www.zales.com
- Signet Group Services US Inc. -
Issued by DigiCert TLS RSA SHA256 2020 CA1
About this certificate
This digital certificate with serial number 0a:89:e5:95:18:5a:27:4d:13:6d:54:1e:3e:3b:2b:c2 was issued on by DigiCert Inc.
With 35 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Signet Group Services US Inc.
Organization:
Signet Group Services US Inc.
State / Province:
Ohio
Locality: Akron
Country: US
Locality: Akron
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0a:89:e5:95:18:5a:27:4d:13:6d:54:1e:3e:3b:2b:c2Serial Number (int): 14008281111800510125629725373468715970
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 6a:aa:bf:5e:c6:01:54:4e:7e:a2:69:32:35:39:f2:b6:1e:51:d5:f5
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4
Fingerprint (sha1): 83:97:db:e0:0e:98:f6:1f:8b:40:88:e4:49:c6:b2:87:11:e4:01:b8
Fingerprint (sha256): 1f:7b:07:17:af:78:ed:2d:ab:3f:55:93:fe:af:88:70:8a:89:10:e7:e5:d4:9e:54:a7:5e:7c:5a:23:1a:37:6a
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
Check the revocation status for certificate www.zales.com
35
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.zales.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.zales.com
zalesoutlet.com
zales.com
www.zalesoutlet.com
www.peoplesjewellers.com
www.pagoda.com
www.gordonsjewelers.com
www.banter.com
videos-aka.zalesoutlet.com
videos-aka.zales.com
videos-aka.peoplesjewellers.com
videos-aka.pagoda.com
videos-aka.gordonsjewelers.com
videos-aka.banter.com
peoplesjewellers.com
pagoda.com
m.zalesoutlet.com
m.zales.com
m.peoplesjewellers.com
m.pagoda.com
m.gordonsjewelers.com
images-aka.zalesoutlet.com
images-aka.zales.com
images-aka.peoplesjewellers.com
images-aka.pagoda.com
images-aka.gordonsjewelers.com
images-aka.banter.com
gordonsjewelers.com
banter.com
ampanalytics.zales.com
amp.zalesoutlet.com
amp.zales.com
amp.peoplesjewellers.com
amp.pagoda.com
amp.gordonsjewelers.com
zalesoutlet.com
zales.com
www.zalesoutlet.com
www.peoplesjewellers.com
www.pagoda.com
www.gordonsjewelers.com
www.banter.com
videos-aka.zalesoutlet.com
videos-aka.zales.com
videos-aka.peoplesjewellers.com
videos-aka.pagoda.com
videos-aka.gordonsjewelers.com
videos-aka.banter.com
peoplesjewellers.com
pagoda.com
m.zalesoutlet.com
m.zales.com
m.peoplesjewellers.com
m.pagoda.com
m.gordonsjewelers.com
images-aka.zalesoutlet.com
images-aka.zales.com
images-aka.peoplesjewellers.com
images-aka.pagoda.com
images-aka.gordonsjewelers.com
images-aka.banter.com
gordonsjewelers.com
banter.com
ampanalytics.zales.com
amp.zalesoutlet.com
amp.zales.com
amp.peoplesjewellers.com
amp.pagoda.com
amp.gordonsjewelers.com
Other certificates including the domain name zales.com
(limited to 100 certificates)
createyourown.zales.com
link.zales.com
m.zales.com
uat1-dc.gordonsjewelers.com
dev-configurator.azurejewelryinc.com
test.kay.com
events.biggestfantour.com
jewelersservices.zales.com
createyourown.zales.com
credithub-test.azusnc-test.jewels.com
smetrics.zales.com
storeinventorytest.zales.com
personalizedgems.zales.com
storeinventorytest.zales.com
events.biggestfantour.com
m.zales.com
smetrics.zales.com
www.kay.com
www.zales.com
configurator.azurejewelryinc.com
bridal.zales.com
suncor.zales.com
link.zales.com
m.zales.com
www.kay.com
em.zales.com
createyourown.zales.com
cbirings.zales.com
persona.zales.com
sni12701gl.wpc.edgecastcdn.net
suncor.zales.com
jewelcreator.zales.com
dev-configurator.azurejewelryinc.com
test.kay.com
www.zales.com
*.zales.com
smetrics.zales.com
www.zales.com
mbm.zales.com
creditservices.zales.com
storeinventorytest.zales.com
stores.zales.com
dc.gordonsjewelers.com
