linemedia.preprod.richemont.com

Issued by R3

About this certificate

This digital certificate with serial number 03:b4:bb:b2:ec:2f:15:01:66:4e:2b:f6:33:7b:96:f5:8f:92 was issued on by Let's Encrypt.

With 48 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=linemedia.preprod.richemont.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b4:bb:b2:ec:2f:15:01:66:4e:2b:f6:33:7b:96:f5:8f:92
Serial Number (int): 322837178495481152808050125039902519562130
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d3:26:cb:e3:f6:22:dc:76:8b:bd:df:cb:6a:02:44:29:13:1e:9d:29
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): cc:46:8e:a1:d7:bb:44:ba:31:a4:30:ee:fe:3e:04:be:78:21:4a:35
Fingerprint (sha256): 68:d5:dc:8c:8a:4a:20:99:1c:3a:d0:b3:33:8e:16:fe:a2:77:b3:6a:23:18:59:58:ca:28:ed:68:34:1a:46:8b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate linemedia.preprod.richemont.com

48

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for linemedia.preprod.richemont.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

connect.preprod.cartier.com
inside.preprod.rogerdubuis.com
intranet.preprod.dunhill.com
intranet.preprod.iwc.com
intranet.preprod.jaeger-lecoultre.com
intranet.preprod.montblanc.com
intranet.preprod.panerai.com
intranet.preprod.piaget.com
intranet.preprod.richemont.com
intranet.preprod.vancleefarpels.com
linemedia.preprod.richemont.com
madein.preprod.chloe.com
mosaic.preprod.vacheron-constantin.com
payment.preprod.alange-soehne.com
payment.preprod.cartier.com
payment.preprod.chloe.com
payment.preprod.dunhill.com
payment.preprod.iwc.com
payment.preprod.jaeger-lecoultre.com
payment.preprod.montblanc.com
payment.preprod.panerai.com
payment.preprod.piaget.com
payment.preprod.rogerdubuis.com
payment.preprod.vacheron-constantin.com
payment.preprod.vancleefarpels.com
payment.staging.alange-soehne.com
payment.staging.cartier.com
payment.staging.chloe.com
payment.staging.dunhill.com
payment.staging.iwc.com
payment.staging.jaeger-lecoultre.com
payment.staging.montblanc.com
payment.staging.panerai.com
payment.staging.piaget.com
payment.staging.rogerdubuis.com
payment.staging.vacheron-constantin.com
payment.staging.vancleefarpels.com
preprod.watchesandwonders.cn
preprod.watchesandwonders.com
shse.quality.richemont.cn
weboutique.preprod.alange-soehne.com
weboutique.preprod.rogerdubuis.com
weboutique.stg.alange-soehne.com
weboutique.stg.rogerdubuis.com
www.prod.richemont.cn
www.prod.richemont.com
www.prod2.vancleefarpels.cn
www.prod2.vancleefarpels.com

Other certificates including the domain name richemont.com

(limited to 100 certificates)
preprod-iisfarm.richemont.com
careers.richemont.com
booster2.richemont.com
intranet.richemont.com
intranet.richemont.com
richemont.com
xsrna.richemont.com
xs.richemont.com
intranet.richemont.com
dam.richemont.com
intranet.richemont.com
belenus.richemont.com
collaboration.richemont.com
apps2013.richemont.com
linemedia.preprod.richemont.com
api-booster.richemont.com
preprod-apps2016.richemont.com
linemedia.preprod.richemont.com
media.richemont.com
vo1webdisp.richemont.com
wwsip.richemont.com
spark.nprd.val.elb.richemont.com
careers.richemont.com
booster.richemont.com
apps.richemont.com
www.richemont.com
preprod-apps2016.richemont.com
owa.richemont.com
intranet.richemont.com
preprod-apps2016.richemont.com
booster.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
dam.richemont.com
linemedia.preprod.richemont.com
antispam.richemont.com
svn.richemont.com
apps2016.richemont.com
intranet.richemont.com
launchpad.richemont.com
visionnaire.richemont.com
epm-mobile.richemont.com
intranet.richemont.com
mdm.richemont.com
richemont.com
epm-mobile.richemont.com
eusip.richemont.com
www.quality.alange-soehne.com
jobs.richemont.com
jenkins-aws.richemont.com
search.richemont.com
launchpad.richemont.com
cyberjourney.richemont.com
api-booster.richemont.com
linemedia.preprod.richemont.com
admin.pre-booster.richemont.com
pre-booster.richemont.com
owa-sso.richemont.com
id-sso.richemont.com
scn01.richemont.com
intranet.preprod.richemont.com
owa-nosso.richemont.com
linemedia.preprod.richemont.com
epm-mobile.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
owa-nosso.richemont.com
careers.richemont.com
amer-ra.richemont.com
media.richemont.com
iisfarm.richemont.com
preprod-apps2013.richemont.com
emea-ra.richemont.com
xs4.richemont.com
inet.richemont.com
midgard.ch.richemont.com
aegis.ch.richemont.com
collaboration.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
apps2016.richemont.com
owa.richemont.com
fileexchange.richemont.com
creative-academy.com
agile.quality.richemont.com
secure.richemont.com
cs.richemont.com
www.quality.alange-soehne.com
richemont.com
richemont.com
owa.richemont.com
agile.richemont.com
preprod-iisfarm.richemont.com
careers.richemont.com
*.richemont.com
belenus.richemont.com
www.lcboutiquenet.com
*.mytandem.eu
intranet.staging.richemont.com

