www-npe.yves-rocher.com
Issued by R3
About this certificate
This digital certificate with serial number 03:de:3a:95:8f:ee:97:15:b7:0d:08:03:c2:59:0a:c3:cc:6e was issued on by Let's Encrypt.
With 31 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=www-npe.yves-rocher.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:de:3a:95:8f:ee:97:15:b7:0d:08:03:c2:59:0a:c3:cc:6eSerial Number (int): 336957415047004160127628402752178568285294
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: d3:3a:e8:1c:b7:60:fe:7f:68:61:a0:e7:5b:0a:34:ee:eb:3b:9d:24
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): e2:e5:4c:80:4f:2e:1c:c7:d9:a5:88:15:dc:4e:85:ab:cc:5b:06:4f
Fingerprint (sha256): 28:4c:35:17:14:c2:15:b6:ad:b9:e5:41:50:87:42:90:aa:74:63:23:3e:49:3c:81:50:6f:1e:80:0e:5d:8d:7f
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate www-npe.yves-rocher.com
31
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www-npe.yves-rocher.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
api-dev.groupe-rocher.com
api-integ.groupe-rocher.com
api-stg.groupe-rocher.com
b2s-stg.yves-rocher.com.mx
contrib-bo.ricaud.com
eimv3-npe.yves-rocher.com
eimv3-statics-npe.yves-rocher.com
media-stg.aod-care.com
myreport-dev.yves-rocher.com
myreport-rec.yves-rocher.com
pim-npe.yves-rocher.com
portailmag-rec.yves-rocher.com
preprod-gcp-vpci.yves-rocher.com
preprod-vpci.yves-rocher.com
samy-it-int.yves-rocher.com
samy-yrbe-npe.yves-rocher.com
samy-yrca-npe.yves-rocher.com
samy-yrce-npe.yves-rocher.com
samy-yres-npe.yves-rocher.com
samy-yrfr-npe.yves-rocher.com
samy-yrit-npe.yves-rocher.com
storelocator-npe.yves-rocher.com
test01.stanhomeperte.it
tilkal-npe.petit-bateau.com
univert-int.groupe-rocher.com
workbench-www.ricaud.com
www-npe.extracteur-donnees-mag-yr.com
www-npe.fondation-danieljouvance.org
www-npe.yves-rocher.com
www.b2s-stg.yves-rocher.com.mx
www.cosmetovigilance-uat.groupe-rocher.com
api-integ.groupe-rocher.com
api-stg.groupe-rocher.com
b2s-stg.yves-rocher.com.mx
contrib-bo.ricaud.com
eimv3-npe.yves-rocher.com
eimv3-statics-npe.yves-rocher.com
media-stg.aod-care.com
myreport-dev.yves-rocher.com
myreport-rec.yves-rocher.com
pim-npe.yves-rocher.com
portailmag-rec.yves-rocher.com
preprod-gcp-vpci.yves-rocher.com
preprod-vpci.yves-rocher.com
samy-it-int.yves-rocher.com
samy-yrbe-npe.yves-rocher.com
samy-yrca-npe.yves-rocher.com
samy-yrce-npe.yves-rocher.com
samy-yres-npe.yves-rocher.com
samy-yrfr-npe.yves-rocher.com
samy-yrit-npe.yves-rocher.com
storelocator-npe.yves-rocher.com
test01.stanhomeperte.it
tilkal-npe.petit-bateau.com
univert-int.groupe-rocher.com
workbench-www.ricaud.com
www-npe.extracteur-donnees-mag-yr.com
www-npe.fondation-danieljouvance.org
www-npe.yves-rocher.com
www.b2s-stg.yves-rocher.com.mx
www.cosmetovigilance-uat.groupe-rocher.com
Other certificates including the domain name yves-rocher.com
(limited to 100 certificates)
services.yves-rocher.com
medianet.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
abspace-re7.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
incapsula.com
www.yves-rocher.fr
www.yves-rocher.com
eimv3-statics.yves-rocher.com
www.yves-rocher.com
birdplan.yves-rocher.com
san-16-s50.tlsprovisioning.exacttarget.com
admin-rec.easy-ext.yves-rocher.com
sec.yr-fr-rec1.easy-ext.yves-rocher.com
*.yves-rocher.com
www.yves-rocher.fr
www.yves-rocher.com
dyrectperso.yves-rocher.com
san-16-s50.tlsprovisioning.exacttarget.com
imperva.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
pim.yves-rocher.com
secure-vpci.yves-rocher.com
secure-vpci.yves-rocher.com
incapsula.com
dyrectperso.yves-rocher.com
incapsula.com
specif-ac.yves-rocher.com
www-npe.yves-rocher.com
incapsula.com
incapsula.com
incapsula.com
dyrectperso.yves-rocher.com
san-16-s50.tlsprovisioning.exacttarget.com