fashion.kay.com
dev-configurator.azurejewelryinc.com
www.zales.com
zalesqa.cbi-rings.com
dev-ccchat.zales.com
storeinventorynew.zales.com
wonderjewel.zales.com
www.kay.com
www.kay.com
wvw.zales.com
uat1-dc.gordonsjewelers.com
hampden.zales.com
test.kay.com
configurator.azurejewelryinc.com
smetrics.zales.com
ibb.zales.com
dev-configurator.azurejewelryinc.com
dev-configurator.azurejewelryinc.com
test.kay.com
mbm.zales.com
storiesofhope.zales.com
*.zales.com
www.zales.com
jewelers.services
stores.zales.com
ibb.zales.com
configurator.azurejewelryinc.com
test.kay.com
www.kay.com
mbm.zales.com
www.zales.com
dtm.zales.com
dev-configurator.azurejewelryinc.com
personalizedgems.zales.com
dev-configurator.azurejewelryinc.com
cbirings.zales.com
images.zales.com
sni12ff4gl.wpc.edgecastcdn.net
www.kay.com
ibb.zales.com
jewelcreator.zales.com
www.kay.com
www.zales.com
sni12979gl.wpc.edgecastcdn.net
www.kay.com
prd-ccchat.zales.com
www.kay.com
dev-configurator.azurejewelryinc.com
origingreen.zales.com
*.artcarved.zales.com
sni13040gl.wpc.edgecastcdn.net
sni130e2gl.wpc.edgecastcdn.net
test.kay.com
jsorigin.zales.com
e.zales.com
m.zales.com
personalizedgems.zales.com
link.zales.com
m.zales.com
uat1-dc.gordonsjewelers.com
dev-configurator.azurejewelryinc.com
test.kay.com
events.biggestfantour.com
jewelersservices.zales.com
createyourown.zales.com
credithub-test.azusnc-test.jewels.com
smetrics.zales.com
storeinventorytest.zales.com
personalizedgems.zales.com
storeinventorytest.zales.com
events.biggestfantour.com
m.zales.com
smetrics.zales.com
www.kay.com
www.zales.com
configurator.azurejewelryinc.com
bridal.zales.com
suncor.zales.com
link.zales.com
m.zales.com
www.kay.com
em.zales.com
createyourown.zales.com
cbirings.zales.com
persona.zales.com
sni12701gl.wpc.edgecastcdn.net
suncor.zales.com
jewelcreator.zales.com
dev-configurator.azurejewelryinc.com
test.kay.com
www.zales.com
*.zales.com
smetrics.zales.com
www.zales.com
mbm.zales.com
creditservices.zales.com
storeinventorytest.zales.com
stores.zales.com
dc.gordonsjewelers.com
fashion.kay.com
dev-configurator.azurejewelryinc.com
www.zales.com
zalesqa.cbi-rings.com
dev-ccchat.zales.com
storeinventorynew.zales.com
wonderjewel.zales.com
www.kay.com
www.kay.com
wvw.zales.com
uat1-dc.gordonsjewelers.com
hampden.zales.com
test.kay.com
configurator.azurejewelryinc.com
smetrics.zales.com
ibb.zales.com
dev-configurator.azurejewelryinc.com
dev-configurator.azurejewelryinc.com
test.kay.com
mbm.zales.com
storiesofhope.zales.com
*.zales.com
www.zales.com
jewelers.services
stores.zales.com
ibb.zales.com
configurator.azurejewelryinc.com
test.kay.com
www.kay.com
mbm.zales.com
www.zales.com
dtm.zales.com
dev-configurator.azurejewelryinc.com
personalizedgems.zales.com
dev-configurator.azurejewelryinc.com
cbirings.zales.com
images.zales.com
sni12ff4gl.wpc.edgecastcdn.net
www.kay.com
ibb.zales.com
jewelcreator.zales.com
www.kay.com
www.zales.com
sni12979gl.wpc.edgecastcdn.net
www.kay.com
prd-ccchat.zales.com
www.kay.com
dev-configurator.azurejewelryinc.com
origingreen.zales.com
*.artcarved.zales.com
sni13040gl.wpc.edgecastcdn.net
sni130e2gl.wpc.edgecastcdn.net
test.kay.com
jsorigin.zales.com
e.zales.com
m.zales.com
personalizedgems.zales.com
Certificate
