www-npe.yves-rocher.com

Issued by R3

About this certificate

This digital certificate with serial number 03:95:41:fe:33:17:77:57:7a:11:f9:c8:ca:d8:c9:2d:55:68 was issued on by Let's Encrypt.

With 39 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www-npe.yves-rocher.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:95:41:fe:33:17:77:57:7a:11:f9:c8:ca:d8:c9:2d:55:68
Serial Number (int): 312126650165890730367109531560088070608232
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1a:25:67:47:9e:65:0a:fa:a2:5c:6e:2d:bb:7a:0a:74:a7:66:a7:87
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 92:44:cb:c9:a3:07:c5:05:68:e0:76:81:19:b3:3a:27:73:60:1c:01
Fingerprint (sha256): 60:46:ab:90:6f:73:58:c9:a9:6c:29:01:0b:11:15:db:c6:12:50:8b:db:43:82:8f:f8:47:82:d4:4e:f0:55:9f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www-npe.yves-rocher.com

39

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www-npe.yves-rocher.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api-dev.groupe-rocher.com
api-integ.groupe-rocher.com
api-stg.groupe-rocher.com
app01-dev.stanhome.it
b2s-stg.yves-rocher.com.mx
cms01-dev.stanhome.it
contrib-bo.ricaud.com
eimv3-npe.yves-rocher.com
eimv3-statics-npe.yves-rocher.com
etl-dev.stanhome.it
etl-int.stanhome.it
flow-npe.yves-rocher.com
myreport-dev.yves-rocher.com
myreport-rec.yves-rocher.com
notifications01-dev.stanhome.it
pim-npe.yves-rocher.com
portailmag-rec.yves-rocher.com
preprod-gcp-vpci.yves-rocher.com
preprod-vpci.yves-rocher.com
productlab-int.groupe-rocher.com
productlab-rec.groupe-rocher.com
samy-it-int.yves-rocher.com
samy-yrbe-npe.yves-rocher.com
samy-yrca-npe.yves-rocher.com
samy-yrce-npe.yves-rocher.com
samy-yres-npe.yves-rocher.com
samy-yrfr-npe.yves-rocher.com
samy-yrit-npe.yves-rocher.com
srv01-dev.stanhome.it
storelocator-npe.yves-rocher.com
test01.stanhomeperte.it
tilkal-npe.petit-bateau.com
univert-int.groupe-rocher.com
workbench-www.ricaud.com
www-npe.extracteur-donnees-mag-yr.com
www-npe.yves-rocher.com
www.cosmetovigilance-uat.groupe-rocher.com
yrfrcl04-agile-simu.stanhome.com
yrfrcl04-agile-simu2.stanhome.it

