linemedia.preprod.richemont.com

- Richemont International SA -

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 06:47:2d:3e:c1:80:93:f9:b4:bc:89:6d:df:84:70:5d was issued on by DigiCert Inc.

With 77 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Richemont International SA

Organization: Richemont International SA
Organization unit: RIC Akamai
State / Province: Genève
Locality: Bellevue
Country: CH

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:47:2d:3e:c1:80:93:f9:b4:bc:89:6d:df:84:70:5d
Serial Number (int): 8344938732129756403172478344302456925
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 65:31:72:8f:aa:b1:bb:0a:2f:92:05:3f:74:3e:4d:d3:46:9c:86:8a
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): 5e:05:1b:fc:28:ef:4c:86:0c:ab:4e:42:da:b1:82:52:0d:38:99:ee
Fingerprint (sha256): 5a:3e:34:7f:22:d3:0b:e3:00:a6:5a:3e:be:0d:d6:89:a5:1d:1a:e7:56:ef:c6:37:9a:7f:d6:e1:6d:ba:33:da

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate linemedia.preprod.richemont.com

77

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for linemedia.preprod.richemont.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

yyvdaycampaign.quality.montblanc.cn
xianskp.rdu.quality.richemont.cn
www.preprod2.panerai.com
www.comeforashine.quality.piaget.cn
whenelegancemeetsart.quality.vancleefarpels.com
weixin.quality.vacheron-constantin.cn
weixin.quality.cartier.cn
weboutique.quality.vacheron-constantin.cn
weboutique.preprod.vancleefarpels.com
weboutique.preprod.vacheron-constantin.cn
weboutique.preprod.piaget.cn
weboutique.preprod.panerai.cn
weboutique.preprod.montblanc.cn
weboutique.preprod.jaeger-lecoultre.com
weboutique.preprod.jaeger-lecoultre.cn
weboutique.preprod.iwc.cn
weboutique.preprod.cartier.cn
vcaballet.quality.vancleefarpels.com
summit2.quality.montblanc.cn
starcrm.quality.montblanc.cn
services.preprod.panerai.cn
services.preprod.jaeger-lecoultre.cn
rogerdubuis.quality.richemont.cn
productminisite.quality.vacheron-constantin.cn
preprod.sihh.org
preprod-watch-live.hautehorlogerie.org
preprod-journal.hautehorlogerie.org
preprod-fhhcertification.hautehorlogerie.org
preprod-fhhacademy.hautehorlogerie.org
preprod-bowatchlive.hautehorlogerie.org
preprod-app-sihh.hautehorlogerie.org
newbinding.quality.cartier.cn
myiwc.preprod.iwc.cn
media.weboutique.preprod.vancleefarpels.com
media.weboutique.preprod.vacheron-constantin.cn
media.weboutique.preprod.piaget.cn
media.weboutique.preprod.panerai.cn
media.weboutique.preprod.montblanc.cn
media.weboutique.preprod.jaeger-lecoultre.com
media.weboutique.preprod.jaeger-lecoultre.cn
media.weboutique.preprod.iwc.cn
media.weboutique.preprod.cartier.cn
lovedeclaration.quality.cartier.cn
llp.quality.montblanc.cn
linemedia.preprod.richemont.com
lbs.quality.iwc.cn
holidayseason.quality.piaget.cn
highartistrykx.quality.montblanc.cn
greatwallh5.quality.vacheron-constantin.cn
dunwb.quality.richemont.cn
csbarometer.quality.vacheron-constantin.cn
crm.llp.quality.montblanc.cn
clientcare.quality.jaeger-lecoultre.cn
clientbarometerqnr.quality.vacheron-constantin.cn
clientbarometercrm.quality.vacheron-constantin.cn
chinalimitededition2019.quality.vacheron-constantin.cn
chinabrandbook.quality.cartier.cn
ceb.quality.cartier.cn
cartiercare.preprod.cartier.cn
boutique.quality.vacheron-constantin.cn
boheme.quality.montblanc.cn
bjexpo.quality.vancleefarpels.com
astronomyphoto.quality.vacheron-constantin.cn
article.quality.vacheron-constantin.cn
api.weboutique.preprod.vancleefarpels.com
api.weboutique.preprod.vacheron-constantin.cn
api.weboutique.preprod.piaget.cn
api.weboutique.preprod.panerai.cn
api.weboutique.preprod.montblanc.cn
api.weboutique.preprod.jaeger-lecoultre.com
api.weboutique.preprod.jaeger-lecoultre.cn
api.weboutique.preprod.iwc.cn
api.weboutique.preprod.cartier.cn
altiplano.quality.piaget.cn
4810collection.quality.montblanc.cn
2019cny.quality.vacheron-constantin.cn
2018cny.quality.vacheron-constantin.cn

