www.lululemon.com

- Lululemon Athletica Canada Inc. -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 52:7f:09:07:a4:30:e8:5c:b4:7f:d5:5a:38:45:46:68 was issued on by GeoTrust Inc..

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Lululemon Athletica Canada Inc.

Organization: Lululemon Athletica Canada Inc.
Organization unit: IT Infrastructure
State / Province: British Columbia
Locality: Vancouver
Country: CA

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 52:7f:09:07:a4:30:e8:5c:b4:7f:d5:5a:38:45:46:68
Serial Number (int): 109656300502495262500992653499423868520
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 70:8e:06:a7:96:38:1c:f9:76:2c:4f:c7:10:c3:a0:3b:76:66:a9:bc
Fingerprint (sha256): 6b:9e:cc:52:37:b1:07:01:95:e6:b9:1a:0d:35:33:70:2b:44:22:c0:ee:61:77:bc:25:66:5d:64:20:8d:2e:e5

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate www.lululemon.com

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lululemon.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.seawheeze.com
images.lululemon.co.nz
staticassets.lululemon.co.nz
info.lululemon.co.nz
search.lululemon.co.nz
blog.lululemon.co.nz
static.lululemon.co.nz
cdn.lululemon.co.nz
www.lululemon.co.nz
static-global.lululemon.co.nz
www.lululemon.ch
static-global.lululemon.ch
static.lululemon.ch
images.lululemon.ch
blog.lululemon.ch
lululemon.ch
staticassets.lululemon.ch
info.lululemon.ch
cdn.lululemon.ch
search.lululemon.ch
www.lululemon.co.uk
blog.lululemon.co.uk
search.lululemon.co.uk
images.lululemon.co.uk
staticassets.lululemon.co.uk
cdn.lululemon.co.uk
info.lululemon.co.uk
static.lululemon.co.uk
static-global.lululemon.co.uk
static.ivivva.com
images.ivivva.com
shop.ivivva.com
cdn.ivivva.com
info.ivivva.com
www.ivivva.com
images.lululemon.com.au
partners.lululemon.com.au
blog.lululemon.com.au
search.lululemon.com.au
info.lululemon.com.au
cdn.lululemon.com.au
www.lululemon.com.au
static-global.lululemon.com.au
static.lululemon.com.au
staticassets.lululemon.com.au
mobileshopapi.lululemon.com.au
images.lululemon.com.hk
static-global.lululemon.com.hk
blog.lululemon.com.hk
staticassets.lululemon.com.hk
info.lululemon.com.hk
cdn.lululemon.com.hk
static.lululemon.com.hk
www.lululemon.com.hk
search.lululemon.com.hk
blog.eu.lululemon.com
api.lululemon.com
cdn.lululemon.com
fr.lululemon.com
cdn.eu.lululemon.com
stg-api.lululemon.com
staticassets.lululemon.com
static.eu.lululemon.com
globalstaticassets.lululemon.com
static-global.eu.lululemon.com
contentapi.lululemon.com
fr.search.lululemon.com
images.eu.lululemon.com
blog.lululemon.com
fr.shop.lululemon.com
www.eu.lululemon.com
static.lululemon.com
search.lululemon.com
images.lululemon.com
pnimages.lululemon.com
mobileapi.lululemon.com
info.eu.lululemon.com
lululemon.com
info.lululemon.com
fr-blog.lululemon.com
staticassets.eu.lululemon.com
shop.lululemon.com
search.eu.lululemon.com
www.lululemon.com

