www.sandbox.marketplace.paris

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:01:75:6b:52:04:46:5a:8d:14:36:97:09:5b:1d:26:aa:0c was issued on by Let's Encrypt.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.sandbox.marketplace.paris

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:01:75:6b:52:04:46:5a:8d:14:36:97:09:5b:1d:26:aa:0c
Serial Number (int): 261833217076968650356752905478855654287884
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bb:90:07:1a:41:c7:64:ca:21:6f:21:58:e3:53:67:7b:20:0c:fd:a6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2c:14:e9:7a:8e:2d:a0:bd:08:93:1c:15:c8:34:c7:05:e8:06:f9:b3
Fingerprint (sha256): 8e:2a:f4:b1:9a:61:74:2a:94:cb:3e:56:97:e0:a1:27:02:61:9a:e2:57:6a:a9:ef:7d:ec:68:fe:2f:4d:8f:37

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate www.sandbox.marketplace.paris

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sandbox.marketplace.paris

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

backoffice.cifa-fashion.com
cdn.cifa-fashion.com
cifa-fashion.com
cn.cifa-fashion.com
cron.cifa-fashion.com
en.cifa-fashion.com
intranet.cifa-fashion.com
ledesk.marketplace.paris
marketplace.paris
misscop.marketplace.paris
old.cifa-fashion.com
pfs.cifa-fashion.com
pick-up.cifa-fashion.com
sandbox.marketplace.paris
v2.cifa-fashion.com
www.cifa-fashion.com
www.intranet.cifa-fashion.com
www.marketplace.paris
www.old.cifa-fashion.com
www.pfs.cifa-fashion.com
www.pick-up.cifa-fashion.com
www.sandbox.marketplace.paris

Other certificates including the domain name marketplace.paris

(limited to 100 certificates)
intranet.cifa-fashion.com
www.intranet.cifa-fashion.com
sni56923.cloudflaressl.com
crm.cifa-fashion.com
www.escandelle.marketplace.paris
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sandbox.marketplace.paris
cdn.marketplace.paris
tw.parisfashionshops.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
forherparis.com
sni56923.cloudflaressl.com
magazine.parisfashionshops.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
verzeichnis.parisfashionshops.com
sni56923.cloudflaressl.com
www.pick-up.cifa-fashion.com
sni56923.cloudflaressl.com
download.parisfashionshops.com
old.cifa-fashion.com
sni56923.cloudflaressl.com
forherparis.com
wsn.parisfashionshops.com
cdn.cifa-fashion.com
hnathalie.marketplace.paris
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
www.old.cifa-fashion.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
www.location.cifa-fashion.com
sni56923.cloudflaressl.com
annuaire.parisfashionshops.com
sandbox.marketplace.paris
marketplace.paris
intranet.cifa-fashion.com
cdn.marketplace.paris
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
event.cifa-fashion.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
forherparis.marketplace.paris
cn.cifa-fashion.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
ru.parisfashionshops.com
sni56923.cloudflaressl.com
directory.parisfashionshops.com
www.michaelkors.marketplace.paris
bestacces.marketplace.paris
www.intranet.cifa-fashion.com
sni56923.cloudflaressl.com
pick-up.cifa-fashion.com
kr.parisfashionshops.com
cn.cifa-fashion.com
tw.parisfashionshops.com
sms.marketplace.paris
sni56923.cloudflaressl.com
cn.cifa-fashion.com
ledesk.marketplace.paris
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
directory.parisfashionshops.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
cdn.marketplace.paris
sni56923.cloudflaressl.com
cdn.marketplace.paris
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
verzeichnis.parisfashionshops.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
marketplace.paris
sni56923.cloudflaressl.com
michaelkors.marketplace.paris
download.parisfashionshops.com

