uat-ecomm.luxottica.com

- Luxottica Group S.p.A. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 04:8b:14:66:56:5c:f7:f3:f1:23:89:3c:b8:70:a9:13 was issued on by DigiCert Inc.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Luxottica Group S.p.A.

Organization: Luxottica Group S.p.A.
Locality: Lauriano
Country: IT

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:8b:14:66:56:5c:f7:f3:f1:23:89:3c:b8:70:a9:13
Serial Number (int): 6039055002668756964848063906795530515
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: fa:c3:81:72:a5:31:df:77:91:50:b5:ef:c7:60:2f:bc:28:31:88:1c
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 4a:fa:a1:a5:46:f6:23:9b:41:4b:9a:31:51:0f:39:90:1a:d9:5f:b3
Fingerprint (sha256): 41:41:2b:76:d6:d8:ac:a3:64:dd:c1:6f:f0:df:ce:4f:a2:3a:08:ad:24:20:5f:ed:72:ba:b3:34:b5:2d:c2:58

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate uat-ecomm.luxottica.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uat-ecomm.luxottica.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

uat-ecomm.luxottica.com
acceptance.oliverpeoples.com
acceptance.oticascarol.com.br
acceptance.persol.com
acceptance.ray-ban.com
acceptance.ray-ban.com.cn
acceptance.vogue-eyewear.com
acceptance1.ray-ban.com
acceptance1.ray-ban.com.cn
api-uat.framesdirect.com
integration.ray-ban.com
integration.ray-ban.com.cn
integration1.ray-ban.com
integration1.ray-ban.com.cn
m.acceptance.ray-ban.com.cn
m.integration.ray-ban.com.cn
preprod-api-telemedicine-pilot.luxottica.com
preprod-api-telemedicine-showroom.luxottica.com
preprod-dviewer-telemedicine.luxottica.com
preprod-patient-telemedicine-showroom.luxottica.com
preprod-pilot-patient-telemedicine.luxottica.com
preprod-telemedicine-pilot.luxottica.com
preprod-telemedicine-showroom.luxottica.com
preprod-telemedicine.luxottica.com
stg-auth.visionx.solutions
stg-connect-dviewer.visionx.solutions
stg-connect-ehr.visionx.solutions
stg-patient-consultation.visionx.solutions
stg.visionx.solutions
uat-api.arnette.com
uat-api.clearly.ca
uat-api.clearly.co.nz
uat-api.clearly.com.au
uat-api.davidclulow.com
uat-auth.visionx.solutions
uat-connect-dviewer.visionx.solutions
uat-connect-ehr.visionx.solutions
uat-patient-consultation.visionx.solutions
uat.alainmikli.com
uat.arnette.com
uat.clearly.ca
uat.clearly.co.nz
uat.clearly.com.au
uat.contactsdirect.com
uat.costadelmar.com
uat.davidclulow.com
uat.eyexamofca.com
uat.framesdirect.com
uat.glasses.com
uat.lenscrafters.ca
uat.lenscrafters.com
uat.nativeyewear.com
uat.opsm.co.nz
uat.opsm.com.au
uat.pearlevision.ca
uat.pearlevision.com
uat.salmoiraghievigano.it
uat.sunglasshut.com
uat.targetoptical.com
uat.transitions.com
uat.visionx.solutions
uat2.glasses.com
uat2.sunglasshut.com
www-cloud.oakley.com
www-cloud.oakleysi.com
www-fix-cloud.oakley.com
www-fix-cloud.oakleysi.com
www-fix.oakley.com
www-fix.oakleysi.com
www-qa-cloud.oakley.com
www-qa-cloud.oakleysi.com
www-qa.oakley.com
www-qa.oakleysi.com
www-stg-cloud.oakley.com
www-stg-cloud.oakleysi.com
www-stg.oakley.com
www-stg.oakleysi.com
www1.arnette.com
www1.clearly.ca
www1.clearly.co.nz
www1.clearly.com.au
www1.davidclulow.com
www1.framesdirect.com
www1.ray-ban.com
www1.ray-ban.com.cn
www1.transitions.com
www1.visiondirect.be
www1.visiondirect.co.uk
www1.visiondirect.de
www1.visiondirect.es
www1.visiondirect.fr
www1.visiondirect.ie
www1.visiondirect.it
www1.visiondirect.nl
www1.visiondirect.pt
www1.visiondirect.se

