www.luxottica.com

- Luxottica Group S.p.A. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 02:cf:4f:ef:cb:2a:73:4b:71:6b:41:2c:53:60:92:95 was issued on by DigiCert Inc.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Luxottica Group S.p.A.

Organization: Luxottica Group S.p.A.
Organization unit: Luxottica Group S.p.A.
State / Province: Milano
Locality: Milano
Country: IT

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:cf:4f:ef:cb:2a:73:4b:71:6b:41:2c:53:60:92:95
Serial Number (int): 3734882750052846798034500071876235925
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 47:bf:5b:ed:cb:38:0a:19:bb:37:d9:ec:cd:52:a3:52:73:49:79:58
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): d1:cc:f5:2a:25:9c:6c:c9:9e:13:a8:f5:28:2e:f2:71:91:cd:62:10
Fingerprint (sha256): 0d:98:2b:39:46:84:c9:36:19:51:d4:ab:0c:79:bc:9c:ae:f4:7c:62:0f:e4:2b:22:32:c1:32:9a:f6:03:46:b6

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.luxottica.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.luxottica.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.luxottica.com
luxottica.com
www.carrellospesa.luxottica.com
mypersonaldesk.luxottica.com
www.opticalbestpractices.luxottica.com
www.ciao-toolkit.luxottica.com
www.summercamp.luxottica.com
hrsolutions.luxottica.com
www.convenzioni.luxottica.com
weare.luxottica.com
www.sgh-hrsolutions.luxottica.com
www.makemyday.luxottica.com
logon.luxottica.com
cenadinatale.luxottica.com
leanvision.luxottica.com
chatbr.luxottica.com
www.theshow.luxottica.com
mypersonaldeskdev.luxottica.com
editor.luxottica.com
mydevlogin.luxottica.com
factor.luxottica.com
www.luxottica.it
web.luxottica.com
www.luxacademy.luxottica.com
intranet.luxottica.com
luxottica.it
www.ourblubook.luxottica.com
cert-myacademy.luxottica.com
learningadvisor.luxottica.com
www.myacademy.luxottica.com
editor-careers.luxottica.com
rimborsolibri.luxottica.com
www.doctors.luxottica.com
redcarpet.luxottica.com
doctors.luxottica.com
www.revistavision.luxottica.com
www.cenadinatale.luxottica.com
opticalbestpractices.luxottica.com
intratest.luxottica.com
www.web.luxottica.com
www.learningadvisor.luxottica.com
myacademy.luxottica.com
www.luxottica.mobi
www.editor-careers.luxottica.com
www.editor.luxottica.com
intradev.luxottica.com
www.hrsolutions.luxottica.com
www.chatbr.luxottica.com
familyday.luxottica.com
cxo.luxottica.com
www.familyday.luxottica.com
www.ourway.luxottica.com
www.cxo.luxottica.com
sgh-hrsolutions.luxottica.com
www.feedback.luxottica.com
www.borsedistudio.luxottica.com
www.sense.luxottica.com
www.weare.luxottica.com
oneauthoring.luxottica.com
borsedistudio.luxottica.com
www.collaboration.luxottica.com
feedback.luxottica.com
vspcalculator.luxottica.com
sense.luxottica.com
makemyday.luxottica.com
www.vspcalculator.luxottica.com
www.one.luxottica.com
journey.luxottica.com
www.files.luxottica.com
shijie.luxottica.com
mytestlogin.luxottica.com
mypersonaldesktest.luxottica.com
ciao-toolkit.luxottica.com
www.leanvision.luxottica.com
www.connect.luxottica.com
theshow.luxottica.com
convenzioni.luxottica.com
ourblubook.luxottica.com
luxacademy.luxottica.com
connect.luxottica.com
one.luxottica.com
files.luxottica.com
careers.luxottica.com
www.mypersonaldesk.luxottica.com
www.shijie.luxottica.com
collaboration.luxottica.com
revistavision.luxottica.com
www.rimborsolibri.luxottica.com
www.journey.luxottica.com
carrellospesa.luxottica.com
ourway.luxottica.com
summercamp.luxottica.com

Other certificates including the domain name luxottica.com

(limited to 100 certificates)
www.luxottica.com
sni1bd6egl.wpc.edgecastcdn.net
support9.cdnetworks.net
uat-ecomm.luxottica.com
university.luxottica.com