www-npe.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
sec.yr-fr-rec1.easy-ext.yves-rocher.com
secure-vpci.yves-rocher.com
myreport.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
www.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
incapsula.com
san-11-s50.tlsprovisioning.exacttarget.com
services.yves-rocher.com
imperva.com
san-16-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
*.statics-easy-ext.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-16-s50.tlsprovisioning.exacttarget.com
*.yves-rocher.com
dyrectperso.yves-rocher.com
pim.yves-rocher.com
dyrectperso.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
medianet.yves-rocher.com
admin-rec.easy-ext.yves-rocher.com
*.yves-rocher.com
ftp-pao.yves-rocher.com
*.yves-rocher.com
services.yves-rocher.com
incapsula.com
samy.yves-rocher.com
newsroom.yves-rocher.com
www.yves-rocher.fr
dyrectperso.yves-rocher.com
services.yves-rocher.com
specif-ac.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
www.yves-rocher.com
dyrectperso.yves-rocher.com
newsroom.yves-rocher.com
www-npe.yves-rocher.com
dkb.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
pim.yves-rocher.com
specif-ac.yves-rocher.com
*.yves-rocher.com
flow.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
*.yves-rocher.com
portailmag-rec.yves-rocher.com
*.dev-spark-ext.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
services.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
specif-ac.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
medianet.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
abspace-re7.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
incapsula.com
www.yves-rocher.fr
www.yves-rocher.com
eimv3-statics.yves-rocher.com
www.yves-rocher.com
birdplan.yves-rocher.com
san-16-s50.tlsprovisioning.exacttarget.com
admin-rec.easy-ext.yves-rocher.com
sec.yr-fr-rec1.easy-ext.yves-rocher.com
*.yves-rocher.com
www.yves-rocher.fr
www.yves-rocher.com
dyrectperso.yves-rocher.com
san-16-s50.tlsprovisioning.exacttarget.com
imperva.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
pim.yves-rocher.com
secure-vpci.yves-rocher.com
secure-vpci.yves-rocher.com
incapsula.com
dyrectperso.yves-rocher.com
incapsula.com
specif-ac.yves-rocher.com
www-npe.yves-rocher.com
incapsula.com
incapsula.com
incapsula.com
dyrectperso.yves-rocher.com
san-16-s50.tlsprovisioning.exacttarget.com
www-npe.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
sec.yr-fr-rec1.easy-ext.yves-rocher.com
secure-vpci.yves-rocher.com
myreport.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
www.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
incapsula.com
san-11-s50.tlsprovisioning.exacttarget.com
services.yves-rocher.com
imperva.com
san-16-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
*.statics-easy-ext.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-16-s50.tlsprovisioning.exacttarget.com
*.yves-rocher.com
dyrectperso.yves-rocher.com
pim.yves-rocher.com
dyrectperso.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
medianet.yves-rocher.com
admin-rec.easy-ext.yves-rocher.com
*.yves-rocher.com
ftp-pao.yves-rocher.com
*.yves-rocher.com
services.yves-rocher.com
incapsula.com
samy.yves-rocher.com
newsroom.yves-rocher.com
www.yves-rocher.fr
dyrectperso.yves-rocher.com
services.yves-rocher.com
specif-ac.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
www.yves-rocher.com
dyrectperso.yves-rocher.com
newsroom.yves-rocher.com
www-npe.yves-rocher.com
dkb.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
pim.yves-rocher.com
specif-ac.yves-rocher.com
*.yves-rocher.com
flow.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
*.yves-rocher.com
portailmag-rec.yves-rocher.com
*.dev-spark-ext.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
services.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
