www.lvmh.com

Issued by R3

About this certificate

This digital certificate with serial number 04:80:f3:f8:8f:be:9d:99:5b:0e:ea:bd:ad:26:c5:2c:d8:1f was issued on by Let's Encrypt.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.lvmh.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:80:f3:f8:8f:be:9d:99:5b:0e:ea:bd:ad:26:c5:2c:d8:1f
Serial Number (int): 392329579701004459846277014645745705080863
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2a:5a:a3:21:cd:e6:a8:af:9f:7c:2c:b0:d1:49:4c:3a:4f:fc:12:25
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7b:14:de:6e:b6:0b:7b:52:01:17:1c:8b:83:39:4c:56:bf:91:ce:8d
Fingerprint (sha256): 67:de:67:8d:bf:5e:fd:2d:82:3b:df:f9:f9:d5:df:40:a1:31:1d:1f:0d:4c:4c:fb:32:af:f6:15:2d:01:e3:90

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.lvmh.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lvmh.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ae.loropiana.com
allmynet.lvmh-pc.com
api.dior.cn
api.dior.com
at.loropiana.com
back-artofgift.dior.cn
baguette.uat.fendi.com
be.loropiana.com
bg.loropiana.com
cdnakamai.lvmh-pc.com
cdninsideguerlain.lvmh-pc.com
ch.loropiana.com
cn.loropiana.com
cy.loropiana.com
cz.loropiana.com
de.loropiana.com
diorinlondon.dior.com
dk.loropiana.com
ee.loropiana.com
ememberclub.dior.cn
es.loropiana.com
fi.loropiana.com
fr.loropiana.com
friendsandfamilysales.loropiana.com
gr.loropiana.com
hr.loropiana.com
hu.loropiana.com
icom-2018.fendi.com
ie.loropiana.com
ii.loropiana.com
images.uat.fendi.ows.farm
it.loropiana.com
joybydior.dior.cn
jp.loropiana.com
kr.loropiana.com
lt.loropiana.com
lu.loropiana.com
lv.loropiana.com
m.dior.cn
m.dior.com
m.guerlain.com
m.guerlain.com.cn
mc.loropiana.com
media.dior.cn
media.dior.com
media.icom-2018.fendi.com
media.loropiana.com
mt.loropiana.com
nl.loropiana.com
orderentry.loropiana.com
orderentrytest.loropiana.com
pl.loropiana.com
preprod-tmc.lvmh.fr
preprod.lvmh-static.com
preprod.lvmh.cn
preprod.lvmh.co.jp
preprod.lvmh.com
preprod.lvmh.fr
preprod.lvmh.it
preprod.lvmh.jp
preprod.lvmh.ru
pt.loropiana.com
qa.loropiana.com
reservation.guerlain.com
ro.loropiana.com
ru.loropiana.com
sa.loropiana.com
se.loropiana.com
secure-m.dior.com
si.loropiana.com
sk.loropiana.com
staging-ps.fendi.com
static.uat.fendi.ows.farm
stores.guerlain.com
textile.loropiana.com
uat-ps.fendi.com
uat.fendi.ows.farm
uk.loropiana.com
us.loropiana.com
vap.uat.fendi.com
wws.dior.com
www.12bis.chaumet.com
www.dior.cn
www.dior.com
www.geraldgenta.com
www.guerlain.com
www.guerlain.com.cn
www.lanature.chaumet.com
www.lvmh.com
www.makeupforever.cn
www.makeupforever.com
wwws.dior.com

