ps2b.tiffany.com

- Tiffany & Co. -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 60:3c:0f:dd:35:fa:6b:d2:8e:6b:79:c1:70:32:6a:61 was issued on by COMODO CA Limited.

With 69 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Tiffany & Co.

Organization: Tiffany & Co.
Organization unit: IT
Organization unit: Unified Communications
Address: 727 Fifth Avenue
Postal code: 10022
State / Province: NY
Locality: New York
Country: US

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 60:3c:0f:dd:35:fa:6b:d2:8e:6b:79:c1:70:32:6a:61
Serial Number (int): 127917747169137430036679573463394052705
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 43:aa:93:1c:8d:03:92:90:f3:de:1f:82:21:15:de:b4:be:38:e7:ec
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): 50:8e:48:39:5d:26:8a:9f:14:18:5e:ba:7b:bb:e4:2f:6f:18:13:36
Fingerprint (sha256): 16:c8:a8:38:d2:08:eb:cd:e7:4b:39:42:56:59:a1:4d:1a:f3:ec:54:16:3e:6c:f2:2f:04:84:c5:96:74:5c:a5

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate ps2b.tiffany.com

69

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ps2b.tiffany.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ps2b.tiffany.com
ps2.m-be.tiffany.com
ps2.m-fr.tiffany.ca
ps2.m-international.tiffany.com
ps2.m-nl.tiffany.com
ps2.m-zh.tiffany.com
ps2.m.tiffany.at
ps2.m.tiffany.ca
ps2.m.tiffany.cn
ps2.m.tiffany.co.jp
ps2.m.tiffany.co.uk
ps2.m.tiffany.com
ps2.m.tiffany.com.au
ps2.m.tiffany.com.br
ps2.m.tiffany.com.mx
ps2.m.tiffany.de
ps2.m.tiffany.es
ps2.m.tiffany.fr
ps2.m.tiffany.ie
ps2.m.tiffany.it
ps2.m.tiffany.kr
ps2.pkb.tiffany.com
www.ps2.be.tiffany.com
www.ps2.estore-tco.com
www.ps2.estore-tco.jp
www.ps2.fr.tiffany.ca
www.ps2.international.tiffany.com
www.ps2.nl.tiffany.com
www.ps2.tiffany.at
www.ps2.tiffany.ca
www.ps2.tiffany.cn
www.ps2.tiffany.co.jp
www.ps2.tiffany.co.uk
www.ps2.tiffany.com
www.ps2.tiffany.com.au
www.ps2.tiffany.com.br
www.ps2.tiffany.com.mx
www.ps2.tiffany.com.ru
www.ps2.tiffany.de
www.ps2.tiffany.es
www.ps2.tiffany.fr
www.ps2.tiffany.ie
www.ps2.tiffany.it
www.ps2.tiffany.kr
www.ps2.tiffanytrade.com
www.ps2.tiffanytrade.jp
www.ps2b.be.tiffany.com
www.ps2b.estore-tco.com
www.ps2b.estore-tco.jp
www.ps2b.fr.tiffany.ca
www.ps2b.international.tiffany.com
www.ps2b.nl.tiffany.com
www.ps2b.tiffany.at
www.ps2b.tiffany.ca
www.ps2b.tiffany.cn
www.ps2b.tiffany.co.jp
www.ps2b.tiffany.co.uk
www.ps2b.tiffany.com
www.ps2b.tiffany.com.au
www.ps2b.tiffany.com.br
www.ps2b.tiffany.com.mx
www.ps2b.tiffany.de
www.ps2b.tiffany.es
www.ps2b.tiffany.fr
www.ps2b.tiffany.ie
www.ps2b.tiffany.it
www.ps2b.tiffany.kr
www.ps2b.tiffany.ru
www.ps2b.zh.tiffany.com