Other certificates including the domain name richemont.com

(limited to 100 certificates)
preprod-iisfarm.richemont.com
careers.richemont.com
booster2.richemont.com
intranet.richemont.com
intranet.richemont.com
richemont.com
xsrna.richemont.com
xs.richemont.com
intranet.richemont.com
dam.richemont.com
intranet.richemont.com
belenus.richemont.com
collaboration.richemont.com
apps2013.richemont.com
linemedia.preprod.richemont.com
api-booster.richemont.com
preprod-apps2016.richemont.com
linemedia.preprod.richemont.com
media.richemont.com
vo1webdisp.richemont.com
wwsip.richemont.com
spark.nprd.val.elb.richemont.com
careers.richemont.com
booster.richemont.com
apps.richemont.com
www.richemont.com
preprod-apps2016.richemont.com
owa.richemont.com
intranet.richemont.com
preprod-apps2016.richemont.com
booster.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
dam.richemont.com
linemedia.preprod.richemont.com
antispam.richemont.com
svn.richemont.com
apps2016.richemont.com
intranet.richemont.com
launchpad.richemont.com
visionnaire.richemont.com
epm-mobile.richemont.com
intranet.richemont.com
mdm.richemont.com
richemont.com
epm-mobile.richemont.com
eusip.richemont.com
www.quality.alange-soehne.com
jobs.richemont.com
jenkins-aws.richemont.com
search.richemont.com
launchpad.richemont.com
cyberjourney.richemont.com
api-booster.richemont.com
linemedia.preprod.richemont.com
admin.pre-booster.richemont.com
pre-booster.richemont.com
owa-sso.richemont.com
id-sso.richemont.com
scn01.richemont.com
intranet.preprod.richemont.com
owa-nosso.richemont.com
linemedia.preprod.richemont.com
epm-mobile.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
owa-nosso.richemont.com
careers.richemont.com
amer-ra.richemont.com
media.richemont.com
iisfarm.richemont.com
preprod-apps2013.richemont.com
emea-ra.richemont.com
xs4.richemont.com
inet.richemont.com
midgard.ch.richemont.com
aegis.ch.richemont.com
collaboration.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
apps2016.richemont.com
owa.richemont.com
fileexchange.richemont.com
creative-academy.com
agile.quality.richemont.com
secure.richemont.com
cs.richemont.com
www.quality.alange-soehne.com
richemont.com
richemont.com
owa.richemont.com
agile.richemont.com
preprod-iisfarm.richemont.com
careers.richemont.com
*.richemont.com
belenus.richemont.com
www.lcboutiquenet.com
*.mytandem.eu
intranet.staging.richemont.com

Certificate

The complete raw certificate details for linemedia.preprod.richemont.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PxndjfZIskxHX+KCx3y
u0WEJKPSjl8keWv3zQMeFZmGiMfkrVmJSYGOQ0VvIUQ6bXuhsVt01HgnPccknR65
Vciw7OK5qGPHsVAp6E9eCJwspLM80q0kKgGc+4daaqntx6mVSngCLPuq83RCMsrk
JDvnbtQZ10iwTSH2wn8RuyzNftGa5cJ5KazcPlTHpHcj+RKQkKG5YhNHrug2O2K4
9HJXIK0TGEcC2lBvgM1Z3Ds5URHvqVMGBGbF30GJIXOJwRF9OKjUIujMdyxUt2Rs
jqXCjDJ96FHmBH8SNrtMsw0/u6mdiRZq2IBjRP+ZMJ1yhT8KLYQ6yaKCOI3gwwII
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8344938732129756403172478344302456925
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-06 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Genève'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bellevue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Richemont International SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RIC Akamai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'linemedia.preprod.richemont.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26886985776872539947516047133674211251187768906369194440437797275239974789868709029833303398344478113139768151949554720084485330535567712424964271328165105459531580805824241691952195860145289142687590432789700250433036796923920279081355433557025406871249377505665373775707442763191669599244173188648065885326310520951378654114121455054862064302371502319734479919922881922546972418657467322183509592428177330412591923209619776427796937917745397585213014717329332519523661403485510402620720098498892036079110834250765929892988298508977822689805331405232444221231034524448214672642164497824674038781083006057968046311479
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6531728faab1bb0a2f92053f743e4dd3469c868a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2849 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yyvdaycampaign.quality.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xianskp.rdu.quality.richemont.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preprod2.panerai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comeforashine.quality.piaget.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whenelegancemeetsart.quality.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weixin.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weixin.quality.cartier.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.piaget.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.panerai.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.jaeger-lecoultre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.jaeger-lecoultre.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.iwc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.cartier.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcaballet.quality.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summit2.quality.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starcrm.quality.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.preprod.panerai.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.preprod.jaeger-lecoultre.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rogerdubuis.quality.richemont.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productminisite.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.sihh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-watch-live.hautehorlogerie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-journal.hautehorlogerie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-fhhcertification.hautehorlogerie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-fhhacademy.hautehorlogerie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-bowatchlive.hautehorlogerie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-app-sihh.hautehorlogerie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newbinding.quality.cartier.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myiwc.preprod.iwc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.preprod.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.preprod.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.preprod.piaget.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.preprod.panerai.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.preprod.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.preprod.jaeger-lecoultre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.preprod.jaeger-lecoultre.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.preprod.iwc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.preprod.cartier.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lovedeclaration.quality.cartier.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llp.quality.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linemedia.preprod.richemont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lbs.quality.iwc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holidayseason.quality.piaget.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highartistrykx.quality.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatwallh5.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dunwb.quality.richemont.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csbarometer.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.llp.quality.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientcare.quality.jaeger-lecoultre.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientbarometerqnr.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientbarometercrm.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinalimitededition2019.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinabrandbook.quality.cartier.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceb.quality.cartier.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cartiercare.preprod.cartier.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boutique.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boheme.quality.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bjexpo.quality.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astronomyphoto.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'article.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.preprod.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.preprod.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.preprod.piaget.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.preprod.panerai.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.preprod.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.preprod.jaeger-lecoultre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.preprod.jaeger-lecoultre.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.preprod.iwc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.preprod.cartier.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altiplano.quality.piaget.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4810collection.quality.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2019cny.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2018cny.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016d6c8fe3ce0000040300473045022100eb5b6107f4a28d6f25ace9efa2236b08dca0964f67fdb09f5a25bdb57eb02642022051881d80e79728d8152326bc4d0bf23497de38f76dd2da799455c40151345d6f0075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016d6c8fe46d0000040300463044022044de50a667acc782234d5748906162209cdd54ddb73429ba1fb0017b0f60b152022055649ec5628f1c0c72bc686e88b13bc4bc6bf25c590404ceb87b08a009a6f909
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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