Other certificates including the domain name yves-rocher.com

(limited to 100 certificates)
services.yves-rocher.com
medianet.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
abspace-re7.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
incapsula.com
www.yves-rocher.fr
www.yves-rocher.com
eimv3-statics.yves-rocher.com
www.yves-rocher.com
birdplan.yves-rocher.com
san-16-s50.tlsprovisioning.exacttarget.com
admin-rec.easy-ext.yves-rocher.com
sec.yr-fr-rec1.easy-ext.yves-rocher.com
*.yves-rocher.com
www.yves-rocher.fr
www.yves-rocher.com
dyrectperso.yves-rocher.com
san-16-s50.tlsprovisioning.exacttarget.com
imperva.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
pim.yves-rocher.com
secure-vpci.yves-rocher.com
secure-vpci.yves-rocher.com
incapsula.com
dyrectperso.yves-rocher.com
incapsula.com
specif-ac.yves-rocher.com
www-npe.yves-rocher.com
incapsula.com
incapsula.com
incapsula.com
dyrectperso.yves-rocher.com
san-16-s50.tlsprovisioning.exacttarget.com
www-npe.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
sec.yr-fr-rec1.easy-ext.yves-rocher.com
secure-vpci.yves-rocher.com
myreport.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
www.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
incapsula.com
san-11-s50.tlsprovisioning.exacttarget.com
services.yves-rocher.com
imperva.com
san-16-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
*.statics-easy-ext.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-16-s50.tlsprovisioning.exacttarget.com
*.yves-rocher.com
dyrectperso.yves-rocher.com
pim.yves-rocher.com
dyrectperso.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
medianet.yves-rocher.com
admin-rec.easy-ext.yves-rocher.com
*.yves-rocher.com
ftp-pao.yves-rocher.com
*.yves-rocher.com
services.yves-rocher.com
incapsula.com
samy.yves-rocher.com
newsroom.yves-rocher.com
www.yves-rocher.fr
dyrectperso.yves-rocher.com
services.yves-rocher.com
specif-ac.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
www.yves-rocher.com
dyrectperso.yves-rocher.com
newsroom.yves-rocher.com
www-npe.yves-rocher.com
dkb.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
pim.yves-rocher.com
specif-ac.yves-rocher.com
*.yves-rocher.com
flow.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
*.yves-rocher.com
portailmag-rec.yves-rocher.com
*.dev-spark-ext.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
services.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
specif-ac.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for www-npe.yves-rocher.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvYLmjugR2nowqChOqEs
LzgzlBb4/86Tl6xcEOZ2FePufMwqSsA6m1wKCB8YYvzaBhPqTWCntEsCJPv6o3Xm
H0B5YoGH63GcaGZ66bJ87ACXzbuwf71FZOLA+BYPqP8PeOOy0LuiofbauhMYIY5u
v7rYjOU4KiSqH7PRuFxMszuOo7ERIpa8wXj+pKCxFZfMqAntG606wtZatUWrPaoc
5KTVL98bHrf/E7ikmyE9utQ7wVf6pOmoBqBonnUt4y/wOQyu2NxbJjpF58GHhqFr
rbGZeek26/g3FnWtDHItbabbPZ20rvWnX4syBzkhR5rF6EhI/v3XvdzYdrYeVuZQ
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312126650165890730367109531560088070608232
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-06 07:04:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-04 07:04:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www-npe.yves-rocher.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23096700974189823843267883243015575449868190066537637797957938074209139582476144762139020157626053322144646163698090450349146279140471859111958640567981371881695530591928823332778878284903906167462953823413548803452163943075433840554331979229273874221991243531158183201318465696543746395649990543432487633119272637944179930009547612962706053569473328155797145035815084182300576046469010905086189022235466141730220366749322730621619199503583267036834779415521282046323888138496550176876575834818746207025371281362474684769187657188930277985532666687203936049194647517822742449609407344274964466843080703175502021939447
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1a2567479e650afaa25c6e2dbb7a0a74a766a787
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1155 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-dev.groupe-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-integ.groupe-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-stg.groupe-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app01-dev.stanhome.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2s-stg.yves-rocher.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms01-dev.stanhome.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contrib-bo.ricaud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eimv3-npe.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eimv3-statics-npe.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etl-dev.stanhome.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etl-int.stanhome.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flow-npe.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myreport-dev.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myreport-rec.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notifications01-dev.stanhome.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pim-npe.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portailmag-rec.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-gcp-vpci.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-vpci.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productlab-int.groupe-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productlab-rec.groupe-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samy-it-int.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samy-yrbe-npe.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samy-yrca-npe.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samy-yrce-npe.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samy-yres-npe.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samy-yrfr-npe.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samy-yrit-npe.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srv01-dev.stanhome.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storelocator-npe.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test01.stanhomeperte.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tilkal-npe.petit-bateau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'univert-int.groupe-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workbench-www.ricaud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-npe.extracteur-donnees-mag-yr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-npe.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cosmetovigilance-uat.groupe-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yrfrcl04-agile-simu.stanhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yrfrcl04-agile-simu2.stanhome.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f4ceeaabe0000040300483046022100f8c2e7f2080c575b377b250f94c3fffd32f812b3398b826daef2dbe2eab78134022100965e95e29cf388ca880caf2217f1b7bbbe6003ba0eb136be6d228341d46b405800750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f4ceeab03000004030046304402207781381dcf2bdb1339d8e9745057d387256fe2bc926fb6505669448e66736e7502205a2260d30bfcf40f493b76d589b56b067adc00ad5a573a814e70789e4a2475be
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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