intranet.richemont.com

Issued by R3

About this certificate

This digital certificate with serial number 04:aa:bf:64:1e:c9:19:7b:61:94:10:b4:f3:dc:3c:9a:a5:3f was issued on by Let's Encrypt.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=intranet.richemont.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:aa:bf:64:1e:c9:19:7b:61:94:10:b4:f3:dc:3c:9a:a5:3f
Serial Number (int): 406551548504886332848596223088896442541375
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 8e:8b:0a:93:6f:39:ae:65:78:df:a7:f1:66:63:5b:86:5d:c7:8c:4c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8f:a1:07:d7:4d:9b:1a:b3:16:77:2c:02:ef:57:e9:30:f3:cd:b3:86
Fingerprint (sha256): 9f:4d:4c:36:79:91:e8:0e:d0:6a:fe:79:98:ca:af:b2:81:4e:fb:ea:52:67:de:da:1b:7b:04:ab:6b:f5:91:a4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate intranet.richemont.com

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for intranet.richemont.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cdn.ma.richemont.cn
connect.cartier.com
csirt.richemont.com
csirt2.richemont.com
developer.richemont.com
email-reporting.richemont.com
email-reporting2.richemont.com
financeconference.richemont.com
inside.rogerdubuis.com
intranet.dunhill.com
intranet.iwc.com
intranet.jaeger-lecoultre.com
intranet.montblanc.com
intranet.panerai.com
intranet.piaget.com
intranet.richemont.com
intranet.vancleefarpels.com
madein.chloe.com
mosaic.vacheron-constantin.com
www.creative-academy.com
www2.creative-academy.com

Other certificates including the domain name richemont.com

(limited to 100 certificates)
preprod-iisfarm.richemont.com
careers.richemont.com
booster2.richemont.com
intranet.richemont.com
intranet.richemont.com
richemont.com
xsrna.richemont.com
xs.richemont.com
intranet.richemont.com
dam.richemont.com
intranet.richemont.com
belenus.richemont.com
collaboration.richemont.com
apps2013.richemont.com
linemedia.preprod.richemont.com
api-booster.richemont.com
preprod-apps2016.richemont.com
linemedia.preprod.richemont.com
media.richemont.com
vo1webdisp.richemont.com
wwsip.richemont.com
spark.nprd.val.elb.richemont.com
careers.richemont.com
booster.richemont.com
apps.richemont.com
www.richemont.com
preprod-apps2016.richemont.com
owa.richemont.com
intranet.richemont.com
preprod-apps2016.richemont.com
booster.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
dam.richemont.com
linemedia.preprod.richemont.com
antispam.richemont.com
svn.richemont.com
apps2016.richemont.com
intranet.richemont.com
launchpad.richemont.com
visionnaire.richemont.com
epm-mobile.richemont.com
intranet.richemont.com
mdm.richemont.com
richemont.com
epm-mobile.richemont.com
eusip.richemont.com
www.quality.alange-soehne.com
jobs.richemont.com
jenkins-aws.richemont.com
search.richemont.com
launchpad.richemont.com
cyberjourney.richemont.com
api-booster.richemont.com
linemedia.preprod.richemont.com
admin.pre-booster.richemont.com
pre-booster.richemont.com
owa-sso.richemont.com
id-sso.richemont.com
scn01.richemont.com
intranet.preprod.richemont.com
owa-nosso.richemont.com
linemedia.preprod.richemont.com
epm-mobile.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
owa-nosso.richemont.com
careers.richemont.com
amer-ra.richemont.com
media.richemont.com
iisfarm.richemont.com
preprod-apps2013.richemont.com
emea-ra.richemont.com
xs4.richemont.com
inet.richemont.com
midgard.ch.richemont.com
aegis.ch.richemont.com
collaboration.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
apps2016.richemont.com
owa.richemont.com
fileexchange.richemont.com
creative-academy.com
agile.quality.richemont.com
secure.richemont.com
cs.richemont.com
www.quality.alange-soehne.com
richemont.com
richemont.com
owa.richemont.com
agile.richemont.com
preprod-iisfarm.richemont.com
careers.richemont.com
*.richemont.com
belenus.richemont.com
www.lcboutiquenet.com
*.mytandem.eu
intranet.staging.richemont.com

Certificate

The complete raw certificate details for intranet.richemont.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qhDMbZItfngZiUNLDzf
9ciuXOkK9mzml0msUDXfr1gUosVD87SS0H40IKl1sNbXo1ZvR9RRFtvlWVFDEkgB
Tqb0FtEtGtJF4l8qs2KJRbiUeggAGQAthICksBBBiTlI9ZY02iAHB/QzyDFU0DIo
dWlE+dbdD10A+nKdz+GIN4Qe/NMWlNRSMD1FPAyZwTdGd4VlKtEQA3Z75OrNnKVA
6STt9mULPo3f8iWoRJaxfrD3FuoAZAi0OFC7gOg1cpUbgb4UmIjAuHovT2YcmfOO
pt/tXSal3PB+qTBtFsazgkkDQyXcCpl1nJNGyKzW6DWAk6Gs2LaB6pigFncjOX6T
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 406551548504886332848596223088896442541375
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-04 15:25:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-02 15:25:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'intranet.richemont.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26593017362884776911293905911628781866129191641989047704333762139463552241570158248036075496594464364164743315606330782909246726713445726999460419404293457530114678775582462139720895503839364727249437705152043792933324796858165325136137829423892744129120563204029451184754379577159971730666427254192070615378749251153560295738170034521978811232844231881668503746282246254882905927762138699446129231766180517549228755889241290853987572008690907019926642839117814230092202607439090040482900373929887816504544244932868208744887313047962231551056619127260085010860343612751790264118643297115811165664966801142516025299823
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8e8b0a936f39ae6578dfa7f166635b865dc78c4c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (528 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ma.richemont.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.cartier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csirt.richemont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csirt2.richemont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.richemont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email-reporting.richemont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email-reporting2.richemont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financeconference.richemont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.rogerdubuis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.dunhill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.iwc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.jaeger-lecoultre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.montblanc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.panerai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.piaget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.richemont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madein.chloe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mosaic.vacheron-constantin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.creative-academy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.creative-academy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000183a3d13b4a000004030047304502203751fe4a2baf87696de7498568076c1d74f569427132a747d8e4df000b81d713022100968c0abea5c193d3fdfdd3cf94c9b1cf593a2a3b3e595ac6aec5e8d2c32d2232007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000183a3d13b46000004030046304402202d537027691dc1d849c03ab442494d8bef9dc6a40dd3c5ba77ca91b19146132f022066a3ea8e9c8c3d15edfc80ba6c3424d0c6d95be7861462604090708300c31217
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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