www.targetoptical.com

- Target Corporation -

Issued by Verizon Public SureServer CA G14-SHA2

About this certificate

This digital certificate with serial number 08:dc:94:91:12:31:c2:0e:a1:3f:f8:31:b2:77:70:c4:55:b3:14:01 was issued on by Verizon Enterprise Solutions.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Target Corporation

Organization: Target Corporation
Organization unit: Luxottica Retail
State / Province: Ohio
Locality: Mason
Country: US

Verizon Enterprise Solutions

Organization: Verizon Enterprise Solutions
Organization unit: Cybertrust
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 08:dc:94:91:12:31:c2:0e:a1:3f:f8:31:b2:77:70:c4:55:b3:14:01
Serial Number (int): 50591032093713019754342408430150790053503374337
Serial Number lenght: 156 bits, 20 octets

SubjectKeyId: 8c:a3:09:0a:ca:f9:2d:9e:47:7d:19:bb:0d:7e:e3:a2:5a:91:4e:25
AuthorityKeyId: e4:2d:bb:91:01:65:26:1f:b4:7a:3f:a3:15:25:a4:ce:8c:44:33:3b

Fingerprint (sha1): 58:4d:54:c3:9f:5c:3b:fc:39:28:73:5c:38:1f:f5:4c:d9:95:10:b6
Fingerprint (sha256): 2a:df:83:eb:0c:6e:6c:5f:dd:ea:56:a9:7c:b5:cd:14:b5:b1:14:a7:60:bb:c1:60:60:cd:ed:68:1d:4e:36:47

Issuing Certificate URL: http://cacert.omniroot.com/vpssg142.crt
Issuing Certificate URL: http://cacert.omniroot.com/vpssg142.der

Revocation information

OCSP Server: http://vpssg142.ocsp.omniroot.com
CRL Distribution Point: http://vpssg142.crl.omniroot.com/vpssg142.crl

Check the revocation status for certificate www.targetoptical.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.targetoptical.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.targetoptical.com

Other certificates including the domain name targetoptical.com

(limited to 100 certificates)
www.luxottica.com
uat-ecomm.luxottica.com
www.luxottica.com
www.luxottica.com
www.luxottica.com
www.luxottica.com
uat-ecomm.luxottica.com
www.luxottica.com
www.luxottica.com
customercare.targetoptical.com
www.luxottica.com
www.luxottica.com
san1.yext-cdn.com
local.targetoptical.com
local.targetoptical.com
www.luxottica.com
targetoptical.com
e.targetoptical.com
locations.corelifeeatery.com
www.luxottica.com
www.lenscrafters.com
smetrics.targetoptical.com
www.luxottica.com
local.targetoptical.com
www.luxottica.com
www.luxottica.com
img-b2c.luxottica.com
www.luxottica.com
smetrics.targetoptical.com
www.luxottica.com
uat-ecomm.luxottica.com
www.luxottica.com
img-b2c.luxottica.com
www.luxottica.com
www.luxottica.com
www.targetoptical.com
rona.luxottica.com
www.luxottica.com
events.mkdleaguecity.com
local.targetoptical.com
targetoptical.com
www.luxottica.com
www.luxottica.com
www.luxottica.com
san1.yext-cdn.com
uat2.lenscrafters.com
img-b2c.luxottica.com
www.targetoptical.com
targetoptical.com
san1.yext-cdn.com
uat-ecomm.luxottica.com
uat.targetoptical.com
v7stage.targetoptical.com
smetrics.targetoptical.com
smetrics.targetoptical.com
www.luxottica.com
local.targetoptical.com
san1.yext-cdn.com
smetrics.targetoptical.com
local.targetoptical.com
www.lenscrafters.com
www.luxottica.com
www.luxottica.com
rona.luxottica.com
locations.snbconnect.com
www.luxottica.com
www.lenscrafters.com
www.luxottica.com
uat-ecomm.luxottica.com
uat-ecomm.luxottica.com
uat-ecomm.luxottica.com
www.luxottica.com
www.luxottica.com
www.luxottica.com
www.luxottica.com
www.luxottica.com
uat-ecomm.luxottica.com
www.luxottica.com
uat-ecomm.luxottica.com
san1.yext-cdn.com
uat-ecomm.luxottica.com
www.lenscrafters.com
local.targetoptical.com
uat-ecomm.luxottica.com
uat.lenscrafters.com
www.luxottica.com
customercare.targetoptical.com
www.luxottica.com
www.luxottica.com
events.constitutiondentalgroup.com
san1.yext-cdn.com
perf.targetoptical.com
uat-ecomm.luxottica.com
www.luxottica.com
v7stage.targetoptical.com
www.luxottica.com
smetrics.targetoptical.com
www.targetoptical.com
e.targetoptical.com
www.targetoptical.com

Certificate

The complete raw certificate details for www.targetoptical.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurcwwzGKNywGw38WWaDp
2gqsEA7tCklEPeV3+6s/fbiwOR0lwOGX6GqA1lDvgXdaE7fwovHr0EqLS1yOofuz
01vi+wSZqQSrM6GnUF6eiH1b7yvI7e32hJmg8oOeVx6Mw9kzRw4z50yw6ud1ZimQ
VtIBpIsQ8Z3dZIo6+soS8IjV08STyfU9zTBs0Jcz4HGZZOX+OZwWlxa1VXUdRPAr
aRvH1AhOF76Uzq6nxf1/B+KaHqBZQMOhH3tj9JkdPbxV1keyHT9UcVThxKS2FSHw
ULHAqVraryPic0zN5DgUxlxPq16n2AVhcWn1di0AmkMuGLPOO7hdEFA4J8dyu3Hw
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 50591032093713019754342408430150790053503374337
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Verizon Enterprise Solutions'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cybertrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Verizon Public SureServer CA G14-SHA2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-26 04:03:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-26 04:03:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ohio'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mason'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Target Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxottica Retail'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.targetoptical.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23570659315410507151526913414910543306582741702270919263932917552587318940749912686403623889884884523918949807475589116217964917724455650075167241591696482800242254737603846023627134022120024571205942179970165994830727379327504457041014422283247834527786362221369338532237860285863278054150934906151264199493224303242863623291329790672768132643139807068977024712046272751718727374696356420299952970809460655974490100311380198482142715411095019979552014282161477968814916847061886092909623012731487480311419293731759527424906563820699186980052834086810216786732155872883255489344187420395304472110796644614888932634657
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6334.1.50
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.omniroot.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (156 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://vpssg142.ocsp.omniroot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.omniroot.com/vpssg142.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.omniroot.com/vpssg142.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.targetoptical.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e42dbb910165261fb47a3fa31525a4ce8c44333b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://vpssg142.crl.omniroot.com/vpssg142.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8ca3090acaf92d9e477d19bb0d7ee3a25a914e25
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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