www.lvmh.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:1b:5a:06:23:17:fe:2f:a7:db:39:8a:b3:b5:5d:22:53:25 was issued on by Let's Encrypt.
With 44 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.lvmh.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:1b:5a:06:23:17:fe:2f:a7:db:39:8a:b3:b5:5d:22:53:25Serial Number (int): 270644144087333122761233800779863169323813
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: d9:d3:d4:d6:1a:ed:12:50:c2:9d:5d:94:42:f4:0a:21:14:ba:33:97
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 0c:7c:4d:1c:88:a6:37:50:6a:1d:0f:18:77:19:72:74:62:8f:3d:b4
Fingerprint (sha256): 3a:dc:89:63:be:4b:21:f9:7c:da:6d:e8:a5:9b:3d:b6:41:17:57:5a:89:64:a7:45:b3:f5:24:63:f6:07:be:dc
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.lvmh.com
44
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.lvmh.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cdnakamai.lvmh-pc.com
dior.cn
diorinlondon.dior.com
farm1.static.makeupforever.com
farm2.static.makeupforever.com
farm3.static.makeupforever.com
farm4.static.makeupforever.com
farm5.static.makeupforever.com
hublot.com
images.uat.fendi.ows.farm
m.dior.cn
m.dior.com
m.guerlain.com
m.guerlain.com.cn
preprod-tmc.lvmh.fr
preprod.lvmh-static.com
preprod.lvmh.cn
preprod.lvmh.co.jp
preprod.lvmh.com
preprod.lvmh.fr
preprod.lvmh.it
preprod.lvmh.jp
preprod.lvmh.ru
reservation.guerlain.com
retail-preprod.hublot.com
secure-m.dior.com
static.uat.fendi.ows.farm
straps-preprod.hublot.com
straps.hublot.com
uat.fendi.ows.farm
vip.hublot.com
wws.dior.com
www.12bis.chaumet.com
www.dior.cn
www.dior.com
www.guerlain.com
www.guerlain.com.cn
www.hublot.com
www.lanature.chaumet.com
www.lvmh.com
www.makeupforever.cn
www.makeupforever.com
www.marcodevincenzo.com
wwws.dior.com
dior.cn
diorinlondon.dior.com
farm1.static.makeupforever.com
farm2.static.makeupforever.com
farm3.static.makeupforever.com
farm4.static.makeupforever.com
farm5.static.makeupforever.com
hublot.com
images.uat.fendi.ows.farm
m.dior.cn
m.dior.com
m.guerlain.com
m.guerlain.com.cn
preprod-tmc.lvmh.fr
preprod.lvmh-static.com
preprod.lvmh.cn
preprod.lvmh.co.jp
preprod.lvmh.com
preprod.lvmh.fr
preprod.lvmh.it
preprod.lvmh.jp
preprod.lvmh.ru
reservation.guerlain.com
retail-preprod.hublot.com
secure-m.dior.com
static.uat.fendi.ows.farm
straps-preprod.hublot.com
straps.hublot.com
uat.fendi.ows.farm
vip.hublot.com
wws.dior.com
www.12bis.chaumet.com
www.dior.cn
www.dior.com
www.guerlain.com
www.guerlain.com.cn
www.hublot.com
www.lanature.chaumet.com
www.lvmh.com
www.makeupforever.cn
www.makeupforever.com
www.marcodevincenzo.com
wwws.dior.com
Other certificates including the domain name lvmh.com
(limited to 100 certificates)
www.lvmh.com
preprod.lvmh.com
www.lvmh.com
accreditation.lumanity.com
alumnicredentials.kcl.ac.uk
preprod.lvmh.com
compliance.lvmh.com
retailerid.lvmh.com
achievements.launchyou.com
www.lvmh.com
achievements.launchyou.com
www.lvmh.com
publiccert.lvmh.com
support12.cdnetworks.net
support12.cdnetworks.net
preprod.lvmh.com
preprod.lvmh.com
gaia.lvmh.com.dev-gcp.lvmh.lbn.fr
virtualapartment.lvmh.com
www.lvmh.com
accreditation.lumanity.com
preprod.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
www.lvmh.com
achievements.launchyou.com
www.lvmh.com
dbt.lvmh.com
preprod.lvmh.com
www.lvmh.com
preprod.lvmh.com
support12.cdnetworks.net
achievements.launchyou.com
www.lvmh.com
support12.cdnetworks.net
accreditation.lumanity.com
www.lvmh.com
