test.kay.com

- Sterling Jewelers -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 03:d0:46:46:4e:f6:ec:05:57:9d:bb:fd:25:4f:19:93 was issued on by DigiCert Inc.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Sterling Jewelers

Organization: Sterling Jewelers
Organization unit: IT
State / Province: Ohio
Locality: Akron
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d0:46:46:4e:f6:ec:05:57:9d:bb:fd:25:4f:19:93
Serial Number (int): 5069107073011964475606272963884554643
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: ac:44:c5:dc:69:3e:67:d8:f5:43:2d:51:dd:85:35:09:22:37:cf:bb
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): d9:19:e5:14:ec:cf:ef:15:fc:f4:d0:81:83:bf:53:1e:b2:a6:9a:c8
Fingerprint (sha256): 33:82:46:e6:4d:8f:eb:34:8d:be:ed:b9:89:1c:fd:d2:f2:76:a1:32:33:97:3e:9e:1e:62:6b:aa:34:16:1e:61

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate test.kay.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test.kay.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

test.kay.com
uat5.pagoda.com
prod-aka.pagoda.com
amp-perf2-aka.gordonsjewelers.com
uat-aka.zales.com
perf2-aka.gordonsjewelers.com
perf.zalesoutlet.com
uat2-aka.zales.com
uat3.gordonsjewelers.com
dev5.peoplesjewellers.com
perf-aka.zales.com
dev4.pagoda.com
perf2-aka.zalesoutlet.com
perf2-aka.peoplesjewellers.com
uat3.pagoda.com
dev2.zalesoutlet.com
dev4-aka.zalesoutlet.com
dev4-aka.gordonsjewelers.com
uat2.pagoda.com
dev2.zales.com
dev3.zalesoutlet.com
uat3-aka.zales.com
dev1.pagoda.com
dev4-aka.zales.com
uat5.gordonsjewelers.com
perf-aka.zalesoutlet.com
uat4.pagoda.com
prod-aka.gordonsjewelers.com
uat3-aka.pagoda.com
uat2.gordonsjewelers.com
uat3.zalesoutlet.com
uat2.peoplesjewellers.com
uat5.zalesoutlet.com
perf.gordonsjewelers.com
amp-perf2-aka.pagoda.com
uat5.zales.com
uat1.pagoda.com
prod-aka.peoplesjewellers.com
uat1.zales.com
prod-aka.zalesoutlet.com
perf.peoplesjewellers.com
uat4.zalesoutlet.com
uat2.zales.com
dev1.zalesoutlet.com
perf-aka.peoplesjewellers.com
dev4.peoplesjewellers.com
uat1.peoplesjewellers.com
uat2-aka.peoplesjewellers.com
uat2-aka.zalesoutlet.com
uat3-aka.gordonsjewelers.com
dev5.gordonsjewelers.com
amp-perf2-aka.zalesoutlet.com
dev3.pagoda.com
uat4.zales.com
dev4.zalesoutlet.com
dev1.peoplesjewellers.com
dev4.zales.com
uat4.peoplesjewellers.com
uat1.zalesoutlet.com
perf-aka.pagoda.com
dev2.peoplesjewellers.com
perf-aka.gordonsjewelers.com
uat5.peoplesjewellers.com
uat-aka.gordonsjewelers.com
perf.zales.com
uat-aka.zalesoutlet.com
dev5.zalesoutlet.com
prod-aka.zales.com
dev3.peoplesjewellers.com
uat2-aka.pagoda.com
uat3.zales.com
dev2.gordonsjewelers.com
dev5.pagoda.com
amp-perf2-aka.zales.com
uat2.zalesoutlet.com
uat3.peoplesjewellers.com
dev4.gordonsjewelers.com
uat4.gordonsjewelers.com
dev4-aka.pagoda.com
uat3-aka.zalesoutlet.com
perf.pagoda.com
amp-perf2-aka.peoplesjewellers.com
perf2-aka.zales.com
dev1.zales.com
dev5.zales.com
uat-aka.pagoda.com
uat-aka.peoplesjewellers.com
dev3.gordonsjewelers.com
perf2-aka.pagoda.com
dev2.pagoda.com
uat2-aka.gordonsjewelers.com
uat1.gordonsjewelers.com
dev4-aka.peoplesjewellers.com
uat3-aka.peoplesjewellers.com
dev3.zales.com
dev1.gordonsjewelers.com

