uat-ecomm.luxottica.com

- Luxottica Group S.p.A. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 05:9d:bb:12:fc:87:92:94:3c:e3:c9:81:98:43:aa:44 was issued on by DigiCert Inc.

With 75 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Luxottica Group S.p.A.

Organization: Luxottica Group S.p.A.
Locality: Milano
Country: IT

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:9d:bb:12:fc:87:92:94:3c:e3:c9:81:98:43:aa:44
Serial Number (int): 7465124900571475081964804199747398212
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 32:27:52:c6:0e:b9:4a:b2:66:e8:b1:ce:e8:26:41:d0:3f:f7:a5:9f
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): f6:4c:d4:eb:e1:e8:e5:aa:6c:0c:4a:e0:e5:89:84:a4:a2:69:45:51
Fingerprint (sha256): 2d:5f:02:81:37:06:ca:4f:23:32:ea:55:0d:08:bc:e0:e9:f8:91:4f:02:0d:26:d6:f0:1c:80:da:8e:9f:53:c3

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl

Check the revocation status for certificate uat-ecomm.luxottica.com

75

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uat-ecomm.luxottica.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

uat-ecomm.luxottica.com
www1.transitions.com
www1.ray-ban.com.cn
www1.ray-ban.com
www1.arnette.com
www.private.rayban.com
www.private.ray-ban.com
www.integration.rayban.com
www.integration.ray-ban.com
www.acceptance.ray-ban.com
www-stg.oakleysi.com
www-stg.oakley.com
www-stg-cloud.oakleysi.com
www-stg-cloud.oakley.com
www-qa.oakleysi.com
www-qa.oakley.com
www-qa-cloud.oakleysi.com
www-qa-cloud.oakley.com
www-fix.oakleysi.com
www-fix.oakley.com
www-fix-cloud.oakleysi.com
www-fix-cloud.oakley.com
www-cloud.oakleysi.com
www-cloud.oakley.com
uatimages.sunglasshut.com
uat2.sunglasshut.com
uat2.glasses.com
uat.transitions.com
uat.targetoptical.com
uat.sunglasshut.com
uat.salmoiraghievigano.it
uat.pearlevision.com
uat.pearlevision.ca
uat.opsm.com.au
uat.opsm.co.nz
uat.nativeyewear.com
uat.lenscrafters.com
uat.lenscrafters.ca
uat.glasses.com
uat.eyexamofca.com
uat.costadelmar.com
uat.contactsdirect.com
uat.arnette.com
uat-api.arnette.com
private.vogue-eyewear.com
private.rayban.com
private.ray-ban.com
private.persol.com
private.oliverpeoples.com
private.arnette.com
perf.sunglasshut.com
m.integration.ray-ban.com.cn
m.integration.ray-ban.com
m.acceptance.ray-ban.com.cn
m.acceptance.ray-ban.com
m.acceptance-japan.ray-ban.com
integration1.ray-ban.com.cn
integration1.ray-ban.com
integration.rayban.com
integration.ray-ban.com.cn
integration.ray-ban.com
chinastaging.ray-ban.com
acceptance1.ray-ban.com.cn
acceptance1.ray-ban.com
acceptance.vogue-eyewear.com
acceptance.ray-ban.com.cn
acceptance.ray-ban.com
acceptance.persol.com
acceptance.oticascarol.com.br
acceptance.opsm.com.au
acceptance.opsm.co.nz
acceptance.oliverpeoples.com
acceptance.arnette.com
acceptance-japan.ray-ban.com
acceptance-china.ray-ban.com

