img-b2c.luxottica.com

- Luxottica Group S.p.A. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0c:8b:63:98:2e:d8:30:3c:c2:82:54:69:3f:55:ec:9d was issued on by DigiCert Inc.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Luxottica Group S.p.A.

Organization: Luxottica Group S.p.A.
Locality: Lauriano
Country: IT

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:8b:63:98:2e:d8:30:3c:c2:82:54:69:3f:55:ec:9d
Serial Number (int): 16674485228484461421993021739644611741
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 43:05:bd:74:56:18:44:20:ff:d4:82:55:c7:30:74:66:f6:4b:71:e3
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 99:7a:ff:c9:40:7f:17:8a:0a:ef:c9:34:97:4a:97:6b:bc:c3:eb:4b
Fingerprint (sha256): 15:6b:69:f8:d4:62:a8:bb:44:0e:2a:c6:78:a5:00:28:b4:43:d1:37:91:61:c7:b6:e0:c5:c2:4f:2e:5d:27:65

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate img-b2c.luxottica.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for img-b2c.luxottica.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

img-b2c.luxottica.com
assets-eln1.luxottica.com
assets.alainmikli.com
assets.arnette.com
assets.clearly.ca
assets.clearly.co.nz
assets.clearly.com.au
assets.contactsdirect.com
assets.costadelmar.com
assets.davidclulow.com
assets.essilorluxottica.com
assets.framesdirect.com
assets.glasses.com
assets.grandvision.it
assets.impossible-frames.com
assets.impossible-frames.io
assets.laubmanandpank.com.au
assets.lenscrafters.com
assets.nativeyewear.com
assets.oakley.com
assets.oakleysi.com
assets.oliverpeoples.com
assets.opsm.com
assets.oticascarol.com.br
assets.persol.com
assets.salmoiraghievigano.it
assets.sunglasshut.com
assets.targetoptical.com
assets.transitions.com
assets.vogue-eyewear.com
assets2-eln1.luxottica.com
assets2.alainmikli.com
assets2.arnette.com
assets2.clearly.ca
assets2.clearly.co.nz
assets2.clearly.com.au
assets2.contactsdirect.com
assets2.costadelmar.com
assets2.davidclulow.com
assets2.essilorluxottica.com
assets2.framesdirect.com
assets2.glasses.com
assets2.grandvision.it
assets2.impossible-frames.com
assets2.impossible-frames.io
assets2.laubmanandpank.com.au
assets2.lenscrafters.com
assets2.oakley.com
assets2.oliverpeoples.com
assets2.opsm.com
assets2.oticascarol.com.br
assets2.persol.com
assets2.salmoiraghievigano.it
assets2.sunglasshut.com
assets2.targetoptical.com
assets2.vogue-eyewear.com
images.ray-ban.com
images.sunglasshut.com
images2.ray-ban.com
media-eln1.luxottica.com
media-housebrands.luxottica.com
media-lens.essilor.com
media-multiplatform.luxottica.com
media-multiplatformh2.luxottica.com
media-my.essilorluxottica.com.cn
media-onesight.essilorluxottica.com
media.alainmikli.com
media.arnette.com
media.clearly.ca
media.clearly.co.nz
media.clearly.com.au
media.contactsdirect.com
media.costadelmar.com
media.davidclulow.com
media.essilor.com
media.essilorluxottica.com
media.framesdirect.com
media.glasses.com
media.grandvision.it
media.impossible-frames.com
media.impossible-frames.io
media.laubmanandpank.com.au
media.lenscrafters.com
media.nativeyewear.com
media.oakley.com
media.oakleysi.com
media.oliverpeoples.com
media.one.essilorluxottica.com
media.opsm.com
media.oticascarol.com.br
media.persol.com
media.ray-ban.com
media.salmoiraghievigano.it
media.sunglasshut.com
media.targetoptical.com
media.transitions.com
media.vogue-eyewear.com
myluxottica-im2.essilorluxottica.com.cn

