webmail.luxotticaretail.com

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 98:d0:09:5f:e2:2f:7b:a8 was issued on by GoDaddy.com, Inc..

With 44 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=webmail.luxotticaretail.com,OU=Domain Control Validated

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 98:d0:09:5f:e2:2f:7b:a8
Serial Number (int): 11011311396342168488
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: db:ef:43:73:c8:3a:7c:ab:c8:5b:1c:b1:af:19:05:55:7e:44:0b:ac
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): ae:ed:5c:64:fa:38:1d:f6:0e:f0:bc:ea:7c:5a:71:81:18:f0:2c:f8
Fingerprint (sha256): 34:e8:19:e4:86:bb:5d:aa:ae:fa:78:37:93:e9:9b:88:f7:1b:87:8a:28:de:8e:e9:1b:4f:d6:54:82:29:74:8a

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-1215.crl

Check the revocation status for certificate webmail.luxotticaretail.com

44

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.luxotticaretail.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.luxotticaretail.com
www.webmail.luxotticaretail.com
autodiscover.eyemedvisioncare.com
outlook-alp.luxgroup.net
autodiscover.eyewearspecialoffers.com
webmail.oakley.com
autodiscover.migrate.luxotticaretail.com
autodiscover.iloristyle.com
autodiscover.onesight.org
autodiscover.eyemed.com
usswmelxp007.luxgroup.net
autodiscover.lux-oo.net
autodiscover.givethegiftofsight.com
autodiscover.ecpa.com
autodiscover.sunglasshut.com
webmail-alp.luxotticaretail.com
autodiscover.arnette.com
autodiscover.pearlevision.com
www.webmail.oakley.com
autodiscover.eyemedcontacts.com
autodiscover.luxotticaretail.com
usalmelxp005.luxgroup.net
autodiscover.nextoreretail.com
usswmelxp006.luxgroup.net
usswmelxp005.luxgroup.net
autodiscover.glasses.com
usalmelxp006.luxgroup.net
autodiscover.oliverpeoples.com
usalmelxp007.luxgroup.net
rpc.luxotticaretail.com
webmail.glasses.com
autodiscover.esseyepro.com
autodiscover.lenscrafters.com
webmail.esseyepro.com
autodiscover.us.luxottica.com
autodiscover.oakley.com
webmail.arnette.com
autodiscover.labservices.luxottica.com
webmail.us.luxottica.com
autodiscover.nextore-retail.com
webmail.lux-oo.net
webmail-test.luxotticaretail.com
outlook-suw.luxgroup.net
webmail.oliverpeoples.com

Other certificates including the domain name luxotticaretail.com

(limited to 100 certificates)
esp.luxotticaretail.com
access.luxgroup.net
bluroom.luxotticaretail.com
esp.luxotticaretail.com
webmail.luxottica.com
www.luxotticaretail.com
*.luxotticaretail.com
inventoryqa.luxotticaretail.com
lyncpool.luxgroup.net
cst.luxotticaretail.com
myluxapps.luxotticaretail.com
lyncpool.luxgroup.net
cst.luxotticaretail.com
webmail.oakley.com
webmail.luxotticaretail.com
webmail.luxotticaretail.com
login.luxotticaretail.com
webmail.luxotticaretail.com
webmail.luxotticaretail.com
Access.luxgroup.net
login.luxotticaretail.com
sftp.luxotticaretail.com
mim.luxotticaretail.com
cst.luxotticaretail.com
sftp.luxotticaretail.com
vpn.luxotticaretail.com
luxapps.luxotticaretail.com
www.luxotticaretail.com
webmail.luxotticaretail.com
myluxapps.luxotticaretail.com
www.luxotticaretail.com
inventory.luxotticaretail.com
rsvpn.luxotticaretail.com
webmail.luxotticaretail.com
myluxapps.luxotticaretail.com
LYNCPOOL.luxgroup.net
lyncpool.luxgroup.net
*.luxotticaretail.com
inventory.luxotticaretail.com
webmail.luxotticaretail.com
rp1net.luxotticaretail.com
password.luxotticaretail.com
sapportallp1.luxotticaretail.com
access.luxgroup.net
webmail.luxotticaretail.com
LYNCPOOL.luxgroup.net
bluroom.luxotticaretail.com
sapportallp1.luxotticaretail.com
luxapps.luxotticaretail.com
webmail.luxotticaretail.com
sapportallp1.luxotticaretail.com
myluxapps.luxotticaretail.com
password.luxotticaretail.com
sftp.luxotticaretail.com
webmail.luxotticaretail.com
cst.luxotticaretail.com
rsvpn.luxotticaretail.com
password.luxotticaretail.com
sftp.luxotticaretail.com
webmail.luxotticaretail.com
luxapps.luxotticaretail.com
password.luxotticaretail.com
webchat.luxotticaretail.com
webmail.luxottica.com
webmail.oakley.com
inventory.luxotticaretail.com
sftp.luxotticaretail.com
remote.luxotticaretail.com
sftp.luxotticaretail.com
qa.mim.luxotticaretail.com

