ws.richemont.cn

- Richemont International SA -

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 01:79:92:3d:b5:d3:6b:6c:88:38:2e:e1:bb:1e:a3:bf was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Richemont International SA

Organization: Richemont International SA
Organization unit: RIC
Locality: Bellevue
Country: CH

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:79:92:3d:b5:d3:6b:6c:88:38:2e:e1:bb:1e:a3:bf
Serial Number (int): 1960462036660053950842304763598382015
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 00:d0:1f:6a:5e:0b:96:ae:88:00:a7:7e:1b:e5:d1:97:67:4c:65:d4
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): fe:70:eb:9e:a1:9c:e6:80:2a:92:2d:5c:3d:df:9b:74:4a:5b:b4:3c
Fingerprint (sha256): 32:c8:c2:b5:fc:d0:3f:1a:a7:77:c8:5f:2d:68:2f:32:e5:72:d2:e2:f2:6f:16:3f:43:61:b9:01:a4:fd:72:e8

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate ws.richemont.cn

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ws.richemont.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ws.richemont.cn

Other certificates including the domain name richemont.cn

(limited to 100 certificates)
careers.richemont.com
wechat-oauth.richemont.cn
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
ws.richemont.cn
wechat-oauth.preprod.richemont.cn
api.rcdc.richemont.cn
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
dev.api.warm.richemont.cn
intranet.richemont.com
xianskp.rdu.quality.richemont.cn
www.quality.alange-soehne.com
linemedia.preprod.richemont.com
nexus.richemont.cn
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
careers.richemont.com
linemedia.preprod.richemont.com
chloefayeday.richemont.cn
www.rogerdubuis.com
www.quality.alange-soehne.com
xianskp.rdu.richemont.cn
*.richemont.cn
www.quality.alange-soehne.com
careers.richemont.com
dev.api.warm.richemont.cn
wechat-oauth.quality.richemont.cn
api.warm.richemont.cn
careers.richemont.com
xianskp.rdu.richemont.cn
xianskp.rdu.quality.richemont.cn
xianskp.rdu.richemont.cn
xianskp.rdu.richemont.cn
cn-ra.richemont.cn
linemedia.preprod.richemont.com
ws.preprod.richemont.cn
www.quality.alange-soehne.com
rogerdubuis.richemont.cn
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
ws.richemont.cn
xianskp.rdu.richemont.cn
remoteaccess.richemont.com
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
ws.quality.richemont.cn
intranet.richemont.com
ws.richemont.cn
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
preprod.api.warm.richemont.cn
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
intranet.richemont.com
intranet.richemont.com
ws.dev.richemont.cn
careers.richemont.com
ws.quality.richemont.cn
search.preprod.digital.richemont.cn
quality.api.warm.richemont.cn
linemedia.preprod.richemont.com
www.rogerdubuis.com
linemedia.preprod.richemont.com
intranet.richemont.com
ws.richemont.cn
nexus.richemont.cn
kronos.richemont.cn
linemedia.preprod.richemont.com
intranet.richemont.com
www.preprod.cms-one.richemont.cn
xianskp.rdu.richemont.cn
linemedia.preprod.richemont.com
xianskp.rdu.richemont.cn
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
ws.preprod.richemont.cn
ws.quality.richemont.cn
www.quality.alange-soehne.com
api.warm.richemont.cn
www.quality.alange-soehne.com
richemont.cn
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
careers.richemont.com
careers.richemont.com
xianskp.rdu.richemont.cn
linemedia.preprod.richemont.com
xianskp.rdu.richemont.cn
wechat-oauth.richemont.cn
careers.richemont.com
careers.richemont.com
rogerdubuis.richemont.cn
www.quality.alange-soehne.com
rogerdubuis.richemont.cn

Certificate

The complete raw certificate details for ws.richemont.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqz5ghO7eHO4JwpBpCObZ
HkjMGn1VF/JqiK5o324Jlrk2iVNODmHfE89SdkL7E327bY+KhQRJ4KfoAz5+MXyJ
Tn3SCDs7DFbUkNicfh1QY7nfQ1e8kMraZGu54DcRk3A/xQ5BIm8YPwvI0aV2pGuD
iq5r9Qlc0zle2ERukS5A9Ikct8knfRFjR69zmQc0I8KrhrKFfOvKi59Lpgglox4p
cnRpe5RG0TJyre71VqS++CiprF/2HgYKFZ9L1FwnMnFxY4MrkNG2My7dsXugq7wP
nXWtUYtRr/h7mblQFk3mvjF0JbPWh2QnPdRqOcuMX5tDyc/pzIpT5jvBDCSRd8eW
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1960462036660053950842304763598382015
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-25 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bellevue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Richemont International SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RIC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ws.richemont.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21617509408312254872232312617551950821201245561445799009197018112301809233476318835288086781498224508577646947582357599205786142732796850413748216082931780568804765853717370366705684214852157430987219616779098568231527989586663539412007028094264296712703659811270644150680463337261308939975578937357045571183518696382498175615665092130614940158214441617430588669742190670168369028672960438073120021922130902799720398591159214594199459243052891096710250925415294626319508459667612732361589658127521739251041250392995148530802679308652173131329629147315376959210012260118326006952911001254980129209584711876488852903427
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							00d01f6a5e0b96ae8800a77e1be5d197674c65d4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws.richemont.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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