support9.cdnetworks.net
support5.cdnetworks.net
www.luxottica.com
ai.kures.co
support9.cdnetworks.net
www.luxottica.com
support9.cdnetworks.net
www.luxottica.com
crm-sunglasshut.luxottica.com
www.luxottica.com
*.luxottica.com
certi-myapi.luxottica.com
myl-cms.luxottica.com
infotools.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
uat-ecomm.luxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
www.luxottica.com
www.luxottica.com
businessgame.luxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
www.luxottica.com
support9.cdnetworks.net
access.luxgroup.net
dev-virtualmirror-m4c.luxottica.com
rcspqua.luxottica.com
support9.cdnetworks.net
qa-eyecare.luxottica.com
uat-multi-cms.luxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
events.luxotticaeyecare.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
studio.luxotticaeyecare.luxottica.com
support9.cdnetworks.net
servicedesk.br.luxottica.com
corporateidentity.luxottica.com
www.luxottica.com
support5.cdnetworks.net
support9.cdnetworks.net
businessgame.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
news.luxottica.com
support9.cdnetworks.net
www.essilorluxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
my.luxottica.com
support9.cdnetworks.net
sni1df38gl.wpc.edgecastcdn.net
chatbr.luxottica.com
www.luxottica.com
img-b2c.luxottica.com
www.luxottica.com
www.luxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
data.wordlift.io
www.luxottica.com
www.essilorluxottica.com
jobs.luxottica.com
kibana.prod-sro.luxgroup.net
support9.cdnetworks.net
support9.cdnetworks.net
webmail.cn.luxottica.com
businessgame.luxottica.com
my.luxottica.com
sni1c11bgl.wpc.edgecastcdn.net
uat-ecomm.luxottica.com

Certificate

The complete raw certificate details for www.luxottica.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPtjCCDp6gAwIBAgIQAs9P78sqc0txa0EsU2CSlTANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0xODEwMDQwMDAwMDBaFw0xOTA1MTYxMjAwMDBaMIGNMQswCQYDVQQGEwJJVDEP
MA0GA1UECBMGTWlsYW5vMQ8wDQYDVQQHEwZNaWxhbm8xHzAdBgNVBAoTFkx1eG90
dGljYSBHcm91cCBTLnAuQS4xHzAdBgNVBAsTFkx1eG90dGljYSBHcm91cCBTLnAu
QS4xGjAYBgNVBAMTEXd3dy5sdXhvdHRpY2EuY29tMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAlWhLOGewPDEB/Yket+F5YCgZOu18ZpbZKmoBoMRVye11
qS6hW5tMcz3NvE4XsOZ0oHbEaDmYgLQcoio5P96u2POIXuz+aWiGLPK6R+vIXHcJ
xorhZto4QFhZn6eHpewGPbb1GiIj2QbuRJxBwRMMMkg4L4t+dIUJttxsoQndR5m7
QkNCmkcX1HNNQOe3KoJ88mTNBDP2kDeuBFZuNtTUlJHojddSmQHWaG7SO6XWYMTn
sfdMkmXgaab3ZEknP8acpaK7e0VTc9TM6zmkLb6rfuTLJsGXubllkVay57hUuml0
M5IkixYwDzJtgqzpM7EYf5YJaBHxGPBJh2xj7c70swIDAQABo4IMPjCCDDowHwYD
VR0jBBgwFoAUkFj/sJx1qFFUd7Ht8qNDFjiebMUwHQYDVR0OBBYEFEe/W+3LOAoZ
uzfZ7M1So1JzSXlYMIIJrwYDVR0RBIIJpjCCCaKCEXd3dy5sdXhvdHRpY2EuY29t
gg1sdXhvdHRpY2EuY29tgh93d3cuY2FycmVsbG9zcGVzYS5sdXhvdHRpY2EuY29t
ghxteXBlcnNvbmFsZGVzay5sdXhvdHRpY2EuY29tgiZ3d3cub3B0aWNhbGJlc3Rw
cmFjdGljZXMubHV4b3R0aWNhLmNvbYIed3d3LmNpYW8tdG9vbGtpdC5sdXhvdHRp
Y2EuY29tghx3d3cuc3VtbWVyY2FtcC5sdXhvdHRpY2EuY29tghlocnNvbHV0aW9u
cy5sdXhvdHRpY2EuY29tgh13d3cuY29udmVuemlvbmkubHV4b3R0aWNhLmNvbYIT
d2VhcmUubHV4b3R0aWNhLmNvbYIhd3d3LnNnaC1ocnNvbHV0aW9ucy5sdXhvdHRp
Y2EuY29tght3d3cubWFrZW15ZGF5Lmx1eG90dGljYS5jb22CE2xvZ29uLmx1eG90
dGljYS5jb22CGmNlbmFkaW5hdGFsZS5sdXhvdHRpY2EuY29tghhsZWFudmlzaW9u
Lmx1eG90dGljYS5jb22CFGNoYXRici5sdXhvdHRpY2EuY29tghl3d3cudGhlc2hv
dy5sdXhvdHRpY2EuY29tgh9teXBlcnNvbmFsZGVza2Rldi5sdXhvdHRpY2EuY29t
ghRlZGl0b3IubHV4b3R0aWNhLmNvbYIYbXlkZXZsb2dpbi5sdXhvdHRpY2EuY29t
ghRmYWN0b3IubHV4b3R0aWNhLmNvbYIQd3d3Lmx1eG90dGljYS5pdIIRd2ViLmx1
eG90dGljYS5jb22CHHd3dy5sdXhhY2FkZW15Lmx1eG90dGljYS5jb22CFmludHJh
bmV0Lmx1eG90dGljYS5jb22CDGx1eG90dGljYS5pdIIcd3d3Lm91cmJsdWJvb2su
bHV4b3R0aWNhLmNvbYIcY2VydC1teWFjYWRlbXkubHV4b3R0aWNhLmNvbYIdbGVh
