www.luxottica.com

Issued by R3

About this certificate

This digital certificate with serial number 04:17:a1:b6:f9:03:cf:c0:2a:d0:56:f9:b4:ca:0c:e6:01:c1 was issued on by Let's Encrypt.

With 52 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.luxottica.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:17:a1:b6:f9:03:cf:c0:2a:d0:56:f9:b4:ca:0c:e6:01:c1
Serial Number (int): 356490593922194167550100814768765187523009
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: af:87:20:8c:02:b2:73:77:64:f3:bd:a2:f4:12:c6:50:64:d5:d6:da
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0c:27:18:04:a5:19:28:4b:8b:51:27:bb:2e:1f:49:c7:8f:b8:92:e7
Fingerprint (sha256): 10:27:12:57:bf:3f:67:2b:39:98:fd:ac:f0:97:1a:ec:d3:9f:7a:78:f7:fd:68:da:2f:22:df:7e:f6:e3:0c:49

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.luxottica.com

52

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.luxottica.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

assets.alainmikli.com
assets.arnette.com
assets.contactsdirect.com
assets.costadelmar.com
assets.framesdirect.com
assets.glasses.com
assets.laubmanandpank.com.au
assets.lenscrafters.com
assets.nativeyewear.com
assets.oakley.com
assets.oakleysi.com
assets.oliverpeoples.com
assets.opsm.com
assets.oticascarol.com.br
assets.persol.com
assets.salmoiraghievigano.it
assets.searsoptical.com
assets.sunglasshut.com
assets.targetoptical.com
assets.vogue-eyewear.com
images-adv.luxottica.com
images-product.luxottica.com
images.ray-ban.com
marketplace-im.luxottica.com
media-university.luxottica.com
media.alainmikli.com
media.arnette.com
media.contactsdirect.com
media.costadelmar.com
media.framesdirect.com
media.glasses.com
media.laubmanandpank.com.au
media.lenscrafters.com
media.leonardo.essilorluxottica.com
media.nativeyewear.com
media.oakley.com
media.oakleysi.com
media.oliverpeoples.com
media.opsm.com
media.oticascarol.com.br
media.persol.com
media.ray-ban.com
media.salmoiraghievigano.it
media.searsoptical.com
media.sunglasshut.com
media.targetoptical.com
media.vogue-eyewear.com
smartretail-im.luxottica.com
storepictures.luxottica.com
video-preview-im.luxottica.com
webapp-im.luxottica.com
www.luxottica.com

Other certificates including the domain name luxottica.com

(limited to 100 certificates)
www.luxottica.com
sni1bd6egl.wpc.edgecastcdn.net
support9.cdnetworks.net
uat-ecomm.luxottica.com
university.luxottica.com
support9.cdnetworks.net
support5.cdnetworks.net
www.luxottica.com
ai.kures.co
support9.cdnetworks.net
www.luxottica.com
support9.cdnetworks.net
www.luxottica.com
crm-sunglasshut.luxottica.com
www.luxottica.com
*.luxottica.com
certi-myapi.luxottica.com
myl-cms.luxottica.com
infotools.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
uat-ecomm.luxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
www.luxottica.com
www.luxottica.com
businessgame.luxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
www.luxottica.com
support9.cdnetworks.net
access.luxgroup.net
dev-virtualmirror-m4c.luxottica.com
rcspqua.luxottica.com
support9.cdnetworks.net
qa-eyecare.luxottica.com
uat-multi-cms.luxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
events.luxotticaeyecare.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
studio.luxotticaeyecare.luxottica.com
support9.cdnetworks.net
servicedesk.br.luxottica.com
corporateidentity.luxottica.com
www.luxottica.com
support5.cdnetworks.net
support9.cdnetworks.net
businessgame.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
news.luxottica.com
support9.cdnetworks.net
www.essilorluxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
my.luxottica.com
support9.cdnetworks.net
sni1df38gl.wpc.edgecastcdn.net
chatbr.luxottica.com
www.luxottica.com
img-b2c.luxottica.com
www.luxottica.com
www.luxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
data.wordlift.io
www.luxottica.com
www.essilorluxottica.com
jobs.luxottica.com
kibana.prod-sro.luxgroup.net
support9.cdnetworks.net
support9.cdnetworks.net
webmail.cn.luxottica.com
businessgame.luxottica.com
my.luxottica.com
sni1c11bgl.wpc.edgecastcdn.net
uat-ecomm.luxottica.com

Certificate

The complete raw certificate details for www.luxottica.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVnTnQZ3w36FnrarMRiY
3X9SDaFzzbAixiwCMgsbr1Z5dTotZA0pwywGdcHHM3VZjEaG4atTK5BRD+hadcYQ
jVt/CilCAx68Jh/29DKReNvcdSzHQ9RtFLPlhZSeb/DnyzL6r96FNBTbw7YCH074
wIk96GpHmusNw34pL6Zp7iVEgS/QS+lWdRPd4cTRGPU/hKSuSgqvoXbE7tXxD/rq
VpYtu4cC+NdpE4+fL9u2Db16RcCTWSH3JgfMCeJdwDCzSH411/bzuhbmv+SPtsHa
Z4y0CXzPzf6dLEKVhDrma2RvyiqcaBYyWRDn7IyU5qphPwVwooigaP2/ByrRb4lV
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 356490593922194167550100814768765187523009
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-16 08:44:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-14 08:44:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.luxottica.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22893428353500449067650756907553992546514923788089171700012398358918872060018605367275779164437869855446996747562188592809611481025684159680282707779582873671056255402917541927374169936306918616040304664889707755102187074084945370735538808177718135283663535752916116250374698448970822073068685839805882417644386338246791833099755787177886508489930768418920951934367456067757865340639962217849352264625138211719336583341473450563229415860534836820503217879499867115968678816261124200087221284188539455250557799120663949412933827350082607462245363665009349768939462089708747319077377790763809998787663897439309054694699
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							af87208c02b2737764f3bda2f412c65064d5d6da
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1271 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.alainmikli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.arnette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.contactsdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.costadelmar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.framesdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.glasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.laubmanandpank.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.lenscrafters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.nativeyewear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.oakley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.oakleysi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.oliverpeoples.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.opsm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.oticascarol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.persol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.salmoiraghievigano.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.searsoptical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.sunglasshut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.targetoptical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.vogue-eyewear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-adv.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-product.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.ray-ban.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace-im.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-university.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.alainmikli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.arnette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.contactsdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.costadelmar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.framesdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.glasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.laubmanandpank.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.lenscrafters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.leonardo.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.nativeyewear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.oakley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.oakleysi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.oliverpeoples.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.opsm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.oticascarol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.persol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.ray-ban.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.salmoiraghievigano.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.searsoptical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.sunglasshut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.targetoptical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.vogue-eyewear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartretail-im.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storepictures.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video-preview-im.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapp-im.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luxottica.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b37dfc9ed000004030046304402204c1fe6f7b88b1ed5e05a36972edb3e19abd4a548af4241d531b3fb6d0bab0b80022026cd06c6609c3e5a9635c86ed329e5eefb29ad8e64f23dd67a6cccd935e3898b00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b37dfca5b0000040300473045022062e14cf4df3f1c107325ae37d9a940f47946bde8269c3893fb98a52dbf01f405022100ec23c7c0af708fc52fc2ef52d116f2c1137970bf1ea7fcce4f250963df6ef294
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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