cdn.lululemon.com.au

- Lululemon Athletica Canada Inc -

Issued by GeoTrust SSL CA

About this certificate

This digital certificate with serial number 02:d8:a7 was issued on by GeoTrust, Inc..

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Lululemon Athletica Canada Inc

Company registration number: tbec5STYVkr7ILucvI/LjC7AerC8El-5
Organization: Lululemon Athletica Canada Inc
Organization unit: Akamai SAN SSL OV
State / Province: British Columbia
Locality: Vancouver
Country: CA

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:d8:a7
Serial Number (int): 186535
Serial Number lenght: 18 bits, 3 octets

SubjectKeyId: 9f:78:36:13:01:7d:13:1d:e9:ac:e4:a3:7c:e2:08:80:ba:46:ed:71
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a

Fingerprint (sha1): d0:6d:f5:c7:ae:86:04:e1:6e:7c:17:90:02:6d:2e:cc:2f:c7:e1:f0
Fingerprint (sha256): 3b:be:14:22:12:a8:1b:17:5b:07:76:ac:2a:40:75:84:b3:d2:16:f3:9c:17:97:47:29:55:ab:97:4d:e8:23:b7

Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt

Revocation information

OCSP Server: http://gtssl-ocsp.geotrust.com
CRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl

Check the revocation status for certificate cdn.lululemon.com.au

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cdn.lululemon.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cdn.eu.lululemon.com
cdn.lululemon.co.nz
cdn.lululemon.co.uk
cdn.lululemon.com.hk
images.eu.lululemon.com
images.lululemon.co.nz
images.lululemon.co.uk
images.lululemon.com.au
images.lululemon.com.hk
info.lululemon.com
static-global.eu.lululemon.com
static-global.lululemon.co.nz
static-global.lululemon.co.uk
static-global.lululemon.com.au
static-global.lululemon.com.hk
static.eu.lululemon.com
static.lululemon.co.nz
static.lululemon.co.uk
static.lululemon.com
static.lululemon.com.au
static.lululemon.com.hk
www.eu.lululemon.com
www.lululemon.co.nz
www.lululemon.co.uk
www.lululemon.com
www.lululemon.com.au
www.lululemon.com.hk
cdn.lululemon.com.au

Other certificates including the domain name lululemon.com.au

(limited to 100 certificates)
lululemon.com
lululemon.com
stage.lululemon.com
cdn.lululemon.com.au
*.lululemon.com.au
cdn.lululemon.com.au
lululemon.com.au
whatwelove.lululemon.com.au
stage.lululemon.com
mi.lululemon.com.au
lululemon.com
lululemon.com
cfjump.lululemon.com.au
cdn.lululemon.com.au
www.lululemon.com
lululemon.com
sbpzeq.lululemon.com.au
cdn.lululemon.com.au
stage.lululemon.com
smetrics.lululemon.com.au
comp.lululemon.com.au
www.lululemon.com.au
lululemon.com
mi.lululemon.com.au
www.lululemon.com
mi.lululemon.com.au
cdn.lululemon.com.au
www.lululemon.com
lululemon.com
cfjump.lululemon.com.au
www.lululemon.com
www.lululemon.com
www.lululemon.com
stage.lululemon.com
whatwelove.lululemon.com.au
stage.lululemon.com
lululemon.com
stage.lululemon.com
sbpzeq.lululemon.com.au
www.lululemon.com
www.lululemon.com
www.lululemon.com
lululemon.com
mi.lululemon.com.au
stage.lululemon.com
www.lululemon.com
www.lululemon.com
lululemon.com
cfjump.lululemon.com.au
www.lululemon.com
lululemon.com
cdn.lululemon.com.au
cdn.lululemon.com.au
sbpzeq.lululemon.com.au
stage.lululemon.com
www.lululemon.com.au
mi.lululemon.com.au
www.lululemon.com
stage.lululemon.com
lululemon.com
www.lululemon.com
cdn.lululemon.com.au
stage.lululemon.com
mi.lululemon.com.au
lululemon.com
cdn.lululemon.com.au
stage.lululemon.com
mi.lululemon.com.au
stage.lululemon.com
*.lululemon.com.au
lululemon.com
lululemon.com
stage.lululemon.com
smetrics.lululemon.com.au
www.lululemon.com
lululemon.com
mi.lululemon.com.au
lululemon.com
stage.lululemon.com
mi.lululemon.com.au
smetrics.lululemon.com.au
lululemon.com
*.lululemon.com.au
stage.lululemon.com
lululemon.com
www.lululemon.com
stage.lululemon.com
mi.lululemon.com.au
lululemon.com
www.lululemon.com
cfjump.lululemon.com.au
www.lululemon.com
lululemon.com
cfjump.lululemon.com.au
stage.lululemon.com
stage.lululemon.com
lululemon.com
www.lululemon.com
*.lululemon.com.au
lululemon.com.au

