linemedia.preprod.richemont.com

- Richemont International SA -

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 0f:d1:b4:44:f3:ad:3b:75:aa:b7:d2:44:9e:d6:c3:d8 was issued on by DigiCert Inc.

With 72 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Richemont International SA

Organization: Richemont International SA
Organization unit: RIC Akamai
State / Province: Genève
Locality: Bellevue
Country: CH

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:d1:b4:44:f3:ad:3b:75:aa:b7:d2:44:9e:d6:c3:d8
Serial Number (int): 21027266276865507682144507083013669848
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 62:ef:d3:b9:6d:3d:32:d5:25:77:94:f9:e3:39:6c:3d:cd:0e:84:94
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): a7:fc:b5:c1:f4:43:ba:a9:29:7a:61:a3:a0:2d:d0:ce:dd:72:fa:13
Fingerprint (sha256): 46:23:0d:28:a9:93:ea:5b:50:de:ab:e9:14:26:ff:05:99:f9:fa:32:da:67:51:67:2f:27:b6:83:29:3e:ea:ba

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate linemedia.preprod.richemont.com

72

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for linemedia.preprod.richemont.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

yyvdaycampaign.quality.montblanc.cn
xianskp.rdu.quality.richemont.cn
www.preprod2.panerai.com
www.comeforashine.quality.piaget.cn
whenelegancemeetsart.quality.vancleefarpels.com
weixin.quality.vacheron-constantin.cn
weixin.quality.cartier.cn
weboutique.quality.vacheron-constantin.cn
weboutique.preprod.vancleefarpels.com
weboutique.preprod.vacheron-constantin.cn
weboutique.preprod.piaget.cn
weboutique.preprod.panerai.cn
weboutique.preprod.montblanc.cn
weboutique.preprod.jaeger-lecoultre.com
weboutique.preprod.jaeger-lecoultre.cn
weboutique.preprod.iwc.cn
weboutique.preprod.cartier.cn
vcaballet.quality.vancleefarpels.com
summit2.quality.montblanc.cn
starcrm.quality.montblanc.cn
rogerdubuis.quality.richemont.cn
productminisite.quality.vacheron-constantin.cn
preprod.sihh.org
preprod-watch-live.hautehorlogerie.org
preprod-journal.hautehorlogerie.org
preprod-fhhcertification.hautehorlogerie.org
preprod-fhhacademy.hautehorlogerie.org
preprod-bowatchlive.hautehorlogerie.org
preprod-app-sihh.hautehorlogerie.org
newbinding.quality.cartier.cn
media.weboutique.preprod.vancleefarpels.com
media.weboutique.preprod.vacheron-constantin.cn
media.weboutique.preprod.piaget.cn
media.weboutique.preprod.panerai.cn
media.weboutique.preprod.montblanc.cn
media.weboutique.preprod.jaeger-lecoultre.com
media.weboutique.preprod.jaeger-lecoultre.cn
media.weboutique.preprod.iwc.cn
media.weboutique.preprod.cartier.cn
lovedeclaration.quality.cartier.cn
llp.quality.montblanc.cn
linemedia.preprod.richemont.com
lbs.quality.iwc.cn
holidayseason.quality.piaget.cn
highartistrykx.quality.montblanc.cn
greatwallh5.quality.vacheron-constantin.cn
dunwb.quality.richemont.cn
csbarometer.quality.vacheron-constantin.cn
crm.llp.quality.montblanc.cn
clientbarometerqnr.quality.vacheron-constantin.cn
clientbarometercrm.quality.vacheron-constantin.cn
chinalimitededition2019.quality.vacheron-constantin.cn
chinabrandbook.quality.cartier.cn
ceb.quality.cartier.cn
boutique.quality.vacheron-constantin.cn
boheme.quality.montblanc.cn
bjexpo.quality.vancleefarpels.com
astronomyphoto.quality.vacheron-constantin.cn
article.quality.vacheron-constantin.cn
api.weboutique.preprod.vancleefarpels.com
api.weboutique.preprod.vacheron-constantin.cn
api.weboutique.preprod.piaget.cn
api.weboutique.preprod.panerai.cn
api.weboutique.preprod.montblanc.cn
api.weboutique.preprod.jaeger-lecoultre.com
api.weboutique.preprod.jaeger-lecoultre.cn
api.weboutique.preprod.iwc.cn
api.weboutique.preprod.cartier.cn
altiplano.quality.piaget.cn
4810collection.quality.montblanc.cn
2019cny.quality.vacheron-constantin.cn
2018cny.quality.vacheron-constantin.cn