Other certificates including the domain name luxottica.com

(limited to 100 certificates)
www.luxottica.com
sni1bd6egl.wpc.edgecastcdn.net
support9.cdnetworks.net
uat-ecomm.luxottica.com
university.luxottica.com
support9.cdnetworks.net
support5.cdnetworks.net
www.luxottica.com
ai.kures.co
support9.cdnetworks.net
www.luxottica.com
support9.cdnetworks.net
www.luxottica.com
crm-sunglasshut.luxottica.com
www.luxottica.com
*.luxottica.com
certi-myapi.luxottica.com
myl-cms.luxottica.com
infotools.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
uat-ecomm.luxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
www.luxottica.com
www.luxottica.com
businessgame.luxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
www.luxottica.com
support9.cdnetworks.net
access.luxgroup.net
dev-virtualmirror-m4c.luxottica.com
rcspqua.luxottica.com
support9.cdnetworks.net
qa-eyecare.luxottica.com
uat-multi-cms.luxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
events.luxotticaeyecare.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
studio.luxotticaeyecare.luxottica.com
support9.cdnetworks.net
servicedesk.br.luxottica.com
corporateidentity.luxottica.com
www.luxottica.com
support5.cdnetworks.net
support9.cdnetworks.net
businessgame.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
news.luxottica.com
support9.cdnetworks.net
www.essilorluxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
my.luxottica.com
support9.cdnetworks.net
sni1df38gl.wpc.edgecastcdn.net
chatbr.luxottica.com
www.luxottica.com
img-b2c.luxottica.com
www.luxottica.com
www.luxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
data.wordlift.io
www.luxottica.com
www.essilorluxottica.com
jobs.luxottica.com
kibana.prod-sro.luxgroup.net
support9.cdnetworks.net
support9.cdnetworks.net
webmail.cn.luxottica.com
businessgame.luxottica.com
my.luxottica.com
sni1c11bgl.wpc.edgecastcdn.net
uat-ecomm.luxottica.com

Certificate

The complete raw certificate details for img-b2c.luxottica.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEeoTvshKpzi/jCuQyQ4kVDtmCaAdD
MgcwFwMP0mhmbetUI3AszhVHWURJxU2eVR37fXG/a9Tyq8u9zYSwzk7NMA==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16674485228484461421993021739644611741
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lauriano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxottica Group S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'img-b2c.luxottica.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00047a84efb212a9ce2fe30ae4324389150ed98268074332073017030fd268666deb5423702cce1547594449c54d9e551dfb7d71bf6bd4f2abcbbdcd84b0ce4ecd30
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4305bd7456184420ffd48255c7307466f64b71e3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2442 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img-b2c.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets-eln1.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.alainmikli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.arnette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.clearly.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.clearly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.clearly.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.contactsdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.costadelmar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.davidclulow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.framesdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.glasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.grandvision.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.impossible-frames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.impossible-frames.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.laubmanandpank.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.lenscrafters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.nativeyewear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.oakley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.oakleysi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.oliverpeoples.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.opsm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.oticascarol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.persol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.salmoiraghievigano.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.sunglasshut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.targetoptical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.transitions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.vogue-eyewear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2-eln1.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.alainmikli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.arnette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.clearly.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.clearly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.clearly.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.contactsdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.costadelmar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.davidclulow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.framesdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.glasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.grandvision.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.impossible-frames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.impossible-frames.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.laubmanandpank.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.lenscrafters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.oakley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.oliverpeoples.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.opsm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.oticascarol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.persol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.salmoiraghievigano.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.sunglasshut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.targetoptical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.vogue-eyewear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.ray-ban.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.sunglasshut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images2.ray-ban.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-eln1.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-housebrands.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-lens.essilor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-multiplatform.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-multiplatformh2.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-my.essilorluxottica.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-onesight.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.alainmikli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.arnette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.clearly.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.clearly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.clearly.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.contactsdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.costadelmar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.davidclulow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.essilor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.framesdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.glasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.grandvision.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.impossible-frames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.impossible-frames.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.laubmanandpank.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.lenscrafters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.nativeyewear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.oakley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.oakleysi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.oliverpeoples.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.one.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.opsm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.oticascarol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.persol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.ray-ban.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.salmoiraghievigano.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.sunglasshut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.targetoptical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.transitions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.vogue-eyewear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myluxottica-im2.essilorluxottica.com.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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