cm5pbmdhZHZpc29yLmx1eG90dGljYS5jb22CG3d3dy5teWFjYWRlbXkubHV4b3R0
aWNhLmNvbYIcZWRpdG9yLWNhcmVlcnMubHV4b3R0aWNhLmNvbYIbcmltYm9yc29s
aWJyaS5sdXhvdHRpY2EuY29tghl3d3cuZG9jdG9ycy5sdXhvdHRpY2EuY29tghdy
ZWRjYXJwZXQubHV4b3R0aWNhLmNvbYIVZG9jdG9ycy5sdXhvdHRpY2EuY29tgh93
d3cucmV2aXN0YXZpc2lvbi5sdXhvdHRpY2EuY29tgh53d3cuY2VuYWRpbmF0YWxl
Lmx1eG90dGljYS5jb22CIm9wdGljYWxiZXN0cHJhY3RpY2VzLmx1eG90dGljYS5j
b22CF2ludHJhdGVzdC5sdXhvdHRpY2EuY29tghV3d3cud2ViLmx1eG90dGljYS5j
b22CIXd3dy5sZWFybmluZ2Fkdmlzb3IubHV4b3R0aWNhLmNvbYIXbXlhY2FkZW15
Lmx1eG90dGljYS5jb22CEnd3dy5sdXhvdHRpY2EubW9iaYIgd3d3LmVkaXRvci1j
YXJlZXJzLmx1eG90dGljYS5jb22CGHd3dy5lZGl0b3IubHV4b3R0aWNhLmNvbYIW
aW50cmFkZXYubHV4b3R0aWNhLmNvbYIdd3d3Lmhyc29sdXRpb25zLmx1eG90dGlj
YS5jb22CGHd3dy5jaGF0YnIubHV4b3R0aWNhLmNvbYIXZmFtaWx5ZGF5Lmx1eG90
dGljYS5jb22CEWN4by5sdXhvdHRpY2EuY29tght3d3cuZmFtaWx5ZGF5Lmx1eG90
dGljYS5jb22CGHd3dy5vdXJ3YXkubHV4b3R0aWNhLmNvbYIVd3d3LmN4by5sdXhv
dHRpY2EuY29tgh1zZ2gtaHJzb2x1dGlvbnMubHV4b3R0aWNhLmNvbYIad3d3LmZl
ZWRiYWNrLmx1eG90dGljYS5jb22CH3d3dy5ib3JzZWRpc3R1ZGlvLmx1eG90dGlj
YS5jb22CF3d3dy5zZW5zZS5sdXhvdHRpY2EuY29tghd3d3cud2VhcmUubHV4b3R0
aWNhLmNvbYIab25lYXV0aG9yaW5nLmx1eG90dGljYS5jb22CG2JvcnNlZGlzdHVk
aW8ubHV4b3R0aWNhLmNvbYIfd3d3LmNvbGxhYm9yYXRpb24ubHV4b3R0aWNhLmNv
bYIWZmVlZGJhY2subHV4b3R0aWNhLmNvbYIbdnNwY2FsY3VsYXRvci5sdXhvdHRp
Y2EuY29tghNzZW5zZS5sdXhvdHRpY2EuY29tghdtYWtlbXlkYXkubHV4b3R0aWNh
LmNvbYIfd3d3LnZzcGNhbGN1bGF0b3IubHV4b3R0aWNhLmNvbYIVd3d3Lm9uZS5s
dXhvdHRpY2EuY29tghVqb3VybmV5Lmx1eG90dGljYS5jb22CF3d3dy5maWxlcy5s
dXhvdHRpY2EuY29tghRzaGlqaWUubHV4b3R0aWNhLmNvbYIZbXl0ZXN0bG9naW4u
bHV4b3R0aWNhLmNvbYIgbXlwZXJzb25hbGRlc2t0ZXN0Lmx1eG90dGljYS5jb22C
GmNpYW8tdG9vbGtpdC5sdXhvdHRpY2EuY29tghx3d3cubGVhbnZpc2lvbi5sdXhv
dHRpY2EuY29tghl3d3cuY29ubmVjdC5sdXhvdHRpY2EuY29tghV0aGVzaG93Lmx1
eG90dGljYS5jb22CGWNvbnZlbnppb25pLmx1eG90dGljYS5jb22CGG91cmJsdWJv
b2subHV4b3R0aWNhLmNvbYIYbHV4YWNhZGVteS5sdXhvdHRpY2EuY29tghVjb25u
ZWN0Lmx1eG90dGljYS5jb22CEW9uZS5sdXhvdHRpY2EuY29tghNmaWxlcy5sdXhv
dHRpY2EuY29tghVjYXJlZXJzLmx1eG90dGljYS5jb22CIHd3dy5teXBlcnNvbmFs
ZGVzay5sdXhvdHRpY2EuY29tghh3d3cuc2hpamllLmx1eG90dGljYS5jb22CG2Nv
bGxhYm9yYXRpb24ubHV4b3R0aWNhLmNvbYIbcmV2aXN0YXZpc2lvbi5sdXhvdHRp
Y2EuY29tgh93d3cucmltYm9yc29saWJyaS5sdXhvdHRpY2EuY29tghl3d3cuam91
cm5leS5sdXhvdHRpY2EuY29tghtjYXJyZWxsb3NwZXNhLmx1eG90dGljYS5jb22C
FG91cndheS5sdXhvdHRpY2EuY29tghhzdW1tZXJjYW1wLmx1eG90dGljYS5jb20w
DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA+
BgNVHR8ENzA1MDOgMaAvhi1odHRwOi8vY2RwLmdlb3RydXN0LmNvbS9HZW9UcnVz
dFJTQUNBMjAxOC5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEF
BQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwdQYI
KwYBBQUHAQEEaTBnMCYGCCsGAQUFBzABhhpodHRwOi8vc3RhdHVzLmdlb3RydXN0
LmNvbTA9BggrBgEFBQcwAoYxaHR0cDovL2NhY2VydHMuZ2VvdHJ1c3QuY29tL0dl
b1RydXN0UlNBQ0EyMDE4LmNydDAJBgNVHRMEAjAAMIIBBAYKKwYBBAHWeQIEAgSB
9QSB8gDwAHYApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFmPnGE
0gAABAMARzBFAiB8xsEvS6He/5HDby8j+UHBXdHrjgdJAbGEq6sp44FniAIhAJMe
2Q1KNP241dbO+aZ890T+2GtUaigCHXeMOeYRLQvsAHYAh3W/51l8+IxDmV+9827/
Vo1HVjb/SrVgwbTq/16ggw8AAAFmPnGFoAAABAMARzBFAiEA/hiMWh+U4CSPCTJP
yuHR9UpkHvzg9DGoUwups3xmTlwCIB5ixALeb1vnixmhu7CnMc1iRLNIRlMQ5+TU
zxZiKq0YMA0GCSqGSIb3DQEBCwUAA4IBAQCLqN1Kjl48hlJbrUupAN54cVCrZe1h
9P83yiTuZB4RaOQYu70SWRUXk6vxre/AcoUvSIu6r7OZS0JNdVXy9zNnb1MbRyaY
8Y5SB9rd9Z2uMR6JA0GkTy3rqox0Z8QnokAt2LAHkYFLXHS/5vMcdSkZDmZO5/S5
bOyxnzdIfZR5xrvBqXvfUuWbt4TighY8XHMUxoy1xz1jL/iYY3MX7FrlbBVBnKLf
XMORC2IujIv6aFQECC7lcA1jLxtQVwCmm5Zltcxw6BaZQ9ye/LoL/rIdb7EKOEoH
e/+rQIHjLX08/+X8bdoXTei/n5NFXW9tv7v45qiQtuZgW3cZkACzyfVD
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWhLOGewPDEB/Yket+F5
YCgZOu18ZpbZKmoBoMRVye11qS6hW5tMcz3NvE4XsOZ0oHbEaDmYgLQcoio5P96u