Other certificates including the domain name lvmh.com

(limited to 100 certificates)
www.lvmh.com
preprod.lvmh.com
www.lvmh.com
accreditation.lumanity.com
alumnicredentials.kcl.ac.uk
preprod.lvmh.com
compliance.lvmh.com
retailerid.lvmh.com
achievements.launchyou.com
www.lvmh.com
achievements.launchyou.com
www.lvmh.com
publiccert.lvmh.com
support12.cdnetworks.net
support12.cdnetworks.net
preprod.lvmh.com
preprod.lvmh.com
gaia.lvmh.com.dev-gcp.lvmh.lbn.fr
virtualapartment.lvmh.com
www.lvmh.com
accreditation.lumanity.com
preprod.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
www.lvmh.com
achievements.launchyou.com
www.lvmh.com
dbt.lvmh.com
preprod.lvmh.com
www.lvmh.com
preprod.lvmh.com
support12.cdnetworks.net
achievements.launchyou.com
www.lvmh.com
support12.cdnetworks.net
accreditation.lumanity.com
www.lvmh.com
cdn06.cdnsvc.com
preprod.lvmh.com
lvmh.fr
www.lvmh.com
www.lvmh.com
cdn06.cdnsvc.com
accreditation.lumanity.com
preprod.lvmh.com
*.lvmh.com
accreditation.lumanity.com
spring.lvmh.com
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
san-13-s50.tlsprovisioning.exacttarget.com
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
www.lvmh.com
www.lvmh.com
support12.cdnetworks.net
www.lvmh.com
san-13-s50.tlsprovisioning.exacttarget.com
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
shero.lvmh.com
preprod.lvmh.com
support12.cdnetworks.net
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
preprod.lvmh.com
support12.cdnetworks.net
lvmh.fr
support12.cdnetworks.net
www.lvmh.com
preprod.lvmh.com
support12.cdnetworks.net
preprod.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
lamaisondesstartups.lvmh.com
www.lvmh.com
living.lvmh.com
game.cybertraining.lvmh.com
support12.cdnetworks.net
san-13-s50.tlsprovisioning.exacttarget.com
preprod.lvmh.com
www.lvmh.com
*.chic.lvmh.com
lvmh.fr
online-media-builder.lvmh.com
support12.cdnetworks.net
cdn06.cdnsvc.com
lvmh.fr
www.lvmh.com
accreditation.lumanity.com
tr.openinnovation.lvmh.com
accreditation.lumanity.com
link.bein.lvmh.com
preprod.lvmh.com