Other certificates including the domain name luxottica.com

(limited to 100 certificates)
www.luxottica.com
sni1bd6egl.wpc.edgecastcdn.net
support9.cdnetworks.net
uat-ecomm.luxottica.com
university.luxottica.com
support9.cdnetworks.net
support5.cdnetworks.net
www.luxottica.com
ai.kures.co
support9.cdnetworks.net
www.luxottica.com
support9.cdnetworks.net
www.luxottica.com
crm-sunglasshut.luxottica.com
www.luxottica.com
*.luxottica.com
certi-myapi.luxottica.com
myl-cms.luxottica.com
infotools.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
uat-ecomm.luxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
www.luxottica.com
www.luxottica.com
businessgame.luxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
www.luxottica.com
support9.cdnetworks.net
access.luxgroup.net
dev-virtualmirror-m4c.luxottica.com
rcspqua.luxottica.com
support9.cdnetworks.net
qa-eyecare.luxottica.com
uat-multi-cms.luxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
events.luxotticaeyecare.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
studio.luxotticaeyecare.luxottica.com
support9.cdnetworks.net
servicedesk.br.luxottica.com
corporateidentity.luxottica.com
www.luxottica.com
support5.cdnetworks.net
support9.cdnetworks.net
businessgame.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
news.luxottica.com
support9.cdnetworks.net
www.essilorluxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
my.luxottica.com
support9.cdnetworks.net
sni1df38gl.wpc.edgecastcdn.net
chatbr.luxottica.com
www.luxottica.com
img-b2c.luxottica.com
www.luxottica.com
www.luxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
data.wordlift.io
www.luxottica.com
www.essilorluxottica.com
jobs.luxottica.com
kibana.prod-sro.luxgroup.net
support9.cdnetworks.net
support9.cdnetworks.net
webmail.cn.luxottica.com
businessgame.luxottica.com
my.luxottica.com
sni1c11bgl.wpc.edgecastcdn.net
uat-ecomm.luxottica.com

Certificate

The complete raw certificate details for uat-ecomm.luxottica.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFYuzhTopYYcYOZse7Xz
ig2aPoY7kAH8xEe3ierBTbzvOWgFmNeJC5Q8OTdKpNLz5T+7LX2NAm1cMvb9o3Bk
+3gR9n640yL+qbKOBnJ+aLI+KGSZjLPitfz3qihPkIF0DAozNEI4ahTUu3UR+3Us
/GIXI/OdoewwmzebHVilUF1Un3SUHQbiHwHZf/KSY1cDOFegASugXhjMyiqczez6
Bo339cd5oRvyK/nToy22z/yEvsMrKtn06ge3bmiBa/qGB99i0tD7AhscWcjRPtWL
cxND3i23NpkyBkS24a/QAFp2iSFXzn80+Bez9y9xedpg5//HNxKNlqjgdUvRb2rv
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7465124900571475081964804199747398212
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxottica Group S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uat-ecomm.luxottica.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25290159331633700306138746023351733175629978248465823742394552912840757335651090665619276802967834138312129078971603886738104409953938289865346840107439341168226057965866062093597075715776301173545277857373728183101159481910393607419387397638265003904561754910797440326336129047268294386134010600250286793685585248874297734401724716087845631248301938974775159495274591647448455007654541539211170287700819519881617392305352303476763921391763530527776183295844809008660498987901511625921650153129962453181441328895132532307557610366512588544298339939996104325382402690641447439141681048086300028022159246028080560140063
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							322752c60eb94ab266e8b1cee82641d03ff7a59f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1801 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-ecomm.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.transitions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.ray-ban.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.ray-ban.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.arnette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.private.rayban.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.private.ray-ban.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.integration.rayban.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.integration.ray-ban.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acceptance.ray-ban.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-stg.oakleysi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-stg.oakley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-stg-cloud.oakleysi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-stg-cloud.oakley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa.oakleysi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa.oakley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa-cloud.oakleysi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa-cloud.oakley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-fix.oakleysi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-fix.oakley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-fix-cloud.oakleysi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-fix-cloud.oakley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-cloud.oakleysi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-cloud.oakley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatimages.sunglasshut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat2.sunglasshut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat2.glasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.transitions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.targetoptical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.sunglasshut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.salmoiraghievigano.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.pearlevision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.pearlevision.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.opsm.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.opsm.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.nativeyewear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.lenscrafters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.lenscrafters.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.glasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.eyexamofca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.costadelmar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.contactsdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.arnette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-api.arnette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'private.vogue-eyewear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'private.rayban.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'private.ray-ban.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'private.persol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'private.oliverpeoples.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'private.arnette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf.sunglasshut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.integration.ray-ban.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.integration.ray-ban.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.acceptance.ray-ban.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.acceptance.ray-ban.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.acceptance-japan.ray-ban.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integration1.ray-ban.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integration1.ray-ban.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integration.rayban.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integration.ray-ban.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integration.ray-ban.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinastaging.ray-ban.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acceptance1.ray-ban.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acceptance1.ray-ban.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acceptance.vogue-eyewear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acceptance.ray-ban.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acceptance.ray-ban.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acceptance.persol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acceptance.oticascarol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acceptance.opsm.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acceptance.opsm.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acceptance.oliverpeoples.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acceptance.arnette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acceptance-japan.ray-ban.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acceptance-china.ray-ban.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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