cdn06.cdnsvc.com
preprod.lvmh.com
lvmh.fr
www.lvmh.com
www.lvmh.com
cdn06.cdnsvc.com
accreditation.lumanity.com
preprod.lvmh.com
*.lvmh.com
accreditation.lumanity.com
spring.lvmh.com
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
san-13-s50.tlsprovisioning.exacttarget.com
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
www.lvmh.com
www.lvmh.com
support12.cdnetworks.net
www.lvmh.com
san-13-s50.tlsprovisioning.exacttarget.com
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
shero.lvmh.com
preprod.lvmh.com
support12.cdnetworks.net
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
preprod.lvmh.com
support12.cdnetworks.net
lvmh.fr
support12.cdnetworks.net
www.lvmh.com
preprod.lvmh.com
support12.cdnetworks.net
preprod.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
lamaisondesstartups.lvmh.com
www.lvmh.com
living.lvmh.com
game.cybertraining.lvmh.com
support12.cdnetworks.net
san-13-s50.tlsprovisioning.exacttarget.com
preprod.lvmh.com
www.lvmh.com
*.chic.lvmh.com
lvmh.fr
online-media-builder.lvmh.com
support12.cdnetworks.net
cdn06.cdnsvc.com
lvmh.fr
www.lvmh.com
accreditation.lumanity.com
tr.openinnovation.lvmh.com
accreditation.lumanity.com
link.bein.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
www.lvmh.com
accreditation.lumanity.com
alumnicredentials.kcl.ac.uk
preprod.lvmh.com
compliance.lvmh.com
retailerid.lvmh.com
achievements.launchyou.com
www.lvmh.com
achievements.launchyou.com
www.lvmh.com
publiccert.lvmh.com
support12.cdnetworks.net
support12.cdnetworks.net
preprod.lvmh.com
preprod.lvmh.com
gaia.lvmh.com.dev-gcp.lvmh.lbn.fr
virtualapartment.lvmh.com
www.lvmh.com
accreditation.lumanity.com
preprod.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
www.lvmh.com
achievements.launchyou.com
www.lvmh.com
dbt.lvmh.com
preprod.lvmh.com
www.lvmh.com
preprod.lvmh.com
support12.cdnetworks.net
achievements.launchyou.com
www.lvmh.com
support12.cdnetworks.net
accreditation.lumanity.com
www.lvmh.com
cdn06.cdnsvc.com
preprod.lvmh.com
lvmh.fr
www.lvmh.com
www.lvmh.com
cdn06.cdnsvc.com
accreditation.lumanity.com
preprod.lvmh.com
*.lvmh.com
accreditation.lumanity.com
spring.lvmh.com
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
san-13-s50.tlsprovisioning.exacttarget.com
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
www.lvmh.com
www.lvmh.com
support12.cdnetworks.net
www.lvmh.com
san-13-s50.tlsprovisioning.exacttarget.com
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
shero.lvmh.com
preprod.lvmh.com
support12.cdnetworks.net
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
preprod.lvmh.com
support12.cdnetworks.net
lvmh.fr
support12.cdnetworks.net
www.lvmh.com
preprod.lvmh.com
support12.cdnetworks.net
preprod.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
lamaisondesstartups.lvmh.com
www.lvmh.com
living.lvmh.com
game.cybertraining.lvmh.com
support12.cdnetworks.net
san-13-s50.tlsprovisioning.exacttarget.com
preprod.lvmh.com
www.lvmh.com
*.chic.lvmh.com
lvmh.fr
online-media-builder.lvmh.com
support12.cdnetworks.net
cdn06.cdnsvc.com
lvmh.fr
www.lvmh.com
accreditation.lumanity.com
tr.openinnovation.lvmh.com
accreditation.lumanity.com
link.bein.lvmh.com
preprod.lvmh.com
Certificate
