www.luxottica.com
Issued by R3
About this certificate
This digital certificate with serial number 04:17:a1:b6:f9:03:cf:c0:2a:d0:56:f9:b4:ca:0c:e6:01:c1 was issued on by Let's Encrypt.
With 52 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=www.luxottica.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:17:a1:b6:f9:03:cf:c0:2a:d0:56:f9:b4:ca:0c:e6:01:c1Serial Number (int): 356490593922194167550100814768765187523009
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: af:87:20:8c:02:b2:73:77:64:f3:bd:a2:f4:12:c6:50:64:d5:d6:da
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 0c:27:18:04:a5:19:28:4b:8b:51:27:bb:2e:1f:49:c7:8f:b8:92:e7
Fingerprint (sha256): 10:27:12:57:bf:3f:67:2b:39:98:fd:ac:f0:97:1a:ec:d3:9f:7a:78:f7:fd:68:da:2f:22:df:7e:f6:e3:0c:49
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate www.luxottica.com
52
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.luxottica.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
assets.alainmikli.com
assets.arnette.com
assets.contactsdirect.com
assets.costadelmar.com
assets.framesdirect.com
assets.glasses.com
assets.laubmanandpank.com.au
assets.lenscrafters.com
assets.nativeyewear.com
assets.oakley.com
assets.oakleysi.com
assets.oliverpeoples.com
assets.opsm.com
assets.oticascarol.com.br
assets.persol.com
assets.salmoiraghievigano.it
assets.searsoptical.com
assets.sunglasshut.com
assets.targetoptical.com
assets.vogue-eyewear.com
images-adv.luxottica.com
images-product.luxottica.com
images.ray-ban.com
marketplace-im.luxottica.com
media-university.luxottica.com
media.alainmikli.com
media.arnette.com
media.contactsdirect.com
media.costadelmar.com
media.framesdirect.com
media.glasses.com
media.laubmanandpank.com.au
media.lenscrafters.com
media.leonardo.essilorluxottica.com
media.nativeyewear.com
media.oakley.com
media.oakleysi.com
media.oliverpeoples.com
media.opsm.com
media.oticascarol.com.br
media.persol.com
media.ray-ban.com
media.salmoiraghievigano.it
media.searsoptical.com
media.sunglasshut.com
media.targetoptical.com
media.vogue-eyewear.com
smartretail-im.luxottica.com
storepictures.luxottica.com
video-preview-im.luxottica.com
webapp-im.luxottica.com
www.luxottica.com
assets.arnette.com
assets.contactsdirect.com
assets.costadelmar.com
assets.framesdirect.com
assets.glasses.com
assets.laubmanandpank.com.au
assets.lenscrafters.com
assets.nativeyewear.com
assets.oakley.com
assets.oakleysi.com
assets.oliverpeoples.com
assets.opsm.com
assets.oticascarol.com.br
assets.persol.com
assets.salmoiraghievigano.it
assets.searsoptical.com
assets.sunglasshut.com
assets.targetoptical.com
assets.vogue-eyewear.com
images-adv.luxottica.com
images-product.luxottica.com
images.ray-ban.com
marketplace-im.luxottica.com
media-university.luxottica.com
media.alainmikli.com
media.arnette.com
media.contactsdirect.com
media.costadelmar.com
media.framesdirect.com
media.glasses.com
media.laubmanandpank.com.au
media.lenscrafters.com
media.leonardo.essilorluxottica.com
media.nativeyewear.com
media.oakley.com
media.oakleysi.com
media.oliverpeoples.com
media.opsm.com
media.oticascarol.com.br
media.persol.com
media.ray-ban.com
media.salmoiraghievigano.it
media.searsoptical.com
media.sunglasshut.com
media.targetoptical.com
media.vogue-eyewear.com
smartretail-im.luxottica.com
storepictures.luxottica.com
video-preview-im.luxottica.com
webapp-im.luxottica.com
www.luxottica.com
Other certificates including the domain name luxottica.com
(limited to 100 certificates)
www.luxottica.com
sni1bd6egl.wpc.edgecastcdn.net
support9.cdnetworks.net
uat-ecomm.luxottica.com
university.luxottica.com
support9.cdnetworks.net
support5.cdnetworks.net
www.luxottica.com
ai.kures.co
support9.cdnetworks.net
www.luxottica.com
support9.cdnetworks.net
www.luxottica.com
crm-sunglasshut.luxottica.com
www.luxottica.com
*.luxottica.com
certi-myapi.luxottica.com
myl-cms.luxottica.com
infotools.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
uat-ecomm.luxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
www.luxottica.com
www.luxottica.com
