intranet.cifa-fashion.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f7:63:c9:2a:05:dd:19:ba:0e:de:52:ad:04:a4:1c:df:26 was issued on by Let's Encrypt.

With 50 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=intranet.cifa-fashion.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f7:63:c9:2a:05:dd:19:ba:0e:de:52:ad:04:a4:1c:df:26
Serial Number (int): 345519240500329584041987965479490378587942
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e8:9b:1a:06:72:ee:c4:aa:8f:fb:c7:2e:4d:9f:b3:2b:2f:a5:72:dc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e7:b2:37:24:25:8f:d4:a7:93:6f:1f:f0:d9:e4:1f:1c:20:42:1b:4d
Fingerprint (sha256): 90:79:e0:93:66:61:87:bd:40:22:5d:13:11:3a:80:f2:44:ef:19:d5:e5:4d:73:c3:d0:a1:be:ac:8b:78:21:cb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate intranet.cifa-fashion.com

50

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for intranet.cifa-fashion.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

101idees.marketplace.paris
backoffice.cifa-fashion.com
bestacces.marketplace.paris
cdn.cifa-fashion.com
cifa-fashion.com
cn.cifa-fashion.com
cron.cifa-fashion.com
eightparis.marketplace.paris
en.cifa-fashion.com
escandelle.marketplace.paris
forherparis.com
forherparis.marketplace.paris
garconne-paris.marketplace.paris
hnathalie.marketplace.paris
intranet.cifa-fashion.com
invogue-paris.com
jaunerouge-paris.com
jubylee.marketplace.paris
kallyas.marketplace.paris
kenzarro.marketplace.paris
ledesk.marketplace.paris
marketplace.paris
mg-monogram.marketplace.paris
michaelkors.marketplace.paris
misscop.marketplace.paris
old.cifa-fashion.com
pages.marketplace.paris
parisfashionshops.marketplace.paris
pfs.cifa-fashion.com
pick-up.cifa-fashion.com
pro.ryujee.com
ryujee.marketplace.paris
sandbox.marketplace.paris
sms.marketplace.paris
styleshoes-paris.com
v2.cifa-fashion.com
www.bestacces.marketplace.paris
www.cifa-fashion.com
www.escandelle.marketplace.paris
www.forherparis.com
www.garconne-paris.marketplace.paris
www.intranet.cifa-fashion.com
www.jubylee.marketplace.paris
www.kallyas.marketplace.paris
www.marketplace.paris
www.michaelkors.marketplace.paris
www.old.cifa-fashion.com
www.pfs.cifa-fashion.com
www.pick-up.cifa-fashion.com
www.sandbox.marketplace.paris

