www.lvmh.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:af:fa:01:da:f0:b1:4a:75:0e:31:da:7b:f1:7b:7a:8f:02 was issued on by Let's Encrypt.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.lvmh.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:af:fa:01:da:f0:b1:4a:75:0e:31:da:7b:f1:7b:7a:8f:02
Serial Number (int): 321218588638322980008531183339108675784450
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 30:df:49:dc:76:ad:21:ad:51:90:16:b2:cc:99:e1:dc:8b:94:26:7b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fd:dd:1c:52:f1:13:df:46:30:bd:41:07:10:04:79:48:38:3b:4b:58
Fingerprint (sha256): 94:07:0b:26:8a:a0:a6:b2:16:ae:b0:09:c1:5b:d3:9b:d5:41:23:d1:10:9a:b8:72:02:6f:78:fc:37:c1:5a:17

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.lvmh.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lvmh.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

allmynet.lvmh-pc.com
api.dior.cn
api.dior.com
at.loropiana.com
back-artofgift.dior.cn
be.loropiana.com
bg.loropiana.com
cdnakamai.lvmh-pc.com
cdninsideguerlain.lvmh-pc.com
cn.loropiana.com
cy.loropiana.com
cz.loropiana.com
de.loropiana.com
dior.cn
diorinlondon.dior.com
dk.loropiana.com
ee.loropiana.com
es.loropiana.com
fi.loropiana.com
fr.loropiana.com
gr.loropiana.com
hr.loropiana.com
hu.loropiana.com
hublot.cn
hublot.com
icom-2018.fendi.com
ie.loropiana.com
ii.loropiana.com
images.uat.fendi.ows.farm
it.loropiana.com
jp.loropiana.com
lt.loropiana.com
lu.loropiana.com
lv.loropiana.com
m.dior.cn
m.dior.com
m.guerlain.com
m.guerlain.com.cn
m.preprod.zenith-watches.com
mc.loropiana.com
media.dior.cn
media.dior.com
media.icom-2018.fendi.com
media.loropiana.com
mt.loropiana.com
nl.loropiana.com
pl.loropiana.com
posh.retail.hublot.com
preprod-tmc.lvmh.fr
preprod.lvmh-static.com
preprod.lvmh.cn
preprod.lvmh.co.jp
preprod.lvmh.com
preprod.lvmh.fr
preprod.lvmh.it
preprod.lvmh.jp
preprod.lvmh.ru
preprod.zenith-watches.com
pt.loropiana.com
reservation.guerlain.com
retail-preprod.hublot.com
retail.hublot.com
ro.loropiana.com
ru.loropiana.com
se.loropiana.com
secure-m.dior.com
si.loropiana.com
sk.loropiana.com
staging-ps.fendi.com
static.uat.fendi.ows.farm
stores.guerlain.com
straps-preprod.hublot.com
straps.hublot.com
textile.loropiana.com
tutorial.hublot.com
tutorial2.hublot.com
uat-ps.fendi.com
uat.fendi.ows.farm
uk.loropiana.com
us.loropiana.com
vip.hublot.com
wws.dior.com
www.12bis.chaumet.com
www.dior.cn
www.dior.com
www.guerlain.com
www.guerlain.com.cn
www.hublot.cn
www.hublot.com
www.lanature.chaumet.com
www.lvmh.com
www.makeupforever.cn
www.makeupforever.com
www.marcodevincenzo.com
wwws.dior.com

