www.lvmh.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:18:c2:b4:16:b4:29:c0:6f:5a:7b:83:4a:b8:60:58:11:9d was issued on by Let's Encrypt.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.lvmh.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:18:c2:b4:16:b4:29:c0:6f:5a:7b:83:4a:b8:60:58:11:9d
Serial Number (int): 269762439906487075069225320999899612320157
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 29:c2:64:b6:b6:f6:2f:59:ac:98:1f:f3:5c:ad:ad:7d:88:f0:74:4c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5b:c3:ef:74:ef:7e:07:bf:19:1c:54:fc:87:46:e7:51:ce:df:ef:33
Fingerprint (sha256): 7e:bf:86:f5:9f:68:ce:fe:b3:3d:b4:55:49:af:49:e9:3d:d5:31:18:a0:c3:ff:13:1f:53:34:64:66:74:21:4a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.lvmh.com

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lvmh.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api-products.fendi.com
api.heaven.fendi.com
app.fondationlouisvuitton.fr
asset.chaumet.com
asset.olfaplay.com
b-share.berluti.com
baguette.fendi.com
boutiques.chaumet.com
cashmere.theoriginofasecret.loropiana.com
cht.chaumet.com
crownyourlove.chaumet.com
demandes-extraordinaires.chaumet.com
exhibition-tokyo.chaumet.com
fendi.com
fisfor.fendi.com
flv-prd-63.fondationlouisvuitton.fr
fred.com
hd.fondationlouisvuitton.fr
icom.fendi.com
images-test.fendi.com
images.myfendi.com
images.www.fendi.com
kr.chaumet.com
kstatic-test.fendi.com
kstatic.www.fendi.com
m.chaumet.cn
m.chaumet.com
m.chaumet.fr
m.cht.chaumet.com
m.kr.chaumet.com
m.zenith-watches.com
makeityours.chaumet.com
media.chaumet.com
media.icom.fendi.com
mobile.chaumet.jp
mobile.fisfor.fendi.com
portal.fendi.com
pp-crownyourlove.chaumet.com
preprod-fisfor.fendi.com
preprod-mobile.fisfor.fendi.com
preprod.chaumet.cn
preprod.chaumet.com
products.fendi.com
ps.fendi.com
r.lvmh-static.com
retailtraining.fendi.com
secure.fendi.com
staging.api.heaven.fendi.com
static-test.fendi.com
static.dior.cn
static.dior.com
static.www.fendi.com
stores-cht.chaumet.com
stores-jp.chaumet.com
stores-kr.chaumet.com
stores.guerlain.com
test-retailtraining.fendi.com
theoriginofasecret.loropiana.com
thevu.fendi.com
tmsprd.loropiana.com
uat-api-heaven.fendi.com
uat-api-products.fendi.com
vap.fendi.com
video.fondationlouisvuitton.fr
westore.fresh-cn.com
ws.loropiana.com
www-test.fendi.com
www.cha-ling.com
www.chaumet.com
www.chaumet.fr
www.chaumet.jp
www.fendi.com
www.fisfor.fendi.com
www.fondationlouisvuitton.fr
www.fred.cn
www.fred.com
www.loropiana.com
www.lvmh.cn
www.lvmh.co.jp
www.lvmh.com
www.lvmh.fr
www.lvmh.it
www.lvmh.ru
www.mobile.fisfor.fendi.com
www.preprod-fisfor.fendi.com
www.preprod-mobile.fisfor.fendi.com
www.zenith-watches.com

Other certificates including the domain name lvmh.com

(limited to 100 certificates)
www.lvmh.com
preprod.lvmh.com
www.lvmh.com
accreditation.lumanity.com
alumnicredentials.kcl.ac.uk
preprod.lvmh.com
compliance.lvmh.com
retailerid.lvmh.com
achievements.launchyou.com
www.lvmh.com
achievements.launchyou.com
www.lvmh.com
publiccert.lvmh.com
support12.cdnetworks.net
support12.cdnetworks.net
preprod.lvmh.com
preprod.lvmh.com
gaia.lvmh.com.dev-gcp.lvmh.lbn.fr
virtualapartment.lvmh.com
www.lvmh.com
accreditation.lumanity.com
preprod.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
www.lvmh.com
achievements.launchyou.com
www.lvmh.com
dbt.lvmh.com
preprod.lvmh.com
www.lvmh.com
preprod.lvmh.com
support12.cdnetworks.net
achievements.launchyou.com
www.lvmh.com
support12.cdnetworks.net
accreditation.lumanity.com
www.lvmh.com
cdn06.cdnsvc.com
preprod.lvmh.com
lvmh.fr
www.lvmh.com
www.lvmh.com
cdn06.cdnsvc.com
accreditation.lumanity.com
preprod.lvmh.com
*.lvmh.com
accreditation.lumanity.com
spring.lvmh.com
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
san-13-s50.tlsprovisioning.exacttarget.com
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
www.lvmh.com
www.lvmh.com
support12.cdnetworks.net
www.lvmh.com
san-13-s50.tlsprovisioning.exacttarget.com
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
shero.lvmh.com
preprod.lvmh.com
support12.cdnetworks.net
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
preprod.lvmh.com
support12.cdnetworks.net
lvmh.fr
support12.cdnetworks.net
www.lvmh.com
preprod.lvmh.com
support12.cdnetworks.net
preprod.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
lamaisondesstartups.lvmh.com
www.lvmh.com
living.lvmh.com
game.cybertraining.lvmh.com
support12.cdnetworks.net
san-13-s50.tlsprovisioning.exacttarget.com
preprod.lvmh.com
www.lvmh.com
*.chic.lvmh.com
lvmh.fr
online-media-builder.lvmh.com
support12.cdnetworks.net
cdn06.cdnsvc.com
lvmh.fr
www.lvmh.com
accreditation.lumanity.com
tr.openinnovation.lvmh.com
accreditation.lumanity.com
link.bein.lvmh.com
preprod.lvmh.com