Certificate

The complete raw certificate details for cdn.lululemon.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHxDCCBqygAwIBAgIDAtinMA0GCSqGSIb3DQEBBQUAMEAxCzAJBgNVBAYTAlVT
MRcwFQYDVQQKEw5HZW9UcnVzdCwgSW5jLjEYMBYGA1UEAxMPR2VvVHJ1c3QgU1NM
IENBMB4XDTE0MDQyMTA4NDAwMVoXDTE1MDMyNzEzMzExOVowgcsxKTAnBgNVBAUT
IHRiZWM1U1RZVmtyN0lMdWN2SS9MakM3QWVyQzhFbC01MQswCQYDVQQGEwJDQTEZ
MBcGA1UECBMQQnJpdGlzaCBDb2x1bWJpYTESMBAGA1UEBxMJVmFuY291dmVyMScw
JQYDVQQKEx5MdWx1bGVtb24gQXRobGV0aWNhIENhbmFkYSBJbmMxGjAYBgNVBAsT
EUFrYW1haSBTQU4gU1NMIE9WMR0wGwYDVQQDExRjZG4ubHVsdWxlbW9uLmNvbS5h
dTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMAsXYvws12e2MLbIoIS
tuDDKD8Doi+13vhURi/WqpaIsDFhYKj7J1JowvojFiRejCf2E/U7z3YNVROSf+40
ncafp0vtJt5WaKzA7OkNZ11zdhqN75zcLFNHLtOrisLlAb5OmL4KVoNDsGMdS7+A
IJUIeFCmgh5Eg1DV2vrdWvHaCDCCSpcLvJdkC7992+bKyyTQj8vMSdlHF4r/5Nb9
+/dhcZjHaRx4J6noyysldaYGUSO9j7ktji4JVBW1Cso3uZIup97wFO+KIHNfxbuQ
wEytEQJr7qVPCYZpiyENbbYQD25FoUaccduvunvAI7we9tNwHutOMQgnHiKyd8vz
0fUCAwEAAaOCBDkwggQ1MB8GA1UdIwQYMBaAFEJ5VBthzVUrPmPVPEhX9Z/7Rc5K
MA4GA1UdDwEB/wQEAwIEsDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
ggK2BgNVHREEggKtMIICqYIUY2RuLmV1Lmx1bHVsZW1vbi5jb22CE2Nkbi5sdWx1
bGVtb24uY28ubnqCE2Nkbi5sdWx1bGVtb24uY28udWuCFGNkbi5sdWx1bGVtb24u
Y29tLmhrghdpbWFnZXMuZXUubHVsdWxlbW9uLmNvbYIWaW1hZ2VzLmx1bHVsZW1v
bi5jby5ueoIWaW1hZ2VzLmx1bHVsZW1vbi5jby51a4IXaW1hZ2VzLmx1bHVsZW1v
bi5jb20uYXWCF2ltYWdlcy5sdWx1bGVtb24uY29tLmhrghJpbmZvLmx1bHVsZW1v
bi5jb22CHnN0YXRpYy1nbG9iYWwuZXUubHVsdWxlbW9uLmNvbYIdc3RhdGljLWds
b2JhbC5sdWx1bGVtb24uY28ubnqCHXN0YXRpYy1nbG9iYWwubHVsdWxlbW9uLmNv
LnVrgh5zdGF0aWMtZ2xvYmFsLmx1bHVsZW1vbi5jb20uYXWCHnN0YXRpYy1nbG9i
YWwubHVsdWxlbW9uLmNvbS5oa4IXc3RhdGljLmV1Lmx1bHVsZW1vbi5jb22CFnN0
YXRpYy5sdWx1bGVtb24uY28ubnqCFnN0YXRpYy5sdWx1bGVtb24uY28udWuCFHN0
YXRpYy5sdWx1bGVtb24uY29tghdzdGF0aWMubHVsdWxlbW9uLmNvbS5hdYIXc3Rh
dGljLmx1bHVsZW1vbi5jb20uaGuCFHd3dy5ldS5sdWx1bGVtb24uY29tghN3d3cu
bHVsdWxlbW9uLmNvLm56ghN3d3cubHVsdWxlbW9uLmNvLnVrghF3d3cubHVsdWxl
bW9uLmNvbYIUd3d3Lmx1bHVsZW1vbi5jb20uYXWCFHd3dy5sdWx1bGVtb24uY29t
LmhrghRjZG4ubHVsdWxlbW9uLmNvbS5hdTA9BgNVHR8ENjA0MDKgMKAuhixodHRw
Oi8vZ3Rzc2wtY3JsLmdlb3RydXN0LmNvbS9jcmxzL2d0c3NsLmNybDAdBgNVHQ4E
FgQUn3g2EwF9Ex3prOSjfOIIgLpG7XEwDAYDVR0TAQH/BAIwADBvBggrBgEFBQcB
AQRjMGEwKgYIKwYBBQUHMAGGHmh0dHA6Ly9ndHNzbC1vY3NwLmdlb3RydXN0LmNv
bTAzBggrBgEFBQcwAoYnaHR0cDovL2d0c3NsLWFpYS5nZW90cnVzdC5jb20vZ3Rz
c2wuY3J0MEwGA1UdIARFMEMwQQYKYIZIAYb4RQEHNjAzMDEGCCsGAQUFBwIBFiVo
dHRwOi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvY3BzMA0GCSqGSIb3DQEB
BQUAA4IBAQBfgatBG5I+NPYhp3ZEOft7THlzLQIW3LRGhb96P3obtvyPnMZjApuR
SJbG9wVFa6lxZqnAkpxg27Eb+GNnBvcM70ft4Fp9uRt5m6XRWIzYtZlO4I+yTcBd
RbgKmDS8WTQMac+GkFtX8ycjoeEbCPzgS/ixM+PKy6yyum4H1qN1Wdcop25/CktD
qe45pIL7dKx7MqoPx+Tg/iJBUmDrKGU6i7988A3f7m+HEneGt2v3wMhYaaodrfX6
2G6WeEH7HkPfE9cv4aX7NBWUNya114+kyWE86XoLA3SWcXdlaow+G1h8Sw7YzamI
qp4eNsXhVoZc14t4euDhhcf4hgTg8gIE
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCxdi/CzXZ7YwtsighK2
4MMoPwOiL7Xe+FRGL9aqloiwMWFgqPsnUmjC+iMWJF6MJ/YT9TvPdg1VE5J/7jSd
xp+nS+0m3lZorMDs6Q1nXXN2Go3vnNwsU0cu06uKwuUBvk6YvgpWg0OwYx1Lv4Ag
lQh4UKaCHkSDUNXa+t1a8doIMIJKlwu8l2QLv33b5srLJNCPy8xJ2UcXiv/k1v37
92FxmMdpHHgnqejLKyV1pgZRI72PuS2OLglUFbUKyje5ki6n3vAU74ogc1/Fu5DA