businessgame.luxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
www.luxottica.com
support9.cdnetworks.net
access.luxgroup.net
dev-virtualmirror-m4c.luxottica.com
rcspqua.luxottica.com
support9.cdnetworks.net
qa-eyecare.luxottica.com
uat-multi-cms.luxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
events.luxotticaeyecare.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
studio.luxotticaeyecare.luxottica.com
support9.cdnetworks.net
servicedesk.br.luxottica.com
corporateidentity.luxottica.com
www.luxottica.com
support5.cdnetworks.net
support9.cdnetworks.net
businessgame.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
news.luxottica.com
support9.cdnetworks.net
www.essilorluxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
my.luxottica.com
support9.cdnetworks.net
sni1df38gl.wpc.edgecastcdn.net
chatbr.luxottica.com
www.luxottica.com
img-b2c.luxottica.com
www.luxottica.com
www.luxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
data.wordlift.io
www.luxottica.com
www.essilorluxottica.com
jobs.luxottica.com
kibana.prod-sro.luxgroup.net
support9.cdnetworks.net
support9.cdnetworks.net
webmail.cn.luxottica.com
businessgame.luxottica.com
my.luxottica.com
sni1c11bgl.wpc.edgecastcdn.net
uat-ecomm.luxottica.com
sni1bd6egl.wpc.edgecastcdn.net
support9.cdnetworks.net
uat-ecomm.luxottica.com
university.luxottica.com
support9.cdnetworks.net
support5.cdnetworks.net
www.luxottica.com
ai.kures.co
support9.cdnetworks.net
www.luxottica.com
support9.cdnetworks.net
www.luxottica.com
crm-sunglasshut.luxottica.com
www.luxottica.com
*.luxottica.com
certi-myapi.luxottica.com
myl-cms.luxottica.com
infotools.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
uat-ecomm.luxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
www.luxottica.com
www.luxottica.com
businessgame.luxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
www.luxottica.com
support9.cdnetworks.net
access.luxgroup.net
dev-virtualmirror-m4c.luxottica.com
rcspqua.luxottica.com
support9.cdnetworks.net
qa-eyecare.luxottica.com
uat-multi-cms.luxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
events.luxotticaeyecare.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
studio.luxotticaeyecare.luxottica.com
support9.cdnetworks.net
servicedesk.br.luxottica.com
corporateidentity.luxottica.com
www.luxottica.com
support5.cdnetworks.net
support9.cdnetworks.net
businessgame.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
news.luxottica.com
support9.cdnetworks.net
www.essilorluxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
my.luxottica.com
support9.cdnetworks.net
sni1df38gl.wpc.edgecastcdn.net
chatbr.luxottica.com
www.luxottica.com
img-b2c.luxottica.com
www.luxottica.com
www.luxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
data.wordlift.io
www.luxottica.com
www.essilorluxottica.com
jobs.luxottica.com
kibana.prod-sro.luxgroup.net
support9.cdnetworks.net
support9.cdnetworks.net
webmail.cn.luxottica.com
businessgame.luxottica.com
my.luxottica.com
sni1c11bgl.wpc.edgecastcdn.net
uat-ecomm.luxottica.com
Certificate
The complete raw certificate details for www.luxottica.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJ1DCCCLygAwIBAgISBBehtvkDz8Aq0Fb5tMoM5gHBMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEwMTYwODQ0NTRaFw0yNDAxMTQwODQ0NTNaMBwxGjAYBgNVBAMT EXd3dy5sdXhvdHRpY2EuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVnTnQZ3w36FnrarMRiY3X9SDaFzzbAixiwCMgsbr1Z5dTotZA0pwywGdcHH M3VZjEaG4atTK5BRD+hadcYQjVt/CilCAx68Jh/29DKReNvcdSzHQ9RtFLPlhZSe b/DnyzL6r96FNBTbw7YCH074wIk96GpHmusNw34pL6Zp7iVEgS/QS+lWdRPd4cTR GPU/hKSuSgqvoXbE7tXxD/rqVpYtu4cC+NdpE4+fL9u2Db16RcCTWSH3JgfMCeJd wDCzSH411/bzuhbmv+SPtsHaZ4y0CXzPzf6dLEKVhDrma2RvyiqcaBYyWRDn7IyU 5qphPwVwooigaP2/ByrRb4lVKwIDAQABo4IG+DCCBvQwDgYDVR0PAQH/BAQDAgWg MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G A1UdDgQWBBSvhyCMArJzd2TzvaL0EsZQZNXW2jAfBgNVHSMEGDAWgBQULrMXt1hW y65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6 Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iu