webmail.luxotticaretail.com

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 7f:86:58:9a:60:51:6d:b0 was issued on by GoDaddy.com, Inc..

With 46 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=webmail.luxotticaretail.com,OU=Domain Control Validated

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7f:86:58:9a:60:51:6d:b0
Serial Number (int): 9189129509760232880
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: 80:54:04:37:af:70:c1:8f:9f:74:7a:37:11:a0:10:b0:cd:b4:b1:24
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): f4:8b:1d:dd:37:59:c4:89:43:f0:84:be:f5:60:a5:f5:2b:65:24:19
Fingerprint (sha256): 40:47:37:ca:23:1d:31:b0:a1:e7:eb:2f:2b:5c:7c:f4:a1:dd:ea:93:22:b2:67:f7:67:7c:11:fb:fc:1c:e7:3c

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-827.crl

Check the revocation status for certificate webmail.luxotticaretail.com

46

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.luxotticaretail.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.luxotticaretail.com
www.webmail.luxotticaretail.com
autodiscover.lux-oo.net
autodiscover.givethegiftofsight.com
autodiscover.onesight.org
usswmelxp007.luxgroup.net
autodiscover.nextoreretail.com
autodiscover.glasses.com
autodiscover.ecpa.com
usswmelxp006.luxgroup.net
usalmelxp006.luxgroup.net
webmail.n3loptics.com
usswmelxp005.luxgroup.net
autodiscover.oliverpeoples.com
autodiscover.sunglasshut.com
autodiscover.pearlevision.com
usalmelxp007.luxgroup.net
webmail-alp.luxotticaretail.com
www.webmail.oakley.com
usalmelxp005.luxgroup.net
autodiscover.eyemedcontacts.com
autodiscover.arnette.com
autodiscover.labservices.luxottica.com
autodiscover.nextore-retail.com
autodiscover.luxotticaretail.com
webmail.arnette.com
webmail-test.luxotticaretail.com
webmail.oliverpeoples.com
webmail.us.luxottica.com
webmail.lux-oo.net
autodiscover.n3loptics.com
autodiscover.esseyepro.com
outlook-suw.luxgroup.net
rpc.luxotticaretail.com
autodiscover.oakley.com
autodiscover.lenscrafters.com
webmail.glasses.com
webmail.esseyepro.com
webmail.oakley.com
autodiscover.eyemedvisioncare.com
autodiscover.us.luxottica.com
outlook-alp.luxgroup.net
autodiscover.migrate.luxotticaretail.com
autodiscover.iloristyle.com
autodiscover.eyewearspecialoffers.com
autodiscover.eyemed.com

Other certificates including the domain name luxotticaretail.com

(limited to 100 certificates)
esp.luxotticaretail.com
access.luxgroup.net
bluroom.luxotticaretail.com
esp.luxotticaretail.com
webmail.luxottica.com
www.luxotticaretail.com
*.luxotticaretail.com
inventoryqa.luxotticaretail.com
lyncpool.luxgroup.net
cst.luxotticaretail.com
myluxapps.luxotticaretail.com
lyncpool.luxgroup.net
cst.luxotticaretail.com
webmail.oakley.com
webmail.luxotticaretail.com
webmail.luxotticaretail.com
login.luxotticaretail.com
webmail.luxotticaretail.com
webmail.luxotticaretail.com
Access.luxgroup.net
login.luxotticaretail.com
sftp.luxotticaretail.com
mim.luxotticaretail.com
cst.luxotticaretail.com
sftp.luxotticaretail.com
vpn.luxotticaretail.com
luxapps.luxotticaretail.com
www.luxotticaretail.com
webmail.luxotticaretail.com
myluxapps.luxotticaretail.com
www.luxotticaretail.com
inventory.luxotticaretail.com
rsvpn.luxotticaretail.com
webmail.luxotticaretail.com
myluxapps.luxotticaretail.com
LYNCPOOL.luxgroup.net
lyncpool.luxgroup.net
*.luxotticaretail.com
inventory.luxotticaretail.com
webmail.luxotticaretail.com
rp1net.luxotticaretail.com
password.luxotticaretail.com
sapportallp1.luxotticaretail.com
access.luxgroup.net
webmail.luxotticaretail.com
LYNCPOOL.luxgroup.net
bluroom.luxotticaretail.com
sapportallp1.luxotticaretail.com
luxapps.luxotticaretail.com
webmail.luxotticaretail.com
sapportallp1.luxotticaretail.com
myluxapps.luxotticaretail.com
password.luxotticaretail.com
sftp.luxotticaretail.com
webmail.luxotticaretail.com
cst.luxotticaretail.com
rsvpn.luxotticaretail.com
password.luxotticaretail.com
sftp.luxotticaretail.com
webmail.luxotticaretail.com
luxapps.luxotticaretail.com
password.luxotticaretail.com
webchat.luxotticaretail.com
webmail.luxottica.com
webmail.oakley.com
inventory.luxotticaretail.com
sftp.luxotticaretail.com
remote.luxotticaretail.com
sftp.luxotticaretail.com
qa.mim.luxotticaretail.com

