linemedia.preprod.richemont.com

- Richemont International SA -

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 03:03:5d:95:e2:cb:91:6f:98:6c:b2:f4:7a:3a:aa:65 was issued on by DigiCert Inc.

With 70 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Richemont International SA

Organization: Richemont International SA
Organization unit: RIC Akamai
State / Province: Genève
Locality: Bellevue
Country: CH

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:03:5d:95:e2:cb:91:6f:98:6c:b2:f4:7a:3a:aa:65
Serial Number (int): 4005159017209417295050455091171207781
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: f7:70:9a:44:07:f4:80:10:62:aa:4e:c2:dc:ca:6b:c4:3e:f1:86:12
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): ca:31:65:95:58:18:f9:5b:08:5d:18:c9:9d:97:dc:3f:08:79:96:b9
Fingerprint (sha256): 66:0d:af:c9:86:c8:ed:7a:f9:40:67:45:1e:60:14:b9:68:37:e5:0a:ba:f4:17:f2:2f:c9:69:9e:78:50:14:0c

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate linemedia.preprod.richemont.com

70

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for linemedia.preprod.richemont.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

yyvdaycampaign.quality.montblanc.cn
xianskp.rdu.quality.richemont.cn
www.preprod2.panerai.com
www.comeforashine.quality.piaget.cn
whenelegancemeetsart.quality.vancleefarpels.com
weixin.quality.vacheron-constantin.cn
weixin.quality.cartier.cn
weboutique.quality.vacheron-constantin.cn
weboutique.preprod.vancleefarpels.com
weboutique.preprod.vacheron-constantin.cn
weboutique.preprod.piaget.cn
weboutique.preprod.panerai.cn
weboutique.preprod.montblanc.cn
weboutique.preprod.jaeger-lecoultre.com
weboutique.preprod.jaeger-lecoultre.cn
weboutique.preprod.iwc.cn
weboutique.preprod.cartier.cn
vcaballet.quality.vancleefarpels.com
summit2.quality.montblanc.cn
starcrm.quality.montblanc.cn
rogerdubuis.quality.richemont.cn
productminisite.quality.vacheron-constantin.cn
preprod-watch-live.hautehorlogerie.org
preprod-journal.hautehorlogerie.org
preprod-fhhcertification.hautehorlogerie.org
preprod-fhhacademy.hautehorlogerie.org
preprod-bowatchlive.hautehorlogerie.org
newbinding.quality.cartier.cn
media.weboutique.preprod.vancleefarpels.com
media.weboutique.preprod.vacheron-constantin.cn
media.weboutique.preprod.piaget.cn
media.weboutique.preprod.panerai.cn
media.weboutique.preprod.montblanc.cn
media.weboutique.preprod.jaeger-lecoultre.com
media.weboutique.preprod.jaeger-lecoultre.cn
media.weboutique.preprod.iwc.cn
media.weboutique.preprod.cartier.cn
lovedeclaration.quality.cartier.cn
llp.quality.montblanc.cn
linemedia.preprod.richemont.com
lbs.quality.iwc.cn
holidayseason.quality.piaget.cn
highartistrykx.quality.montblanc.cn
greatwallh5.quality.vacheron-constantin.cn
dunwb.quality.richemont.cn
csbarometer.quality.vacheron-constantin.cn
crm.llp.quality.montblanc.cn
clientbarometerqnr.quality.vacheron-constantin.cn
clientbarometercrm.quality.vacheron-constantin.cn
chinalimitededition2019.quality.vacheron-constantin.cn
chinabrandbook.quality.cartier.cn
ceb.quality.cartier.cn
boutique.quality.vacheron-constantin.cn
boheme.quality.montblanc.cn
bjexpo.quality.vancleefarpels.com
astronomyphoto.quality.vacheron-constantin.cn
article.quality.vacheron-constantin.cn
api.weboutique.preprod.vancleefarpels.com
api.weboutique.preprod.vacheron-constantin.cn
api.weboutique.preprod.piaget.cn
api.weboutique.preprod.panerai.cn
api.weboutique.preprod.montblanc.cn
api.weboutique.preprod.jaeger-lecoultre.com
api.weboutique.preprod.jaeger-lecoultre.cn
api.weboutique.preprod.iwc.cn
api.weboutique.preprod.cartier.cn
altiplano.quality.piaget.cn
4810collection.quality.montblanc.cn
2019cny.quality.vacheron-constantin.cn
2018cny.quality.vacheron-constantin.cn

