www.essilorluxottica.com

- Luxottica Group S.p.A. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 05:73:c5:bb:d0:15:71:78:05:48:b2:9b:34:d7:17:8a was issued on by DigiCert Inc.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Luxottica Group S.p.A.

Organization: Luxottica Group S.p.A.
Locality: Lauriano
Country: IT

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:73:c5:bb:d0:15:71:78:05:48:b2:9b:34:d7:17:8a
Serial Number (int): 7247264632413199414758975151151716234
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: b3:39:59:18:5a:ff:cc:a2:4c:90:60:ec:2a:f1:68:46:e6:b3:c2:78
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 4b:28:74:62:04:46:81:ee:80:d5:96:dd:a1:fb:d9:eb:8c:c5:2e:a6
Fingerprint (sha256): 12:5c:4f:a3:0a:54:2a:24:71:c2:bd:0e:79:5b:b6:8e:3f:cb:09:e6:91:2b:26:7d:c3:17:f0:0d:f3:ef:a7:ff

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate www.essilorluxottica.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.essilorluxottica.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.essilorluxottica.com
api-connect-anz.essilorluxottica.com
api.davidclulow.com
api.eyebuydirect.com
api.grandvision.it
apidviewer-connect-anz.essilorluxottica.com
apigw-connect-anz.essilorluxottica.com
au.eyebuydirect.com
ca.eyebuydirect.com
cae-multiplatformh2-cms.luxottica.com
cms-visiondirect.essilorluxottica.com
cms.ebdplus.com
cms.transitions.com
connect-anz.essilorluxottica.com
consumerform.luxottica.com
contact-lens-component.luxottica.com
crmapp.luxottica.com
digitalportal.luxottica.com
digitalwholesale.luxottica.com
digitalwindows.essilorluxottica.com
discoverlenses.essilorluxottica.com
dmapi.luxottica.com
dviewer-connect-anz.essilorluxottica.com
essilor.com
eye-care.essilorluxottica.com
eyebuydirect.ca
eyebuydirect.com
eyebuydirect.fr
eyelights.essilorluxottica.com
fr.eyebuydirect.com
fsapi.luxottica.com
gateway-connect-anz.essilorluxottica.com
grandvision.essilorluxottica.com
grandvision.it
instruments-connect-anz.essilorluxottica.com
lens.essilor.com
leonardo-cms.essilorluxottica.com
leonardo.essilorluxottica.com
loyapp.luxottica.com
luxlens-dc.luxottica.com
luxlens-whs.luxottica.com
media-my.essilorluxottica.com
media.leonardo.essilorluxottica.com
media2-my.essilorluxottica.com
multiplatformh2-cms.luxottica.com
my.essilorLuxottica.com.cn
mypersonaldesk.essilorluxottica.com
nuanceaudio.com
one-cms.essilorluxottica.com
one.essilorluxottica.com
onesalessuitedlp.luxottica.com
onesight.essilorluxottica.com
opthy.essilorluxottica.com
patient-connect-anz.essilorluxottica.com
patient-telemedicine-showroom.luxottica.com
qu.leonardo.essilorluxottica.com
registry-connect-anz.essilorluxottica.com
repdashboard.luxottica.com
rfeyed.luxottica.com
rtr-viewer.luxottica.com
rtrmv.essilorluxottica.com
sl.luxottica.com
smartly.luxottica.com
socket-connect-anz.essilorluxottica.com
store360.luxottica.com
storedashboard.luxottica.com
tam.one.essilorluxottica.com
telemedicine-showroom.luxottica.com
telemedicine.essilorluxottica.com
virtualbrand.luxottica.com
virtualecommerce.luxottica.com
virtuallab.luxottica.com
virtualmarket.luxottica.com
virtualpayment.luxottica.com
virtualstore.luxottica.com
vmmv.luxottica.com
ws.eyebuydirect.com
www.alainmikli.com
www.ebdplus.com
www.essilor.com
www.eyebuydirect.ca
www.eyebuydirect.com
www.eyebuydirect.fr
www.grandvision.it
www.impossible-frames.com
www.impossible-frames.io
www.nuanceaudio.com
www.transitions.com
www.visiondirect.be
www.visiondirect.co.uk
www.visiondirect.de
www.visiondirect.es
www.visiondirect.fr
www.visiondirect.ie
www.visiondirect.it
www.visiondirect.nl
www.visiondirect.pt
www.visiondirect.se