2POIXuz+aWiGLPK6R+vIXHcJxorhZto4QFhZn6eHpewGPbb1GiIj2QbuRJxBwRMM
Mkg4L4t+dIUJttxsoQndR5m7QkNCmkcX1HNNQOe3KoJ88mTNBDP2kDeuBFZuNtTU
lJHojddSmQHWaG7SO6XWYMTnsfdMkmXgaab3ZEknP8acpaK7e0VTc9TM6zmkLb6r
fuTLJsGXubllkVay57hUuml0M5IkixYwDzJtgqzpM7EYf5YJaBHxGPBJh2xj7c70
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3734882750052846798034500071876235925
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-16 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxottica Group S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxottica Group S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.luxottica.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18860936644023654668366324287145639957440708475130244760012648819271964393304384288363822912878697945822196450964664047341572724807485526263131341385671557746076314272409125784032476525514491151676861078090865129059653852864544136782608073371855152181595459205926449753346396716229152594991089212335812326795263633202229771667099059090175010430149041071290813287501300902972738275129236074384860638834530615299554012678749938258241219773805723830964502317389055837990079471977269132588417882167000224629414705558968451106512896577794517354682277316166621017852425528288391997455142902812220225821764332099621058704563
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							47bf5bedcb380a19bb37d9eccd52a35273497958
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2470 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carrellospesa.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypersonaldesk.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opticalbestpractices.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ciao-toolkit.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.summercamp.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrsolutions.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.convenzioni.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weare.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sgh-hrsolutions.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.makemyday.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logon.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cenadinatale.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leanvision.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chatbr.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theshow.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypersonaldeskdev.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'editor.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydevlogin.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factor.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luxottica.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luxacademy.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxottica.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourblubook.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert-myacademy.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learningadvisor.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myacademy.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'editor-careers.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rimborsolibri.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.doctors.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redcarpet.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.revistavision.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cenadinatale.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opticalbestpractices.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intratest.