Other certificates including the domain name richemont.com

(limited to 100 certificates)
preprod-iisfarm.richemont.com
careers.richemont.com
booster2.richemont.com
intranet.richemont.com
intranet.richemont.com
richemont.com
xsrna.richemont.com
xs.richemont.com
intranet.richemont.com
dam.richemont.com
intranet.richemont.com
belenus.richemont.com
collaboration.richemont.com
apps2013.richemont.com
linemedia.preprod.richemont.com
api-booster.richemont.com
preprod-apps2016.richemont.com
linemedia.preprod.richemont.com
media.richemont.com
vo1webdisp.richemont.com
wwsip.richemont.com
spark.nprd.val.elb.richemont.com
careers.richemont.com
booster.richemont.com
apps.richemont.com
www.richemont.com
preprod-apps2016.richemont.com
owa.richemont.com
intranet.richemont.com
preprod-apps2016.richemont.com
booster.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
dam.richemont.com
linemedia.preprod.richemont.com
antispam.richemont.com
svn.richemont.com
apps2016.richemont.com
intranet.richemont.com
launchpad.richemont.com
visionnaire.richemont.com
epm-mobile.richemont.com
intranet.richemont.com
mdm.richemont.com
richemont.com
epm-mobile.richemont.com
eusip.richemont.com
www.quality.alange-soehne.com
jobs.richemont.com
jenkins-aws.richemont.com
search.richemont.com
launchpad.richemont.com
cyberjourney.richemont.com
api-booster.richemont.com
linemedia.preprod.richemont.com
admin.pre-booster.richemont.com
pre-booster.richemont.com
owa-sso.richemont.com
id-sso.richemont.com
scn01.richemont.com
intranet.preprod.richemont.com
owa-nosso.richemont.com
linemedia.preprod.richemont.com
epm-mobile.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
owa-nosso.richemont.com
careers.richemont.com
amer-ra.richemont.com
media.richemont.com
iisfarm.richemont.com
preprod-apps2013.richemont.com
emea-ra.richemont.com
xs4.richemont.com
inet.richemont.com
midgard.ch.richemont.com
aegis.ch.richemont.com
collaboration.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
apps2016.richemont.com
owa.richemont.com
fileexchange.richemont.com
creative-academy.com
agile.quality.richemont.com
secure.richemont.com
cs.richemont.com
www.quality.alange-soehne.com
richemont.com
richemont.com
owa.richemont.com
agile.richemont.com
preprod-iisfarm.richemont.com
careers.richemont.com
*.richemont.com
belenus.richemont.com
www.lcboutiquenet.com
*.mytandem.eu
intranet.staging.richemont.com

Certificate

The complete raw certificate details for linemedia.preprod.richemont.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/6cU4T8qGEOspTCe6Wz
yKRoC0JV1CNF/MuzZJBFESApaoR2rYdJGknKmIKRcMkNawB4GnHDwBR7x5ROsGFC
wQRtD8VfE0ah3RcKVvHJ8uLkihXLfn3S9HQBH3VrB77hDLFaeLWxMCQbaBfa0rLM
axqi9CgcSsHPNJozDprRQReF2ZFq6eQdYCNogvN4sukFukrikeXTjJy4NcuYoivI
RdbWlXEjZxvyQ006/ANP1WP1Wj+ZEL5z2e63RKMmShbzcKL4d8VC+x0JHKcoeDy1
g14MMl5lyOsHe0XhZXuYsNySYeN4GymrK1NTZP6ezhAJYLcnBmLk4urqFGWri42G
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21027266276865507682144507083013669848
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-06 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Genève'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bellevue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Richemont International SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RIC Akamai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'linemedia.preprod.richemont.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25751929098763562405490676913149710490950359091421138267979639880146210505637219174611698955877028326195403561844836480622389624532000681219252024980026770999057477419427215482675771611690471789650151543636824796943967110370157201135515523020014962478976042941626570359963547960732242565493812036730514793112772434358441681730875263632088901462925018780127249373640442848124696287338139906979712024356070567393619844901081209275251490913285731851013504073512523853703180913910058978705373350791375098491500198689845191114899832884344981661678937538572378951701560209360081996604527895322525726464991883064217659344551
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							62efd3b96d3d32d5257794f9e3396c3dcd0e8494
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2688 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yyvdaycampaign.quality.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xianskp.rdu.quality.richemont.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preprod2.panerai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comeforashine.quality.piaget.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whenelegancemeetsart.quality.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weixin.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weixin.quality.cartier.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.piaget.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.panerai.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.jaeger-lecoultre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.jaeger-lecoultre.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.iwc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.cartier.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcaballet.quality.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summit2.quality.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starcrm.quality.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rogerdubuis.quality.richemont.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productminisite.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.sihh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-watch-live.hautehorlogerie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-journal.hautehorlogerie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-fhhcertification.hautehorlogerie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-fhhacademy.hautehorlogerie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-bowatchlive.hautehorlogerie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-app-sihh.hautehorlogerie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newbinding.quality.cartier.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.preprod.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.preprod.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.preprod.piaget.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.preprod.panerai.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.preprod.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.preprod.jaeger-lecoultre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.preprod.jaeger-lecoultre.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.preprod.iwc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.preprod.cartier.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lovedeclaration.quality.cartier.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llp.quality.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linemedia.preprod.richemont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lbs.quality.iwc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holidayseason.quality.piaget.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highartistrykx.quality.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatwallh5.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dunwb.quality.richemont.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csbarometer.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.llp.quality.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientbarometerqnr.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientbarometercrm.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinalimitededition2019.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinabrandbook.quality.cartier.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceb.quality.cartier.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boutique.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boheme.quality.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bjexpo.quality.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astronomyphoto.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'article.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.preprod.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.preprod.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.preprod.piaget.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.preprod.panerai.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.preprod.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.preprod.jaeger-lecoultre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.preprod.jaeger-lecoultre.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.preprod.iwc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.preprod.cartier.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altiplano.quality.piaget.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4810collection.quality.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2019cny.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2018cny.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016bf572c6e70000040300463044022039c25a83c7a835246d2477b35e34561e15f0550ee5e5b38c77aed5b47e11a1af02207d38625e66ec233815caa27c3f1d2bac93a6a7ad38efc4138d748cca34ecce140076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016bf572c73a0000040300473045022100fd3cc8bba63f46d3558264889e5608017d2a1cf963fa7c9e4670c9f051222a54022036164c10d9d3bd0306609c36d5ef19a10cbf9ca3141b9db99f5ef6940b34bd82
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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