Other certificates including the domain name lululemon.com

(limited to 100 certificates)
vanity22.jiveon.com
*.strategicsales.lululemon.com
lululemon.com
stage.lululemon.com
lululemon.com
vanity22.jiveon.com
stage.lululemon.com
eu.lululemon.com
*.lululemon.com
leapfrog-ssl-28.gcs-web.com
whatwelove.lululemon.com
secure5s.scene7.com
*.lululemon.com
imperva.com
cdn.lululemon.com.au
test.preprod-apis.lululemon.com
smetrics.lululemon.com
vanity22.jiveon.com
cdn.lululemon.com.au
preview.apis.lululemon.com
grin.lululemon.com
sso-signing.lululemon.com
sni.cloudflaressl.com
lululemon.com.au
lululemon.com
stage.lululemon.com
sni.cloudflaressl.com
ehc-dev.lululemon.com
*.lululemon.com
imperva.com
akamai-san90.exacttarget.com
imperva.com
stage.lululemon.com
vanity22.jiveon.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-28.gcs-web.com
click.e.lululemon.com
stage.lululemon.com
whatwelove.lululemon.com
whatwelove.lululemon.com
akamai-san90.exacttarget.com
*.lllatg.com
vanity22.jiveon.com
investor.lululemon.com
lululemon.com
lululemon.ca
ehc-dev.lululemon.com
delivery.lululemon.com
lululemon.com
cdn.lululemon.com.au
eu.lululemon.com
vanity22.jiveon.com
smetrics.lululemon.com
secure5s.scene7.com
secure5s.scene7.com
ehc-dev.lululemon.com
akamai-san90.exacttarget.com
cloudflare-sandbox.lululemon.com
lll.flow.anaplan.qa.lululemon.com
sni.cloudflaressl.com
www.lululemon.com
repair.lululemon.com
secure5s.scene7.com
lululemon.com
ehc-dev.lululemon.com
test.preprod-apis.lululemon.com
vanity22.jiveon.com
leapfrog-ssl-28.gcs-web.com
*.atg.lululemon.com
leapfrog-ssl-28.gcs-web.com
*.lululemon.com
apim-stage.tokenapi.lululemon.com
cdn.lululemon.com.au
stage.lululemon.com
theghostrace.lululemon.com
grin.lululemon.com
vanity22.jiveon.com
prod.apis.lllext.com
lululemon.com
owa.lululemon.com
leapfrog-ssl-28.gcs-web.com
www.lululemon.com
ehc-dev.lululemon.com
cdn.lululemon.com.au
vanity22.jiveon.com
lululemon.ca
vanity22.jiveon.com
ehc-dev.lululemon.com
sso-encryption.lululemon.com
www.lululemon.com
eu.lululemon.com
lululemon.com
apim-stage.tokenapi.lululemon.com
prod.apis.lllext.com
vanity22.jiveon.com
www.lululemon.com
sni.cloudflaressl.com
www.lululemon.com
cloud.e.lululemon.com
view.e.lululemon.com

Certificate

The complete raw certificate details for www.lululemon.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkq3+H7v3LSvGRYV/iM2
7IL0LvhbFhEOZiMrkcPLFuezAfvOzfFEMkscHpMuuaPS4282vDlrtqOr9kUWrr06
51nukXsOb8Ll0FRXsb2s1HtToWaU5s7IN07cgur9941EXd9QFGmkaUDmIqU1QI42
TVlHaJ6BrkQlR8lbLBx/T5uYGZv8frvAJPG5SJvIP2qIcVj9JKBW8xF3SHq8wGAQ
ylJ7oiFP19GduBMuE49qzVE9Y3wZpTAVYuFr4yD16ggk2DJmjKLgg2cTNO73w7Gs
BC7oIHCaVezP7wJtJY9IFdGfSYK58j1vXigFU6YINCek5i6nYiqLw1dchllMQF5R
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 109656300502495262500992653499423868520
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'British Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Vancouver'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Lululemon Athletica Canada Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT Infrastructure'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.lululemon.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24022123075950968206213057921336264328178011653618267482558194705430063623784950259798841235910501789030702780774448951627561647435521301158997320351709972990903857289844112194511526614602519469059919923928736391769887140533435734626360673839920901949100237747275624015027566195621939341529459757854540024636073222136293618311343140724705606361335105569978805635918012595892305603493273006870638503529997239655284452636780903644113521368520680162999616859190593984789598730837019781311341449870254138814299205427646555286328563280143376549752124219594257836786300860474004205103304682457181657861994171387492022768043
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1961 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seawheeze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staticassets.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-global.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lululemon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-global.lululemon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.lululemon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.lululemon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.lululemon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lululemon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staticassets.lululemon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.lululemon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.lululemon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.lululemon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lululemon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.lululemon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.lululemon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.lululemon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staticassets.lululemon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.lululemon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.lululemon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.lululemon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-global.lululemon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.ivivva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.ivivva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ivivva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ivivva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.ivivva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ivivva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-global.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staticassets.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileshopapi.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.lululemon.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-global.lululemon.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.lululemon.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staticassets.lululemon.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.lululemon.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.lululemon.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.lululemon.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lululemon.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.lululemon.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.eu.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.eu.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-api.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staticassets.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.eu.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalstaticassets.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-global.eu.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contentapi.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.search.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.eu.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.shop.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eu.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pnimages.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileapi.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.eu.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr-blog.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staticassets.eu.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.eu.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lululemon.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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