www.lvmh.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:73:d1:79:4b:49:eb:80:00:65:bd:9b:e8:5b:d1:01:28:6b was issued on by Let's Encrypt.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.lvmh.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:73:d1:79:4b:49:eb:80:00:65:bd:9b:e8:5b:d1:01:28:6b
Serial Number (int): 300747768437264853228846015352783268554859
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f0:ae:68:07:f8:44:00:e7:71:b8:fd:b3:ab:54:6c:06:d1:07:91:d2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c1:3c:8d:fe:4d:ca:57:22:62:ac:84:4a:51:31:77:11:ab:62:dd:ad
Fingerprint (sha256): 2d:f6:e2:2b:f6:a9:5a:40:9f:a8:2e:0f:5f:32:5e:ce:7e:5e:63:30:3e:1c:34:b4:74:18:8f:8f:6b:4d:5d:09

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.lvmh.com

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lvmh.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ae.loropiana.com
allmynet.lvmh-pc.com
api.dior.cn
api.dior.com
at.loropiana.com
back-artofgift.dior.cn
baguette.uat.fendi.com
be.loropiana.com
bg.loropiana.com
cdnakamai.lvmh-pc.com
cdninsideguerlain.lvmh-pc.com
cn.loropiana.com
cy.loropiana.com
cz.loropiana.com
de.loropiana.com
diorinlondon.dior.com
dk.loropiana.com
ee.loropiana.com
ememberclub.dior.cn
es.loropiana.com
fi.loropiana.com
fr.loropiana.com
friendsandfamilysales.loropiana.com
gr.loropiana.com
hr.loropiana.com
hu.loropiana.com
icom-2018.fendi.com
ie.loropiana.com
ii.loropiana.com
images.uat.fendi.ows.farm
it.loropiana.com
joybydior.dior.cn
jp.loropiana.com
kr.loropiana.com
lt.loropiana.com
lu.loropiana.com
lv.loropiana.com
m.dior.cn
m.dior.com
m.guerlain.com
m.guerlain.com.cn
m.preprod.zenith-watches.com
mc.loropiana.com
media.dior.cn
media.dior.com
media.icom-2018.fendi.com
media.loropiana.com
mt.loropiana.com
nl.loropiana.com
pl.loropiana.com
preprod-tmc.lvmh.fr
preprod.lvmh-static.com
preprod.lvmh.cn
preprod.lvmh.co.jp
preprod.lvmh.com
preprod.lvmh.fr
preprod.lvmh.it
preprod.lvmh.jp
preprod.lvmh.ru
preprod.zenith-watches.com
pt.loropiana.com
reservation.guerlain.com
ro.loropiana.com
ru.loropiana.com
se.loropiana.com
secure-m.dior.com
si.loropiana.com
sk.loropiana.com
staging-ps.fendi.com
static.uat.fendi.ows.farm
stores.guerlain.com
textile.loropiana.com
uat-ps.fendi.com
uat.fendi.ows.farm
uk.loropiana.com
us.loropiana.com
vap.uat.fendi.com
wws.dior.com
www.12bis.chaumet.com
www.dior.cn
www.dior.com
www.guerlain.com
www.guerlain.com.cn
www.lanature.chaumet.com
www.lvmh.com
www.makeupforever.cn
www.makeupforever.com
wwws.dior.com