Other certificates including the domain name lvmh.com

(limited to 100 certificates)
www.lvmh.com
preprod.lvmh.com
www.lvmh.com
accreditation.lumanity.com
alumnicredentials.kcl.ac.uk
preprod.lvmh.com
compliance.lvmh.com
retailerid.lvmh.com
achievements.launchyou.com
www.lvmh.com
achievements.launchyou.com
www.lvmh.com
publiccert.lvmh.com
support12.cdnetworks.net
support12.cdnetworks.net
preprod.lvmh.com
preprod.lvmh.com
gaia.lvmh.com.dev-gcp.lvmh.lbn.fr
virtualapartment.lvmh.com
www.lvmh.com
accreditation.lumanity.com
preprod.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
www.lvmh.com
achievements.launchyou.com
www.lvmh.com
dbt.lvmh.com
preprod.lvmh.com
www.lvmh.com
preprod.lvmh.com
support12.cdnetworks.net
achievements.launchyou.com
www.lvmh.com
support12.cdnetworks.net
accreditation.lumanity.com
www.lvmh.com
cdn06.cdnsvc.com
preprod.lvmh.com
lvmh.fr
www.lvmh.com
www.lvmh.com
cdn06.cdnsvc.com
accreditation.lumanity.com
preprod.lvmh.com
*.lvmh.com
accreditation.lumanity.com
spring.lvmh.com
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
san-13-s50.tlsprovisioning.exacttarget.com
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
www.lvmh.com
www.lvmh.com
support12.cdnetworks.net
www.lvmh.com
san-13-s50.tlsprovisioning.exacttarget.com
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
shero.lvmh.com
preprod.lvmh.com
support12.cdnetworks.net
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
preprod.lvmh.com
support12.cdnetworks.net
lvmh.fr
support12.cdnetworks.net
www.lvmh.com
preprod.lvmh.com
support12.cdnetworks.net
preprod.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
lamaisondesstartups.lvmh.com
www.lvmh.com
living.lvmh.com
game.cybertraining.lvmh.com
support12.cdnetworks.net
san-13-s50.tlsprovisioning.exacttarget.com
preprod.lvmh.com
www.lvmh.com
*.chic.lvmh.com
lvmh.fr
online-media-builder.lvmh.com
support12.cdnetworks.net
cdn06.cdnsvc.com
lvmh.fr
www.lvmh.com
accreditation.lumanity.com
tr.openinnovation.lvmh.com
accreditation.lumanity.com
link.bein.lvmh.com
preprod.lvmh.com

Certificate

The complete raw certificate details for www.lvmh.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiRjTeanGMgCYcmYjUo+
yM9TqLczmB8cLRx0gz18gsmRVk3UZFqYV9hjNOC1bbo2bZ15yd3wG8YME75ZCusq
9AZYBwft9SNf4JCBF4fIEXKibiOwrkeMQY59VF173elIfGa21pD2shoQqIOZdU8t
GyOHntapkduuwdgpTJS3ZrCnKyqt5y8qlyLdoqWxkn+4x05l9ll+Wrjths5y+d3V
zapJUdcudV9RQsP/CDO+x4GcjynVdhijPQWeBEGRrngvEbwrqkkw3lx9AqFuqaJD
2cvRsSivsiJZ1Lfv3Pbr0bb/XXQAPzvYUrSUtv2bf8S6DrqZnwHV0vOWgBLGDxm5
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321218588638322980008531183339108675784450
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-13 13:11:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-12 13:11:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lvmh.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21478455390146215579036084405114510232354144990177563852990480936680777872620901973229819645921094028887553229383906604662224650015084611561976984965407684955621576467056400880892628783170707062789907632603797715751236682923735698847989143701315217619183007833588587139778310969142179580679011393077402512080696721218487465224786657466138386528973471822478305981237121867924959797285304892091257676114410041577710382920249948537973208444696057495741699446273482986557768597716996303862160749522742732847794371729770743516134087362885841415120245859991194551622874919063650414453273733181204876232650394833320907749799
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							30df49dc76ad21ad519016b2cc99e1dc8b94267b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1820 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allmynet.lvmh-pc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.dior.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.dior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'at.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'back-artofgift.dior.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bg.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdnakamai.lvmh-pc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdninsideguerlain.lvmh-pc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cy.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cz.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dior.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diorinlondon.dior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dk.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ee.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fi.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gr.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hr.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hu.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hublot.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hublot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icom-2018.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ie.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ii.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.uat.fendi.ows.farm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jp.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lt.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lu.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lv.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.dior.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.dior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.guerlain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.guerlain.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.preprod.zenith-watches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mc.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.dior.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.dior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.icom-2018.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mt.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nl.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'posh.retail.hublot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-tmc.lvmh.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh-static.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.lvmh.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.zenith-watches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pt.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservation.guerlain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retail-preprod.hublot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retail.hublot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ro.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ru.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'se.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-m.dior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'si.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sk.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-ps.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.uat.fendi.ows.farm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.guerlain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'straps-preprod.hublot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'straps.hublot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'textile.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tutorial.hublot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tutorial2.hublot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-ps.fendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.fendi.ows.farm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.loropiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vip.hublot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wws.dior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.12bis.chaumet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dior.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guerlain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guerlain.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hublot.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hublot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lanature.chaumet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lvmh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.makeupforever.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.makeupforever.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marcodevincenzo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwws.dior.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165d34623fa0000040300483046022100d9e9b195e906b963074e534cc704dcf75e6b4603f39e9af1c74cc0d9dedad8f2022100d00380227798616f6ca83957a8dc79390905fe7e3cabfeb6d86ea8c85d78f9ac0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000165d34624320000040300473045022100c345adc1f93174d23c3bf7cedb98879b3143a344059eef945405ffd138c14fd602206027db52a7f606d799d9e2c6c06fda21c4bc4a50bfd3ffdcb12c1336e25e44b2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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