linemedia.preprod.richemont.com

Issued by R3

About this certificate

This digital certificate with serial number 03:71:63:aa:bf:c3:91:db:69:ae:4f:53:66:d2:01:a0:5b:13 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=linemedia.preprod.richemont.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:71:63:aa:bf:c3:91:db:69:ae:4f:53:66:d2:01:a0:5b:13
Serial Number (int): 299921245408830310471340473869694364834579
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 07:d3:2c:42:ec:c2:87:ad:32:e3:16:4e:4c:ef:1b:d2:1f:7b:3b:2d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 63:13:b7:7f:5b:8d:01:46:96:1c:81:92:c0:52:25:a4:ed:c9:80:95
Fingerprint (sha256): 32:a7:8c:ba:d8:60:ce:6f:e4:ff:2c:82:ae:13:0d:30:88:32:79:45:28:d3:20:01:51:49:64:e3:b5:62:08:dd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate linemedia.preprod.richemont.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for linemedia.preprod.richemont.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.weboutique.preprod.vancleefarpels.cn
cabinotiers.quality.vacheron-constantin.com
connect.preprod.cartier.com
delivery.ocp.richemont.com
demainsenmains.quality.vancleefarpels.com
dev.cartierhighjewellery-sixiemesens.com
dev.comehomeagain.cartier.com
galleries-val.ocp.richemont.com
inside.preprod.rogerdubuis.com
intranet.preprod.dunhill.com
intranet.preprod.iwc.com
intranet.preprod.jaeger-lecoultre.com
intranet.preprod.montblanc.com
intranet.preprod.panerai.com
intranet.preprod.piaget.com
intranet.preprod.richemont.com
intranet.preprod.vancleefarpels.com
linemedia.preprod.richemont.com
madein.preprod.chloe.com
media.weboutique.preprod.vancleefarpels.cn
mosaic.preprod.vacheron-constantin.com
payment.dev.baume-et-mercier.com
payment.preprod.alange-soehne.com
payment.preprod.baume-et-mercier.com
payment.preprod.cartier.com
payment.preprod.chloe.com
payment.preprod.dunhill.com
payment.preprod.iwc.com
payment.preprod.jaeger-lecoultre.com
payment.preprod.montblanc.com
payment.preprod.panerai.com
payment.preprod.piaget.com
payment.preprod.rogerdubuis.com
payment.preprod.vacheron-constantin.com
payment.preprod.vancleefarpels.com
payment.quality.baume-et-mercier.com
payment.staging.alange-soehne.com
payment.staging.baume-et-mercier.com
payment.staging.cartier.com
payment.staging.chloe.com
payment.staging.dunhill.com
payment.staging.iwc.com
payment.staging.jaeger-lecoultre.com
payment.staging.montblanc.com
payment.staging.panerai.com
payment.staging.piaget.com
payment.staging.rogerdubuis.com
payment.staging.vacheron-constantin.com
payment.staging.vancleefarpels.com
payment.val.alange-soehne.com
payment.val.baume-et-mercier.com
payment.val.cartier.com
payment.val.chloe.com
payment.val.dunhill.com
payment.val.iwc.com
payment.val.jaeger-lecoultre.com
payment.val.montblanc.com
payment.val.panerai.com
payment.val.piaget.com
payment.val.rogerdubuis.com
payment.val.vacheron-constantin.com
payment.val.vancleefarpels.com
preprod.time-nature-love-riyadh.vancleefarpels.com
preprod.watchesandwonders.cn
preprod.watchesandwonders.com
qua-cdn.ma.richemont.cn
services.preprod.rogerdubuis.cn
services.preprod.rogerdubuis.com
services.preprod2.rogerdubuis.cn
services.preprod2.rogerdubuis.com
services.staging.rogerdubuis.cn
services.staging.rogerdubuis.com
shse.quality.richemont.cn
staging.cartierhighjewellery-sixiemesens.com
staging.comehomeagain.cartier.com
val-delivery.ocp.richemont.com
weboutique.preprod.alange-soehne.com
weboutique.preprod.rogerdubuis.com
weboutique.preprod.vancleefarpels.cn
weboutique.stg.alange-soehne.com
weboutique.stg.rogerdubuis.com
www.dev.cartierhighjewellery-sixiemesens.com
www.preprod.buccellati.com.cn
www.preprod.cms-one.richemont.com
www.preprod.rogerdubuis.cn
www.preprod3.montblanc.cn
www.preprod3.montblanc.com
www.prod.richemont.cn
www.prod.richemont.com
www.prod2.vancleefarpels.cn
www.prod2.vancleefarpels.com
www.prod3.montblanc.cn
www.prod3.montblanc.com
www.quality.rogerdubuis.cn
www.quality2.lecolevancleefarpels.com
www.staging.buccellati.com.cn
www.staging.cartierhighjewellery-sixiemesens.com
www.staging3.montblanc.cn
www.staging3.montblanc.com

