www.essilorluxottica.com

- Luxottica Group S.p.A. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 02:59:4f:8c:63:2a:ff:bf:35:bb:26:33:30:8d:b9:df was issued on by DigiCert Inc.

With 91 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Luxottica Group S.p.A.

Organization: Luxottica Group S.p.A.
Locality: Lauriano
Country: IT

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:59:4f:8c:63:2a:ff:bf:35:bb:26:33:30:8d:b9:df
Serial Number (int): 3122183844971870471107539595965610463
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: f4:cc:40:76:b5:24:1c:6d:53:e2:88:9a:e0:92:83:dd:73:b7:60:3a
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 36:57:a4:0e:9b:20:0e:0c:26:6a:5d:c5:b6:35:2f:3a:28:78:57:da
Fingerprint (sha256): 0d:67:3f:84:80:12:fc:98:46:8e:ee:cc:73:3c:29:2d:6f:9e:58:d1:9a:f4:e5:d0:85:6f:3a:0e:e5:e3:8c:8b

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate www.essilorluxottica.com

91

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.essilorluxottica.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.essilorluxottica.com
api-connect-anz.essilorluxottica.com
api.davidclulow.com
api.eyebuydirect.com
api.grandvision.it
apidviewer-connect-anz.essilorluxottica.com
apigw-connect-anz.essilorluxottica.com
au.eyebuydirect.com
ca.eyebuydirect.com
cae-multiplatformh2-cms.luxottica.com
cms-visiondirect.essilorluxottica.com
cms.ebdplus.com
cms.transitions.com
configurator.essilorluxottica.com
connect-anz.essilorluxottica.com
consumerform.luxottica.com
contact-lens-component.luxottica.com
crmapp.luxottica.com
digitalportal.luxottica.com
digitalwholesale.luxottica.com
digitalwindows.essilorluxottica.com
discoverlenses.essilorluxottica.com
dmapi.luxottica.com
dviewer-connect-anz.essilorluxottica.com
essilor.com
eye-care.essilorluxottica.com
eyebuydirect.ca
eyebuydirect.com
eyebuydirect.fr
fr.eyebuydirect.com
fsapi.luxottica.com
gateway-connect-anz.essilorluxottica.com
grandvision.essilorluxottica.com
grandvision.it
instruments-connect-anz.essilorluxottica.com
lens.essilor.com
leonardo-cms.essilorluxottica.com
leonardo.essilorluxottica.com
loyapp.luxottica.com
luxlens-dc.luxottica.com
luxlens-whs.luxottica.com
media-my.essilorluxottica.com
media.leonardo.essilorluxottica.com
media2-my.essilorluxottica.com
multiplatformh2-cms.luxottica.com
my.essilorLuxottica.com.cn
mypersonaldesk.essilorluxottica.com
nuanceaudio.com
one-cms.essilorluxottica.com
one.essilorluxottica.com
onesight.essilorluxottica.com
opthy.essilorluxottica.com
patient-connect-anz.essilorluxottica.com
patient-telemedicine-showroom.luxottica.com
qu.leonardo.essilorluxottica.com
redcarpet.essilorluxottica.com.cn
redcarpet.luxottica.com
registry-connect-anz.essilorluxottica.com
rfeyed.luxottica.com
rtr-viewer.luxottica.com
rtrmv.essilorluxottica.com
sl.luxottica.com
smartly.luxottica.com
socket-connect-anz.essilorluxottica.com
store360.luxottica.com
tam.one.essilorluxottica.com
telemedicine-showroom.luxottica.com
telemedicine.essilorluxottica.com
vmmv.luxottica.com
ws.eyebuydirect.com
www.alainmikli.com
www.ebdplus.com
www.essilor.com
www.eyebuydirect.ca
www.eyebuydirect.com
www.eyebuydirect.fr
www.grandvision.it
www.impossible-frames.com
www.impossible-frames.io
www.nuanceaudio.com
www.transitions.com
www.visiondirect.be
www.visiondirect.co.uk
www.visiondirect.de
www.visiondirect.es
www.visiondirect.fr
www.visiondirect.ie
www.visiondirect.it
www.visiondirect.nl
www.visiondirect.pt
www.visiondirect.se