The complete raw certificate details for www.lvmh.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIfTCCB2WgAwIBAgISAxtaBiMX/i+n2zmKs7VdIlMlMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzExMjExMzIyMTJaFw0x ODAyMTkxMzIyMTJaMBcxFTATBgNVBAMTDHd3dy5sdm1oLmNvbTCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBANQ7QBn96HavIHZSsPHgmH0yz5WE/P2kiWGh ueNbyf3gjQnwKhEhTdwtwWI/0b1Giq4QCCK94S69iNZiN7Y2y0TwGgK469vlR7bG reGyd323zzUWjjkIIqjXHpi3O64VZB8T+/s0bqbQsZzzrCi9nhGXvQHWRgBe1o1z qExwubjNzSSQL03E/Tl8/OLubXW4+hrfZJ2YZvOlL5KrW38/C34h2bkMqOf9SGpE 5lo5EBEBAYbaUzvU2UEG0EHIk8voOQCKTdZwRhQT74Ek/OIv0M2OsAuEj0bMz18Z TvCNFsGapJ/qUGsz3GIdek7fyRjF9ydCYNyv05wjo+KG1rCTj38CAwEAAaOCBY4w ggWKMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU2dPU1hrtElDCnV2UQvQKIRS6M5cw HwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBh MC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3Jn MC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3Jn LzCCA5cGA1UdEQSCA44wggOKghVjZG5ha2FtYWkubHZtaC1wYy5jb22CB2Rpb3Iu Y26CFWRpb3JpbmxvbmRvbi5kaW9yLmNvbYIeZmFybTEuc3RhdGljLm1ha2V1cGZv cmV2ZXIuY29tgh5mYXJtMi5zdGF0aWMubWFrZXVwZm9yZXZlci5jb22CHmZhcm0z LnN0YXRpYy5tYWtldXBmb3JldmVyLmNvbYIeZmFybTQuc3RhdGljLm1ha2V1cGZv cmV2ZXIuY29tgh5mYXJtNS5zdGF0aWMubWFrZXVwZm9yZXZlci5jb22CCmh1Ymxv dC5jb22CGWltYWdlcy51YXQuZmVuZGkub3dzLmZhcm2CCW0uZGlvci5jboIKbS5k aW9yLmNvbYIObS5ndWVybGFpbi5jb22CEW0uZ3VlcmxhaW4uY29tLmNughNwcmVw cm9kLXRtYy5sdm1oLmZyghdwcmVwcm9kLmx2bWgtc3RhdGljLmNvbYIPcHJlcHJv ZC5sdm1oLmNughJwcmVwcm9kLmx2bWguY28uanCCEHByZXByb2QubHZtaC5jb22C D3ByZXByb2QubHZtaC5mcoIPcHJlcHJvZC5sdm1oLml0gg9wcmVwcm9kLmx2bWgu anCCD3ByZXByb2QubHZtaC5ydYIYcmVzZXJ2YXRpb24uZ3VlcmxhaW4uY29tghly ZXRhaWwtcHJlcHJvZC5odWJsb3QuY29tghFzZWN1cmUtbS5kaW9yLmNvbYIZc3Rh dGljLnVhdC5mZW5kaS5vd3MuZmFybYIZc3RyYXBzLXByZXByb2QuaHVibG90LmNv bYIRc3RyYXBzLmh1YmxvdC5jb22CEnVhdC5mZW5kaS5vd3MuZmFybYIOdmlwLmh1 YmxvdC5jb22CDHd3cy5kaW9yLmNvbYIVd3d3LjEyYmlzLmNoYXVtZXQuY29tggt3 d3cuZGlvci5jboIMd3d3LmRpb3IuY29tghB3d3cuZ3VlcmxhaW4uY29tghN3d3cu Z3VlcmxhaW4uY29tLmNugg53d3cuaHVibG90LmNvbYIYd3d3LmxhbmF0dXJlLmNo YXVtZXQuY29tggx3d3cubHZtaC5jb22CFHd3dy5tYWtldXBmb3JldmVyLmNughV3 d3cubWFrZXVwZm9yZXZlci5jb22CF3d3dy5tYXJjb2RldmluY2Vuem8uY29tgg13 d3dzLmRpb3IuY29tMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLf EwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcw gasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSBy ZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3Jk YW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6 Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEB AHPg/0zfwG1dJEzLjKWAX+mcZG5UTCZV/T5Z1hatssRPb91jiU0Rh3TGdK7FxSJy xelA22mgQ+twMyENj6C1lmcDpPbTP5ZzOEcwupsG4MFaKV/l8WG8SJIMhZUUOr4n s7qHeNQJEOmBFqqbvsbnRNCHyRn/LrRGuhTZCQuZMIFpdafXzwcAgEtH5H/V2VfU LrltMFycYgSUg7OqWWl/TdboGgip9ZfI9W7ojBqDqol/77I3dEZoxoQsXP/PFDCT vd2qzVg0SzpDRGb7WN1ykGaTiXBZQ3vMNyXU8s1vhIJ60xTBOEcQeSOCwsyRy0C6 QIfcbk0zyh/N7P5pxH1rB8k= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DtAGf3odq8gdlKw8eCY fTLPlYT8/aSJYaG541vJ/eCNCfAqESFN3C3BYj/RvUaKrhAIIr3hLr2I1mI3tjbL RPAaArjr2+VHtsat4bJ3fbfPNRaOOQgiqNcemLc7rhVkHxP7+zRuptCxnPOsKL2e EZe9AdZGAF7WjXOoTHC5uM3NJJAvTcT9OXz84u5tdbj6Gt9knZhm86Uvkqtbfz8L fiHZuQyo5/1IakTmWjkQEQEBhtpTO9TZQQbQQciTy+g5AIpN1nBGFBPvgST84i/Q zY6wC4SPRszPXxlO8I0WwZqkn+pQazPcYh16Tt/JGMX3J0Jg3K/TnCOj4obWsJOP fwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 270644144087333122761233800779863169323813 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-21 13:22:12 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-19 13:22:12 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lvmh.