www.zales.com

- Signet Group Services US Inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0a:89:e5:95:18:5a:27:4d:13:6d:54:1e:3e:3b:2b:c2 was issued on by DigiCert Inc.

With 35 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Signet Group Services US Inc.

Organization: Signet Group Services US Inc.
State / Province: Ohio
Locality: Akron
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:89:e5:95:18:5a:27:4d:13:6d:54:1e:3e:3b:2b:c2
Serial Number (int): 14008281111800510125629725373468715970
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 6a:aa:bf:5e:c6:01:54:4e:7e:a2:69:32:35:39:f2:b6:1e:51:d5:f5
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 83:97:db:e0:0e:98:f6:1f:8b:40:88:e4:49:c6:b2:87:11:e4:01:b8
Fingerprint (sha256): 1f:7b:07:17:af:78:ed:2d:ab:3f:55:93:fe:af:88:70:8a:89:10:e7:e5:d4:9e:54:a7:5e:7c:5a:23:1a:37:6a

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate www.zales.com

35

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.zales.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.zales.com
zalesoutlet.com
zales.com
www.zalesoutlet.com
www.peoplesjewellers.com
www.pagoda.com
www.gordonsjewelers.com
www.banter.com
videos-aka.zalesoutlet.com
videos-aka.zales.com
videos-aka.peoplesjewellers.com
videos-aka.pagoda.com
videos-aka.gordonsjewelers.com
videos-aka.banter.com
peoplesjewellers.com
pagoda.com
m.zalesoutlet.com
m.zales.com
m.peoplesjewellers.com
m.pagoda.com
m.gordonsjewelers.com
images-aka.zalesoutlet.com
images-aka.zales.com
images-aka.peoplesjewellers.com
images-aka.pagoda.com
images-aka.gordonsjewelers.com
images-aka.banter.com
gordonsjewelers.com
banter.com
ampanalytics.zales.com
amp.zalesoutlet.com
amp.zales.com
amp.peoplesjewellers.com
amp.pagoda.com
amp.gordonsjewelers.com

Other certificates including the domain name zales.com

(limited to 100 certificates)
createyourown.zales.com
link.zales.com
m.zales.com
uat1-dc.gordonsjewelers.com
dev-configurator.azurejewelryinc.com
test.kay.com
events.biggestfantour.com
jewelersservices.zales.com
createyourown.zales.com
credithub-test.azusnc-test.jewels.com
smetrics.zales.com
storeinventorytest.zales.com
personalizedgems.zales.com
storeinventorytest.zales.com
events.biggestfantour.com
m.zales.com
smetrics.zales.com
www.kay.com
www.zales.com
configurator.azurejewelryinc.com
bridal.zales.com
suncor.zales.com
link.zales.com
m.zales.com
www.kay.com
em.zales.com
createyourown.zales.com
cbirings.zales.com
persona.zales.com
sni12701gl.wpc.edgecastcdn.net
suncor.zales.com
jewelcreator.zales.com
dev-configurator.azurejewelryinc.com
test.kay.com
www.zales.com
*.zales.com
smetrics.zales.com
www.zales.com
mbm.zales.com
creditservices.zales.com
storeinventorytest.zales.com
stores.zales.com
dc.gordonsjewelers.com
fashion.kay.com
dev-configurator.azurejewelryinc.com
www.zales.com
zalesqa.cbi-rings.com
dev-ccchat.zales.com
storeinventorynew.zales.com
wonderjewel.zales.com
www.kay.com
www.kay.com
wvw.zales.com
uat1-dc.gordonsjewelers.com
hampden.zales.com
test.kay.com
configurator.azurejewelryinc.com
smetrics.zales.com
ibb.zales.com
dev-configurator.azurejewelryinc.com
dev-configurator.azurejewelryinc.com
test.kay.com
mbm.zales.com
storiesofhope.zales.com
*.zales.com
www.zales.com
jewelers.services
stores.zales.com
ibb.zales.com
configurator.azurejewelryinc.com
test.kay.com
www.kay.com
mbm.zales.com
www.zales.com
dtm.zales.com
dev-configurator.azurejewelryinc.com
personalizedgems.zales.com
dev-configurator.azurejewelryinc.com
cbirings.zales.com
images.zales.com
sni12ff4gl.wpc.edgecastcdn.net
www.kay.com
ibb.zales.com
jewelcreator.zales.com
www.kay.com
www.zales.com
sni12979gl.wpc.edgecastcdn.net
www.kay.com
prd-ccchat.zales.com
www.kay.com
dev-configurator.azurejewelryinc.com
origingreen.zales.com
*.artcarved.zales.com
sni13040gl.wpc.edgecastcdn.net
sni130e2gl.wpc.edgecastcdn.net
test.kay.com
jsorigin.zales.com
e.zales.com
m.zales.com
personalizedgems.zales.com

