corporateidentity.luxottica.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:7f:3b:43:92:68:af:d7:a2:4d:42:48:2c:c2:47:0e:30:7e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=corporateidentity.luxottica.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7f:3b:43:92:68:af:d7:a2:4d:42:48:2c:c2:47:0e:30:7e
Serial Number (int): 304631493699406708266518580984745718329470
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4f:ba:9d:21:77:1f:82:3e:00:f9:d6:e0:4a:e5:63:e2:de:c0:9b:fc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 34:f0:be:c7:d3:a2:47:d2:9d:e0:31:1e:8d:a7:1d:2e:f3:24:58:f9
Fingerprint (sha256): 0a:8f:58:31:28:1c:7d:57:53:73:01:a3:c5:ba:05:63:2c:39:7b:09:00:44:d7:28:45:a7:f7:f9:80:84:e3:ae

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate corporateidentity.luxottica.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for corporateidentity.luxottica.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

corporateidentity.luxottica.com

Other certificates including the domain name luxottica.com

(limited to 100 certificates)
www.luxottica.com
sni1bd6egl.wpc.edgecastcdn.net
support9.cdnetworks.net
uat-ecomm.luxottica.com
university.luxottica.com
support9.cdnetworks.net
support5.cdnetworks.net
www.luxottica.com
ai.kures.co
support9.cdnetworks.net
www.luxottica.com
support9.cdnetworks.net
www.luxottica.com
crm-sunglasshut.luxottica.com
www.luxottica.com
*.luxottica.com
certi-myapi.luxottica.com
myl-cms.luxottica.com
infotools.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
uat-ecomm.luxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
www.luxottica.com
www.luxottica.com
businessgame.luxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
www.luxottica.com
support9.cdnetworks.net
access.luxgroup.net
dev-virtualmirror-m4c.luxottica.com
rcspqua.luxottica.com
support9.cdnetworks.net
qa-eyecare.luxottica.com
uat-multi-cms.luxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
events.luxotticaeyecare.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
studio.luxotticaeyecare.luxottica.com
support9.cdnetworks.net
servicedesk.br.luxottica.com
corporateidentity.luxottica.com
www.luxottica.com
support5.cdnetworks.net
support9.cdnetworks.net
businessgame.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
news.luxottica.com
support9.cdnetworks.net
www.essilorluxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
my.luxottica.com
support9.cdnetworks.net
sni1df38gl.wpc.edgecastcdn.net
chatbr.luxottica.com
www.luxottica.com
img-b2c.luxottica.com
www.luxottica.com
www.luxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
data.wordlift.io
www.luxottica.com
www.essilorluxottica.com
jobs.luxottica.com
kibana.prod-sro.luxgroup.net
support9.cdnetworks.net
support9.cdnetworks.net
webmail.cn.luxottica.com
businessgame.luxottica.com
my.luxottica.com
sni1c11bgl.wpc.edgecastcdn.net
uat-ecomm.luxottica.com

Certificate

The complete raw certificate details for corporateidentity.luxottica.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8iDLB7ZNxl3pafYVdlnv
IZX6kbJoIM3wYc8W/LCAGIXfOYXw/oUWcbjGxMlcIA3ucC8Y8dMMrd69laYjdBTD
0J4648n/KvSKO9B6R5kgUY3UAblpKVu1f8cbQWhHt/4O9M9bLO/HnHW31l78CfuL
voV1YaV7dVjsOEW34Ep80ikiHGBc/PuJGJgvCn+XG9HmWIG6ZjyD1wWJwnS8O5W0
h0qXduPv53W3k7+VJx4zjQNAi4C/wO1/eQFgVi3C3/NOT/JBwI9GDP74OHFI1L6x
k91yaVGjWxxDpPCM2fG/anQ4ZFSThF2U/RDSeT2nfFsS/WW4W44O47H/MlN7O/Ja
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 304631493699406708266518580984745718329470
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-30 21:39:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-29 21:39:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'corporateidentity.luxottica.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30565840675400387476471829533924049539332269228259274599159717085640156653461227074594573249122820855750431577122958527197201679820904867914117404495913308199134498976709521554956038976861524194047624452122728149637146526292400397942140028578404625703076725587566454578203716049724143546142706367471213484945870155917003184181654086190774105131334623318781608989238562048746792029357274501199476108853188489502732030038991430524703048077926205344060668335118220764000190231649237902580443416194661585476222096796732163768793649879417574922734842180907928254906083714600768621915295314415119153019337306228305784101623
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4fba9d21771f823e00f9d6e04ae563e2dec09bfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporateidentity.luxottica.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d84546582000004030047304502200e72cb148e506dea9847234fc7fcc1da9c736d2161ff17101362072f95c6809d022100cb392990325cb85b1812fc74bd86eac58fc31b9f779fdd829be785d51cd5a7f7007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d845465710000040300483046022100f50de234caca842c5a68bb70c597218bd4cc7e589ab9f4311e713e69341e5482022100f19f99eeb71d34d8306a58550762f1ab7d6efcceb8b34f5ec6eacc2dbea63d44
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0060c9be0d2ffbe8c8e677cdcdab2fd520c37abc7f66ffaa76361d82f2b4dae12eadcfa975a67800b45fddc46f9bd499d5fa0474c98f2e7a20b0172001a69857ee21e5126542a877288b65ca2d364f0b8077f6864820501ce9ff03aa1ea4cd5aac0e1bf3aa604ffa53248872667e15686a354f6213c4ea8b383ebe78e7001245e44ca7916efe6a1f8f4cc70910b0999a6e452f3de1cf936dd65296424ab44ab273799b679ea14aebceff71f092c9309abe5470e79b06900fc11d27a52f3dd1234517ab7ef9c31c7d49db416e3dea4a516c5ae116f5ae3fc83ae45f267a7fc7d6cda868303a67c0ad87641e50d475bbfcb15896f27afef32f3b19b69517fc89b625