specif-ac.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
Certificate
The complete raw certificate details for www-npe.yves-rocher.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIkzCCB3ugAwIBAgISA946lY/ulxW3DQgDwlkKw8xuMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMDcxNTIxNTVaFw0yNDAzMDYxNTIxNTRaMCIxIDAeBgNVBAMT F3d3dy1ucGUueXZlcy1yb2NoZXIuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAunGW8KVjIOyby4rnBqrLP4ErIc1BmPikJDi1a1w3/V0fXH/AzDxM YScoH7m6Lo2h7yN/z6SPZQru6fNOvOTXb9ggp0yJwtUzpwa5FDmxdu+WPK9Ki0VW YyCJgZrboSl8d3PYV1049h1+ljdlSF9jNsrQK4XBZfZ2YwcXXU1ilsfzKjF/C0L2 P8ox40KKq4A6xpIjK7t9e8UOwB7fb5CXa6BQnTEkWjx9pjb0at971Q3GJP9QRCiJ ps9kX0yPagiDZlxE5R4SPGht45k3874Z2/0AcltcNKYIvleqx0FKxqyKhFaV6onX YCpSD3C0ozB3T+PM8+eZLz0rPFkXtwyQtwIDAQABo4IFsTCCBa0wDgYDVR0PAQH/ BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8E AjAAMB0GA1UdDgQWBBTTOugct2D+f2hhoOdbCjTu6zudJDAfBgNVHSMEGDAWgBQU LrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGG FWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmku bGVuY3Iub3JnLzCCA7gGA1UdEQSCA68wggOrghlhcGktZGV2Lmdyb3VwZS1yb2No ZXIuY29tghthcGktaW50ZWcuZ3JvdXBlLXJvY2hlci5jb22CGWFwaS1zdGcuZ3Jv dXBlLXJvY2hlci5jb22CGmIycy1zdGcueXZlcy1yb2NoZXIuY29tLm14ghVjb250 cmliLWJvLnJpY2F1ZC5jb22CGWVpbXYzLW5wZS55dmVzLXJvY2hlci5jb22CIWVp bXYzLXN0YXRpY3MtbnBlLnl2ZXMtcm9jaGVyLmNvbYIWbWVkaWEtc3RnLmFvZC1j YXJlLmNvbYIcbXlyZXBvcnQtZGV2Lnl2ZXMtcm9jaGVyLmNvbYIcbXlyZXBvcnQt cmVjLnl2ZXMtcm9jaGVyLmNvbYIXcGltLW5wZS55dmVzLXJvY2hlci5jb22CHnBv cnRhaWxtYWctcmVjLnl2ZXMtcm9jaGVyLmNvbYIgcHJlcHJvZC1nY3AtdnBjaS55 dmVzLXJvY2hlci5jb22CHHByZXByb2QtdnBjaS55dmVzLXJvY2hlci5jb22CG3Nh bXktaXQtaW50Lnl2ZXMtcm9jaGVyLmNvbYIdc2FteS15cmJlLW5wZS55dmVzLXJv Y2hlci5jb22CHXNhbXkteXJjYS1ucGUueXZlcy1yb2NoZXIuY29tgh1zYW15LXly Y2UtbnBlLnl2ZXMtcm9jaGVyLmNvbYIdc2FteS15cmVzLW5wZS55dmVzLXJvY2hl ci5jb22CHXNhbXkteXJmci1ucGUueXZlcy1yb2NoZXIuY29tgh1zYW15LXlyaXQt bnBlLnl2ZXMtcm9jaGVyLmNvbYIgc3RvcmVsb2NhdG9yLW5wZS55dmVzLXJvY2hl ci5jb22CF3Rlc3QwMS5zdGFuaG9tZXBlcnRlLml0ght0aWxrYWwtbnBlLnBldGl0 LWJhdGVhdS5jb22CHXVuaXZlcnQtaW50Lmdyb3VwZS1yb2NoZXIuY29tghh3b3Jr YmVuY2gtd3d3LnJpY2F1ZC5jb22CJXd3dy1ucGUuZXh0cmFjdGV1ci1kb25uZWVz LW1hZy15ci5jb22CJHd3dy1ucGUuZm9uZGF0aW9uLWRhbmllbGpvdXZhbmNlLm9y Z4IXd3d3LW5wZS55dmVzLXJvY2hlci5jb22CHnd3dy5iMnMtc3RnLnl2ZXMtcm9j aGVyLmNvbS5teIIqd3d3LmNvc21ldG92aWdpbGFuY2UtdWF0Lmdyb3VwZS1yb2No ZXIuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB 8gDwAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGMRRX0LQAA BAMARzBFAiBlygQjBdDyDeQ3HrGPxGRSXO+nhkIAC3J3cMnNIVkaYQIhAJtK5556 IOOnGTR+PytFmB0EWnILbsBTtkJEOcnv+m3BAHYA7s3QZNXbGs7FXLedtM0TojKH Rny87N7DUUhZRnEftZsAAAGMRRX0XQAABAMARzBFAiAE48XaeU6NapU7qwBr14ln bjwKeF8A43v0s7xDvRRuQgIhALr8024DoKboaqdq28idBNCTfRpETXUvjaPXoUwt 5KfyMA0GCSqGSIb3DQEBCwUAA4IBAQBO20ueo3j9Rb5xtmkxbiBDXjFMDWIvw/YG PHBvm7iPgE8SP5lDCFYTkmRsYBElOMV7JQSj6yLxLtgUkKJXP+iUtDhy4DQ1Gv+8 sfajcqblCkBfdD4gjYShM9enXP+jpjpV6WzS89LcJEE2FJ5woVtwzi/IoIo0WdJI itlLnqW9h9aScdNjuGWV9bIxbRhwPRjFQ7ZL832DBO6YlMNXfOG/pDK5A5riotsu 0sTGnChfRRoBfxwwCgPDS+BuA3RsXngZ02ogWYspmxV0w6TIuIpAcROAWfS9KuRr XWn6LbYpf+7F6eMnVwmJnv0dX/H8LRo1+6CiZkvPVz6A13iGuEdi -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunGW8KVjIOyby4rnBqrL P4ErIc1BmPikJDi1a1w3/V0fXH/AzDxMYScoH7m6Lo2h7yN/z6SPZQru6fNOvOTX b9ggp0yJwtUzpwa5FDmxdu+WPK9Ki0VWYyCJgZrboSl8d3PYV1049h1+ljdlSF9j NsrQK4XBZfZ2YwcXXU1ilsfzKjF/C0L2P8ox40KKq4A6xpIjK7t9e8UOwB7fb5CX a6BQnTEkWjx9pjb0at971Q3GJP9QRCiJps9kX0yPagiDZlxE5R4SPGht45k3874Z 2/0AcltcNKYIvleqx0FKxqyKhFaV6onXYCpSD3C0ozB3T+PM8+eZLz0rPFkXtwyQ twIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 336957415047004160127628402752178568285294 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-07 15:21:55 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-06 15:21:54 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www-npe.yves-rocher.