Certificate

The complete raw certificate details for www.zales.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJnjCCCIagAwIBAgIQConllRhaJ00TbVQePjsrwjANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMjAzMzAwMDAwMDBa
Fw0yMzAzMzAyMzU5NTlaMGwxCzAJBgNVBAYTAlVTMQ0wCwYDVQQIEwRPaGlvMQ4w
DAYDVQQHEwVBa3JvbjEmMCQGA1UEChMdU2lnbmV0IEdyb3VwIFNlcnZpY2VzIFVT
IEluYy4xFjAUBgNVBAMTDXd3dy56YWxlcy5jb20wggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDMf4OKPBvFg6+fVZtBSfpXr851gWLn2k3xpdE+omBjBhXt
xEEzBHX0cB04ZFQtglUXk+ni74d6FAPS0r6EQDk6Lji0d75bY6CCUeBrKtpjQrjx
MAB55r9W+YxkpUJlQif4Rzjjnnu39N4Be6qm4MBP6UM7K9/yALsphhOo2nNfOdsf
xJSgDGr5/lH2/PupaV1+Ky1iKLvCHYdbgiVrKsgbsKnfleBkvUHf1V1IiyB7U964
03vUxe1dUd7Rrwn8wSQWroJ3/mwgTbbFfiBc+9JoOJ3rL59osqUiH/KsCOPc3imJ
FBcfoxI0fohRvLfvChjcaWt2bkT2jyKnFr0z8GU/AgMBAAGjggZXMIIGUzAfBgNV
HSMEGDAWgBS3a6LqqKqEjHnqtNoPmLLFlXa59DAdBgNVHQ4EFgQUaqq/XsYBVE5+
omkyNTnyth5R1fUwggMBBgNVHREEggL4MIIC9IINd3d3LnphbGVzLmNvbYIPemFs
ZXNvdXRsZXQuY29tggl6YWxlcy5jb22CE3d3dy56YWxlc291dGxldC5jb22CGHd3
dy5wZW9wbGVzamV3ZWxsZXJzLmNvbYIOd3d3LnBhZ29kYS5jb22CF3d3dy5nb3Jk
b25zamV3ZWxlcnMuY29tgg53d3cuYmFudGVyLmNvbYIadmlkZW9zLWFrYS56YWxl
c291dGxldC5jb22CFHZpZGVvcy1ha2EuemFsZXMuY29tgh92aWRlb3MtYWthLnBl
b3BsZXNqZXdlbGxlcnMuY29tghV2aWRlb3MtYWthLnBhZ29kYS5jb22CHnZpZGVv
cy1ha2EuZ29yZG9uc2pld2VsZXJzLmNvbYIVdmlkZW9zLWFrYS5iYW50ZXIuY29t
ghRwZW9wbGVzamV3ZWxsZXJzLmNvbYIKcGFnb2RhLmNvbYIRbS56YWxlc291dGxl
dC5jb22CC20uemFsZXMuY29tghZtLnBlb3BsZXNqZXdlbGxlcnMuY29tggxtLnBh
Z29kYS5jb22CFW0uZ29yZG9uc2pld2VsZXJzLmNvbYIaaW1hZ2VzLWFrYS56YWxl
c291dGxldC5jb22CFGltYWdlcy1ha2EuemFsZXMuY29tgh9pbWFnZXMtYWthLnBl
b3BsZXNqZXdlbGxlcnMuY29tghVpbWFnZXMtYWthLnBhZ29kYS5jb22CHmltYWdl
cy1ha2EuZ29yZG9uc2pld2VsZXJzLmNvbYIVaW1hZ2VzLWFrYS5iYW50ZXIuY29t
ghNnb3Jkb25zamV3ZWxlcnMuY29tggpiYW50ZXIuY29tghZhbXBhbmFseXRpY3Mu
emFsZXMuY29tghNhbXAuemFsZXNvdXRsZXQuY29tgg1hbXAuemFsZXMuY29tghhh
bXAucGVvcGxlc2pld2VsbGVycy5jb22CDmFtcC5wYWdvZGEuY29tghdhbXAuZ29y
ZG9uc2pld2VsZXJzLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMIGPBgNVHR8EgYcwgYQwQKA+oDyGOmh0dHA6Ly9jcmwz
LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRMU1JTQVNIQTI1NjIwMjBDQTEtNC5jcmww
QKA+oDyGOmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRMU1JTQVNI
QTI1NjIwMjBDQTEtNC5jcmwwPgYDVR0gBDcwNTAzBgZngQwBAgIwKTAnBggrBgEF
BQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMH8GCCsGAQUFBwEBBHMw
cTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEkGCCsGAQUF
BzAChj1odHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRUTFNSU0FT
SEEyNTYyMDIwQ0ExLTEuY3J0MAkGA1UdEwQCMAAwggF9BgorBgEEAdZ5AgQCBIIB
bQSCAWkBZwB1AK33vvp8/xDIi509nB4+GGq0Zyldz7EMJMqFhjTr3IKKAAABf9sl
BSsAAAQDAEYwRAIgRqY/wzmh2nmPdEfovzTAbr2bhUl8lzCEuIWmPHjDtqwCIFs+
heljnutj9cekKGI6rtGc2N4i+S6C6CM2fVJ8l7J/AHYANc8ZG7+xbFe/D61MbULL
u7YnICZR6j/hKu+oA8M71kwAAAF/2yUFCAAABAMARzBFAiBjgqx4xknIAIXYAhjn
VRuvmqlWBJn8VGTDCJQJTyVF9QIhAPxlkH3DnG1vs3+1eTku7Tve6HNO8tYriaBs
AbjFzEuRAHYAs3N3B+GEUPhjhtYFqdwRCUp5LbFnDAuH3PADDnk2pZoAAAF/2yUF
LgAABAMARzBFAiAfS0HATZYilp86mOL5szPDSBM0aRilUXLrmJRAW8rQYQIhAJtG
Gp24eWc9wCuDSv8L70jZhoSWuuqL90osLdAa0V1SMA0GCSqGSIb3DQEBCwUAA4IB
AQC6FBOGhfdQxWrUwHbonXtq/2o3prb76xbzcBtSgAxuxcwu3xKXeoo2nJbG7w3u
jewXNHZipSOp9JaN7iSb4eoxtpb3840UK376K0hK8PdZZoynqJG1a4QT4rg67NSa
joyHocxmo4MAjqrX3mpmE3E8XPlQPIZXcMSkmeHM5XX5FlDWljYnhW+/yglYjZQ6
mRWM+Xrb1TPo0+GidsABDBdinbiXWdjrOND/mq9kqwyHQCi0wo11tMkXjqvOhSTx
SvnR2/1pNX0EiTsIKvPEAwTJCA9qC5RDPT/AMOjWSp+FLEgUCLJPTXN/4MgW6Do0
P/Hfz9sFBroU8uUqXHadQGJx
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzH+DijwbxYOvn1WbQUn6
V6/OdYFi59pN8aXRPqJgYwYV7cRBMwR19HAdOGRULYJVF5Pp4u+HehQD0tK+hEA5