TK0RAmvupU8JhmmLIQ1tthAPbkWhRpxx26+6e8AjvB7203Ae604xCCceIrJ3y/PR
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 186535
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-21 08:40:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-27 13:31:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tbec5STYVkr7ILucvI/LjC7AerC8El-5'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'British Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vancouver'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lululemon Athletica Canada Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Akamai SAN SSL OV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cdn.lululemon.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24259631955775160303560309747485275624983723069442291219500084402673038853670477802137424713435654106985817449420241586849078580624009067684754991543683531079776908809247051328711616139611639406100910628081364089860907285132211871458583228985339161284961458630978361243171237292733155700607045163840376065702151806580650197892899235598789329345628090224885220138759381368106369267441259872554232403224827079876647293398940214822401450314162892681904067929423019725189521143362821806123794557074072613886387092237184329020889493809321535635928297770320563335921547725191043356142749029964094691167962620098679961539061
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (685 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.eu.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.lululemon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.lululemon.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.eu.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.lululemon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.lululemon.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-global.eu.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-global.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-global.lululemon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-global.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-global.lululemon.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.eu.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.lululemon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.lululemon.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eu.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lululemon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lululemon.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.lululemon.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f783613017d131de9ace4a37ce20880ba46ed71
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005f81ab411b923e34f621a7764439fb7b4c79732d0216dcb44685bf7a3f7a1bb6fc8f9cc663029b914896c6f705456ba97166a9c0929c60dbb11bf8636706f70cef47ede05a7db91b799ba5d1588cd8b5994ee08fb24dc05d45b80a9834bc59340c69cf86905b57f32723a1e11b08fce04bf8b133e3cacbacb2ba6e07d6a37559d728a76e7f0a4b43a9ee39a482fb74ac7b32aa0fc7e4e0fe22415260eb28653a8bbf7cf00ddfee6f87127786b76bf7c0c85869aa1dadf5fad86e967841fb1e43df13d72fe1a5fb3415943726b5d78fa4c9613ce97a0b0374967177656a8c3e1b587c4b0ed8cda988aa9e1e36c5e156865cd78b787ae0e185c7f88604e0f20204