www.michaelkors.marketplace.paris

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:fb:97:97:6c:40:81:7a:48:37:cf:f4:a5:52:b0:49:22:4c was issued on by Let's Encrypt.

With 47 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.michaelkors.marketplace.paris

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fb:97:97:6c:40:81:7a:48:37:cf:f4:a5:52:b0:49:22:4c
Serial Number (int): 346949231552236366316509320309237827052108
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 22:5d:92:1a:8e:26:27:24:e2:c0:f7:02:3e:b9:1d:8a:41:5c:06:a7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 14:1b:4e:d6:6d:3e:d0:4e:95:cc:32:a9:16:59:48:92:aa:9a:8f:26
Fingerprint (sha256): 3c:53:a6:98:ab:e0:75:17:d2:b6:ac:a2:c3:7c:88:a5:8c:69:73:78:8d:4d:56:b5:7c:7a:00:89:9a:99:79:f2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate www.michaelkors.marketplace.paris

47

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.michaelkors.marketplace.paris

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

101idees.marketplace.paris
backoffice.cifa-fashion.com
bestacces.marketplace.paris
cdn.cifa-fashion.com
cifa-fashion.com
cn.cifa-fashion.com
cron.cifa-fashion.com
eightparis.marketplace.paris
en.cifa-fashion.com
escandelle.marketplace.paris
forherparis.com
forherparis.marketplace.paris
garconne-paris.marketplace.paris
hnathalie.marketplace.paris
intranet.cifa-fashion.com
invogue-paris.com
jaunerouge-paris.com
jubylee.marketplace.paris
kenzarro.marketplace.paris
ledesk.marketplace.paris
marketplace.paris
mg-monogram.marketplace.paris
michaelkors.marketplace.paris
misscop.marketplace.paris
old.cifa-fashion.com
parisfashionshops.marketplace.paris
pfs.cifa-fashion.com
pick-up.cifa-fashion.com
pro.ryujee.com
ryujee.marketplace.paris
sandbox.marketplace.paris
sms.marketplace.paris
styleshoes-paris.com
v2.cifa-fashion.com
www.bestacces.marketplace.paris
www.cifa-fashion.com
www.escandelle.marketplace.paris
www.forherparis.com
www.garconne-paris.marketplace.paris
www.intranet.cifa-fashion.com
www.jubylee.marketplace.paris
www.marketplace.paris
www.michaelkors.marketplace.paris
www.old.cifa-fashion.com
www.pfs.cifa-fashion.com
www.pick-up.cifa-fashion.com
www.sandbox.marketplace.paris

Other certificates including the domain name marketplace.paris

(limited to 100 certificates)
intranet.cifa-fashion.com
www.intranet.cifa-fashion.com
sni56923.cloudflaressl.com
crm.cifa-fashion.com
www.escandelle.marketplace.paris
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sandbox.marketplace.paris
cdn.marketplace.paris
tw.parisfashionshops.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
forherparis.com
sni56923.cloudflaressl.com
magazine.parisfashionshops.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
verzeichnis.parisfashionshops.com
sni56923.cloudflaressl.com
www.pick-up.cifa-fashion.com
sni56923.cloudflaressl.com
download.parisfashionshops.com
old.cifa-fashion.com
sni56923.cloudflaressl.com
forherparis.com
wsn.parisfashionshops.com
cdn.cifa-fashion.com
hnathalie.marketplace.paris
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
www.old.cifa-fashion.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
www.location.cifa-fashion.com
sni56923.cloudflaressl.com
annuaire.parisfashionshops.com
sandbox.marketplace.paris
marketplace.paris
intranet.cifa-fashion.com
cdn.marketplace.paris
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
event.cifa-fashion.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
forherparis.marketplace.paris
cn.cifa-fashion.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
ru.parisfashionshops.com
sni56923.cloudflaressl.com
directory.parisfashionshops.com
www.michaelkors.marketplace.paris
bestacces.marketplace.paris
www.intranet.cifa-fashion.com
sni56923.cloudflaressl.com
pick-up.cifa-fashion.com
kr.parisfashionshops.com
cn.cifa-fashion.com
tw.parisfashionshops.com
sms.marketplace.paris
sni56923.cloudflaressl.com
cn.cifa-fashion.com
ledesk.marketplace.paris
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
directory.parisfashionshops.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
cdn.marketplace.paris
sni56923.cloudflaressl.com
cdn.marketplace.paris
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
verzeichnis.parisfashionshops.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
marketplace.paris
sni56923.cloudflaressl.com
michaelkors.marketplace.paris
download.parisfashionshops.com

