img-b2c.luxottica.com

- Luxottica Group S.p.A. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0a:f0:97:50:3c:7e:cb:a4:3e:c4:19:2c:dd:5f:92:e6 was issued on by DigiCert Inc.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Luxottica Group S.p.A.

Organization: Luxottica Group S.p.A.
Locality: Lauriano
Country: IT

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:f0:97:50:3c:7e:cb:a4:3e:c4:19:2c:dd:5f:92:e6
Serial Number (int): 14541500204723056816003378872391275238
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 46:06:74:46:82:9e:01:5a:98:50:0f:25:14:c5:6f:a4:68:50:a1:74
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): fb:f3:71:87:88:52:30:ea:d5:fc:1e:37:a0:d1:00:f1:84:7e:b1:01
Fingerprint (sha256): 29:d1:12:35:37:cc:28:e7:b0:50:2c:88:00:0a:57:7e:79:18:78:3c:d0:3b:3a:08:c1:c6:4c:fe:55:58:26:2e

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate img-b2c.luxottica.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for img-b2c.luxottica.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

img-b2c.luxottica.com
assets-eln1.luxottica.com
assets.alainmikli.com
assets.arnette.com
assets.clearly.ca
assets.clearly.co.nz
assets.clearly.com.au
assets.contactsdirect.com
assets.costadelmar.com
assets.davidclulow.com
assets.essilorluxottica.com
assets.framesdirect.com
assets.glasses.com
assets.grandvision.it
assets.impossible-frames.com
assets.impossible-frames.io
assets.laubmanandpank.com.au
assets.lenscrafters.com
assets.nativeyewear.com
assets.oakley.com
assets.oakleysi.com
assets.oliverpeoples.com
assets.opsm.com
assets.oticascarol.com.br
assets.persol.com
assets.salmoiraghievigano.it
assets.sunglasshut.com
assets.targetoptical.com
assets.transitions.com
assets.vogue-eyewear.com
assets2-eln1.luxottica.com
assets2.alainmikli.com
assets2.arnette.com
assets2.clearly.ca
assets2.clearly.co.nz
assets2.clearly.com.au
assets2.contactsdirect.com
assets2.costadelmar.com
assets2.davidclulow.com
assets2.essilorluxottica.com
assets2.framesdirect.com
assets2.glasses.com
assets2.grandvision.it
assets2.impossible-frames.com
assets2.impossible-frames.io
assets2.laubmanandpank.com.au
assets2.lenscrafters.com
assets2.oakley.com
assets2.oliverpeoples.com
assets2.opsm.com
assets2.oticascarol.com.br
assets2.persol.com
assets2.salmoiraghievigano.it
assets2.sunglasshut.com
assets2.targetoptical.com
assets2.vogue-eyewear.com
images.ray-ban.com
images.sunglasshut.com
images2.ray-ban.com
media-cltl.essilorluxottica.com
media-eln1.luxottica.com
media-housebrands.luxottica.com
media-lens.essilor.com
media-multiplatform.luxottica.com
media-multiplatformh2.luxottica.com
media-my.essilorluxottica.com.cn
media-onesight.essilorluxottica.com
media.alainmikli.com
media.arnette.com
media.clearly.ca
media.clearly.co.nz
media.clearly.com.au
media.contactsdirect.com
media.costadelmar.com
media.davidclulow.com
media.essilor.com
media.essilorluxottica.com
media.framesdirect.com
media.glasses.com
media.grandvision.it
media.impossible-frames.com
media.impossible-frames.io
media.laubmanandpank.com.au
media.lenscrafters.com
media.nativeyewear.com
media.oakley.com
media.oakleysi.com
media.oliverpeoples.com
media.one.essilorluxottica.com
media.opsm.com
media.oticascarol.com.br
media.persol.com
media.ray-ban.com
media.salmoiraghievigano.it
media.sunglasshut.com
media.targetoptical.com
media.transitions.com
media.vogue-eyewear.com
myluxottica-im2.essilorluxottica.com.cn