Certificate

The complete raw certificate details for webmail.luxotticaretail.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxh6UixQ278E/+YS+6jLp
TV9V2EZKfTlvkRnlkiBclIo5sApZO7586E6w4Jwca75Av6KCA+ccBSvGpwXqgItb
bV+7WfiXyF0Jx1OhAxdvj2hXRAGGAsQ+7dJVsXc6CwYzpNBkxLy9u5KEuBy3q/hU
tgfeMgZOgSTWGOJ2Kz3ueASQDgRkcSAuLy5CcS6Re1SU00HE8NiFlROmTQyJE2qr
vcVXawH7eGenaT8xpQDpKtqpjUOlDyOntV/kLiGnLByVVtvbQaNC3C56j459RuM+
gX1M157/IdaSYdH9xL6wself6DNaRQNYPR598bvR7gZ3vjEB60vlB0nlM2kaIvtQ
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9189129509760232880
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-06 14:25:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-05 17:19:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.luxotticaretail.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25010264065189812191300568522026239259913075054935545286674521749243777271668699522915914200386556430793927992629598753036437403740598279269865711791488543970912035560872405938202308192778669781825445838174237669770231523436676264140027045940471837086437599840256877193726870732247414022089648470228938937041871855901164870836140785803854042450252266040236962849918879833658609468580309822449394413295513199298621389402868250108732033983607940394973798101013966213930160731713773009431123075466582478827839929304239304893172836665578093496378560102912595657094693349409127980832505284363325652659637359808983445753863
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-827.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1319 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.luxotticaretail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webmail.luxotticaretail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.lux-oo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.givethegiftofsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.onesight.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usswmelxp007.luxgroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.nextoreretail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.glasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ecpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usswmelxp006.luxgroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usalmelxp006.luxgroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.n3loptics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usswmelxp005.luxgroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.oliverpeoples.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.sunglasshut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.pearlevision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usalmelxp007.luxgroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail-alp.luxotticaretail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webmail.oakley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usalmelxp005.luxgroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.eyemedcontacts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.arnette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.labservices.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.nextore-retail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.luxotticaretail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.arnette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail-test.luxotticaretail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.oliverpeoples.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.us.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.lux-oo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.n3loptics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.esseyepro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outlook-suw.luxgroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rpc.luxotticaretail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.oakley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.lenscrafters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.glasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.esseyepro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.oakley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.eyemedvisioncare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.us.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outlook-alp.luxgroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.migrate.luxotticaretail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.iloristyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.eyewearspecialoffers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.eyemed.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							80540437af70c18f9f747a3711a010b0cdb4b124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016335d831b00000040300483046022100a1d56f19a017fbd85f45ad36a5e644b06c7a089bdd05fd073d4b712764531edb022100a2f7a15975180de5534e66037e5ce39df9484b15db80b0f6ba3f25dc66013e23007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016335d8347e0000040300473045022033744eec9bc9ff1897fe1e1af8d40dbbe12b7cbe55fe50e4d32608caea61c271022100988e1ca2dc4729a11ccba6e2bb44b20bd75de0f963375b2e10161e2d5b8fff2a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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