Certificate

The complete raw certificate details for www.lvmh.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMCzCCCvOgAwIBAgISBIDz+I++nZlbDuq9rSbFLNgfMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTA1MTAwNzE4MzhaFw0yMTA4MDgwNzE4MzhaMBcxFTATBgNVBAMT
DHd3dy5sdm1oLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOcZ
TqDH3sm6suwFatoJQF2JktFyXuLh6xj79/L+u7V9vB74vL3rgQXHPSjvJyI5U3ki
7d8tbgNr91hmLSs5azRgDqBoykdUwgrf70hTwcVUjj2aR3qoUgM4JmvPNHU1e8tA
AqwPYU9iiBfimLqNjvn0mau3QD2BesGrDsqwAIpLl81lwna3BkCpmY+94I9p7Zil
QOFgBzTg8rWY//jY2PAVfGzGNCQik7Kc27nDEz8OxD+QjeA/AfpdoFctSFetsFYZ
1HYAlcx+Qyq7g69tMo6+lzm96Nk3XNSfCwZ2z0I8GREQVwOVMOyYiWFY8KXMdZJb
Y4iH6qKJnXWMfr4VHQECAwEAAaOCCTQwggkwMA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E
FgQUKlqjIc3mqK+ffCyw0UlMOk/8EiUwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA
5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMu
by5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8w
ggcDBgNVHREEggb6MIIG9oIQYWUubG9yb3BpYW5hLmNvbYIUYWxsbXluZXQubHZt
aC1wYy5jb22CC2FwaS5kaW9yLmNuggxhcGkuZGlvci5jb22CEGF0Lmxvcm9waWFu
YS5jb22CFmJhY2stYXJ0b2ZnaWZ0LmRpb3IuY26CFmJhZ3VldHRlLnVhdC5mZW5k
aS5jb22CEGJlLmxvcm9waWFuYS5jb22CEGJnLmxvcm9waWFuYS5jb22CFWNkbmFr
YW1haS5sdm1oLXBjLmNvbYIdY2RuaW5zaWRlZ3VlcmxhaW4ubHZtaC1wYy5jb22C
EGNoLmxvcm9waWFuYS5jb22CEGNuLmxvcm9waWFuYS5jb22CEGN5Lmxvcm9waWFu
YS5jb22CEGN6Lmxvcm9waWFuYS5jb22CEGRlLmxvcm9waWFuYS5jb22CFWRpb3Jp
bmxvbmRvbi5kaW9yLmNvbYIQZGsubG9yb3BpYW5hLmNvbYIQZWUubG9yb3BpYW5h
LmNvbYITZW1lbWJlcmNsdWIuZGlvci5jboIQZXMubG9yb3BpYW5hLmNvbYIQZmku
bG9yb3BpYW5hLmNvbYIQZnIubG9yb3BpYW5hLmNvbYIjZnJpZW5kc2FuZGZhbWls
eXNhbGVzLmxvcm9waWFuYS5jb22CEGdyLmxvcm9waWFuYS5jb22CEGhyLmxvcm9w
aWFuYS5jb22CEGh1Lmxvcm9waWFuYS5jb22CE2ljb20tMjAxOC5mZW5kaS5jb22C
EGllLmxvcm9waWFuYS5jb22CEGlpLmxvcm9waWFuYS5jb22CGWltYWdlcy51YXQu
ZmVuZGkub3dzLmZhcm2CEGl0Lmxvcm9waWFuYS5jb22CEWpveWJ5ZGlvci5kaW9y
LmNughBqcC5sb3JvcGlhbmEuY29tghBrci5sb3JvcGlhbmEuY29tghBsdC5sb3Jv
cGlhbmEuY29tghBsdS5sb3JvcGlhbmEuY29tghBsdi5sb3JvcGlhbmEuY29tgglt
LmRpb3IuY26CCm0uZGlvci5jb22CDm0uZ3VlcmxhaW4uY29tghFtLmd1ZXJsYWlu
LmNvbS5jboIQbWMubG9yb3BpYW5hLmNvbYINbWVkaWEuZGlvci5jboIObWVkaWEu
ZGlvci5jb22CGW1lZGlhLmljb20tMjAxOC5mZW5kaS5jb22CE21lZGlhLmxvcm9w
aWFuYS5jb22CEG10Lmxvcm9waWFuYS5jb22CEG5sLmxvcm9waWFuYS5jb22CGG9y
ZGVyZW50cnkubG9yb3BpYW5hLmNvbYIcb3JkZXJlbnRyeXRlc3QubG9yb3BpYW5h
LmNvbYIQcGwubG9yb3BpYW5hLmNvbYITcHJlcHJvZC10bWMubHZtaC5mcoIXcHJl
cHJvZC5sdm1oLXN0YXRpYy5jb22CD3ByZXByb2QubHZtaC5jboIScHJlcHJvZC5s
dm1oLmNvLmpwghBwcmVwcm9kLmx2bWguY29tgg9wcmVwcm9kLmx2bWguZnKCD3By
ZXByb2QubHZtaC5pdIIPcHJlcHJvZC5sdm1oLmpwgg9wcmVwcm9kLmx2bWgucnWC
EHB0Lmxvcm9waWFuYS5jb22CEHFhLmxvcm9waWFuYS5jb22CGHJlc2VydmF0aW9u
Lmd1ZXJsYWluLmNvbYIQcm8ubG9yb3BpYW5hLmNvbYIQcnUubG9yb3BpYW5hLmNv
bYIQc2EubG9yb3BpYW5hLmNvbYIQc2UubG9yb3BpYW5hLmNvbYIRc2VjdXJlLW0u
ZGlvci5jb22CEHNpLmxvcm9waWFuYS5jb22CEHNrLmxvcm9waWFuYS5jb22CFHN0
YWdpbmctcHMuZmVuZGkuY29tghlzdGF0aWMudWF0LmZlbmRpLm93cy5mYXJtghNz
dG9yZXMuZ3VlcmxhaW4uY29tghV0ZXh0aWxlLmxvcm9waWFuYS5jb22CEHVhdC1w
cy5mZW5kaS5jb22CEnVhdC5mZW5kaS5vd3MuZmFybYIQdWsubG9yb3BpYW5hLmNv
bYIQdXMubG9yb3BpYW5hLmNvbYIRdmFwLnVhdC5mZW5kaS5jb22CDHd3cy5kaW9y
LmNvbYIVd3d3LjEyYmlzLmNoYXVtZXQuY29tggt3d3cuZGlvci5jboIMd3d3LmRp
b3IuY29tghN3d3cuZ2VyYWxkZ2VudGEuY29tghB3d3cuZ3VlcmxhaW4uY29tghN3
d3cuZ3VlcmxhaW4uY29tLmNughh3d3cubGFuYXR1cmUuY2hhdW1ldC5jb22CDHd3
dy5sdm1oLmNvbYIUd3d3Lm1ha2V1cGZvcmV2ZXIuY26CFXd3dy5tYWtldXBmb3Jl
dmVyLmNvbYINd3d3cy5kaW9yLmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3Bgsr
BgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0
Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1AJQgvB6O1Y1siHMfgosiLA3R
2k1ebE+UPWHbTi9YTaLCAAABeVVbUSIAAAQDAEYwRAIgcM4Hx6YR6StzvUbI/Sl5
G6P/uMjr6Xzl1ciNu3d1mOsCIHd30diM5pofj7trdmV2nsFa9qX0Fj/qJZ4m7bBq
713VAHYAfT7y+I//iFVoJMLAyp5SiXkrxQ54CX8uapdomX4i8NcAAAF5VVtRTAAA
BAMARzBFAiEA4PXRWBmGakmYx8xIHAs8ZakIna+ekEnwrfgvLSlqKksCIH7V4bo7
E5ru2xpQSSoWEiEbu8qHNmQNn5aTkZ6+r2TsMA0GCSqGSIb3DQEBCwUAA4IBAQCy
LJs1cb9m5w0WSKcg18s8oEyqdul5Er/qlvE4rmao2sYqPdDUMwCiJLwvM32RABVt
74yxJg5mOGBm16r03JHQAPO5I4XA6qdu6x/Ri3TIK+dCmDz1SiTu6ZkFhYT2EU0b
g+x8HukOSFlvQsl6ELXd+sq4GlV5IeMDblKz1UtAg86yo3++yJOGusfstC0ljmzj
nja/FhC/9l277RraIsfuVBXpZ4s3hxThk7J7eLBjhVIwwUPKJY1QRXsuTwXsO9ZV
+HVJCydwwIlH5t1h12pdmyQAVhbRgNMoiAUBLvRH07tX6qUfufub63icLrLWn/2m
VNH1vTZpwRvmrJwGf7nk
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xlOoMfeybqy7AVq2glA
XYmS0XJe4uHrGPv38v67tX28Hvi8veuBBcc9KO8nIjlTeSLt3y1uA2v3WGYtKzlr
NGAOoGjKR1TCCt/vSFPBxVSOPZpHeqhSAzgma880dTV7y0ACrA9hT2KIF+KYuo2O
+fSZq7dAPYF6wasOyrAAikuXzWXCdrcGQKmZj73gj2ntmKVA4WAHNODytZj/+NjY
8BV8bMY0JCKTspzbucMTPw7EP5CN4D8B+l2gVy1IV62wVhnUdgCVzH5DKruDr20y
jr6XOb3o2Tdc1J8LBnbPQjwZERBXA5Uw7JiJYVjwpcx1kltjiIfqoomddYx+vhUd
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 392329579701004459846277014645745705080863
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-10 07:18:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-08 07:18:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lvmh.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29173527863411823924460478653894446090154301686692179394274098315201325267543195146877891247959248141438991944400645256090693457484527584876671044110363450876634011416010740259397005553082113040024719519427652499728564602149242753683163634727050693026205517117559541570576416038780810564355844369906534157453421745103367851019692888747103421550748219402222053937942764611783901586140546979373061553609120669252334195575817755510089177792673939329825105472712108858613875255378534868383462520958997807671202202710141643932964956222628441411756154069695231982624565359687339089544286838017886077032829691375725793582337