Other certificates including the domain name tiffany.com

(limited to 100 certificates)
appointments.tiffany.com
neo.tiffany.com
cara.tiffany.com
media.tiffany.com
www.tiffany.com
pa.tiffany.com
international.tiffany.com
subscribe.tiffany.com
ukukcacs02.tiffany.com
dev3.edev.tiffany.com
neo.tiffany.com
media.tiffany.com
san-002.ceros.com
qa2-aem.tiffany.com
uk.tiffany.com
qa2-aem.tiffany.com
www.tiffany.com
leapfrog-ssl-9.gcs-web.com
subscribe.tiffany.com
pkb.tiffany.com
www.tiffany.es
www.tiffany.com
neo.tiffany.com
san-002.ceros.com
www.tiffany.com
fonts.tiffany.com
appfront.tiffany.com
api.tiffany.com
www.tiffany.es
qa3-aem.tiffany.com
subscribe.tiffany.com
www.tiffany.com
sts.tiffany.com
san-002.ceros.com
media.tiffany.com
cara.tiffany.com
secure5s.scene7.com
subscribe.tiffany.com
san-002.ceros.com
mi.tiffany.com
san-002.ceros.com
san-35-s12.tlsprovisioning.exacttarget.com
san-002.ceros.com
uk.tiffany.com
neo.tiffany.com
www.pa.tiffany.com
san-35-s12.tlsprovisioning.exacttarget.com
san-002.ceros.com
sstats.be.tiffany.com
ps2b.tiffany.com
sts.tiffany.com
cybebrark.tiffany.com
san-35-s12.tlsprovisioning.exacttarget.com
san-002.ceros.com
san-002.ceros.com
tconsacsp04.tiffany.com
leapfrog-ssl-9.gcs-web.com
subscribe.tiffany.com
adobeconsole-qa.tiffany.com
qa-cara.tiffany.com
san-002.ceros.com
ps2b.tiffany.com
hk-payment.tiffany.com
mail.tiffany.com
leapfrog-ssl-9.gcs-web.com
mail.tiffany.com
ukukcacs01.tiffany.com
connect.tiffany.com
www.tiffany.com
sftp.tiffany.com
connect.tiffany.com
san-35-s12.tlsprovisioning.exacttarget.com
ukukcacs02.tiffany.com
t.tco.tiffany.com
neo.tiffany.com
media.tiffany.com
ringfinder-stage.tiffany.com
tco.tiffany.com
www.tiffany.com
www.pa.tiffany.com
qa-api.tiffany.com
sts.tiffany.com
qa1-aem.tiffany.com
test1.edev.tiffany.com
mail.tiffany.com
qa-api.tiffany.com
www.estore-tco.com
qa1-aem.tiffany.com
appfront.tiffany.com
san-002.ceros.com
san-002.ceros.com
www.estore-tco.com
sstats.tiffany.com
san-35-s12.tlsprovisioning.exacttarget.com
sftp.tiffany.com
leapfrog-ssl-9.gcs-web.com
www.tiffany.com
www.qa1.tiffany.com
enroll.tiffany.com
www.tiffany.es