Other certificates including the domain name richemont.com

(limited to 100 certificates)
preprod-iisfarm.richemont.com
careers.richemont.com
booster2.richemont.com
intranet.richemont.com
intranet.richemont.com
richemont.com
xsrna.richemont.com
xs.richemont.com
intranet.richemont.com
dam.richemont.com
intranet.richemont.com
belenus.richemont.com
collaboration.richemont.com
apps2013.richemont.com
linemedia.preprod.richemont.com
api-booster.richemont.com
preprod-apps2016.richemont.com
linemedia.preprod.richemont.com
media.richemont.com
vo1webdisp.richemont.com
wwsip.richemont.com
spark.nprd.val.elb.richemont.com
careers.richemont.com
booster.richemont.com
apps.richemont.com
www.richemont.com
preprod-apps2016.richemont.com
owa.richemont.com
intranet.richemont.com
preprod-apps2016.richemont.com
booster.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
dam.richemont.com
linemedia.preprod.richemont.com
antispam.richemont.com
svn.richemont.com
apps2016.richemont.com
intranet.richemont.com
launchpad.richemont.com
visionnaire.richemont.com
epm-mobile.richemont.com
intranet.richemont.com
mdm.richemont.com
richemont.com
epm-mobile.richemont.com
eusip.richemont.com
www.quality.alange-soehne.com
jobs.richemont.com
jenkins-aws.richemont.com
search.richemont.com
launchpad.richemont.com
cyberjourney.richemont.com
api-booster.richemont.com
linemedia.preprod.richemont.com
admin.pre-booster.richemont.com
pre-booster.richemont.com
owa-sso.richemont.com
id-sso.richemont.com
scn01.richemont.com
intranet.preprod.richemont.com
owa-nosso.richemont.com
linemedia.preprod.richemont.com
epm-mobile.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
owa-nosso.richemont.com
careers.richemont.com
amer-ra.richemont.com
media.richemont.com
iisfarm.richemont.com
preprod-apps2013.richemont.com
emea-ra.richemont.com
xs4.richemont.com
inet.richemont.com
midgard.ch.richemont.com
aegis.ch.richemont.com
collaboration.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
apps2016.richemont.com
owa.richemont.com
fileexchange.richemont.com
creative-academy.com
agile.quality.richemont.com
secure.richemont.com
cs.richemont.com
www.quality.alange-soehne.com
richemont.com
richemont.com
owa.richemont.com
agile.richemont.com
preprod-iisfarm.richemont.com
careers.richemont.com
*.richemont.com
belenus.richemont.com
www.lcboutiquenet.com
*.mytandem.eu
intranet.staging.richemont.com

Certificate

The complete raw certificate details for linemedia.preprod.richemont.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT/uNx6yaDYYkJAvdRGn
IiHBllbAlOWGOgm3k9lv70TYpmUnhv3aTQBbV6bQgMH0N/blv9WsfthT81d6/zLS
nQogxnAIJIHqF/gVo0X52/BfeQ7EnFh4XIfw5dYD9lY4/QiEfaTKImP32OYDx7Xn
uawmElyMQhTB8VdylrQ4GlBwghQfGx9F9ZGnhqooOT3SnBaMRPyJOmm8phQP31lc
wNh8jDAXWRm8tu10a/HSvuc9vHe1C/A3lpZHp1j3b7+fsvg8RZJEqN+wdf8DrWjg
73L3rYXdpxGFoIIoe2sdI9ipdek8ZV1OPUkxXGwAPoDzHMuGk3lcp0lcag+8ImGo
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299921245408830310471340473869694364834579
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-27 11:33:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-27 11:33:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'linemedia.preprod.richemont.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22880658517455778450867023338936354104006763908055856887348016995728994526291582048722403366099062993435339944887428632483011354802386104856545039405892678810640835611852254811724788413618920712334141628746614812156351778844009675485156925874267339385397751826286603703216784048168854237628017273193584389411465261631506092076054568423868152147284512955080673521538464263152841150919611726461647756628896954301754935321191849098060074910053191230467752313471648746014029005895430238272137994835745526386602702363838335292180734445859560290175997933600554993964591694068354367920021519662230635835363988215875435079791
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							07d32c42ecc287ad32e3164e4cef1bd21f7b3b2d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3216 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.preprod.vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabinotiers.quality.vacheron-constantin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.preprod.cartier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery.ocp.richemont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demainsenmains.quality.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cartierhighjewellery-sixiemesens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.comehomeagain.cartier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galleries-val.ocp.richemont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.preprod.rogerdubuis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.preprod.dunhill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.preprod.iwc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.preprod.jaeger-lecoultre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.preprod.montblanc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.preprod.panerai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.preprod.piaget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.preprod.richemont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.preprod.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linemedia.preprod.richemont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madein.preprod.chloe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.preprod.vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mosaic.preprod.vacheron-constantin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.dev.baume-et-mercier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.alange-soehne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.baume-et-mercier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.cartier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.chloe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.dunhill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.iwc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.jaeger-lecoultre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.montblanc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.panerai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.piaget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.rogerdubuis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.vacheron-constantin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.quality.baume-et-mercier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.alange-soehne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.baume-et-mercier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.cartier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.chloe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.dunhill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.iwc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.jaeger-lecoultre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.montblanc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.panerai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.piaget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.rogerdubuis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.vacheron-constantin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.val.alange-soehne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.val.baume-et-mercier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.val.cartier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.val.chloe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.val.dunhill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.val.iwc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.val.jaeger-lecoultre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.val.montblanc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.val.panerai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.val.piaget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.val.rogerdubuis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.val.vacheron-constantin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.val.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.time-nature-love-riyadh.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.watchesandwonders.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.watchesandwonders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qua-cdn.ma.richemont.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.preprod.rogerdubuis.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.preprod.rogerdubuis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.preprod2.rogerdubuis.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.preprod2.rogerdubuis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.staging.rogerdubuis.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.staging.rogerdubuis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shse.quality.richemont.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.cartierhighjewellery-sixiemesens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.comehomeagain.cartier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'val-delivery.ocp.richemont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.alange-soehne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.rogerdubuis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.stg.alange-soehne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.stg.rogerdubuis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev.cartierhighjewellery-sixiemesens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preprod.buccellati.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preprod.cms-one.richemont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preprod.rogerdubuis.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preprod3.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preprod3.montblanc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prod.richemont.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prod.richemont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prod2.vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prod2.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prod3.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prod3.montblanc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quality.rogerdubuis.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quality2.lecolevancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.buccellati.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.cartierhighjewellery-sixiemesens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging3.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging3.montblanc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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