Other certificates including the domain name essilorluxottica.com

(limited to 100 certificates)
www.essilorluxottica.com
www.boost.essilorluxottica.com
www.luxottica.com
img-b2c.luxottica.com
quality-mytraffic.essilorluxottica.com
www.essilorluxottica.com
snif12dgl.wpc.edgecastcdn.net
img-b2c.luxottica.com
www.essilorluxottica.com
wowdiet.co.il
uat2.luxottica.com
bookingessilorluxotticadays.essilorluxottica.com
www.luxottica.com
www.essilorluxottica.com
uat.luxottica.com
cms.essilorluxottica.com
img-b2c.luxottica.com
agenda.essilorluxotticadays.essilorluxottica.com
uat.luxottica.com
app.mindtomove.it
careers.essilorluxottica.com
snif12dgl.wpc.edgecastcdn.net
uat.visiondirect.co.uk
www.luxottica.com
www.essilorluxottica.com
www.essilorluxottica.com
www.essilorluxottica.com
www.essilorluxottica.com
www.boost.essilorluxottica.com
www.luxottica.com
www.essilorluxottica.com
www.luxottica.com
backend.luxottica.com
backend.luxottica.com
el-sponsor.essilorluxottica.com
rodolphethienard.fr
iskconcomputer.in
simplebingo.net
uat2.luxottica.com
backend.luxottica.com
www.essilorluxottica.com
www.essilorluxottica.com
www.essilorluxottica.com
www.surajitg.dev
www.luxottica.com
marshotel.com
essilorluxottica.com
www.clearly.co.nz
www.essilorluxottica.com
www.essilorluxottica.com
www.essilorluxottica.com
www.luxottica.com
uat2.luxottica.com
tools.essilorluxotticadays.essilorluxottica.com
2gathr.com
www.luxottica.com
img-b2c.luxottica.com
backend.luxottica.com
www.essilorluxottica.com
eyelights-staging.essilorluxottica.com
www.kongossa.app
my.essilorluxottica.com
www.essilorluxottica.com
essilorluxottica.com
www.essilorluxottica.com
www.essilorluxottica.com
uat2.luxottica.com
www.essilorluxottica.com
www.boost.essilorluxottica.com
www.luxottica.com
uat2.luxottica.com
www.essilorluxottica.com
www.harpnote.net
benefits.essilorluxottica.com
www.canoe.mobi
kanjisenpai.rodriguez.jp
essilorluxottica.com
benefits.essilorluxottica.com
www.boost.essilorluxottica.com
www.manage.lasso.finance
cms.essilorluxottica.com
eyelights.essilorluxottica.com
connect-anz.essilorluxottica.com
snieeaagl.wpc.edgecastcdn.net
www.luxottica.com
www.boost.essilorluxottica.com
backend.luxottica.com
simplebingo.net
www.surajitg.dev
vendorportal.essilorluxottica.com
www.visiondirect.co.uk
dev.zone.quickcommerce.org
www.clearly.co.nz

Certificate

The complete raw certificate details for www.essilorluxottica.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEa+U3MkNVFZCvujVYAH0EaaPgeRXL
H0qJz0uZXqJMwkOqWzpJ8iYJxyHhY/jLaRlcHvZoDduxRmMfRovQAJW1xA==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7247264632413199414758975151151716234
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lauriano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxottica Group S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.essilorluxottica.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00046be5373243551590afba3558007d0469a3e07915cb1f4a89cf4b995ea24cc243aa5b3a49f22609c721e163f8cb69195c1ef6680ddbb146631f468bd00095b5c4
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b33959185affcca24c9060ec2af16846e6b3c278
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2691 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-connect-anz.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.davidclulow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.eyebuydirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.grandvision.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apidviewer-connect-anz.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apigw-connect-anz.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'au.eyebuydirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca.eyebuydirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cae-multiplatformh2-cms.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms-visiondirect.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.ebdplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.transitions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect-anz.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consumerform.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contact-lens-component.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crmapp.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalportal.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalwholesale.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalwindows.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discoverlenses.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmapi.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dviewer-connect-anz.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'essilor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eye-care.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyebuydirect.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyebuydirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyebuydirect.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyelights.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.eyebuydirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsapi.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateway-connect-anz.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandvision.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandvision.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instruments-connect-anz.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lens.essilor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leonardo-cms.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leonardo.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loyapp.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxlens-dc.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxlens-whs.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-my.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.leonardo.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media2-my.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multiplatformh2-cms.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.essilorLuxottica.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypersonaldesk.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuanceaudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'one-cms.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'one.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onesalessuitedlp.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onesight.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opthy.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patient-connect-anz.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patient-telemedicine-showroom.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qu.leonardo.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registry-connect-anz.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repdashboard.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rfeyed.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtr-viewer.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtrmv.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sl.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartly.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socket-connect-anz.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store360.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storedashboard.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tam.one.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telemedicine-showroom.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telemedicine.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualbrand.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualecommerce.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtuallab.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualmarket.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualpayment.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualstore.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vmmv.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws.eyebuydirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alainmikli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ebdplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.essilor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eyebuydirect.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eyebuydirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eyebuydirect.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandvision.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.impossible-frames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.impossible-frames.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nuanceaudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.transitions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visiondirect.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visiondirect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visiondirect.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visiondirect.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visiondirect.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visiondirect.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visiondirect.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visiondirect.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visiondirect.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visiondirect.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018a3c646a240000040300483046022100eacf2ba37773e37fdfc429ec6501342cd680185b5febe9138cf69f1130b2ca7e022100ff700ec6fce5cbdc00af95dc02bec56d74b8129524bde8f1a734e10b2a6d8d8f00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018a3c6465d2000004030047304502203596704dd159a146fb8450391836e6510f2d41bd1d688e395584dccaeac0b1ae022100daef4fbe32e645a11249db87204b9feb8dbb8c9ef34cf6f55e4c10f3e48014d7007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018a3c646590000004030047304502210085b2b9e3fd22175c3a0ea8a7604a103cac4f00500cdb0700409fdc97a161e0a2022061b5d02c45ada9b332ffa2764eead6c8dbb13d15e32db35aadace5eba696f821
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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