The complete raw certificate details for www.zales.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJnjCCCIagAwIBAgIQConllRhaJ00TbVQePjsrwjANBgkqhkiG9w0BAQsFADBP MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMjAzMzAwMDAwMDBa Fw0yMzAzMzAyMzU5NTlaMGwxCzAJBgNVBAYTAlVTMQ0wCwYDVQQIEwRPaGlvMQ4w DAYDVQQHEwVBa3JvbjEmMCQGA1UEChMdU2lnbmV0IEdyb3VwIFNlcnZpY2VzIFVT IEluYy4xFjAUBgNVBAMTDXd3dy56YWxlcy5jb20wggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMf4OKPBvFg6+fVZtBSfpXr851gWLn2k3xpdE+omBjBhXt xEEzBHX0cB04ZFQtglUXk+ni74d6FAPS0r6EQDk6Lji0d75bY6CCUeBrKtpjQrjx MAB55r9W+YxkpUJlQif4Rzjjnnu39N4Be6qm4MBP6UM7K9/yALsphhOo2nNfOdsf xJSgDGr5/lH2/PupaV1+Ky1iKLvCHYdbgiVrKsgbsKnfleBkvUHf1V1IiyB7U964 03vUxe1dUd7Rrwn8wSQWroJ3/mwgTbbFfiBc+9JoOJ3rL59osqUiH/KsCOPc3imJ FBcfoxI0fohRvLfvChjcaWt2bkT2jyKnFr0z8GU/AgMBAAGjggZXMIIGUzAfBgNV HSMEGDAWgBS3a6LqqKqEjHnqtNoPmLLFlXa59DAdBgNVHQ4EFgQUaqq/XsYBVE5+ omkyNTnyth5R1fUwggMBBgNVHREEggL4MIIC9IINd3d3LnphbGVzLmNvbYIPemFs ZXNvdXRsZXQuY29tggl6YWxlcy5jb22CE3d3dy56YWxlc291dGxldC5jb22CGHd3 dy5wZW9wbGVzamV3ZWxsZXJzLmNvbYIOd3d3LnBhZ29kYS5jb22CF3d3dy5nb3Jk b25zamV3ZWxlcnMuY29tgg53d3cuYmFudGVyLmNvbYIadmlkZW9zLWFrYS56YWxl c291dGxldC5jb22CFHZpZGVvcy1ha2EuemFsZXMuY29tgh92aWRlb3MtYWthLnBl b3BsZXNqZXdlbGxlcnMuY29tghV2aWRlb3MtYWthLnBhZ29kYS5jb22CHnZpZGVv cy1ha2EuZ29yZG9uc2pld2VsZXJzLmNvbYIVdmlkZW9zLWFrYS5iYW50ZXIuY29t ghRwZW9wbGVzamV3ZWxsZXJzLmNvbYIKcGFnb2RhLmNvbYIRbS56YWxlc291dGxl dC5jb22CC20uemFsZXMuY29tghZtLnBlb3BsZXNqZXdlbGxlcnMuY29tggxtLnBh Z29kYS5jb22CFW0uZ29yZG9uc2pld2VsZXJzLmNvbYIaaW1hZ2VzLWFrYS56YWxl c291dGxldC5jb22CFGltYWdlcy1ha2EuemFsZXMuY29tgh9pbWFnZXMtYWthLnBl b3BsZXNqZXdlbGxlcnMuY29tghVpbWFnZXMtYWthLnBhZ29kYS5jb22CHmltYWdl cy1ha2EuZ29yZG9uc2pld2VsZXJzLmNvbYIVaW1hZ2VzLWFrYS5iYW50ZXIuY29t ghNnb3Jkb25zamV3ZWxlcnMuY29tggpiYW50ZXIuY29tghZhbXBhbmFseXRpY3Mu emFsZXMuY29tghNhbXAuemFsZXNvdXRsZXQuY29tgg1hbXAuemFsZXMuY29tghhh bXAucGVvcGxlc2pld2VsbGVycy5jb22CDmFtcC5wYWdvZGEuY29tghdhbXAuZ29y ZG9uc2pld2VsZXJzLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMIGPBgNVHR8EgYcwgYQwQKA+oDyGOmh0dHA6Ly9jcmwz LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRMU1JTQVNIQTI1NjIwMjBDQTEtNC5jcmww QKA+oDyGOmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRMU1JTQVNI QTI1NjIwMjBDQTEtNC5jcmwwPgYDVR0gBDcwNTAzBgZngQwBAgIwKTAnBggrBgEF BQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMH8GCCsGAQUFBwEBBHMw cTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEkGCCsGAQUF BzAChj1odHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRUTFNSU0FT SEEyNTYyMDIwQ0ExLTEuY3J0MAkGA1UdEwQCMAAwggF9BgorBgEEAdZ5AgQCBIIB bQSCAWkBZwB1AK33vvp8/xDIi509nB4+GGq0Zyldz7EMJMqFhjTr3IKKAAABf9sl BSsAAAQDAEYwRAIgRqY/wzmh2nmPdEfovzTAbr2bhUl8lzCEuIWmPHjDtqwCIFs+ heljnutj9cekKGI6rtGc2N4i+S6C6CM2fVJ8l7J/AHYANc8ZG7+xbFe/D61MbULL u7YnICZR6j/hKu+oA8M71kwAAAF/2yUFCAAABAMARzBFAiBjgqx4xknIAIXYAhjn VRuvmqlWBJn8VGTDCJQJTyVF9QIhAPxlkH3DnG1vs3+1eTku7Tve6HNO8tYriaBs AbjFzEuRAHYAs3N3B+GEUPhjhtYFqdwRCUp5LbFnDAuH3PADDnk2pZoAAAF/2yUF LgAABAMARzBFAiAfS0HATZYilp86mOL5szPDSBM0aRilUXLrmJRAW8rQYQIhAJtG Gp24eWc9wCuDSv8L70jZhoSWuuqL90osLdAa0V1SMA0GCSqGSIb3DQEBCwUAA4IB AQC6FBOGhfdQxWrUwHbonXtq/2o3prb76xbzcBtSgAxuxcwu3xKXeoo2nJbG7w3u jewXNHZipSOp9JaN7iSb4eoxtpb3840UK376K0hK8PdZZoynqJG1a4QT4rg67NSa joyHocxmo4MAjqrX3mpmE3E8XPlQPIZXcMSkmeHM5XX5FlDWljYnhW+/yglYjZQ6 mRWM+Xrb1TPo0+GidsABDBdinbiXWdjrOND/mq9kqwyHQCi0wo11tMkXjqvOhSTx SvnR2/1pNX0EiTsIKvPEAwTJCA9qC5RDPT/AMOjWSp+FLEgUCLJPTXN/4MgW6Do0 P/Hfz9sFBroU8uUqXHadQGJx -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzH+DijwbxYOvn1WbQUn6 V6/OdYFi59pN8aXRPqJgYwYV7cRBMwR19HAdOGRULYJVF5Pp4u+HehQD0tK+hEA5 Oi44tHe+W2OgglHgayraY0K48TAAeea/VvmMZKVCZUIn+Ec44557t/TeAXuqpuDA T+lDOyvf8gC7KYYTqNpzXznbH8SUoAxq+f5R9vz7qWldfistYii7wh2HW4IlayrI G7Cp35XgZL1B39VdSIsge1PeuNN71MXtXVHe0a8J/MEkFq6Cd/5sIE22xX4gXPvS aDid6y+faLKlIh/yrAjj3N4piRQXH6MSNH6IUby37woY3Glrdm5E9o8ipxa9M/Bl PwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14008281111800510125629725373468715970 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-30 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-30 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ohio' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Akron' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Signet Group Services US Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.zales.