Certificate

The complete raw certificate details for www.lvmh.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Xz8zvrOHeFus7535xeU
bWBdT3l/ISjiPR+nEIK3oKm4oVASYvLRuMMbo4vhk8TF5C3xMiI4fqiZLi+IE7+q
WNbkNRA/L2H9kCGFPrEu342GpcNXUwgqPC5ySaE5cVustTjH+hAS5CxMEV0XbAn3
f29h9KNm5482B6AHl0A23c/iyHRO1AUFxeRZaLxI632XjqSYQG7tNUvcFYeRVdI6
wzTOCki6cnD6pwZfOJnw53PAOLSyZdIK1whfWY3jP4KAiAhQ55dWfe5h8O5mw/LT
KvV4J1V1SuySImJCCN/P1xYsJLS4qQdeJ60vqljUSLsBWIn0c1ElBCxD84rV3r2e
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269762439906487075069225320999899612320157
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-29 03:05:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-27 03:05:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lvmh.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26950392607538428716638366570671645180636661370200847750740215283097758596895204393652718918820798778109007356990664975718752013645964574440057184747356665822896474482718964521214572320493364024771541322184409335098856686181347352033326579587741950863929044669561449296655139034608701700041859832198374818308509590466272733773744234460672986700548040736737226624509920687031300217687196493808818279592100760357395007965775111421409509943745868473335949683875200447728258010417122413863009715959170760379054389221921276029811447662013568241229520375635059594367268254258146781472092056382883614795450180286987777187531
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							29c264b6b6f62f59ac981ff35cadad7d88f0744c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1890 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-products.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.heaven.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.fondationlouisvuitton.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asset.chaumet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asset.olfaplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-share.berluti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baguette.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boutiques.chaumet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashmere.theoriginofasecret.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cht.chaumet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crownyourlove.chaumet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demandes-extraordinaires.chaumet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exhibition-tokyo.chaumet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fisfor.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flv-prd-63.fondationlouisvuitton.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fred.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hd.fondationlouisvuitton.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icom.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-test.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.myfendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.www.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kr.chaumet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kstatic-test.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kstatic.www.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.chaumet.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.chaumet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.chaumet.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.cht.chaumet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.kr.chaumet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.zenith-watches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makeityours.chaumet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.chaumet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.icom.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.chaumet.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.fisfor.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pp-crownyourlove.chaumet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-fisfor.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-mobile.fisfor.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.chaumet.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.chaumet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'products.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r.lvmh-static.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retailtraining.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.api.heaven.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-test.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.dior.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.dior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.www.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores-cht.chaumet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores-jp.chaumet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores-kr.chaumet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.guerlain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-retailtraining.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theoriginofasecret.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thevu.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tmsprd.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-api-heaven.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-api-products.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vap.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.fondationlouisvuitton.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westore.fresh-cn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-test.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cha-ling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chaumet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chaumet.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chaumet.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fisfor.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fondationlouisvuitton.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fred.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fred.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lvmh.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lvmh.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lvmh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lvmh.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lvmh.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lvmh.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mobile.fisfor.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preprod-fisfor.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preprod-mobile.fisfor.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zenith-watches.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001725e9b79490000040300473045022100d55877e3afdc039c4e458309fe0f5d20d3033c8dcf4aef76cc84bdd0c9fa95ab022014fb3bbbb9fbb9e61e6bdb0b60b30b819235b3c5ded07e732138951232525817007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001725e9b79420000040300473045022034769feea680dfbded8da4b1852f09a1fc7eb701165568d6363120ff11cee49e022100a64b3563d4308ac9a87f8767fd720a36237cab1ea791244af08b4891b8586bc8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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