Certificate

The complete raw certificate details for www.michaelkors.marketplace.paris in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIK4zCCCcugAwIBAgISA/uXl2xAgXpIN8/0pVKwSSJMMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzA0MDEwMDIwMDBaFw0x
NzA2MzAwMDIwMDBaMCwxKjAoBgNVBAMTIXd3dy5taWNoYWVsa29ycy5tYXJrZXRw
bGFjZS5wYXJpczCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKytkM82
0f0TSQdNvJDoDxPjFworkg+6hJlwYusft1BduIGBl2RtiOUZZ2Dsyys500SbOR1O
dNwBEm27BZZ11ybmHCf3pSvF6xv8t+LWqd8rXN8NraHMgKnKIMNKK0M0VTa23Rq9
QYYIpNN+AEFX+WFoDGwBJQghqAlAIv4LptJlI9Q0bQe7bjK704mFBC/9BrROLHVk
0ullGbP4xG+P+quXfjiPpnrj7HRQCbLUw+yW29zoaBgQHDdGGfAU8VhvEYYgqZqH
9OwTP21amMlA2Ot5JeGCus0IHjeHV8jlhFldqN9E/2YOqmSgEKGgWOR6MEGpD7BB
rUb336SNkQOZqw0YFSEUfMMS+Tn6icxo5p6I8fc/oxMjGsxiulhl0JUf0Fe3gr5j
VAV2LYwCjf7HJ1mUOqn94ycP+U1TkYxGC1T+gVe3lWBsu9ygXS5YpvdwqxovCoPu
L/U6syXSV+98uBG5J9t0nkP8rlbClefEJKcsP1ew2io5WA44iAOpp+GM3qPbetBp
uljrBNb0Nj15rCtxlUcseNB3/05TijMBVZ9ptwD9gujdcwMcX9xclzUg3B1wZ45o
LhyQ9NjJbkVcDLadlqQPOlnJnW8YCTkYaXSGO1noAFqHvdWBZzMQFQ1dzhfiKrIv
dV9VuUM2PVRwkTM8m4isb5sBXEI1q+9myqTJAgMBAAGjggbfMIIG2zAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB
/wQCMAAwHQYDVR0OBBYEFCJdkhqOJick4sD3Aj65HYpBXAanMB8GA1UdIwQYMBaA
FKhKamMEfd265tE5t6ZFZe/zqOyhMHAGCCsGAQUFBwEBBGQwYjAvBggrBgEFBQcw
AYYjaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wLwYIKwYBBQUH
MAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMIIE5wYDVR0R
BIIE3jCCBNqCGjEwMWlkZWVzLm1hcmtldHBsYWNlLnBhcmlzghtiYWNrb2ZmaWNl
LmNpZmEtZmFzaGlvbi5jb22CG2Jlc3RhY2Nlcy5tYXJrZXRwbGFjZS5wYXJpc4IU
Y2RuLmNpZmEtZmFzaGlvbi5jb22CEGNpZmEtZmFzaGlvbi5jb22CE2NuLmNpZmEt
ZmFzaGlvbi5jb22CFWNyb24uY2lmYS1mYXNoaW9uLmNvbYIcZWlnaHRwYXJpcy5t
YXJrZXRwbGFjZS5wYXJpc4ITZW4uY2lmYS1mYXNoaW9uLmNvbYIcZXNjYW5kZWxs
ZS5tYXJrZXRwbGFjZS5wYXJpc4IPZm9yaGVycGFyaXMuY29tgh1mb3JoZXJwYXJp
cy5tYXJrZXRwbGFjZS5wYXJpc4IgZ2FyY29ubmUtcGFyaXMubWFya2V0cGxhY2Uu
cGFyaXOCG2huYXRoYWxpZS5tYXJrZXRwbGFjZS5wYXJpc4IZaW50cmFuZXQuY2lm
YS1mYXNoaW9uLmNvbYIRaW52b2d1ZS1wYXJpcy5jb22CFGphdW5lcm91Z2UtcGFy
aXMuY29tghlqdWJ5bGVlLm1hcmtldHBsYWNlLnBhcmlzghprZW56YXJyby5tYXJr
ZXRwbGFjZS5wYXJpc4IYbGVkZXNrLm1hcmtldHBsYWNlLnBhcmlzghFtYXJrZXRw
bGFjZS5wYXJpc4IdbWctbW9ub2dyYW0ubWFya2V0cGxhY2UucGFyaXOCHW1pY2hh
ZWxrb3JzLm1hcmtldHBsYWNlLnBhcmlzghltaXNzY29wLm1hcmtldHBsYWNlLnBh
cmlzghRvbGQuY2lmYS1mYXNoaW9uLmNvbYIjcGFyaXNmYXNoaW9uc2hvcHMubWFy
a2V0cGxhY2UucGFyaXOCFHBmcy5jaWZhLWZhc2hpb24uY29tghhwaWNrLXVwLmNp
ZmEtZmFzaGlvbi5jb22CDnByby5yeXVqZWUuY29tghhyeXVqZWUubWFya2V0cGxh
Y2UucGFyaXOCGXNhbmRib3gubWFya2V0cGxhY2UucGFyaXOCFXNtcy5tYXJrZXRw
bGFjZS5wYXJpc4IUc3R5bGVzaG9lcy1wYXJpcy5jb22CE3YyLmNpZmEtZmFzaGlv
bi5jb22CH3d3dy5iZXN0YWNjZXMubWFya2V0cGxhY2UucGFyaXOCFHd3dy5jaWZh
LWZhc2hpb24uY29tgiB3d3cuZXNjYW5kZWxsZS5tYXJrZXRwbGFjZS5wYXJpc4IT
d3d3LmZvcmhlcnBhcmlzLmNvbYIkd3d3LmdhcmNvbm5lLXBhcmlzLm1hcmtldHBs
YWNlLnBhcmlzgh13d3cuaW50cmFuZXQuY2lmYS1mYXNoaW9uLmNvbYIdd3d3Lmp1
YnlsZWUubWFya2V0cGxhY2UucGFyaXOCFXd3dy5tYXJrZXRwbGFjZS5wYXJpc4Ih
d3d3Lm1pY2hhZWxrb3JzLm1hcmtldHBsYWNlLnBhcmlzghh3d3cub2xkLmNpZmEt
ZmFzaGlvbi5jb22CGHd3dy5wZnMuY2lmYS1mYXNoaW9uLmNvbYIcd3d3LnBpY2st
dXAuY2lmYS1mYXNoaW9uLmNvbYIdd3d3LnNhbmRib3gubWFya2V0cGxhY2UucGFy
aXMwgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYG
CCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUH
AgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9u
IGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGgg
dGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNy
eXB0Lm9yZy9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEAXR8WXlwmJqkR
9oSlEXNpDUuVN70gL6ygyEAYdYxBord3nh+wFPNg4d9DuKn7TphVqjBa4CmyzhvY
JypyvKpswaaBZ2/h/v7TZp3MK2tclNOTqIu5ZoNlefk/fN+m6pqWnfRsYFd5iBxZ
yClPz2s87qQbxxp8CUMDzHii7GCHF9Ufel1xWZ5rS/Q6WGHhkVLvUcUr3TjpxYZP
2h1Mc5u2cNEFoWDbrpZ/9GXUy/j7GdwL1l41tzE80mGW4dCJfLpO82w6GxzAhy7g
yuhEw8gMNM8NYeLBux84CXzwTKuNvKYFdz9rc8ZPeHgXHFtgNudzdWR0qTglpKqB
1yjd6TNc0w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346949231552236366316509320309237827052108