Certificate

The complete raw certificate details for ps2b.tiffany.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMvjCCC6agAwIBAgIQYDwP3TX6a9KOa3nBcDJqYTANBgkqhkiG9w0BAQsFADCB
ljELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G
A1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxPDA6BgNV
BAMTM0NPTU9ETyBSU0EgT3JnYW5pemF0aW9uIFZhbGlkYXRpb24gU2VjdXJlIFNl
cnZlciBDQTAeFw0xODEwMTkwMDAwMDBaFw0yMDEwMTgyMzU5NTlaMIG5MQswCQYD
VQQGEwJVUzEOMAwGA1UEERMFMTAwMjIxCzAJBgNVBAgTAk5ZMREwDwYDVQQHEwhO
ZXcgWW9yazEZMBcGA1UECRMQNzI3IEZpZnRoIEF2ZW51ZTEWMBQGA1UECgwNVGlm
ZmFueSAmIENvLjELMAkGA1UECxMCSVQxHzAdBgNVBAsTFlVuaWZpZWQgQ29tbXVu
aWNhdGlvbnMxGTAXBgNVBAMTEHBzMmIudGlmZmFueS5jb20wggIiMA0GCSqGSIb3
DQEBAQUAA4ICDwAwggIKAoICAQDKvlffUiBZrlu/ZuvEl7lb+bqC3Z2N6D/WO022
gWg5GXrPLpo64VVawPbQ47F3i2ZwBbffuhOMqwYlZ1P2pJ8tow3Acx/QQvlHwadm
VC5eaXwYqbSofn4pIp0LofaxFpNqIi3L66spaUFDQPs5m+BoERXLSTiVEGCjyxEg
gEnqz2uW0p9x4cOrePjkwpjNX0RCOp05yFNNu3uPVrvH7k5M22+is23+jPCflthH
62EE68tqnVW067ksfP+1oyu2alF/8ooQ9W4Mn5owj0qt+oYDkbvgkBtzBoYpE5ID
wyr8JWoXgt1AZSk+rG++b663KPkZyQHGkUMtYUz8uqgSNLdRttInRMFNgnNCrH6M
R82gEJu03/mr6gD63t7VXXnz6Mpf8aRknixNohk8+fhkXzRazyvYjSYv/u55GUvr
w8alVRwlnIvIdIdo5y3e6n7QG78Kx4RKEnTGRhixqPmJJmtiypxV85bAxTLkBM8y
UnBw1NTNvosroFpbJgDUuxXc6r7qiJfbl908IOdavUf3iT8AbWO2NBLPO0Dxvzlx
t0iojwpPWqPLpHUuFBictAaF/RA1eS5rbucCJ331b01OeKsu3JdjXHCAkjTUkt9C
48ExjEb5p7MquFt1C62ad0aw0Wg7p2O8XJgDJvtTXNiICJ+e0gimTgMWYPW4yOh5
2EJH0wIDAQABo4IH4TCCB90wHwYDVR0jBBgwFoAUmvMr2s+tT7YvuypISCoStxtC
wSQwHQYDVR0OBBYEFEOqkxyNA5KQ894fgiEV3rS+OOfsMA4GA1UdDwEB/wQEAwIF
oDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBQ
BgNVHSAESTBHMDsGDCsGAQQBsjEBAgEDBDArMCkGCCsGAQUFBwIBFh1odHRwczov
L3NlY3VyZS5jb21vZG8uY29tL0NQUzAIBgZngQwBAgIwWgYDVR0fBFMwUTBPoE2g
S4ZJaHR0cDovL2NybC5jb21vZG9jYS5jb20vQ09NT0RPUlNBT3JnYW5pemF0aW9u
VmFsaWRhdGlvblNlY3VyZVNlcnZlckNBLmNybDCBiwYIKwYBBQUHAQEEfzB9MFUG
CCsGAQUFBzAChklodHRwOi8vY3J0LmNvbW9kb2NhLmNvbS9DT01PRE9SU0FPcmdh
bml6YXRpb25WYWxpZGF0aW9uU2VjdXJlU2VydmVyQ0EuY3J0MCQGCCsGAQUFBzAB
hhhodHRwOi8vb2NzcC5jb21vZG9jYS5jb20wEwYKKwYBBAHWeQIEAwEB/wQCBQAw
ggYLBgNVHREEggYCMIIF/oIQcHMyYi50aWZmYW55LmNvbYIUcHMyLm0tYmUudGlm
ZmFueS5jb22CE3BzMi5tLWZyLnRpZmZhbnkuY2GCH3BzMi5tLWludGVybmF0aW9u
YWwudGlmZmFueS5jb22CFHBzMi5tLW5sLnRpZmZhbnkuY29tghRwczIubS16aC50
aWZmYW55LmNvbYIQcHMyLm0udGlmZmFueS5hdIIQcHMyLm0udGlmZmFueS5jYYIQ
cHMyLm0udGlmZmFueS5jboITcHMyLm0udGlmZmFueS5jby5qcIITcHMyLm0udGlm
ZmFueS5jby51a4IRcHMyLm0udGlmZmFueS5jb22CFHBzMi5tLnRpZmZhbnkuY29t
LmF1ghRwczIubS50aWZmYW55LmNvbS5icoIUcHMyLm0udGlmZmFueS5jb20ubXiC
EHBzMi5tLnRpZmZhbnkuZGWCEHBzMi5tLnRpZmZhbnkuZXOCEHBzMi5tLnRpZmZh
bnkuZnKCEHBzMi5tLnRpZmZhbnkuaWWCEHBzMi5tLnRpZmZhbnkuaXSCEHBzMi5t
LnRpZmZhbnkua3KCE3BzMi5wa2IudGlmZmFueS5jb22CFnd3dy5wczIuYmUudGlm
ZmFueS5jb22CFnd3dy5wczIuZXN0b3JlLXRjby5jb22CFXd3dy5wczIuZXN0b3Jl
LXRjby5qcIIVd3d3LnBzMi5mci50aWZmYW55LmNhgiF3d3cucHMyLmludGVybmF0
aW9uYWwudGlmZmFueS5jb22CFnd3dy5wczIubmwudGlmZmFueS5jb22CEnd3dy5w
czIudGlmZmFueS5hdIISd3d3LnBzMi50aWZmYW55LmNhghJ3d3cucHMyLnRpZmZh
bnkuY26CFXd3dy5wczIudGlmZmFueS5jby5qcIIVd3d3LnBzMi50aWZmYW55LmNv
LnVrghN3d3cucHMyLnRpZmZhbnkuY29tghZ3d3cucHMyLnRpZmZhbnkuY29tLmF1
ghZ3d3cucHMyLnRpZmZhbnkuY29tLmJyghZ3d3cucHMyLnRpZmZhbnkuY29tLm14
ghZ3d3cucHMyLnRpZmZhbnkuY29tLnJ1ghJ3d3cucHMyLnRpZmZhbnkuZGWCEnd3
dy5wczIudGlmZmFueS5lc4ISd3d3LnBzMi50aWZmYW55LmZyghJ3d3cucHMyLnRp
ZmZhbnkuaWWCEnd3dy5wczIudGlmZmFueS5pdIISd3d3LnBzMi50aWZmYW55Lmty
ghh3d3cucHMyLnRpZmZhbnl0cmFkZS5jb22CF3d3dy5wczIudGlmZmFueXRyYWRl
Lmpwghd3d3cucHMyYi5iZS50aWZmYW55LmNvbYIXd3d3LnBzMmIuZXN0b3JlLXRj
by5jb22CFnd3dy5wczJiLmVzdG9yZS10Y28uanCCFnd3dy5wczJiLmZyLnRpZmZh
bnkuY2GCInd3dy5wczJiLmludGVybmF0aW9uYWwudGlmZmFueS5jb22CF3d3dy5w