Other certificates including the domain name kay.com

(limited to 100 certificates)
imperva.com
sni191bdgl.wpc.edgecastcdn.net
test.kay.com
mstage.jared.com
credithub-test.azusnc-test.jewels.com
stores.kay.com
www2.kay.com
stores.kay.com
www.kay.com
*.classrings.kay.com
sni1d146gl.wpc.edgecastcdn.net
mstage.jared.com
origin-uat1.kay.com
www.kay.com
em.kay.com
t.kay.com
imperva.com
chat.kay.com
chat.kay.com
www.kay.com
credithub-dev.azusnc-test.jewels.com
credithub-test.azusnc-test.jewels.com
san2.yext-cdn.com
san2.yext-cdn.com
www.kay.com
test.kay.com
testbridal.kay.com
classrings.kay.com
san2.yext-cdn.com
classrings.kay.com
link.kay.com
link.kay.com
fashion.kay.com
bridal.kay.com
chat.kay.com
t.kay.com
www2.kay.com
www.kay.com
origin-uat1.kay.com
dtm.kay.com
www.kay.com
www.kay.com
test.kay.com
www.kay.com
signetqa.cbi-rings.com
bridal.kay.com
pay.sterlingjewelers.com
san2.yext-cdn.com
perf-creditapis.jewels.com
san2.yext-cdn.com
familyjewelry.kay.com
imperva.com
em.kay.com
locations.c2crestaurants.com
san2.yext-cdn.com
test.kay.com
stores.kay.com
chat.kay.com
www.kay.com
classrings.kay.com
chat.kay.com
san2.yext-cdn.com
em.kay.com
test.kay.com
testpersonalized.kay.com
www.kay.com
san2.yext-cdn.com
smetrics.kay.com
amp-uat3.kay.com
www.kay.com
pay.sterlingjewelers.com
www.kay.com
sni19bd6gl.wpc.edgecastcdn.net
www.kay.com
www.kay.com
pay.kay.com
*.kay.com
pages.email.kay.com
test.kay.com
pt-stores.iqos.com.yext-cdn.com
familyjewelry.kay.com
www.kay.com
m.kay.com
creditapis.jewels.com
fpc.kay.com
credithub-test.azusnc-test.jewels.com
familyjewelry.kay.com
www.kay.com
classrings.kay.com
www.kay.com
classrings.kay.com
www.kay.com
personalized.jared.com
www.kay.com
www.kay.com
credithub-dev.azusnc-test.jewels.com
www.kay.com
www.kay.com
www.kay.com
san2.yext-cdn.com

Certificate

The complete raw certificate details for test.kay.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0H/hEJ+UmWHTChiYqPAS
7W7tyDrnOvylU2XDK3SpBWvcdypi3cxzZd78TqG1TlEkchy08idaYs/8Ynm+/Asx
6YSHq5e+lnzgTNzdTcz+3ku0gwf588RQuztD9EcCEqXuddoI4eVAMzkloUVCFU0S
LiXoJnitT6znTQ+STYyEuwGMtVAygaOoWJpYvqyT68rcWJrs+ZzYois15lJ9E1jZ
DnXX5yJ+xmCoEp2pMgp7yJQHpv9xEOahfwzJKhKVHvQ4930KczYfBWs+FxDjmcvm
1ZIjQ05ge3/8s8r5MjVOA+vvsn2Zo3vWWcDJP6j0MLAb0i/PJ0jVjDFdUarBkuMc
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5069107073011964475606272963884554643
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ohio'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Akron'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sterling Jewelers'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test.kay.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26320626996950184618540112661387701092990824288236982188924833404652379486095687168616880539778849351413737586922747789128434930936414008412950487870074420020781620230050141895761167465849675561418086310237402033963118947204975438548651609221977775304853438031537912642638422645582341171388142393545441303012260922476842546664296559798098854337843630386545667522010758998053316303718630593369036193794216566006071298187155842778832713030739976801791721357701239738447863543808429483692466518198667404203156423267163801070731973817318870630284684499175120523540780422315775402445132941804086896135529883701477650930907
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ac44c5dc693e67d8f5432d51dd8535092237cfbb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2255 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.kay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat5.pagoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-aka.pagoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp-perf2-aka.gordonsjewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-aka.zales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf2-aka.gordonsjewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf.zalesoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat2-aka.zales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat3.gordonsjewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev5.peoplesjewellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-aka.zales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev4.pagoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf2-aka.zalesoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf2-aka.peoplesjewellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat3.pagoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.zalesoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev4-aka.zalesoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev4-aka.gordonsjewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat2.pagoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.zales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev3.zalesoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat3-aka.zales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev1.pagoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev4-aka.zales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat5.gordonsjewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-aka.zalesoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat4.pagoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-aka.gordonsjewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat3-aka.pagoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat2.gordonsjewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat3.zalesoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat2.peoplesjewellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat5.zalesoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf.gordonsjewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp-perf2-aka.pagoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat5.zales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat1.pagoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-aka.peoplesjewellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat1.zales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-aka.zalesoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf.peoplesjewellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat4.zalesoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat2.zales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev1.zalesoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-aka.peoplesjewellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev4.peoplesjewellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat1.peoplesjewellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat2-aka.peoplesjewellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat2-aka.zalesoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat3-aka.gordonsjewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev5.gordonsjewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp-perf2-aka.zalesoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev3.pagoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat4.zales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev4.zalesoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev1.peoplesjewellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev4.zales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat4.peoplesjewellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat1.zalesoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-aka.pagoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.peoplesjewellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-aka.gordonsjewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat5.peoplesjewellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-aka.gordonsjewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf.zales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-aka.zalesoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev5.zalesoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-aka.zales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev3.peoplesjewellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat2-aka.pagoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat3.zales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.gordonsjewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev5.pagoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp-perf2-aka.zales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat2.zalesoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat3.peoplesjewellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev4.gordonsjewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat4.gordonsjewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev4-aka.pagoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat3-aka.zalesoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf.pagoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp-perf2-aka.peoplesjewellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf2-aka.zales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev1.zales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev5.zales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-aka.pagoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-aka.peoplesjewellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev3.gordonsjewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf2-aka.pagoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.pagoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat2-aka.gordonsjewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat1.gordonsjewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev4-aka.peoplesjewellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat3-aka.peoplesjewellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev3.zales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev1.gordonsjewelers.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016b8abbbb930000040300483046022100eae7e571c9b5dfa745eab0c06307c41c1175a2db4377536caad2bd0f848918df02210084c8413edc2a737e93d8b96a4300ef097d0107966ba1a899752ef8a9118f60e20076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016b8abbbbce0000040300473045022100f15d32f25842efc494483b7c5264b4d01dac3f277db25f27164ba5bb5566f77b022039bb41013e3737459b99d91fef1e4bef25abae4c7e2a25015c99cebf6d5e9e10
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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