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-01 00:20:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-30 00:20:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.michaelkors.marketplace.paris'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 704464741116355624938797108261699693805737061361728923479519242153764334667153432601063824316903913794132756645187517248029921539687278952424972600205561707847459964232181510789352793746955845037167953209423657291089507028485241964084987566904499014846482050656070050185585101753477497521632003942053530105774241570970692969202669658153151250180104762866192052299927138601718332858238699216170176455770518467378247100320592890835477703243160790912217543259075566673078894831046686384778104899617042329258563898649381119033615427980046310369362853749100603633864321558206384061240540392936429685870228645964665014086166151254791037219110325165359467788830373630502052525990746846533535605389618916556669429793358314050802447880930008455508228891388978801826745800943544950585601976781671550973166983669979915173365672415651534457446235272206510327362523088680211643312402116226528943996090335404421354804727620485553532729960001605417345785753654172052699712773166813029097402380306493544475488931739636816352746245340043423462982336757015289069331703858513651211294641081544699454606011152592111900614656464581764793151592011758648633146432157189003116916899187276887031748603926221138440493268326366859939211252049672078483062957257
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							225d921a8e262724e2c0f7023eb91d8a415c06a7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '101idees.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backoffice.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestacces.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cron.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eightparis.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'en.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escandelle.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forherparis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forherparis.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garconne-paris.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hnathalie.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invogue-paris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaunerouge-paris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jubylee.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kenzarro.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ledesk.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mg-monogram.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michaelkors.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'misscop.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parisfashionshops.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfs.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pick-up.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro.ryujee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ryujee.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'styleshoes-paris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestacces.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.escandelle.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.forherparis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garconne-paris.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intranet.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jubylee.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michaelkors.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.old.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pfs.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pick-up.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandbox.marketplace.paris'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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