www.lululemon.com

- Lululemon Athletica Canada Inc. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 07:db:ba:e4:20:b5:51:9b:b7:43:1e:f9:91:7a:b1:ad was issued on by DigiCert Inc.

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Lululemon Athletica Canada Inc.

Organization: Lululemon Athletica Canada Inc.
Organization unit: IT Infrastructure
State / Province: British Columbia
Locality: Vancouver
Country: CA

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:db:ba:e4:20:b5:51:9b:b7:43:1e:f9:91:7a:b1:ad
Serial Number (int): 10445499584843592095711820170495963565
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: f9:bf:5b:35:7d:b0:1f:09:bd:96:f1:3a:db:60:e4:ca:a1:01:d0:70
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): aa:3a:d5:42:6a:c5:6a:6e:59:85:ad:b4:32:d0:45:5d:df:e3:f9:27
Fingerprint (sha256): 30:5c:ef:c1:cf:75:50:cd:20:13:69:8c:40:40:b1:50:99:9f:04:e2:00:83:52:db:55:2b:d1:25:9e:0b:74:02

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.lululemon.com

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lululemon.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.lululemon.com
lululemon.com
blog.lululemon.co.nz
info.lululemon.com.hk
stg-api.lululemon.com
images.lululemon.co.nz
blog.lululemon.ch
info.lululemon.co.uk
static-global.lululemon.ch
www.eu.lululemon.com
images.lululemon.ch
images.ivivva.com
search.lululemon.com.au
search.lululemon.co.uk
shop.lululemon.com
static-global.eu.lululemon.com
info.lululemon.com
cdn.lululemon.com.au
staticassets.eu.lululemon.com
staticassets.lululemon.com
static.lululemon.com.au
static.ivivva.com
www.ivivva.com
info.eu.lululemon.com
images.lululemon.com
static-global.lululemon.com.au
www.lululemon.com.au
static.lululemon.co.uk
partners.lululemon.com.au
contentapi.lululemon.com
www.lululemon.com.hk
cdn.lululemon.co.uk
fr.lululemon.com
mobileshopapi.lululemon.com.au
staticassets.lululemon.com.hk
images.eu.lululemon.com
lululemon.ch
cdn.lululemon.ch
info.lululemon.ch
static-global.lululemon.com.hk
search.lululemon.com
shop.ivivva.com
staticassets.lululemon.co.uk
search.lululemon.com.hk
static-global.lululemon.co.uk
cdn.eu.lululemon.com
api.lululemon.com
blog.lululemon.co.uk
staticassets.lululemon.com.au
cdn.lululemon.com.hk
images.lululemon.co.uk
www.lululemon.co.nz
mobileapi.lululemon.com
blog.lululemon.com.hk
www.lululemon.ch
staticassets.lululemon.ch
fr.shop.lululemon.com
pnimages.lululemon.com
info.ivivva.com
static.lululemon.com
blog.lululemon.com.au
www.lululemon.co.uk
cdn.ivivva.com
images.lululemon.com.hk
fr-blog.lululemon.com
info.lululemon.co.nz
static.eu.lululemon.com
static.lululemon.com.hk
search.lululemon.co.nz
images.lululemon.com.au
search.lululemon.ch
blog.lululemon.com
www.seawheeze.com
globalstaticassets.lululemon.com
static.lululemon.ch
cdn.lululemon.com
search.eu.lululemon.com
cdn.lululemon.co.nz
info.lululemon.com.au
staticassets.lululemon.co.nz
static.lululemon.co.nz
static-global.lululemon.co.nz
fr.search.lululemon.com
blog.eu.lululemon.com