Other certificates including the domain name richemont.com

(limited to 100 certificates)
preprod-iisfarm.richemont.com
careers.richemont.com
booster2.richemont.com
intranet.richemont.com
intranet.richemont.com
richemont.com
xsrna.richemont.com
xs.richemont.com
intranet.richemont.com
dam.richemont.com
intranet.richemont.com
belenus.richemont.com
collaboration.richemont.com
apps2013.richemont.com
linemedia.preprod.richemont.com
api-booster.richemont.com
preprod-apps2016.richemont.com
linemedia.preprod.richemont.com
media.richemont.com
vo1webdisp.richemont.com
wwsip.richemont.com
spark.nprd.val.elb.richemont.com
careers.richemont.com
booster.richemont.com
apps.richemont.com
www.richemont.com
preprod-apps2016.richemont.com
owa.richemont.com
intranet.richemont.com
preprod-apps2016.richemont.com
booster.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
dam.richemont.com
linemedia.preprod.richemont.com
antispam.richemont.com
svn.richemont.com
apps2016.richemont.com
intranet.richemont.com
launchpad.richemont.com
visionnaire.richemont.com
epm-mobile.richemont.com
intranet.richemont.com
mdm.richemont.com
richemont.com
epm-mobile.richemont.com
eusip.richemont.com
www.quality.alange-soehne.com
jobs.richemont.com
jenkins-aws.richemont.com
search.richemont.com
launchpad.richemont.com
cyberjourney.richemont.com
api-booster.richemont.com
linemedia.preprod.richemont.com
admin.pre-booster.richemont.com
pre-booster.richemont.com
owa-sso.richemont.com
id-sso.richemont.com
scn01.richemont.com
intranet.preprod.richemont.com
owa-nosso.richemont.com
linemedia.preprod.richemont.com
epm-mobile.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
owa-nosso.richemont.com
careers.richemont.com
amer-ra.richemont.com
media.richemont.com
iisfarm.richemont.com
preprod-apps2013.richemont.com
emea-ra.richemont.com
xs4.richemont.com
inet.richemont.com
midgard.ch.richemont.com
aegis.ch.richemont.com
collaboration.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
apps2016.richemont.com
owa.richemont.com
fileexchange.richemont.com
creative-academy.com
agile.quality.richemont.com
secure.richemont.com
cs.richemont.com
www.quality.alange-soehne.com
richemont.com
richemont.com
owa.richemont.com
agile.richemont.com
preprod-iisfarm.richemont.com
careers.richemont.com
*.richemont.com
belenus.richemont.com
www.lcboutiquenet.com
*.mytandem.eu
intranet.staging.richemont.com

