www.yves-rocher.fr

- Laboratoires de Biologie Vegetale Yves Rocher -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number ff:4a:ad:b5:7d:d7:74:0b:69:d0:58:bf:e0:0f:80:3e was issued on by Sectigo Limited.

With 71 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Laboratoires de Biologie Vegetale Yves Rocher

Organization: Laboratoires de Biologie Vegetale Yves Rocher
State / Province: Bretagne
Country: FR

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): ff:4a:ad:b5:7d:d7:74:0b:69:d0:58:bf:e0:0f:80:3e
Serial Number (int): 339340892128790064939746672708846321726
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: ca:24:ad:4e:11:ab:9a:5f:41:d7:9c:05:1d:75:85:2b:80:ad:31:44
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 82:e7:62:8b:16:5b:90:30:58:f5:1f:f4:c0:48:52:62:f5:23:9f:98
Fingerprint (sha256): bf:3c:b1:ff:d3:28:b2:12:4d:6c:42:bb:d0:4a:fc:45:66:3a:39:3f:e5:34:4e:ae:49:65:41:8b:e6:f3:ce:64

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate www.yves-rocher.fr

71

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.yves-rocher.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.yves-rocher.fr
auth.yves-rocher.at
auth.yves-rocher.be
auth.yves-rocher.ch
auth.yves-rocher.de
auth.yves-rocher.dk
auth.yves-rocher.es
auth.yves-rocher.fi
auth.yves-rocher.fr
auth.yves-rocher.kz
auth.yves-rocher.nl
auth.yves-rocher.no
auth.yves-rocher.se
auth.yves-rocher.ua
auth.yvesrocher.ca
auth.yvesrocher.com.tr
auth.yvesrocherusa.com
hc-spark.yves-rocher.com
images.yves-rocher.fr
m.yves-rocher.at
m.yves-rocher.be
m.yves-rocher.ch
m.yves-rocher.de
m.yves-rocher.dk
m.yves-rocher.es
m.yves-rocher.fi
m.yves-rocher.fr
m.yves-rocher.kz
m.yves-rocher.nl
m.yves-rocher.no
m.yves-rocher.se
m.yves-rocher.ua
m.yvesrocher.ca
m.yvesrocher.com.tr
m.yvesrocherusa.com
media-twicpics.yves-rocher.com
pictures.yves-rocher.com
pictures.yvesrocher.com
spark-ssr-assets.yves-rocher.com
spark-ssr-react.yves-rocher.com
www.yves-rocher.at
www.yves-rocher.be
www.yves-rocher.ch
www.yves-rocher.de
www.yves-rocher.dk
www.yves-rocher.es
www.yves-rocher.fi
www.yves-rocher.kz
www.yves-rocher.nl
www.yves-rocher.no
www.yves-rocher.se
www.yves-rocher.ua
www.yvesrocher.ca
www.yvesrocher.com.tr
www.yvesrocherusa.com
yves-rocher.at
yves-rocher.be
yves-rocher.ch
yves-rocher.de
yves-rocher.dk
yves-rocher.es
yves-rocher.fi
yves-rocher.fr
yves-rocher.kz
yves-rocher.nl
yves-rocher.no
yves-rocher.se
yves-rocher.ua
yvesrocher.ca
yvesrocher.com.tr
yvesrocherusa.com