Other certificates including the domain name essilorluxottica.com

(limited to 100 certificates)
www.essilorluxottica.com
www.boost.essilorluxottica.com
www.luxottica.com
img-b2c.luxottica.com
quality-mytraffic.essilorluxottica.com
www.essilorluxottica.com
snif12dgl.wpc.edgecastcdn.net
img-b2c.luxottica.com
www.essilorluxottica.com
wowdiet.co.il
uat2.luxottica.com
bookingessilorluxotticadays.essilorluxottica.com
www.luxottica.com
www.essilorluxottica.com
uat.luxottica.com
cms.essilorluxottica.com
img-b2c.luxottica.com
agenda.essilorluxotticadays.essilorluxottica.com
uat.luxottica.com
app.mindtomove.it
careers.essilorluxottica.com
snif12dgl.wpc.edgecastcdn.net
uat.visiondirect.co.uk
www.luxottica.com
www.essilorluxottica.com
www.essilorluxottica.com
www.essilorluxottica.com
www.essilorluxottica.com
www.boost.essilorluxottica.com
www.luxottica.com
www.essilorluxottica.com
www.luxottica.com
backend.luxottica.com
backend.luxottica.com
el-sponsor.essilorluxottica.com
rodolphethienard.fr
iskconcomputer.in
simplebingo.net
uat2.luxottica.com
backend.luxottica.com
www.essilorluxottica.com
www.essilorluxottica.com
www.essilorluxottica.com
www.surajitg.dev
www.luxottica.com
marshotel.com
essilorluxottica.com
www.clearly.co.nz
www.essilorluxottica.com
www.essilorluxottica.com
www.essilorluxottica.com
www.luxottica.com
uat2.luxottica.com
tools.essilorluxotticadays.essilorluxottica.com
2gathr.com
www.luxottica.com
img-b2c.luxottica.com
backend.luxottica.com
www.essilorluxottica.com
eyelights-staging.essilorluxottica.com
www.kongossa.app
my.essilorluxottica.com
www.essilorluxottica.com
essilorluxottica.com
www.essilorluxottica.com
www.essilorluxottica.com
uat2.luxottica.com
www.essilorluxottica.com
www.boost.essilorluxottica.com
www.luxottica.com
uat2.luxottica.com
www.essilorluxottica.com
www.harpnote.net
benefits.essilorluxottica.com
www.canoe.mobi
kanjisenpai.rodriguez.jp
essilorluxottica.com
benefits.essilorluxottica.com
www.boost.essilorluxottica.com
www.manage.lasso.finance
cms.essilorluxottica.com
eyelights.essilorluxottica.com
connect-anz.essilorluxottica.com
snieeaagl.wpc.edgecastcdn.net
www.luxottica.com
www.boost.essilorluxottica.com
backend.luxottica.com
simplebingo.net
www.surajitg.dev
vendorportal.essilorluxottica.com
www.visiondirect.co.uk
dev.zone.quickcommerce.org
www.clearly.co.nz

Certificate

The complete raw certificate details for www.essilorluxottica.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE2JF0ggTuBQThxKSYUP1orkr74qkY
U2mUIHU9gZyRTGMH0MZv4N5NS/qmK0dg/e39Hfr41omqO3eGTfIe23QKjA==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3122183844971870471107539595965610463
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lauriano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxottica Group S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.essilorluxottica.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004d891748204ee0504e1c4a49850fd68ae4afbe2a91853699420753d819c914c6307d0c66fe0de4d4bfaa62b4760fdedfd1dfaf8d689aa3b77864df21edb740a8c
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f4cc4076b5241c6d53e2889ae09283dd73b7603a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2491 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-connect-anz.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.davidclulow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.eyebuydirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.grandvision.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apidviewer-connect-anz.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apigw-connect-anz.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'au.eyebuydirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca.eyebuydirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cae-multiplatformh2-cms.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms-visiondirect.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.ebdplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.transitions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configurator.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect-anz.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consumerform.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contact-lens-component.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crmapp.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalportal.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalwholesale.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalwindows.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discoverlenses.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmapi.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dviewer-connect-anz.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'essilor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eye-care.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyebuydirect.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyebuydirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyebuydirect.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.eyebuydirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsapi.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateway-connect-anz.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandvision.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandvision.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instruments-connect-anz.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lens.essilor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leonardo-cms.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leonardo.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loyapp.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxlens-dc.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxlens-whs.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-my.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.leonardo.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media2-my.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multiplatformh2-cms.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.essilorLuxottica.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypersonaldesk.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuanceaudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'one-cms.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'one.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onesight.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opthy.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patient-connect-anz.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patient-telemedicine-showroom.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qu.leonardo.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redcarpet.essilorluxottica.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redcarpet.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registry-connect-anz.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rfeyed.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtr-viewer.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtrmv.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sl.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartly.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socket-connect-anz.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store360.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tam.one.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telemedicine-showroom.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telemedicine.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vmmv.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws.eyebuydirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alainmikli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ebdplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.essilor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eyebuydirect.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eyebuydirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eyebuydirect.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandvision.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.impossible-frames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.impossible-frames.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nuanceaudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.transitions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visiondirect.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visiondirect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visiondirect.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visiondirect.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visiondirect.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visiondirect.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visiondirect.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visiondirect.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visiondirect.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visiondirect.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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