Other certificates including the domain name luxottica.com

(limited to 100 certificates)
www.luxottica.com
sni1bd6egl.wpc.edgecastcdn.net
support9.cdnetworks.net
uat-ecomm.luxottica.com
university.luxottica.com
support9.cdnetworks.net
support5.cdnetworks.net
www.luxottica.com
ai.kures.co
support9.cdnetworks.net
www.luxottica.com
support9.cdnetworks.net
www.luxottica.com
crm-sunglasshut.luxottica.com
www.luxottica.com
*.luxottica.com
certi-myapi.luxottica.com
myl-cms.luxottica.com
infotools.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
uat-ecomm.luxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
www.luxottica.com
www.luxottica.com
businessgame.luxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
www.luxottica.com
support9.cdnetworks.net
access.luxgroup.net
dev-virtualmirror-m4c.luxottica.com
rcspqua.luxottica.com
support9.cdnetworks.net
qa-eyecare.luxottica.com
uat-multi-cms.luxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
events.luxotticaeyecare.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
studio.luxotticaeyecare.luxottica.com
support9.cdnetworks.net
servicedesk.br.luxottica.com
corporateidentity.luxottica.com
www.luxottica.com
support5.cdnetworks.net
support9.cdnetworks.net
businessgame.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
news.luxottica.com
support9.cdnetworks.net
www.essilorluxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
my.luxottica.com
support9.cdnetworks.net
sni1df38gl.wpc.edgecastcdn.net
chatbr.luxottica.com
www.luxottica.com
img-b2c.luxottica.com
www.luxottica.com
www.luxottica.com
www.luxottica.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
data.wordlift.io
www.luxottica.com
www.essilorluxottica.com
jobs.luxottica.com
kibana.prod-sro.luxgroup.net
support9.cdnetworks.net
support9.cdnetworks.net
webmail.cn.luxottica.com
businessgame.luxottica.com
my.luxottica.com
sni1c11bgl.wpc.edgecastcdn.net
uat-ecomm.luxottica.com

Certificate

The complete raw certificate details for uat-ecomm.luxottica.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEbGuIsyzyC9BeaMufJZUjQn5OE4TE
GHvC0336OKTjKIYEE8OW5rCcfrNO43IN5YXd628qFgmt/kFuIedwdlIaRw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6039055002668756964848063906795530515
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lauriano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxottica Group S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uat-ecomm.luxottica.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00046c6b88b32cf20bd05e68cb9f259523427e4e1384c4187bc2d37dfa38a4e328860413c396e6b09c7eb34ee3720de585ddeb6f2a1609adfe416e21e77076521a47
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fac38172a531df779150b5efc7602fbc2831881c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2481 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-ecomm.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acceptance.oliverpeoples.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acceptance.oticascarol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acceptance.persol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acceptance.ray-ban.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acceptance.ray-ban.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acceptance.vogue-eyewear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acceptance1.ray-ban.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acceptance1.ray-ban.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-uat.framesdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integration.ray-ban.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integration.ray-ban.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integration1.ray-ban.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integration1.ray-ban.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.acceptance.ray-ban.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.integration.ray-ban.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-api-telemedicine-pilot.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-api-telemedicine-showroom.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-dviewer-telemedicine.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-patient-telemedicine-showroom.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-pilot-patient-telemedicine.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-telemedicine-pilot.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-telemedicine-showroom.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-telemedicine.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-auth.visionx.solutions'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-connect-dviewer.visionx.solutions'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-connect-ehr.visionx.solutions'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-patient-consultation.visionx.solutions'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.visionx.solutions'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-api.arnette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-api.clearly.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-api.clearly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-api.clearly.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-api.davidclulow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-auth.visionx.solutions'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-connect-dviewer.visionx.solutions'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-connect-ehr.visionx.solutions'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-patient-consultation.visionx.solutions'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.alainmikli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.arnette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.clearly.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.clearly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.clearly.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.contactsdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.costadelmar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.davidclulow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.eyexamofca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.framesdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.glasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.lenscrafters.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.lenscrafters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.nativeyewear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.opsm.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.opsm.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.pearlevision.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.pearlevision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.salmoiraghievigano.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.sunglasshut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.targetoptical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.transitions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.visionx.solutions'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat2.glasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat2.sunglasshut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-cloud.oakley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-cloud.oakleysi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-fix-cloud.oakley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-fix-cloud.oakleysi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-fix.oakley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-fix.oakleysi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa-cloud.oakley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa-cloud.oakleysi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa.oakley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa.oakleysi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-stg-cloud.oakley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-stg-cloud.oakleysi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-stg.oakley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-stg.oakleysi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.arnette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.clearly.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.clearly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.clearly.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.davidclulow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.framesdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.ray-ban.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.ray-ban.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.transitions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.visiondirect.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.visiondirect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.visiondirect.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.visiondirect.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.visiondirect.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.visiondirect.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.visiondirect.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.visiondirect.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.visiondirect.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.visiondirect.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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