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26791738112319403522100614788532564940040528116987628272039456461483322044701209674166946673756332447175815966743483010618374650675744058801687803537476451788422935240138670709141568084099773070193863287859183930661332397419741591383806430267593269653492905705038171743107775665519234031619119847704912303825411736351780808040431547692747810316603897489907561190757943781383091063010168348764451403274436690851121763778761130350921161105994263760709271341148672620430130797476216414872955877770020528640234722183339752471088285021173395066858614798120196942709381710152395413540350020078797103239020620397035998383999 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d9d3d4d61aed1250c29d5d9442f40a2114ba3397 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (910 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdnakamai.lvmh-pc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dior.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diorinlondon.dior.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farm1.static.makeupforever.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farm2.static.makeupforever.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farm3.static.makeupforever.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farm4.static.makeupforever.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farm5.static.makeupforever.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hublot.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.uat.fendi.ows.farm' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.dior.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.dior.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.guerlain.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.guerlain.com.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-tmc.lvmh.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh-static.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh.co.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh.ru' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservation.guerlain.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retail-preprod.hublot.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-m.dior.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.uat.fendi.ows.farm' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'straps-preprod.hublot.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'straps.hublot.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.fendi.ows.farm' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vip.hublot.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wws.dior.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.12bis.chaumet.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dior.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dior.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guerlain.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guerlain.com.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hublot.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lanature.chaumet.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lvmh.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.makeupforever.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.makeupforever.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marcodevincenzo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwws.dior.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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