Other certificates including the domain name lululemon.com

(limited to 100 certificates)
vanity22.jiveon.com
*.strategicsales.lululemon.com
lululemon.com
stage.lululemon.com
lululemon.com
vanity22.jiveon.com
stage.lululemon.com
eu.lululemon.com
*.lululemon.com
leapfrog-ssl-28.gcs-web.com
whatwelove.lululemon.com
secure5s.scene7.com
*.lululemon.com
imperva.com
cdn.lululemon.com.au
test.preprod-apis.lululemon.com
smetrics.lululemon.com
vanity22.jiveon.com
cdn.lululemon.com.au
preview.apis.lululemon.com
grin.lululemon.com
sso-signing.lululemon.com
sni.cloudflaressl.com
lululemon.com.au
lululemon.com
stage.lululemon.com
sni.cloudflaressl.com
ehc-dev.lululemon.com
*.lululemon.com
imperva.com
akamai-san90.exacttarget.com
imperva.com
stage.lululemon.com
vanity22.jiveon.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-28.gcs-web.com
click.e.lululemon.com
stage.lululemon.com
whatwelove.lululemon.com
whatwelove.lululemon.com
akamai-san90.exacttarget.com
*.lllatg.com
vanity22.jiveon.com
investor.lululemon.com
lululemon.com
lululemon.ca
ehc-dev.lululemon.com
delivery.lululemon.com
lululemon.com
cdn.lululemon.com.au
eu.lululemon.com
vanity22.jiveon.com
smetrics.lululemon.com
secure5s.scene7.com
secure5s.scene7.com
ehc-dev.lululemon.com
akamai-san90.exacttarget.com
cloudflare-sandbox.lululemon.com
lll.flow.anaplan.qa.lululemon.com
sni.cloudflaressl.com
www.lululemon.com
repair.lululemon.com
secure5s.scene7.com
lululemon.com
ehc-dev.lululemon.com
test.preprod-apis.lululemon.com
vanity22.jiveon.com
leapfrog-ssl-28.gcs-web.com
*.atg.lululemon.com
leapfrog-ssl-28.gcs-web.com
*.lululemon.com
apim-stage.tokenapi.lululemon.com
cdn.lululemon.com.au
stage.lululemon.com
theghostrace.lululemon.com
grin.lululemon.com
vanity22.jiveon.com
prod.apis.lllext.com
lululemon.com
owa.lululemon.com
leapfrog-ssl-28.gcs-web.com
www.lululemon.com
ehc-dev.lululemon.com
cdn.lululemon.com.au
vanity22.jiveon.com
lululemon.ca
vanity22.jiveon.com
ehc-dev.lululemon.com
sso-encryption.lululemon.com
www.lululemon.com
eu.lululemon.com
lululemon.com
apim-stage.tokenapi.lululemon.com
prod.apis.lllext.com
vanity22.jiveon.com
www.lululemon.com
sni.cloudflaressl.com
www.lululemon.com
cloud.e.lululemon.com
view.e.lululemon.com

Certificate

The complete raw certificate details for www.lululemon.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40GuzX/RKv74Ibcnql90
imkF1JaNP04nLVIR/Ne5FMB7rXoIMdfwbSLiLQr7K7qvs+80Z6OAROedq6SCkLAg
JI+F590/HPewZeWW7x2J8/6k1MTZCvE3ExNKFSUwFatNtogRWDDSmnH4fYVz8iZB
gBWsogQPH6wqnmvRUf0C8a1JIQrIrDmbsw+b/vR/5AibKE+HDTHgLQBv0RYh4vyZ
9gKhChQv+/9zF618sA1GMHnVen781SEEwPNm5PVMuSC2X8G6OpY35en85FQIboR3
p8seqvE/bVZlUIUkx3Cw5EaSSFzx/dM9d8VQvNSAW+XboSYtLAv8DOK29Ic9j4Rc
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10445499584843592095711820170495963565
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-19 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'British Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vancouver'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lululemon Athletica Canada Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Infrastructure'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lululemon.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28688484634570297567262299689138757150453966304025418812555024238869930000292549063316289636279158063394863133133949266370715649232096846644235557855359573194079468048528401839487010421313581990295898216202188015719265263574951874163393040985691499853013579228736202822335281371331287549675029074182151345703294619043389989242897692545850579458394631585330545289795132646710864971168956645331034306121239540821847455547833186441621782533761958940858557453303540037635899788232285812775378426564650767790809200612381338021250024608525967574595682431572905621917876175145107064861967897408199621200557940309682175630431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f9bf5b357db01f09bd96f13adb60e4caa101d070
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1961 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.lululemon.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-api.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.lululemon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.lululemon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-global.lululemon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eu.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.lululemon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.ivivva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.lululemon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-global.eu.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staticassets.eu.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staticassets.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.ivivva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ivivva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.eu.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-global.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.lululemon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contentapi.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lululemon.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.lululemon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileshopapi.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staticassets.lululemon.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.eu.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lululemon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.lululemon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.lululemon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-global.lululemon.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ivivva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staticassets.lululemon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.lululemon.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-global.lululemon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.eu.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.lululemon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staticassets.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.lululemon.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.lululemon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileapi.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.lululemon.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lululemon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staticassets.lululemon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.shop.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pnimages.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.ivivva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lululemon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ivivva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.lululemon.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr-blog.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.eu.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.lululemon.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.lululemon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seawheeze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalstaticassets.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.lululemon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.eu.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staticassets.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-global.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.search.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.eu.lululemon.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000164b347c217000004030047304502207fb07a7e920c48c0c93e4895641000a66298f085bc750a5cbfe5b2d809fde203022100929136c8dc7ee79bcc7dff69b8efa8d1a3cce2a16ae87aa0ef134feb0876aa680077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000164b347c2cc0000040300483046022100aba5215a4a26d80df5b93a6a2b5e1bc33665f62a65236793a6e4fdff3d0e4613022100aefb32e9c0bddb04d2cda88f7492322523701cbac3034540e35261d978d3f54c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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