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25815493625233046746125149642130349927922290982714182390403057899077431272238226884410809018786494105106702476900343390332596232433193651687264320976787392329197726443497146540812305428030074510123364955172695598958713525592319511587950973716422051798548504521895697201281200434965479276985537028360614321352660842111828603858266270526038070705841503029369358633474508555093830082457107835494600978997976147095829534926755521843133314336329276909158610375010287554922579742056323233176279851558392187283386385828668300261935880524011251090052965830364904861823355868857463283605354155251373004700938544445850626581823 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6aaabf5ec601544e7ea269323539f2b61e51d5f5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (760 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zales.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zalesoutlet.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zales.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zalesoutlet.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peoplesjewellers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pagoda.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gordonsjewelers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.banter.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos-aka.zalesoutlet.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos-aka.zales.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos-aka.peoplesjewellers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos-aka.pagoda.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos-aka.gordonsjewelers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos-aka.banter.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peoplesjewellers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pagoda.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.zalesoutlet.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.zales.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.peoplesjewellers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.pagoda.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.gordonsjewelers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-aka.zalesoutlet.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-aka.zales.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-aka.peoplesjewellers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-aka.pagoda.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-aka.gordonsjewelers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-aka.banter.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gordonsjewelers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banter.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ampanalytics.zales.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.zalesoutlet.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.zales.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.peoplesjewellers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.pagoda.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.gordonsjewelers.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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