Other certificates including the domain name cifa-fashion.com

(limited to 100 certificates)
intranet.cifa-fashion.com
www.intranet.cifa-fashion.com
crm.cifa-fashion.com
www.escandelle.marketplace.paris
sandbox.marketplace.paris
tw.parisfashionshops.com
forherparis.com
magazine.parisfashionshops.com
www.pick-up.cifa-fashion.com
old.cifa-fashion.com
forherparis.com
cdn.cifa-fashion.com
hnathalie.marketplace.paris
www.old.cifa-fashion.com
www.location.cifa-fashion.com
annuaire.parisfashionshops.com
sandbox.marketplace.paris
intranet.cifa-fashion.com
event.cifa-fashion.com
forherparis.marketplace.paris
cn.cifa-fashion.com
ru.parisfashionshops.com
directory.parisfashionshops.com
www.michaelkors.marketplace.paris
bestacces.marketplace.paris
www.intranet.cifa-fashion.com
pick-up.cifa-fashion.com
kr.parisfashionshops.com
cn.cifa-fashion.com
tw.parisfashionshops.com
sms.marketplace.paris
cn.cifa-fashion.com
ledesk.marketplace.paris
verzeichnis.parisfashionshops.com
cifa-fashion.com
michaelkors.marketplace.paris
masterclass.parisfashionshops.com
backoffice.cifa-fashion.com
intranet.cifa-fashion.com
pfs.cifa-fashion.com
www.pfs.cifa-fashion.com
cn.cifa-fashion.com
cdn.cifa-fashion.com
cdn.cifa-fashion.fr
old.cifa-fashion.com
wsn.parisfashionshops.com
ru.parisfashionshops.com
marketplace.paris
sms.marketplace.paris
sms.marketplace.paris
styleshoes-paris.com
www.bestacces.marketplace.paris
pfs.cifa-fashion.com
marketplace.paris
www.pick-up.cifa-fashion.com
sms.marketplace.paris
style.parisfashionshops.com
bestacces.marketplace.paris
marketplace.paris
sandbox.marketplace.paris
marketplace.paris
www.sandbox.marketplace.paris
backoffice.cifa-fashion.com
www.jubylee.marketplace.paris
cron.cifa-fashion.com
intranet.cifa-fashion.com
sandbox.marketplace.paris
blog.parisfashionshops.com
cdn.cifa-fashion.fr
crm.cifa-fashion.com
marketplace.paris
sms.marketplace.paris
v2.cifa-fashion.com
intranet.cifa-fashion.com
survey.parisfashionshops.com
forherparis.com
efashioncenter.com
marketplace.paris
michaelkors.marketplace.paris
directory.parisfashionshops.com
marketplace.paris
annuaire.parisfashionshops.com
directory.parisfashionshops.com
survey.parisfashionshops.com
www.michaelkors.marketplace.paris
bestacces.marketplace.paris
masterclass.parisfashionshops.com
event.cifa-fashion.com
www.old.cifa-fashion.com
sg.parisfashionshops.com
cron.cifa-fashion.com
marketplace.paris
fi.parisfashionshops.com
pick-up.cifa-fashion.com
marketplace.paris
marketplace.paris
phygital.events
www.forherparis.com
sandbox.marketplace.paris
v2.cifa-fashion.com

Certificate

The complete raw certificate details for intranet.cifa-fashion.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345519240500329584041987965479490378587942
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-21 09:30:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-20 09:30:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'intranet.cifa-fashion.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 841340948631081821218979323537809604847815442284440549103843493726721556598706481540184326113456920302084984845845823433323688395793998725537192735168775451820341521786468036026777898212388802839137458374069563897955058723273840536276903762746608521845878950088775830403299445196682274622873530379241244452046849967909733968675172848429209193628613643603575804265348007705498633104259379353323560660249249282211500076373189112781254843859787511419490451460185562186000725918014743123509239429259179530660959665022443660762428190251523137029340743190253325351639261911190812651022304631571120594992115047238417562265770379488237321446691724462908450045335246717152258559766832200654601118807167055008288093982962494000344976197605482225148373199603471228124422666554824423044444367678114669869811834227236391673266368226172079132338995987124097688829943719858038446983712936394730698483312666958541194600163625117875302546929573361148446001425598216580603201454489579900326524741160829168456968195383033409478225205815814729772953537139534045379252944971906291230075452496190545776365356091351622418350429920871796525832027224270970013846223532164928937094264853515627373290984913371373010041508599081117715025951040724615326462402133
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e89b1a0672eec4aa8ffbc72e4d9fb32b2fa572dc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1329 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '101idees.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backoffice.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestacces.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cron.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eightparis.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'en.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escandelle.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forherparis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forherparis.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garconne-paris.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hnathalie.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invogue-paris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaunerouge-paris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jubylee.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kallyas.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kenzarro.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ledesk.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mg-monogram.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michaelkors.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'misscop.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pages.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parisfashionshops.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfs.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pick-up.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro.ryujee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ryujee.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'styleshoes-paris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestacces.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.escandelle.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.forherparis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garconne-paris.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intranet.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jubylee.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kallyas.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michaelkors.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.old.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pfs.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pick-up.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandbox.marketplace.paris'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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