www.qa1.tiffany.com

- Tiffany and Company -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0b:3b:cf:bc:4d:7c:e7:f1:98:c2:01:4a:4e:76:6b:19 was issued on by DigiCert Inc.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Tiffany and Company

Organization: Tiffany and Company
State / Province: New Jersey
Locality: Parsippany-Troy Hills
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:3b:cf:bc:4d:7c:e7:f1:98:c2:01:4a:4e:76:6b:19
Serial Number (int): 14932066845951485890704412433207159577
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7f:ef:77:5b:67:73:6a:1f:34:0e:c3:b8:13:23:78:d6:bf:3c:cc:d2
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 67:b7:70:75:79:64:41:2c:1c:97:0f:68:ac:a0:0a:45:b0:d8:87:f2
Fingerprint (sha256): 34:b8:7c:85:a6:17:33:3f:68:ef:64:9f:b1:95:38:38:e9:a5:6c:b4:7f:bc:24:e9:8a:32:a5:38:6d:3a:27:d9

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate www.qa1.tiffany.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.qa1.tiffany.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.qa1.tiffany.com
dev-ocapi.tiffany.com
dev.be.tiffany.com
dev.nl.tiffany.com
dev.tiffany.at
dev.tiffany.de
dev.tiffany.es
dev.tiffany.fr
dev.tiffany.gr
dev.tiffany.ie
dev.tiffany.it
dev.tiffany.kr
dev.tiffany.lu
dev.tiffany.pt
production-ocapi.tiffany.com
production-test.tiffany.kr
qa.media.tiffany.com
www.dev.tiffany.kr
www.qa1-az.tiffany.cn
www.qa1.be.tiffany.com
www.qa1.estore-tco.com
www.qa1.estore-tco.jp
www.qa1.fr.tiffany.ca
www.qa1.international.tiffany.com
www.qa1.nl.tiffany.com
www.qa1.salesservice.tiffany.com
www.qa1.tiffany.at
www.qa1.tiffany.ca
www.qa1.tiffany.cn
www.qa1.tiffany.co.jp
www.qa1.tiffany.co.uk
www.qa1.tiffany.com.au
www.qa1.tiffany.com.br
www.qa1.tiffany.com.mx
www.qa1.tiffany.de
www.qa1.tiffany.es
www.qa1.tiffany.fr
www.qa1.tiffany.ie
www.qa1.tiffany.it
www.qa1.tiffany.kr
www.qa1.tiffanytrade.com
www.qa1.tiffanytrade.jp
www.qa1.zh.tiffany.com
www.qa2.be.tiffany.com
www.qa2.estore-tco.com
www.qa2.estore-tco.jp
www.qa2.fr.tiffany.ca
www.qa2.international.tiffany.com
www.qa2.nl.tiffany.com
www.qa2.salesservice.tiffany.com
www.qa2.tiffany.at
www.qa2.tiffany.ca
www.qa2.tiffany.cn
www.qa2.tiffany.co.jp
www.qa2.tiffany.co.uk
www.qa2.tiffany.com
www.qa2.tiffany.com.au
www.qa2.tiffany.com.br
www.qa2.tiffany.com.mx
www.qa2.tiffany.de
www.qa2.tiffany.es
www.qa2.tiffany.fr
www.qa2.tiffany.ie
www.qa2.tiffany.it
www.qa2.tiffany.kr
www.qa2.tiffanytrade.com
www.qa2.tiffanytrade.jp
www.qa2.zh.tiffany.com
www.qa3-az.tiffany.cn
www.qa3.be.tiffany.com
www.qa3.estore-tco.com
www.qa3.estore-tco.jp
www.qa3.fr.tiffany.ca
www.qa3.international.tiffany.com
www.qa3.nl.tiffany.com
www.qa3.salesservice.tiffany.com
www.qa3.tiffany.at
www.qa3.tiffany.ca
www.qa3.tiffany.cn
www.qa3.tiffany.co.jp
www.qa3.tiffany.co.uk
www.qa3.tiffany.com
www.qa3.tiffany.com.au
www.qa3.tiffany.com.br
www.qa3.tiffany.com.mx
www.qa3.tiffany.de
www.qa3.tiffany.es
www.qa3.tiffany.fr
www.qa3.tiffany.ie
www.qa3.tiffany.it
www.qa3.tiffany.kr
www.qa3.tiffanytrade.com
www.qa3.tiffanytrade.jp
www.qa3.zh.tiffany.com
www.qaperf.salesservice.tiffany.com
zh.tiffany.com