Certificate

The complete raw certificate details for linemedia.preprod.richemont.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8fxxiJQWsZxGkjFiR3FW
Aajir8l1acuvW3gdo/lgiDpkDBooq8boVta8eCXSzC84alm9RI7utmkSDjJNeYj6
vZT7yAlXSs02WmJlkTqK+tBJkm7fR3/0E8vpQiRJsxePJRhEPv5AKrIzHc1Ls/C3
rW5Wv0Q8RQA5n0MNFNwR7jnRqI8zss5bKQHJgxsK5Nsvdl8PCGmWr+Ab2d5S2RGF
Toic5hJAqrvd8h4mXkXYA5eiTY99cfdV06cHLLRi3StG+S4HXujU3wIoUWG0Uvql
6ewM9qsnLWgCv2NOFNz6uglFHYqJzvWDq6cYrdWb+/uIkTByO1POHSkm1xL51NVj
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4005159017209417295050455091171207781
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-06 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Genève'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bellevue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Richemont International SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RIC Akamai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'linemedia.preprod.richemont.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30547916021475063747461032224168465521768261465290248385106981795839286669948334856856719965172229480968986725325382270688785135078973630026748970215784660644786654361509158853773478254534429620949554109735537574420487284262766891048064737604152270915609491302022374655055138843246388363774658429535618600179557974193208910508283671187455955938847226252934760138029081385051222428433775541070855547046850126305349183486296923515751811584390176316078820532313739459244962092781491113747786755709904621155615474373032593893909620603015772055811220097705282827453268021683414304731814837961097868768309306180242192556971
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f7709a4407f4801062aa4ec2dcca6bc43ef18612
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2632 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yyvdaycampaign.quality.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xianskp.rdu.quality.richemont.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preprod2.panerai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comeforashine.quality.piaget.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whenelegancemeetsart.quality.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weixin.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weixin.quality.cartier.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.piaget.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.panerai.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.jaeger-lecoultre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.jaeger-lecoultre.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.iwc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.cartier.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcaballet.quality.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summit2.quality.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starcrm.quality.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rogerdubuis.quality.richemont.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productminisite.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-watch-live.hautehorlogerie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-journal.hautehorlogerie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-fhhcertification.hautehorlogerie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-fhhacademy.hautehorlogerie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-bowatchlive.hautehorlogerie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newbinding.quality.cartier.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.preprod.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.preprod.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.preprod.piaget.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.preprod.panerai.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.preprod.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.preprod.jaeger-lecoultre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.preprod.jaeger-lecoultre.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.preprod.iwc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.preprod.cartier.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lovedeclaration.quality.cartier.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llp.quality.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linemedia.preprod.richemont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lbs.quality.iwc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holidayseason.quality.piaget.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highartistrykx.quality.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatwallh5.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dunwb.quality.richemont.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csbarometer.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.llp.quality.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientbarometerqnr.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientbarometercrm.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinalimitededition2019.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinabrandbook.quality.cartier.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceb.quality.cartier.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boutique.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boheme.quality.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bjexpo.quality.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astronomyphoto.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'article.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.preprod.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.preprod.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.preprod.piaget.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.preprod.panerai.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.preprod.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.preprod.jaeger-lecoultre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.preprod.jaeger-lecoultre.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.preprod.iwc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.preprod.cartier.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altiplano.quality.piaget.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4810collection.quality.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2019cny.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2018cny.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016bc1b1bddb00000403004630440220141036c1f856e04524afbd1cce968826cf076f46f3ed245b0af28c58e0e70989022068ef52524855ebb90a6af75e946b318b67a78f6c153967ebfbd0566dfee138c30076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016bc1b1be520000040300473045022100e8701c91094de58448421b8aec5fc4e8cd1f9fa0f72cfb20b9711cdf9b833dc502204eab27558b80dec85dea5593f15fae81cb71f23e346d976b2c5599cd31abcf12
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0066488affbce036019e7b1a4071804a1e4a96718835e7868ad984cb6a39ef8b3ee7a088ba836992561e49d7fd88252c294b1c3f27125e1084fa8085dbc3a47b13fd7d37b0a908d19fa9f5caffe7ae11ea995d599416d0ac91c96e40b1f299c61f83798cf5057989038bc6f9819ffdbd582884f50d403af0906304f60687c0d182f22fe4780e413af70ba46c0236b70d644f14db058fb24f001689e6f0bccb841f004f6aaeba35c9c62974f361b75d5a58add633227fb21caa6456b6e13b44e0144eaeaddaa562253e21e678deadecfff4a916207f7ff5ab265c36f47d3131b3dccd25f42f35486f848adb20d24cc6a0c5f45c23549cbb0eadac0629661bcbfe79