Other certificates including the domain name lvmh.com

(limited to 100 certificates)
www.lvmh.com
preprod.lvmh.com
www.lvmh.com
accreditation.lumanity.com
alumnicredentials.kcl.ac.uk
preprod.lvmh.com
compliance.lvmh.com
retailerid.lvmh.com
achievements.launchyou.com
www.lvmh.com
achievements.launchyou.com
www.lvmh.com
publiccert.lvmh.com
support12.cdnetworks.net
support12.cdnetworks.net
preprod.lvmh.com
preprod.lvmh.com
gaia.lvmh.com.dev-gcp.lvmh.lbn.fr
virtualapartment.lvmh.com
www.lvmh.com
accreditation.lumanity.com
preprod.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
www.lvmh.com
achievements.launchyou.com
www.lvmh.com
dbt.lvmh.com
preprod.lvmh.com
www.lvmh.com
preprod.lvmh.com
support12.cdnetworks.net
achievements.launchyou.com
www.lvmh.com
support12.cdnetworks.net
accreditation.lumanity.com
www.lvmh.com
cdn06.cdnsvc.com
preprod.lvmh.com
lvmh.fr
www.lvmh.com
www.lvmh.com
cdn06.cdnsvc.com
accreditation.lumanity.com
preprod.lvmh.com
*.lvmh.com
accreditation.lumanity.com
spring.lvmh.com
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
san-13-s50.tlsprovisioning.exacttarget.com
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
www.lvmh.com
www.lvmh.com
support12.cdnetworks.net
www.lvmh.com
san-13-s50.tlsprovisioning.exacttarget.com
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
shero.lvmh.com
preprod.lvmh.com
support12.cdnetworks.net
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
preprod.lvmh.com
support12.cdnetworks.net
lvmh.fr
support12.cdnetworks.net
www.lvmh.com
preprod.lvmh.com
support12.cdnetworks.net
preprod.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
lamaisondesstartups.lvmh.com
www.lvmh.com
living.lvmh.com
game.cybertraining.lvmh.com
support12.cdnetworks.net
san-13-s50.tlsprovisioning.exacttarget.com
preprod.lvmh.com
www.lvmh.com
*.chic.lvmh.com
lvmh.fr
online-media-builder.lvmh.com
support12.cdnetworks.net
cdn06.cdnsvc.com
lvmh.fr
www.lvmh.com
accreditation.lumanity.com
tr.openinnovation.lvmh.com
accreditation.lumanity.com
link.bein.lvmh.com
preprod.lvmh.com

Certificate

The complete raw certificate details for www.lvmh.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthhVr0RrV3S4c1enId3X
KN5DNQdio/9xVRPLxXoRvrR3Rd5Cvn1bvH5iqVkox5Esg/SxKpFhK7Y87AElZ/nt
Xd3DgTyEWtL5ZeavzRgfzmpGoGvAtKtkQsc+W1V6ltq6CyeGt6Fzy5wiZqdT3AEg
JcYwoVU4kf0dxe6st/8lM8qf/1jUmhcI7uhR6+oPaHfzydaxv3EHmdz6uXyTV77/
JDN2AfpOYe1ut1g1FEWjJTtRf7aYGgFFDFZ0sELBeDyf71Kls8yx32vE6OCZF23t
YC38U0yoDKt1xVutm9DlRR/rEE53LLpmBJAEwyclEElB6JlaUTrdMvH7QVxWf6pI
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300747768437264853228846015352783268554859
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-01 10:14:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-30 10:14:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lvmh.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22987371394404061374540104823795893853791064791718568676592442759713329613608310372571492942602035174946753043601556397430222896575725995303118092246933253821654968021884515055932166214200462065092818636194778881861816698450721323861513118654508672810478088659048640973668163933216797746151997936967742740064829440593893826124209102368601964546543697855268790823558281281386534260714609714752182112075044371160835612450288739103397630622607218571277753853209789630899827356767668904556355105537100437249525670700498374175297114645819584498126626219598374488660528152880955007493574390514153482722412754361076303939669
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f0ae6807f84400e771b8fdb3ab546c06d10791d2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1713 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ae.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allmynet.lvmh-pc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.dior.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.dior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'at.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'back-artofgift.dior.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baguette.uat.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bg.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdnakamai.lvmh-pc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdninsideguerlain.lvmh-pc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cy.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cz.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diorinlondon.dior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dk.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ee.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ememberclub.dior.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fi.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friendsandfamilysales.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gr.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hr.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hu.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icom-2018.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ie.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ii.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.uat.fendi.ows.farm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joybydior.dior.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jp.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kr.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lt.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lu.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lv.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.dior.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.dior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.guerlain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.guerlain.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.preprod.zenith-watches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mc.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.dior.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.dior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.icom-2018.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mt.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nl.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-tmc.lvmh.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh-static.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.zenith-watches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pt.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservation.guerlain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ro.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ru.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'se.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-m.dior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'si.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sk.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-ps.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.uat.fendi.ows.farm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.guerlain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'textile.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-ps.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.fendi.ows.farm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vap.uat.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wws.dior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.12bis.chaumet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dior.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guerlain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guerlain.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lanature.chaumet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lvmh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.makeupforever.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.makeupforever.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwws.dior.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001713572e11000000403004730450220653980b7cfa6cbfc33e62e55aeaf8a0e6f10cb77b8fbf047a53e536074d5edec02210099e08636f93c34ba852eb858075cfa6bf8ac04b9d8b929354bf81d732bf5b79e00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001713572e14500000403004630440220521d0900b7739c5a3b13f4d1b2bde184b64df22ca71b6f8bee17f6bdd7715f27022041863a0588f346685d913498213faa74145aa83a390d78fd9749c116f50cf8d4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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