b6:64:32:7b:d7:14:e4:9f:29:e6:1f:23:63:36
Fingerprint (sha256): 28:21:ac:dc:dd:bd:ca:37:50:16:69:39:ba:20:eb:ac:7c:74:9a:33:ff:70:ed:cb:05:db:54:52:75:bd:e3:e0

Issuing Certificate URL: http://cacerts.digicert.com/CloudflareIncRSACA-2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/CloudflareIncRSACA-2.crl
CRL Distribution Point: http://crl4.digicert.com/CloudflareIncRSACA-2.crl

Check the revocation status for certificate www.lululemon.com.hk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lululemon.com.hk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.lululemon.com.hk

Other certificates including the domain name lululemon.com.hk

(limited to 100 certificates)
lululemon.com
lululemon.com
cdn.lululemon.com.au
cdn.lululemon.com.au
smetrics.lululemon.com.hk
smetrics.lululemon.com.hk
lululemon.com.au
mi.lululemon.com.hk
lululemon.com
smetrics.lululemon.com.hk
lululemon.com
cdn.lululemon.com.au
mi.lululemon.com.hk
www.lululemon.com
lululemon.com
mi.lululemon.com.hk
cdn.lululemon.com.au
stage.lululemon.com
lululemon.com
www.lululemon.com
cdn.lululemon.com.au
www.lululemon.com
lululemon.com
mi.lululemon.com.hk
www.lululemon.com
www.lululemon.com
www.lululemon.com
stage.lululemon.com
lululemon.com.hk
stage.lululemon.com
www.lululemon.com.hk
lululemon.com
stage.lululemon.com
www.lululemon.com
*.lululemon.com.hk
*.lululemon.com.hk
www.lululemon.com
www.lululemon.com
lululemon.com
stage.lululemon.com
www.lululemon.com
www.lululemon.com
lululemon.com
www.lululemon.com
lululemon.com
cdn.lululemon.com.au
cdn.lululemon.com.au
www.lululemon.com
stage.lululemon.com
lululemon.com
www.lululemon.com
cdn.lululemon.com.au
stage.lululemon.com
lululemon.com.hk
lululemon.com
cdn.lululemon.com.au
stage.lululemon.com
stage.lululemon.com
lululemon.com
lululemon.com
stage.lululemon.com
www.lululemon.com
lululemon.com
mi.lululemon.com.hk
lululemon.com
stage.lululemon.com
lululemon.com
stage.lululemon.com
lululemon.com
www.lululemon.com
*.lululemon.com.hk
stage.lululemon.com
lululemon.com.hk
lululemon.com
www.lululemon.com
mi.lululemon.com.hk
www.lululemon.com
lululemon.com
stage.lululemon.com
lululemon.com
www.lululemon.com
mi.lululemon.com.hk
www.lululemon.com
mi.lululemon.com.hk
www.lululemon.com
mi.lululemon.com.hk
stage.lululemon.com
cdn.lululemon.com.au
lululemon.com
lululemon.com.hk
smetrics.lululemon.com.hk
lululemon.com
www.lululemon.com
sni.cloudflaressl.com
www.lululemon.com
stage.lululemon.com
stage.lululemon.com
stage.lululemon.com
www.lululemon.com
stage.lululemon.com

Certificate

The complete raw certificate details for www.lululemon.com.hk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1B8l9b+CRSjbE2jV3NNZ
jT1xgmzyaB/N0fA1pMNlxW4uQP4eoZRT9/C/SY/44QcMRIS4XDyX5kwWj6E0T46G
EW0nDG8lkWq0uhpiwVVw+cQFG/uE1Z0Y3EfYLYwUS2RHVpK+Fk00egTwfhm7AlN7
eSQOndPt4DqIYjZt8GPMEnn1a1K7bINvW9NqAixV+Bz0/Wjy4tI3p5TJecMYTXE9
bZ6D9laKOff8J9vbhVyYn+uTy+a+cRkyvW1d9ijBxKA7jeZ/ynC8UWwl2O0XMO6v
wCOAmRcSVdjGlOeAq23Ew0W+gy42IgVNDdL6+wfbfBmtpLdlvpHDFnhVzm/5wDdZ
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18355801760939907631017192045342239061
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cloudflare, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cloudflare Inc RSA CA-2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cloudflare, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lululemon.com.hk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26777880442666334792209278635584091483931546781036389615308591761032774891679316136734838571338858514715381590435867179441011666964737905932246155575172597359765676714385015226571201821625604628066531186929170889885335496090672433019135686633511660503965785193053119835290125935738197819390032896579823662675570623736351268465520568752878157262687680254176505227184835564462093420964936191420936400252394887029973184248384072100583337664667483433678887565083758309021212926457853880789469617145413978125700675261536178351669848806896507473873368366077162883943861735945991694218828566413000994515964281043934560868697
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 18a91afcb24549c16f3034082bd9879cb025577a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6e40ee181114b94200e14c30f997b99a0f4c859b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lululemon.com.hk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/CloudflareIncRSACA-2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/CloudflareIncRSACA-2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/CloudflareIncRSACA-2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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