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23536337847752913959589178430179603144664140906539607661354111293543358061247354592479693057257442969619002148604374506276533231012678558335342879239542229745638685190488354464065315137934432972627475435226845712748484129041454701912933451051412767301358039332717150699716663500741003274299665898200592918098235195195904185438259229767150545362240876060521854703847017725390104299782194592400717791763429993761271365773289205360078936204245909671719516842143416596879901654603970011604696707353782697703022451606266790230018490383706231554951003466816885714598698002612754521885854679636991798943587089686514390306999 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d33ae81cb760fe7f6861a0e75b0a34eeeb3b9d24 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (943 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-dev.groupe-rocher.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-integ.groupe-rocher.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-stg.groupe-rocher.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2s-stg.yves-rocher.com.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contrib-bo.ricaud.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eimv3-npe.yves-rocher.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eimv3-statics-npe.yves-rocher.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-stg.aod-care.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myreport-dev.yves-rocher.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myreport-rec.yves-rocher.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pim-npe.yves-rocher.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portailmag-rec.yves-rocher.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-gcp-vpci.yves-rocher.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-vpci.yves-rocher.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samy-it-int.yves-rocher.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samy-yrbe-npe.yves-rocher.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samy-yrca-npe.yves-rocher.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samy-yrce-npe.yves-rocher.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samy-yres-npe.yves-rocher.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samy-yrfr-npe.yves-rocher.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samy-yrit-npe.yves-rocher.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storelocator-npe.yves-rocher.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test01.stanhomeperte.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tilkal-npe.petit-bateau.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'univert-int.groupe-rocher.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workbench-www.ricaud.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-npe.extracteur-donnees-mag-yr.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-npe.fondation-danieljouvance.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-npe.yves-rocher.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.b2s-stg.yves-rocher.com.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cosmetovigilance-uat.groupe-rocher.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c4515f42d0000040300473045022065ca042305d0f20de4371eb18fc464525cefa78642000b727770c9cd21591a610221009b4ae79e7a20e3a719347e3f2b45981d045a720b6ec053b6424439c9effa6dc1007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c4515f45d0000040300473045022004e3c5da794e8d6a953bab006bd789676e3c0a785f00e37bf4b3bc43bd146e42022100bafcd36e03a0a6e86aa76adbc89d04d0937d1a444d752f8da3d7a14c2de4a7f2 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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