Other certificates including the domain name yves-rocher.fr

(limited to 100 certificates)
t.newsletters.yves-rocher.fr
www.ambassadeur.yves-rocher.fr
datayr.yves-rocher.fr
images.yves-rocher.fr
macif-ecartecadeau.yves-rocher.fr
www.yves-rocher.fr
franchise.yves-rocher.fr
image.care-chemicals.basf.com
securepayment.yves-rocher.fr
image.care-chemicals.basf.com
t.newsletters.yves-rocher.fr
www.franchise.yves-rocher.fr
newsletter.yves-rocher.fr
franchise.yves-rocher.fr
san-5-s50.tlsprovisioning.exacttarget.com
www.yves-rocher.fr
www.yves-rocher.fr
survey.yves-rocher.fr
search.yves-rocher.at
www.yves-rocher.fr
www.yves-rocher.fr
securepayment.yves-rocher.fr
ambassadeur.yves-rocher.fr
k.yves-rocher.fr
securepayment.yves-rocher.fr
survey.yves-rocher.fr
secureorder.yves-rocher.fr
ambassadeur.yves-rocher.fr
images.yves-rocher.fr
survey.yves-rocher.fr
survey.yves-rocher.fr
secureorder.yves-rocher.fr
secureorder.yves-rocher.fr
survey.yves-rocher.fr
san-5-s50.tlsprovisioning.exacttarget.com
www.yves-rocher.fr
newsletter.yves-rocher.fr
search.yves-rocher.fr
ambassadeur.yves-rocher.fr
securepayment.yves-rocher.fr
securepayment.yves-rocher.fr
ambassadeur.yves-rocher.fr
www.yves-rocher.com
image.care-chemicals.basf.com
t.nl.yves-rocher.de
survey.yves-rocher.fr
survey.yves-rocher.fr
search.yves-rocher.at
t.nl.yves-rocher.de
secure.yves-rocher.fr
san-5-s50.tlsprovisioning.exacttarget.com
secureorder.yves-rocher.fr
www.franchise.yves-rocher.fr
www.yves-rocher.fr
t.nl.yves-rocher.de
www.yves-rocher.fr
image.care-chemicals.basf.com
e-cartecadeau.yves-rocher.fr
survey.yves-rocher.fr
secureorder.m.yves-rocher.fr
coordo-campagnes.yves-rocher.fr
survey.yves-rocher.fr
search.yves-rocher.at
recrutement.yves-rocher.fr
franchise.yves-rocher.fr
www.franchise.yves-rocher.fr
ambassadeur.yves-rocher.fr
secureorder.yves-rocher.fr
*.crm.yves-rocher.fr
e-cartecadeau.yves-rocher.fr
www.yves-rocher.fr
e-cartecadeau.yves-rocher.fr
securepayment.yves-rocher.fr
secureorder.m.yves-rocher.fr
image.care-chemicals.basf.com
image.care-chemicals.basf.com
newsletter.yves-rocher.fr
datayr.yves-rocher.fr
franchise.yves-rocher.fr
image.care-chemicals.basf.com
www.yves-rocher.fr
www.yves-rocher.fr
vpc.yves-rocher.fr
k.yves-rocher.fr
datayr.yves-rocher.fr
e-cartecadeau.yves-rocher.fr
image.care-chemicals.basf.com
www.yves-rocher.fr
www.yves-rocher.fr
image.care-chemicals.basf.com
www.yves-rocher.fr
t.nl.yves-rocher.de
securepayment.yves-rocher.fr
images.yves-rocher.fr
secureorder.yves-rocher.fr
image.care-chemicals.basf.com
www.franchise.yves-rocher.fr
ambassadeur.yves-rocher.fr
nocdn-w.yves-rocher.fr
preprod.e-cartecadeau.yves-rocher.fr

Certificate

The complete raw certificate details for www.yves-rocher.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoU3RQGIHnjRaFKI0DtkP
92hYLzT4MM54QXsMW097mfTwxM2yO2aPbFzsIhKswX1w+xaUHp5ZBhLdNyMUhh0/
w+qOZQfT9KakQtcCGiRu87v0CyrVCN+9wboxVMjxJT0xlLlWFpQWpjfTNMsmDJIM
pz84FcfYDG2krs2jkjpzmQfDI2h1MiwnDWHKu4axFBmTlCRsdKPZb+0dghqIIKd1
ULhTqbaM6oc+ANi3aPXLYBD5Ay9EkrULG/VYxWm1GTNq/Qawn1g2/J8vJ94aV3wC
Bg7W6GnFhM5W6/eRFUUtok9CW2HqR4BB8NMDatRb24PtyfplDZGduzVt/BIchWSf
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 339340892128790064939746672708846321726
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bretagne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Laboratoires de Biologie Vegetale Yves Rocher'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.yves-rocher.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20362740284069652897711350983633110954166881241502460694119952187681267743514914693912533521318335810916848752301922668382567130368408061292197377020078433008094798031546432193045534324627646090641853639132829970239791712567092424494480794540724236594803457611002067827450378601777140539930918413257439636971214280045818124367334212315351018630512942652979745797137440716597974184638611760728457857596024824463975362610565593619073501033624746433804405221386712861064977771543824568178521314504424052942148017364445500258119349346888402193157239267171549070157470306976289576037055569322363292262786461840838215639029
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ca24ad4e11ab9a5f41d79c051d75852b80ad3144
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1423 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.yves-rocher.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.yves-rocher.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.yves-rocher.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.yves-rocher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.yves-rocher.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.yves-rocher.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.yves-rocher.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.yves-rocher.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.yves-rocher.kz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.yves-rocher.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.yves-rocher.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.yves-rocher.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.yves-rocher.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.yvesrocher.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.yvesrocher.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.yvesrocherusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hc-spark.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.yves-rocher.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.kz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yvesrocher.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yvesrocher.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yvesrocherusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-twicpics.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pictures.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pictures.yvesrocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spark-ssr-assets.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spark-ssr-react.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.kz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yvesrocher.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yvesrocher.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yvesrocherusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yves-rocher.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yves-rocher.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yves-rocher.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yves-rocher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yves-rocher.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yves-rocher.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yves-rocher.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yves-rocher.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yves-rocher.kz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yves-rocher.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yves-rocher.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yves-rocher.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yves-rocher.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yvesrocher.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yvesrocher.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yvesrocherusa.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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