www.lvmh.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:83:98:31:31:b1:e8:0a:7b:02:66:5d:ec:4a:bd:6a:f5:2f was issued on by Let's Encrypt.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.lvmh.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:83:98:31:31:b1:e8:0a:7b:02:66:5d:ec:4a:bd:6a:f5:2f
Serial Number (int): 306116145947762322609197682671035087516975
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 78:fd:ab:a9:e0:e3:15:1b:a8:2f:5e:0a:d2:12:52:51:e5:38:f0:2d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 12:27:70:15:4c:3b:dc:0e:b1:22:07:9b:60:53:17:f7:3c:e7:1b:73
Fingerprint (sha256): 41:69:e8:c1:06:fc:9a:b8:5d:95:3c:6f:d5:68:54:18:09:57:09:5a:63:26:e0:7b:c3:09:e9:07:fe:70:1f:96

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate www.lvmh.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lvmh.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.domperignon.com
au.cloudybay.co.nz
awards.veuve-clicquot.com
bi-au.moethennessy.com
bi-cn.moethennessy.com
bi-eu.moethennessy.com
bi-sg.moethennessy.com
businesswomanaward.veuveclicquot.com
cdnakamai.lvmh-pc.com
cn.moet.com
de.moet.com
diorinlondon.dior.com
es.moet.com
farm1.static.guerlain.com
farm1.static.makeupforever.com
farm2.static.guerlain.com
farm2.static.makeupforever.com
farm3.static.guerlain.com
farm3.static.makeupforever.com
farm4.static.guerlain.com
farm4.static.makeupforever.com
farm5.static.guerlain.com
farm5.static.makeupforever.com
fr.moet.com
france-rich.veuve-clicquot.com
hublot.com
images.uat.fendi.ows.farm
journeyapp.veuveclicquot.com
llsy.veuve-clicquot.com
m.dior.cn
m.dior.com
m.guerlain.com
m.guerlain.com.cn
m.ruinart.com
myapp.moethennessy.com
preprod-tmc.lvmh.fr
preprod.lvmh-static.com
preprod.lvmh.cn
preprod.lvmh.co.jp
preprod.lvmh.com
preprod.lvmh.fr
preprod.lvmh.it
preprod.lvmh.jp
preprod.lvmh.ru
prixdelafemmedaffaires.veuveclicquot.com
rich.veuve-clicquot.com
secure-m.dior.com
socialpulse.veuveclicquot.com
sp.moet.com
static.uat.fendi.ows.farm
thirstie.domperignon.com
tw.moet.com
uat.fendi.ows.farm
uk.cloudybay.co.nz
uk.moet.com
us.cloudybay.co.nz
us.moet.com
virtualvisit.cloudybay.co.nz
wws.dior.com
www.12bis.chaumet.com
www.altosdelplata.com.ar
www.ardbeg.com
www.baron-b.com.ar
www.baronblalegende.com
www.belvederevodka.com
www.chandon.com.ar
www.chandonworlds.com
www.chateau-cheval-blanc.com
www.chevaldesandes.com
www.chevaldesandes.com.ar
www.cloudybay.co.nz
www.dior.cn
www.dior.com
www.domperignon.com
www.glenmorangie.com
www.guerlain.com
www.guerlain.com.cn
www.hennessy.cn
www.hennessy.com
www.hublot.com
www.krug.com
www.lanature.chaumet.com
www.latitud33.com
www.latitud33.com.ar
www.lvmh.com
www.makeupforever.cn
www.marcodevincenzo.com
www.mhps.fr
www.moet.com
www.moethennessy.com
www.ruinart.com
www.rutaterrazas.com.ar
www.terrazasdelosandes.com
www.veuve-clicquot.com
www.veuveclicquot.com
wwws.dior.com