Certificate

The complete raw certificate details for webmail.luxotticaretail.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5sKNvVbpn5vFFWbBki+0
Rbd0vcqpbYnRWrCRZswhtfVDjra59egZpouLpm5mJqP0NOv4zGE00VNPDh93mZgP
GP1fvKH/7abjXtQwFB0YBTpnHXmbjPtWFjCAp1s5KJrMknD8Bm3EACfL1jRQqCJP
kCbwX+KOEfrqTqG+eMmCgMpLMc8GIh38lWUp2N3e052jBaca9fW3s3RS2MGg0ZmT
K+asA3+QPpfcuArDGLcn3GVbM4LUWV0nQHw5EQ5Yo2lwMYZxb7C93wQlYy+BMPsb
tJim8hWJujm83M6udH7fzAl+GaDfD5kZupVVEAbSXoiODFqL8IAcXCFNX6CIOmPE
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11011311396342168488
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-04 10:49:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-04 10:49:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.luxotticaretail.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29130748132696763261240140386948730005940779441706920644973021440142202603342460490006109106157377776617702321327036500697018139714540696211925069838909946114354418733295893761817661545494760999268715209117603763647778001686400721382473255664928448986191640067717386667019768667679845415450008812177839916537424887512390308266199435848647646724423589617933289302523270761075717526771163532788382070039595989605714974376490072363814870389600155419551548670634623555159774348398793012160658238937828098545073942839118724670237719037965625959072487061855185935719239100498155875883364628762622628131389997996282466255981
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-1215.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1268 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.luxotticaretail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webmail.luxotticaretail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.eyemedvisioncare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outlook-alp.luxgroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.eyewearspecialoffers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.oakley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.migrate.luxotticaretail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.iloristyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.onesight.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.eyemed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usswmelxp007.luxgroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.lux-oo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.givethegiftofsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ecpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.sunglasshut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail-alp.luxotticaretail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.arnette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.pearlevision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webmail.oakley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.eyemedcontacts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.luxotticaretail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usalmelxp005.luxgroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.nextoreretail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usswmelxp006.luxgroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usswmelxp005.luxgroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.glasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usalmelxp006.luxgroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.oliverpeoples.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usalmelxp007.luxgroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rpc.luxotticaretail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.glasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.esseyepro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.lenscrafters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.esseyepro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.us.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.oakley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.arnette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.labservices.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.us.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.nextore-retail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.lux-oo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail-test.luxotticaretail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outlook-suw.luxgroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.oliverpeoples.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dbef4373c83a7cabc85b1cb1af1905557e440bac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016bbc9a81840000040300483046022100c481a030d7949ed5b43ef719e9c2e966e3324ebcd3600bce928dad10d2e6fd68022100cee6248cba380875f2c26446fe198ff936a241e12f3b713b26962b5ae73f786f0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016bbc9a872f0000040300463044022026617b68b8cc62ad3bf928caa1227999fc76d8016f9ddf17191eb7e741a2de150220039552d6165af97c8f1c32f2a454beef855a9612d51f47de8b354e09b7e56c5c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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