Oi44tHe+W2OgglHgayraY0K48TAAeea/VvmMZKVCZUIn+Ec44557t/TeAXuqpuDA
T+lDOyvf8gC7KYYTqNpzXznbH8SUoAxq+f5R9vz7qWldfistYii7wh2HW4IlayrI
G7Cp35XgZL1B39VdSIsge1PeuNN71MXtXVHe0a8J/MEkFq6Cd/5sIE22xX4gXPvS
aDid6y+faLKlIh/yrAjj3N4piRQXH6MSNH6IUby37woY3Glrdm5E9o8ipxa9M/Bl
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14008281111800510125629725373468715970
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ohio'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Akron'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Signet Group Services US Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.zales.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25815493625233046746125149642130349927922290982714182390403057899077431272238226884410809018786494105106702476900343390332596232433193651687264320976787392329197726443497146540812305428030074510123364955172695598958713525592319511587950973716422051798548504521895697201281200434965479276985537028360614321352660842111828603858266270526038070705841503029369358633474508555093830082457107835494600978997976147095829534926755521843133314336329276909158610375010287554922579742056323233176279851558392187283386385828668300261935880524011251090052965830364904861823355868857463283605354155251373004700938544445850626581823
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6aaabf5ec601544e7ea269323539f2b61e51d5f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (760 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zalesoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zalesoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peoplesjewellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pagoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gordonsjewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.banter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos-aka.zalesoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos-aka.zales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos-aka.peoplesjewellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos-aka.pagoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos-aka.gordonsjewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos-aka.banter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peoplesjewellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pagoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.zalesoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.zales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.peoplesjewellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.pagoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.gordonsjewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-aka.zalesoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-aka.zales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-aka.peoplesjewellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-aka.pagoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-aka.gordonsjewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-aka.banter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gordonsjewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ampanalytics.zales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.zalesoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.zales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.peoplesjewellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.pagoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.gordonsjewelers.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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