Other certificates including the domain name lvmh.com

(limited to 100 certificates)
www.lvmh.com
preprod.lvmh.com
www.lvmh.com
accreditation.lumanity.com
alumnicredentials.kcl.ac.uk
preprod.lvmh.com
compliance.lvmh.com
retailerid.lvmh.com
achievements.launchyou.com
www.lvmh.com
achievements.launchyou.com
www.lvmh.com
publiccert.lvmh.com
support12.cdnetworks.net
support12.cdnetworks.net
preprod.lvmh.com
preprod.lvmh.com
gaia.lvmh.com.dev-gcp.lvmh.lbn.fr
virtualapartment.lvmh.com
www.lvmh.com
accreditation.lumanity.com
preprod.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
www.lvmh.com
achievements.launchyou.com
www.lvmh.com
dbt.lvmh.com
preprod.lvmh.com
www.lvmh.com
preprod.lvmh.com
support12.cdnetworks.net
achievements.launchyou.com
www.lvmh.com
support12.cdnetworks.net
accreditation.lumanity.com
www.lvmh.com
cdn06.cdnsvc.com
preprod.lvmh.com
lvmh.fr
www.lvmh.com
www.lvmh.com
cdn06.cdnsvc.com
accreditation.lumanity.com
preprod.lvmh.com
*.lvmh.com
accreditation.lumanity.com
spring.lvmh.com
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
san-13-s50.tlsprovisioning.exacttarget.com
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
www.lvmh.com
www.lvmh.com
support12.cdnetworks.net
www.lvmh.com
san-13-s50.tlsprovisioning.exacttarget.com
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
shero.lvmh.com
preprod.lvmh.com
support12.cdnetworks.net
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
preprod.lvmh.com
support12.cdnetworks.net
lvmh.fr
support12.cdnetworks.net
www.lvmh.com
preprod.lvmh.com
support12.cdnetworks.net
preprod.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
lamaisondesstartups.lvmh.com
www.lvmh.com
living.lvmh.com
game.cybertraining.lvmh.com
support12.cdnetworks.net
san-13-s50.tlsprovisioning.exacttarget.com
preprod.lvmh.com
www.lvmh.com
*.chic.lvmh.com
lvmh.fr
online-media-builder.lvmh.com
support12.cdnetworks.net
cdn06.cdnsvc.com
lvmh.fr
www.lvmh.com
accreditation.lumanity.com
tr.openinnovation.lvmh.com
accreditation.lumanity.com
link.bein.lvmh.com
preprod.lvmh.com

Certificate

The complete raw certificate details for www.lvmh.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6Ksv9Ty2ndDiRa2JiKX
rJ3w8SMy3mf32wSUOWckXsV4bEbtAedEBngBUPMMUeqC+CVcdr2OWs0v6fnSTGjq
49GI36WXI9n37ipcyGVTN+DafBdcauaIYPaAQO6/MTkUKLK1SD1CEHOsQRnnLuiH
oJAFo6UnR0qJ5o8/1ey9luJTzpTNEcfNLo9mfXeVr8WXkl6PZA9B+gEUSplAK/Pl
kWLLfGIhYzDPnV5aoHCQdRtkVXzO2cErx3HKleEQPgQ51SZD/u5JySYQuCkump2W
0/EoCa12eUJXOEL80h5Ha4IOqoCRqsyAVMod5GA25hAcL9X0vJ/zzpwfV52n+bSr
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306116145947762322609197682671035087516975
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-07 14:28:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-08 14:28:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lvmh.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21666968083885475577567329354236384818019730264311044381936665897145775473607260674796558200802875201604723728281377290981729692562280076719049376370935894478423854145161655201896073867690731030863566821297349811135701361924614886962435417986059075681395043400822827802477311842037428825385311964622962557581281380189795404184444775903951767375183374598696080740647414259361773726804665286844118557386916957969636158706746411693480643779048969951268595931010438344153843499564827683271955759692071914405215149428493467332660959242879602932692682026018411794627224004296704398609302763007933977011710706290477313076081
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							78fdaba9e0e3151ba82f5e0ad2125251e538f02d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2079 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.domperignon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'au.cloudybay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awards.veuve-clicquot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi-au.moethennessy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi-cn.moethennessy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi-eu.moethennessy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi-sg.moethennessy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesswomanaward.veuveclicquot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdnakamai.lvmh-pc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.moet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de.moet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diorinlondon.dior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.moet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farm1.static.guerlain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farm1.static.makeupforever.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farm2.static.guerlain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farm2.static.makeupforever.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farm3.static.guerlain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farm3.static.makeupforever.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farm4.static.guerlain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farm4.static.makeupforever.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farm5.static.guerlain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farm5.static.makeupforever.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.moet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'france-rich.veuve-clicquot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hublot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.uat.fendi.ows.farm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journeyapp.veuveclicquot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llsy.veuve-clicquot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.dior.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.dior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.guerlain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.guerlain.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ruinart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myapp.moethennessy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-tmc.lvmh.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh-static.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prixdelafemmedaffaires.veuveclicquot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rich.veuve-clicquot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-m.dior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socialpulse.veuveclicquot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.moet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.uat.fendi.ows.farm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thirstie.domperignon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.moet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.fendi.ows.farm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.cloudybay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.moet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.cloudybay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.moet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualvisit.cloudybay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wws.dior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.12bis.chaumet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altosdelplata.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ardbeg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baron-b.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baronblalegende.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belvederevodka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chandon.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chandonworlds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chateau-cheval-blanc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chevaldesandes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chevaldesandes.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cloudybay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dior.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.domperignon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenmorangie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guerlain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guerlain.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hennessy.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hennessy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hublot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.krug.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lanature.chaumet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.latitud33.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.latitud33.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lvmh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.makeupforever.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marcodevincenzo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mhps.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moethennessy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ruinart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rutaterrazas.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terrazasdelosandes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.veuve-clicquot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.veuveclicquot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwws.dior.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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