b3JnLzCCBQAGA1UdEQSCBPcwggTzghVhc3NldHMuYWxhaW5taWtsaS5jb22CEmFz c2V0cy5hcm5ldHRlLmNvbYIZYXNzZXRzLmNvbnRhY3RzZGlyZWN0LmNvbYIWYXNz ZXRzLmNvc3RhZGVsbWFyLmNvbYIXYXNzZXRzLmZyYW1lc2RpcmVjdC5jb22CEmFz c2V0cy5nbGFzc2VzLmNvbYIcYXNzZXRzLmxhdWJtYW5hbmRwYW5rLmNvbS5hdYIX YXNzZXRzLmxlbnNjcmFmdGVycy5jb22CF2Fzc2V0cy5uYXRpdmV5ZXdlYXIuY29t ghFhc3NldHMub2FrbGV5LmNvbYITYXNzZXRzLm9ha2xleXNpLmNvbYIYYXNzZXRz Lm9saXZlcnBlb3BsZXMuY29tgg9hc3NldHMub3BzbS5jb22CGWFzc2V0cy5vdGlj YXNjYXJvbC5jb20uYnKCEWFzc2V0cy5wZXJzb2wuY29tghxhc3NldHMuc2FsbW9p cmFnaGlldmlnYW5vLml0ghdhc3NldHMuc2VhcnNvcHRpY2FsLmNvbYIWYXNzZXRz LnN1bmdsYXNzaHV0LmNvbYIYYXNzZXRzLnRhcmdldG9wdGljYWwuY29tghhhc3Nl dHMudm9ndWUtZXlld2Vhci5jb22CGGltYWdlcy1hZHYubHV4b3R0aWNhLmNvbYIc aW1hZ2VzLXByb2R1Y3QubHV4b3R0aWNhLmNvbYISaW1hZ2VzLnJheS1iYW4uY29t ghxtYXJrZXRwbGFjZS1pbS5sdXhvdHRpY2EuY29tgh5tZWRpYS11bml2ZXJzaXR5 Lmx1eG90dGljYS5jb22CFG1lZGlhLmFsYWlubWlrbGkuY29tghFtZWRpYS5hcm5l dHRlLmNvbYIYbWVkaWEuY29udGFjdHNkaXJlY3QuY29tghVtZWRpYS5jb3N0YWRl bG1hci5jb22CFm1lZGlhLmZyYW1lc2RpcmVjdC5jb22CEW1lZGlhLmdsYXNzZXMu Y29tghttZWRpYS5sYXVibWFuYW5kcGFuay5jb20uYXWCFm1lZGlhLmxlbnNjcmFm dGVycy5jb22CI21lZGlhLmxlb25hcmRvLmVzc2lsb3JsdXhvdHRpY2EuY29tghZt ZWRpYS5uYXRpdmV5ZXdlYXIuY29tghBtZWRpYS5vYWtsZXkuY29tghJtZWRpYS5v YWtsZXlzaS5jb22CF21lZGlhLm9saXZlcnBlb3BsZXMuY29tgg5tZWRpYS5vcHNt LmNvbYIYbWVkaWEub3RpY2FzY2Fyb2wuY29tLmJyghBtZWRpYS5wZXJzb2wuY29t ghFtZWRpYS5yYXktYmFuLmNvbYIbbWVkaWEuc2FsbW9pcmFnaGlldmlnYW5vLml0 ghZtZWRpYS5zZWFyc29wdGljYWwuY29tghVtZWRpYS5zdW5nbGFzc2h1dC5jb22C F21lZGlhLnRhcmdldG9wdGljYWwuY29tghdtZWRpYS52b2d1ZS1leWV3ZWFyLmNv bYIcc21hcnRyZXRhaWwtaW0ubHV4b3R0aWNhLmNvbYIbc3RvcmVwaWN0dXJlcy5s dXhvdHRpY2EuY29tgh52aWRlby1wcmV2aWV3LWltLmx1eG90dGljYS5jb22CF3dl YmFwcC1pbS5sdXhvdHRpY2EuY29tghF3d3cubHV4b3R0aWNhLmNvbTATBgNVHSAE DDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1ADtTd3U+LbmA ToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABizffye0AAAQDAEYwRAIgTB/m97iL HtXgWjaXLts+GavUpUivQkHVMbP7bQurC4ACICbNBsZgnD5aljXIbtMp5e77Ka2O ZPI91npszNk144mLAHYAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQA AAGLN9/KWwAABAMARzBFAiBi4Uz03z8cEHMlrjfZqUD0eUa96CacOJP7mKUtvwH0 BQIhAOwjx8CvcI/FL8LvUtEW8sETeXC/Hqf8zk8lCWPfbvKUMA0GCSqGSIb3DQEB CwUAA4IBAQCBq0/UIiAZGjDmqIOw/ALPK81Tn5kARU9MqmuvRgJk6JX8xRLjCuPx UM3ZNENNOOc7BNJ9dQK2cl++OhV83fch5nONyLqxTFJUWP2Ia/RdLLMfkQVk3THe js2CxLG2sV290nPTjdgi6JauXoVebjDwmcozzC2w58c0rpQ5uH64xKUZAsZOvGxr xdZNtZq3rTpdYYaqvErckMDMUzVzozunGj+Nj5af/XpXNaoDaisRzGdEADEZ7Z7H fQ8VeEeOjp42QtIIbhWSt0sdNzXTGw1kZXEr2akXZPgwZ/9c6kkfRrkzdcdtU51s 6SVm8mFJL5Ld2iP/f2bhJpCYpbTAVzdn -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVnTnQZ3w36FnrarMRiY 3X9SDaFzzbAixiwCMgsbr1Z5dTotZA0pwywGdcHHM3VZjEaG4atTK5BRD+hadcYQ jVt/CilCAx68Jh/29DKReNvcdSzHQ9RtFLPlhZSeb/DnyzL6r96FNBTbw7YCH074 wIk96GpHmusNw34pL6Zp7iVEgS/QS+lWdRPd4cTRGPU/hKSuSgqvoXbE7tXxD/rq VpYtu4cC+NdpE4+fL9u2Db16RcCTWSH3JgfMCeJdwDCzSH411/bzuhbmv+SPtsHa Z4y0CXzPzf6dLEKVhDrma2RvyiqcaBYyWRDn7IyU5qphPwVwooigaP2/ByrRb4lV KwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 356490593922194167550100814768765187523009 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-16 08:44:54 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-14 08:44:53 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.luxottica.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22893428353500449067650756907553992546514923788089171700012398358918872060018605367275779164437869855446996747562188592809611481025684159680282707779582873671056255402917541927374169936306918616040304664889707755102187074084945370735538808177718135283663535752916116250374698448970822073068685839805882417644386338246791833099755787177886508489930768418920951934367456067757865340639962217849352264625138211719336583341473450563229415860534836820503217879499867115968678816261124200087221284188539455250557799120663949412933827350082607462245363665009349768939462089708747319077377790763809998787663897439309054694699 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) af87208c02b2737764f3bda2f412c65064d5d6da . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1271 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.alainmikli.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.arnette.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.contactsdirect.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.costadelmar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.framesdirect.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.glasses.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.laubmanandpank.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.lenscrafters.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.nativeyewear.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.oakley.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.oakleysi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.oliverpeoples.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.opsm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.oticascarol.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.persol.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.salmoiraghievigano.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.searsoptical.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.sunglasshut.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.targetoptical.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.vogue-eyewear.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-adv.luxottica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-product.luxottica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.ray-ban.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace-im.luxottica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-university.luxottica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.alainmikli.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.arnette.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.contactsdirect.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.costadelmar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.framesdirect.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.glasses.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.laubmanandpank.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.lenscrafters.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.leonardo.essilorluxottica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.nativeyewear.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.oakley.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.oakleysi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.oliverpeoples.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.opsm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.oticascarol.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.persol.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.ray-ban.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.salmoiraghievigano.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.searsoptical.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.sunglasshut.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.targetoptical.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.vogue-eyewear.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartretail-im.luxottica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storepictures.luxottica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video-preview-im.luxottica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapp-im.luxottica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luxottica.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b37dfc9ed000004030046304402204c1fe6f7b88b1ed5e05a36972edb3e19abd4a548af4241d531b3fb6d0bab0b80022026cd06c6609c3e5a9635c86ed329e5eefb29ad8e64f23dd67a6cccd935e3898b00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b37dfca5b0000040300473045022062e14cf4df3f1c107325ae37d9a940f47946bde8269c3893fb98a52dbf01f405022100ec23c7c0af708fc52fc2ef52d116f2c1137970bf1ea7fcce4f250963df6ef294 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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