Certificate

The complete raw certificate details for linemedia.preprod.richemont.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlltG1dp3T4cTD5T5P2fz
MczO2LfZSsESudPeXaiTXhImbhF8IyX3XZksgF6xl+DpNQSorTnEMHySxwCoL0Zf
ucLYCc/rNArujHBNCpYUBEZs9rMdpWN/zurSjDYQtME9+4smwWCs1GZ0H+MAq0+X
olihGy9Zx89YIV3NtKcqigF9C1TgIohKJS82opT8inKl5x+UIwNVJgijiFHr6hcw
L0/mu3gO2+hJVhGPLbD2+J2PnAyD81CzDy1g6tCAEKgfORoXmRasBl0wusIIW0w8
ZOa6bON1wa7N+X+YMYLGbK6IY9mH/nx3113+WC0Jro5bl7r/bBhB3YMciM2fMfsM
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322837178495481152808050125039902519562130
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-24 10:17:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-25 10:17:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'linemedia.preprod.richemont.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18980755963550005251285415693857126396376447488576085540327530249800754518634783173304433900063911204175326963917798726074849482661162525997507206983998582632133509910026321660965139484182250706529231579882259700133467630411579111987336284922488425484960400121825995755684015419658893887542954272569413834985437470356028945017370324780821994142716040819868495844166099537925763303094639883274832607369486329685304996884924269502549945014961999437912942465498069637167234611072270438244212309679548931453737038492054851572209876766671670261864940883707780966482923821791486829141726018405270074306822176022084070345827
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d326cbe3f622dc768bbddfcb6a024429131e9d29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1515 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.preprod.cartier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.preprod.rogerdubuis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.preprod.dunhill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.preprod.iwc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.preprod.jaeger-lecoultre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.preprod.montblanc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.preprod.panerai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.preprod.piaget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.preprod.richemont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.preprod.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linemedia.preprod.richemont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madein.preprod.chloe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mosaic.preprod.vacheron-constantin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.alange-soehne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.cartier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.chloe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.dunhill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.iwc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.jaeger-lecoultre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.montblanc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.panerai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.piaget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.rogerdubuis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.vacheron-constantin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.preprod.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.alange-soehne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.cartier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.chloe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.dunhill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.iwc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.jaeger-lecoultre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.montblanc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.panerai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.piaget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.rogerdubuis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.vacheron-constantin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.staging.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.watchesandwonders.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.watchesandwonders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shse.quality.richemont.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.alange-soehne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.rogerdubuis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.stg.alange-soehne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.stg.rogerdubuis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prod.richemont.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prod.richemont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prod2.vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prod2.vancleefarpels.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a800000177d3c1face000004030047304502200e05ab0606691e1d4fddf61eeae2cf9cbe42b071c42397102f3ce7a7be624e54022100a1b6326f9c895e80f808ff5ba3ee9a5f13d286657e4a332089cf8dc8b433c451007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000177d3c1faca000004030046304402205bbb839896f1f0d53e34ae351aebdcd101d8d63e19d11dc4d7248c371f1b92ce02205604b999bd5bc4ca154b18dd72675f54444c1c809dd0b031158c4b437ed79ff7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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