www.luxottica.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b0:a5:f9:82:e9:bb:22:b2:e9:cd:b6:93:04:4f:c6:77:22 was issued on by Let's Encrypt.

With 33 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.luxottica.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b0:a5:f9:82:e9:bb:22:b2:e9:cd:b6:93:04:4f:c6:77:22
Serial Number (int): 321447172529819521786283614388644743640866
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b7:28:38:24:7c:fb:f0:3e:3b:e2:4a:2b:8d:c5:dc:fb:5c:ca:68:be
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5d:4b:af:ad:a6:70:40:a3:44:e1:45:7c:e6:43:cf:32:29:c8:bc:89
Fingerprint (sha256): 13:e8:dc:ff:50:66:20:3e:1b:23:00:94:ff:2c:b4:51:c2:51:7d:a7:15:3e:a2:c7:2b:28:49:03:12:24:90:b5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.luxottica.com

33

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.luxottica.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

assets.arnette.com
assets.glasses.com
assets.lenscrafters.com
assets.oakley.com
assets.oliverpeoples.com
assets.opsm.com
assets.oticascarol.com.br
assets.persol.com
assets.salmoiraghievigano.it
assets.searsoptical.com
assets.sunglasshut.com
assets.targetoptical.com
assets.vogue-eyewear.com
images.ray-ban.com
marketplace-im.luxottica.com
media.arnette.com
media.glasses.com
media.lenscrafters.com
media.oakley.com
media.oliverpeoples.com
media.opsm.com
media.oticascarol.com.br
media.persol.com
media.ray-ban.com
media.salmoiraghievigano.it
media.searsoptical.com
media.sunglasshut.com
media.targetoptical.com
media.vogue-eyewear.com
smartretail-im.luxottica.com
video-preview-im.luxottica.com
webapp-im.luxottica.com
www.luxottica.com

Other certificates including the domain name luxottica.com

(limited to 100 certificates)
www.luxottica.com
sni1bd6egl.wpc.edgecastcdn.net
support9.cdnetworks.net
uat-ecomm.luxottica.com
university.luxottica.com
support9.cdnetworks.net
support5.cdnetworks.net
www.luxottica.com
ai.kures.co
support9.cdnetworks.net
www.luxottica.com
support9.cdnetworks.net
www.luxottica.com
crm-sunglasshut.luxottica.com
www.luxottica.com
*.luxottica.com
certi-myapi.luxottica.com
myl-cms.luxottica.com
infotools.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
uat-ecomm.luxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
www.luxottica.com
www.luxottica.com
businessgame.luxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
www.luxottica.com
support9.cdnetworks.net
access.luxgroup.net
dev-virtualmirror-m4c.luxottica.com
rcspqua.luxottica.com
support9.cdnetworks.net
qa-eyecare.luxottica.com
uat-multi-cms.luxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
events.luxotticaeyecare.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
studio.luxotticaeyecare.luxottica.com
support9.cdnetworks.net
servicedesk.br.luxottica.com
corporateidentity.luxottica.com
www.luxottica.com
support5.cdnetworks.net
support9.cdnetworks.net
businessgame.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
news.luxottica.com
support9.cdnetworks.net
www.essilorluxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
my.luxottica.com
support9.cdnetworks.net
sni1df38gl.wpc.edgecastcdn.net
chatbr.luxottica.com
www.luxottica.com
img-b2c.luxottica.com
www.luxottica.com
www.luxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
data.wordlift.io
www.luxottica.com
www.essilorluxottica.com
jobs.luxottica.com
kibana.prod-sro.luxgroup.net
support9.cdnetworks.net
support9.cdnetworks.net
webmail.cn.luxottica.com
businessgame.luxottica.com
my.luxottica.com
sni1c11bgl.wpc.edgecastcdn.net
uat-ecomm.luxottica.com

Certificate

The complete raw certificate details for www.luxottica.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9bNPYPGkRrAuTmeh6Nep
BXibVN3i1/pFWi9LezbnKMmg6SDTqXvjK66jiaE+UUv9T7tfYW3PggnpJm1QT0C8
TaLsxNAs5b7EgIwvymWV+KC4e19Ia/nJJqABYP1Sk4XEFaChslXjmSQ3BVWjI18V
k2hAqbl53fSa7lRAi/a46GAUBBEZxiPWtYE6MWVJJIRRE2yIQxegjvugjVpcGVvD
/pMojbnuezIBED0Xv+IPZiQpnqDNNR2ud7P+UBzJvNKTnzDeTRGhDkEJhjXNyLgP
jBaqEidhXnEmrIOvfnyPL9AGX+c1U2dphESbzX7h6AfmK2j//VHRGzJ7bhV2JPJ9
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321447172529819521786283614388644743640866
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-05 08:07:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-03 08:07:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.luxottica.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31016805809178291784751963051325272448686602912726337851559620605499675800672593204001732115103711660321937689489895398312081958854154285045640327329444493906732743064141741171534767168163763973095017065335071082063875247665925038184271356575266313670157006482851752986253454415527537058747912322750709885522566107650227328625472872188712408900369648746222074054301739320025967994127791785849078432168139223650392036068968866804042809777971257063308622516928645820416789042199029352818164569536603263167188158096238004394531808902845961345429174423215639666645758316809984220613632810079162606181215993692096749010191
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b72838247cfbf03e3be24a2b8dc5dcfb5cca68be
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (774 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.arnette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.glasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.lenscrafters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.oakley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.oliverpeoples.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.opsm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.oticascarol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.persol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.salmoiraghievigano.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.searsoptical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.sunglasshut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.targetoptical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.vogue-eyewear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.ray-ban.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace-im.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.arnette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.glasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.lenscrafters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.oakley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.oliverpeoples.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.opsm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.oticascarol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.persol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.ray-ban.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.salmoiraghievigano.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.searsoptical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.sunglasshut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.targetoptical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.vogue-eyewear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartretail-im.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video-preview-im.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapp-im.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luxottica.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170a9f307b0000004030046304402201bffd4f0387bf48b0fe8dde6a0299b05b4f22c2dd9ba5c170c62f0af76dcecae02203a563b00145c71b1ed729bb850c9bab88624971aea2d987fed06e4a68798f88f00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170a9f308060000040300483046022100fb9a8ab734f8dd42b64e393c46461595fe652b034e4c8c426afba425abdcc07a022100f800b3fd34d67670157ac98f3af5f0d04e50de0f5ec164820003a867580b1444
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00172f9514ed1b4f38ea8945f736b8363390dcab1b19292b3e82634a723519bf1bce5f7b17932b7874fd173bb3464e79d6ad968d48078760bfe004bbcc01ac3056065808ad04052450459291370cf28752f4ef89facb22ad6f4e89901889eaf89e941f8c84c2f12aa255f1f49218d7f3532d617fb3bc9da685f0fc7ca46e06d9ffd1b3670ceaaca56079b7314bde3cd30b3765cefcc1d590c360a4345a7eb9cda62e2599f9369bc34faedf4d44462b18ca59bc700b78357cd7a8f2ade7dd2044a2d91e666be669f1905dffd55f6d10731a37975a5a3ef3e18d13afc502d791d7af0cf3df33d238f0358ad93afa5bdfa627518c09918773fc9e1121fd64bacded9f