czJiLm5sLnRpZmZhbnkuY29tghN3d3cucHMyYi50aWZmYW55LmF0ghN3d3cucHMy
Yi50aWZmYW55LmNhghN3d3cucHMyYi50aWZmYW55LmNughZ3d3cucHMyYi50aWZm
YW55LmNvLmpwghZ3d3cucHMyYi50aWZmYW55LmNvLnVrghR3d3cucHMyYi50aWZm
YW55LmNvbYIXd3d3LnBzMmIudGlmZmFueS5jb20uYXWCF3d3dy5wczJiLnRpZmZh
bnkuY29tLmJyghd3d3cucHMyYi50aWZmYW55LmNvbS5teIITd3d3LnBzMmIudGlm
ZmFueS5kZYITd3d3LnBzMmIudGlmZmFueS5lc4ITd3d3LnBzMmIudGlmZmFueS5m
coITd3d3LnBzMmIudGlmZmFueS5pZYITd3d3LnBzMmIudGlmZmFueS5pdIITd3d3
LnBzMmIudGlmZmFueS5rcoITd3d3LnBzMmIudGlmZmFueS5ydYIXd3d3LnBzMmIu
emgudGlmZmFueS5jb20wDQYJKoZIhvcNAQELBQADggEBADNmuhtqsUvtihjaMDKy
f/0TimI5ml28yWtEvfkpoZUSycYBFLw8wLabxckm6DS+Cb4g4cUZU+ZVQCIqj64Y
+qR8D7O8QdJSs6swXNjTCuFprCjm9EaokNbEa8m99G5u0kqHruayYoTL7TumewFB
lS+/lf4JHrJcPZXCJfy6Nw024ZJjt8W8pam/flmEUUju6xk7egdwI0WQ/iPuPnh4
SrCP3aTIHb9pcyfoqf30niMhJOOt1SB1R2lwErClGB+7d5N0pyQ7VgJJMcCwmEHO
X2CEWWOHthB6q+XQcN6IiPB+jTolAN07nZMoTotzU7ccK6AqoKXO7IIMGS439CFB
QKI=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 127917747169137430036679573463394052705
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '10022'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '727 Fifth Avenue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Tiffany & Co.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unified Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ps2b.tiffany.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 827121432663028116426438310852416197378542694515593897359091427676612307954470824803187274879682594060803065172533638342886335011712322058876996274471366181034156396440187899805782468939802594232575755735241866748020516133866340057881276115267840480186054776057208826600256629755014236273278343467437629728776364568907341113268674733251231208484953615218224283630840227452820007480649727711953605011553978397122770725599495890624254824286443040636642886356818539528162855784834470869699542825285457156609998899834142566003668724574120763921162421625885091179737714954226988141337801532704643092406342374539617209020739030531390248315198576309718213758070744527449627653309735171348071337264160814321990010364925688499349274974695398316536674614446909201172454689520881398410647301357585083422245079388015946203306490686461642534611760377299737227416665308312076855863906986986077635385996802718312683496312844097330420270459884365645201881321288622506087903486953036912070270704698768175690554199139304620429001740149475300569811740346702728393898647117255829910023241807051201950519208188203133701858948987412138069528202104620848940821408112820890663760838905831977869965357728202829242215266261426781572307042069007815257800984531
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							43aa931c8d039290f3de1f822115deb4be38e7ec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1538 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps2b.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps2.m-be.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps2.m-fr.tiffany.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps2.m-international.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps2.m-nl.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps2.m-zh.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps2.m.tiffany.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps2.m.tiffany.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps2.m.tiffany.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps2.m.tiffany.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps2.m.tiffany.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps2.m.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps2.m.tiffany.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps2.m.tiffany.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps2.m.tiffany.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps2.m.tiffany.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps2.m.tiffany.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps2.m.tiffany.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps2.m.tiffany.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps2.m.tiffany.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps2.m.tiffany.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps2.pkb.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2.be.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2.estore-tco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2.estore-tco.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2.fr.tiffany.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2.international.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2.nl.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2.tiffany.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2.tiffany.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2.tiffany.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2.tiffany.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2.tiffany.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2.tiffany.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2.tiffany.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2.tiffany.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2.tiffany.com.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2.tiffany.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2.tiffany.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2.tiffany.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2.tiffany.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2.tiffany.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2.tiffany.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2.tiffanytrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2.tiffanytrade.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2b.be.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2b.estore-tco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2b.estore-tco.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2b.fr.tiffany.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2b.international.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2b.nl.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2b.tiffany.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2b.tiffany.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2b.tiffany.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2b.tiffany.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2b.tiffany.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2b.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2b.tiffany.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2b.tiffany.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2b.tiffany.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2b.tiffany.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2b.tiffany.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2b.tiffany.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2b.tiffany.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2b.tiffany.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2b.tiffany.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2b.tiffany.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps2b.zh.tiffany.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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