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2a5aa321cde6a8af9f7c2cb0d1494c3a4ffc1225
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1786 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ae.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allmynet.lvmh-pc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.dior.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.dior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'at.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'back-artofgift.dior.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baguette.uat.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bg.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdnakamai.lvmh-pc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdninsideguerlain.lvmh-pc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ch.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cy.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cz.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diorinlondon.dior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dk.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ee.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ememberclub.dior.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fi.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friendsandfamilysales.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gr.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hr.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hu.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icom-2018.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ie.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ii.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.uat.fendi.ows.farm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joybydior.dior.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jp.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kr.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lt.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lu.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lv.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.dior.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.dior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.guerlain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.guerlain.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mc.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.dior.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.dior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.icom-2018.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mt.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nl.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orderentry.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orderentrytest.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-tmc.lvmh.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh-static.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pt.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservation.guerlain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ro.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ru.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sa.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'se.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-m.dior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'si.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sk.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-ps.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.uat.fendi.ows.farm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.guerlain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'textile.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-ps.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.fendi.ows.farm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vap.uat.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wws.dior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.12bis.chaumet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dior.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geraldgenta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guerlain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guerlain.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lanature.chaumet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lvmh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.makeupforever.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.makeupforever.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwws.dior.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c200000179555b51220000040300463044022070ce07c7a611e92b73bd46c8fd29791ba3ffb8c8ebe97ce5d5c88dbb777598eb02207777d1d88ce69a1f8fbb6b7665769ec15af6a5f4163fea259e26edb06aef5dd50076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d700000179555b514c0000040300473045022100e0f5d15819866a4998c7cc481c0b3c65a9089daf9e9049f0adf82f2d296a2a4b02207ed5e1ba3b139aeedb1a50492a1612211bbbca8736640d9f9693919ebeaf64ec
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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