Other certificates including the domain name luxottica.com

(limited to 100 certificates)
www.luxottica.com
sni1bd6egl.wpc.edgecastcdn.net
support9.cdnetworks.net
uat-ecomm.luxottica.com
university.luxottica.com
support9.cdnetworks.net
support5.cdnetworks.net
www.luxottica.com
ai.kures.co
support9.cdnetworks.net
www.luxottica.com
support9.cdnetworks.net
www.luxottica.com
crm-sunglasshut.luxottica.com
www.luxottica.com
*.luxottica.com
certi-myapi.luxottica.com
myl-cms.luxottica.com
infotools.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
uat-ecomm.luxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
www.luxottica.com
www.luxottica.com
businessgame.luxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
www.luxottica.com
support9.cdnetworks.net
access.luxgroup.net
dev-virtualmirror-m4c.luxottica.com
rcspqua.luxottica.com
support9.cdnetworks.net
qa-eyecare.luxottica.com
uat-multi-cms.luxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
events.luxotticaeyecare.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
studio.luxotticaeyecare.luxottica.com
support9.cdnetworks.net
servicedesk.br.luxottica.com
corporateidentity.luxottica.com
www.luxottica.com
support5.cdnetworks.net
support9.cdnetworks.net
businessgame.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
news.luxottica.com
support9.cdnetworks.net
www.essilorluxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
my.luxottica.com
support9.cdnetworks.net
sni1df38gl.wpc.edgecastcdn.net
chatbr.luxottica.com
www.luxottica.com
img-b2c.luxottica.com
www.luxottica.com
www.luxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
data.wordlift.io
www.luxottica.com
www.essilorluxottica.com
jobs.luxottica.com
kibana.prod-sro.luxgroup.net
support9.cdnetworks.net
support9.cdnetworks.net
webmail.cn.luxottica.com
businessgame.luxottica.com
my.luxottica.com
sni1c11bgl.wpc.edgecastcdn.net
uat-ecomm.luxottica.com

Certificate

The complete raw certificate details for img-b2c.luxottica.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE4Jdotp8D4LPdv5ZgBeU6MtjUbF9/
a5er6s4DSL3Ak9FSdDQR/SSW4uxDJw/IRy2bNdsbMCjcB+G+Po469ntFTQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14541500204723056816003378872391275238
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lauriano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxottica Group S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'img-b2c.luxottica.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004e09768b69f03e0b3ddbf966005e53a32d8d46c5f7f6b97abeace0348bdc093d152743411fd2496e2ec43270fc8472d9b35db1b3028dc07e1be3e8e3af67b454d
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							46067446829e015a98500f2514c56fa46850a174
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2475 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img-b2c.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets-eln1.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.alainmikli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.arnette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.clearly.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.clearly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.clearly.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.contactsdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.costadelmar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.davidclulow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.framesdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.glasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.grandvision.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.impossible-frames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.impossible-frames.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.laubmanandpank.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.lenscrafters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.nativeyewear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.oakley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.oakleysi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.oliverpeoples.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.opsm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.oticascarol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.persol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.salmoiraghievigano.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.sunglasshut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.targetoptical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.transitions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.vogue-eyewear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2-eln1.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.alainmikli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.arnette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.clearly.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.clearly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.clearly.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.contactsdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.costadelmar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.davidclulow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.framesdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.glasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.grandvision.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.impossible-frames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.impossible-frames.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.laubmanandpank.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.lenscrafters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.oakley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.oliverpeoples.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.opsm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.oticascarol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.persol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.salmoiraghievigano.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.sunglasshut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.targetoptical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.vogue-eyewear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.ray-ban.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.sunglasshut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images2.ray-ban.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-cltl.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-eln1.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-housebrands.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-lens.essilor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-multiplatform.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-multiplatformh2.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-my.essilorluxottica.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-onesight.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.alainmikli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.arnette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.clearly.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.clearly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.clearly.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.contactsdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.costadelmar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.davidclulow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.essilor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.framesdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.glasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.grandvision.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.impossible-frames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.impossible-frames.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.laubmanandpank.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.lenscrafters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.nativeyewear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.oakley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.oakleysi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.oliverpeoples.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.one.essilorluxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.opsm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.oticascarol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.persol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.ray-ban.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.salmoiraghievigano.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.sunglasshut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.targetoptical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.transitions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.vogue-eyewear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myluxottica-im2.essilorluxottica.com.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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