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.web.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.learningadvisor.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myacademy.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luxottica.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.editor-careers.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.editor.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intradev.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hrsolutions.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chatbr.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'familyday.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cxo.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.familyday.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourway.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cxo.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgh-hrsolutions.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feedback.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.borsedistudio.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sense.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weare.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneauthoring.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borsedistudio.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collaboration.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feedback.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vspcalculator.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sense.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makemyday.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vspcalculator.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.one.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journey.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.files.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shijie.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytestlogin.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypersonaldesktest.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciao-toolkit.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leanvision.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theshow.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'convenzioni.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourblubook.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxacademy.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'one.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mypersonaldesk.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shijie.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaboration.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revistavision.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rimborsolibri.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.journey.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrellospesa.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourway.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summercamp.luxottica.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001663e7184d2000004030047304502207cc6c12f4ba1deff91c36f2f23f941c15dd1eb8e074901b184abab29e3816788022100931ed90d4a34fdb8d5d6cef9a67cf744fed86b546a28021d778c39e6112d0bec0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001663e7185a00000040300473045022100fe188c5a1f94e0248f09324fcae1d1f54a641efce0f431a8530ba9b37c664e5c02201e62c402de6f5be78b19a1bbb0a731cd6244b348465310e7e4d4cf16622aad18
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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