Certificate

The complete raw certificate details for www.sandbox.marketplace.paris in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIITCCBwmgAwIBAgISAwF1a1IERlqNFDaXCVsdJqoMMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNjEyMzExMTQ2MDBaFw0x
NzAzMzExMTQ2MDBaMCgxJjAkBgNVBAMTHXd3dy5zYW5kYm94Lm1hcmtldHBsYWNl
LnBhcmlzMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA7exS/Wie7L5Y
ro6sD/13wymNV39W5+CdgKNnolVPYEBr5RgrJWYWVXTzwB5DrZBgDam/1xK1ypL3
+A3ADp5OgU8WHuxWVoYpuqvFxfBO9MDG3yI0BYZkqnlApLudKrl2J+GecTSklRcO
fVil+O+1Ka8so+7e4SM2LFTm7mipSnwkTUYoofqcIegT8VxC+WxDXLXPNMptX81i
q1INgyAPW5yhnrRx5XAAn0pkbGdIcoQL8DclLv9K47BVYjKkMGC+WsRTqKkRPmCA
ehb8xmVKoCrcTRrG6Q36w4rDvZGSqVFpceXSAH6ICLmDYs6UPFoLvlY/aTAmXG9g
PIj11ohzBAlbZHYmCuu/XptqX5iAZBeG1kSPRxqe1GOHJnE5yEqEiscP3Wyf9sXb
8l1Px0k4Vx86XIeDM1Sen2qNTuFOt7gEL886oM2P29sTZsouhiK3E0/isa/OvRF0
O4ZGM1vb2i1hSM2KcURxvx6G31koU58uV2pbDtUhIzImp10d/5hRL7McUV4e8OOC
1WaPdpkrnZVblSCVKnMPjZi5Ymx+iB1apvY4x7JX0Gx4J/NIl1DsYYLnGp94miG7
bTI8vDF73TIQ39tU4LFXO+IuanI07SCe8lutukvJcVXlPDjHDzm4aDffpXak5SdS
h7/tBEXY8JLhiMPb/CRknd/Rpk8ilLECAwEAAaOCBCEwggQdMA4GA1UdDwEB/wQE
AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIw
ADAdBgNVHQ4EFgQUu5AHGkHHZMohbyFY41NneyAM/aYwHwYDVR0jBBgwFoAUqEpq
YwR93brm0Tm3pkVl7/Oo7KEwcAYIKwYBBQUHAQEEZDBiMC8GCCsGAQUFBzABhiNo
dHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzAvBggrBgEFBQcwAoYj
aHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wggIpBgNVHREEggIg
MIICHIIbYmFja29mZmljZS5jaWZhLWZhc2hpb24uY29tghRjZG4uY2lmYS1mYXNo
aW9uLmNvbYIQY2lmYS1mYXNoaW9uLmNvbYITY24uY2lmYS1mYXNoaW9uLmNvbYIV
Y3Jvbi5jaWZhLWZhc2hpb24uY29tghNlbi5jaWZhLWZhc2hpb24uY29tghlpbnRy
YW5ldC5jaWZhLWZhc2hpb24uY29tghhsZWRlc2subWFya2V0cGxhY2UucGFyaXOC
EW1hcmtldHBsYWNlLnBhcmlzghltaXNzY29wLm1hcmtldHBsYWNlLnBhcmlzghRv
bGQuY2lmYS1mYXNoaW9uLmNvbYIUcGZzLmNpZmEtZmFzaGlvbi5jb22CGHBpY2st
dXAuY2lmYS1mYXNoaW9uLmNvbYIZc2FuZGJveC5tYXJrZXRwbGFjZS5wYXJpc4IT
djIuY2lmYS1mYXNoaW9uLmNvbYIUd3d3LmNpZmEtZmFzaGlvbi5jb22CHXd3dy5p
bnRyYW5ldC5jaWZhLWZhc2hpb24uY29tghV3d3cubWFya2V0cGxhY2UucGFyaXOC
GHd3dy5vbGQuY2lmYS1mYXNoaW9uLmNvbYIYd3d3LnBmcy5jaWZhLWZhc2hpb24u
Y29tghx3d3cucGljay11cC5jaWZhLWZhc2hpb24uY29tgh13d3cuc2FuZGJveC5t
YXJrZXRwbGFjZS5wYXJpczCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYB
BAGC3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQu
b3JnMIGrBggrBgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkg
YmUgcmVsaWVkIHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFj
Y29yZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0
dHBzOi8vbGV0c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMA0GCSqGSIb3DQEBCwUA
A4IBAQATn7e/dSTlCphPvLkw5llTqtGpBO/NfCtuvGR0Pq79obCrEa6OKrYsaS5Y
+nJEQsUECLD89eiXKWBpzFnVFsT+VizWZwOvoClWJsB/U0cOpsJndrrYzxtfkItw
MKkAzxdkEY9a9J0Loz/m1UTV598Yg/TipJEXyR1a8+mCcCdcSNKrjKMKz+qQLQ3/
nU4L+F/MOm/PRMZLBfCQsaP7DImrmp3S/FmO3b4PQt/2vQgipLlCD5TvM9Mcy9Lh
s8hlMDZBsyhbi4ShivxDIgXjjRVPgaRJVwJn9ww9RGrAGBsvugEOKsgIhuyaX8WP
eFCUf8I7IcNIKOK4tu2SBkxE8LLw
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 261833217076968650356752905478855654287884
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-31 11:46:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-31 11:46:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sandbox.marketplace.paris'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 970641732151402270941598362107425422082665931297537529310754202338552746519576705883259808133424317085714671168520068102007574880464992170579346347740878593181105480953021106454232649379340475895273882103170984421821852116792626634894410268497984065799287902372406033072686069275181538544655803550431206220850545219444400269308581741685635203113478451118499715368175469270923358839394638138814787404396340876864177953861896304468615683205024966509033178050301506953060082952153895774624632309770630416923832706153137076178580724190382775687295375058408669292991859806597896069673020733253298822223592814905133023620018398180591868240124011575728582766899733450269434786672795193267905340876021322237208651044141064565387458832345855901665113363772390632242933601578784146431993205146480655110556041907434326328274891493650978590727259057539049188749012128544646567879647585515362763792110645486217460284994699369402981091567379712582966243878233567432430761755675080483899402385283574535580166305138880883671305556828425331274511397613867886092083377070123142817503214452577983626672009595995366732198798924598550390937952855418807597178048026185427392513113145828390724580487726636978069702883898522137831636240355283597666140984497
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bb90071a41c764ca216f2158e353677b200cfda6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (544 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backoffice.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cron.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'en.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ledesk.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'misscop.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfs.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pick-up.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intranet.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.old.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pfs.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pick-up.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandbox.marketplace.paris'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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