Other certificates including the domain name tiffany.com

(limited to 100 certificates)
appointments.tiffany.com
neo.tiffany.com
cara.tiffany.com
media.tiffany.com
www.tiffany.com
pa.tiffany.com
international.tiffany.com
subscribe.tiffany.com
ukukcacs02.tiffany.com
dev3.edev.tiffany.com
neo.tiffany.com
media.tiffany.com
san-002.ceros.com
qa2-aem.tiffany.com
uk.tiffany.com
qa2-aem.tiffany.com
www.tiffany.com
leapfrog-ssl-9.gcs-web.com
subscribe.tiffany.com
pkb.tiffany.com
www.tiffany.es
www.tiffany.com
neo.tiffany.com
san-002.ceros.com
www.tiffany.com
fonts.tiffany.com
appfront.tiffany.com
api.tiffany.com
www.tiffany.es
qa3-aem.tiffany.com
subscribe.tiffany.com
www.tiffany.com
sts.tiffany.com
san-002.ceros.com
media.tiffany.com
cara.tiffany.com
secure5s.scene7.com
subscribe.tiffany.com
san-002.ceros.com
mi.tiffany.com
san-002.ceros.com
san-35-s12.tlsprovisioning.exacttarget.com
san-002.ceros.com
uk.tiffany.com
neo.tiffany.com
www.pa.tiffany.com
san-35-s12.tlsprovisioning.exacttarget.com
san-002.ceros.com
sstats.be.tiffany.com
ps2b.tiffany.com
sts.tiffany.com
cybebrark.tiffany.com
san-35-s12.tlsprovisioning.exacttarget.com
san-002.ceros.com
san-002.ceros.com
tconsacsp04.tiffany.com
leapfrog-ssl-9.gcs-web.com
subscribe.tiffany.com
adobeconsole-qa.tiffany.com
qa-cara.tiffany.com
san-002.ceros.com
ps2b.tiffany.com
hk-payment.tiffany.com
mail.tiffany.com
leapfrog-ssl-9.gcs-web.com
mail.tiffany.com
ukukcacs01.tiffany.com
connect.tiffany.com
www.tiffany.com
sftp.tiffany.com
connect.tiffany.com
san-35-s12.tlsprovisioning.exacttarget.com
ukukcacs02.tiffany.com
t.tco.tiffany.com
neo.tiffany.com
media.tiffany.com
ringfinder-stage.tiffany.com
tco.tiffany.com
www.tiffany.com
www.pa.tiffany.com
qa-api.tiffany.com
sts.tiffany.com
qa1-aem.tiffany.com
test1.edev.tiffany.com
mail.tiffany.com
qa-api.tiffany.com
www.estore-tco.com
qa1-aem.tiffany.com
appfront.tiffany.com
san-002.ceros.com
san-002.ceros.com
www.estore-tco.com
sstats.tiffany.com
san-35-s12.tlsprovisioning.exacttarget.com
sftp.tiffany.com
leapfrog-ssl-9.gcs-web.com
www.tiffany.com
www.qa1.tiffany.com
enroll.tiffany.com
www.tiffany.es

Certificate

The complete raw certificate details for www.qa1.tiffany.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEx2qXU8qFeodPM9gsQkydiEHhLQWY
/xXd4YhM9gCU5LAwD2bz6lq84o6t43FHu31OCjdX8lUQLIj9VvLGal/35A==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14932066845951485890704412433207159577
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Parsippany-Troy Hills'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tiffany and Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.qa1.tiffany.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004c76a9753ca857a874f33d82c424c9d8841e12d0598ff15dde1884cf60094e4b0300f66f3ea5abce28eade37147bb7d4e0a3757f255102c88fd56f2c66a5ff7e4
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7fef775b67736a1f340ec3b8132378d6bf3cccd2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2169 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa1.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-ocapi.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.be.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.nl.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.tiffany.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.tiffany.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.tiffany.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.tiffany.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.tiffany.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.tiffany.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.tiffany.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.tiffany.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.tiffany.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.tiffany.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production-ocapi.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production-test.tiffany.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.media.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev.tiffany.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa1-az.tiffany.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa1.be.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa1.estore-tco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa1.estore-tco.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa1.fr.tiffany.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa1.international.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa1.nl.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa1.salesservice.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa1.tiffany.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa1.tiffany.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa1.tiffany.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa1.tiffany.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa1.tiffany.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa1.tiffany.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa1.tiffany.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa1.tiffany.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa1.tiffany.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa1.tiffany.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa1.tiffany.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa1.tiffany.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa1.tiffany.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa1.tiffany.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa1.tiffanytrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa1.tiffanytrade.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa1.zh.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2.be.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2.estore-tco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2.estore-tco.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2.fr.tiffany.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2.international.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2.nl.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2.salesservice.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2.tiffany.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2.tiffany.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2.tiffany.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2.tiffany.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2.tiffany.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2.tiffany.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2.tiffany.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2.tiffany.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2.tiffany.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2.tiffany.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2.tiffany.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2.tiffany.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2.tiffany.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2.tiffany.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2.tiffanytrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2.tiffanytrade.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2.zh.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3-az.tiffany.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3.be.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3.estore-tco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3.estore-tco.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3.fr.tiffany.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3.international.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3.nl.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3.salesservice.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3.tiffany.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3.tiffany.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3.tiffany.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3.tiffany.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3.tiffany.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3.tiffany.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3.tiffany.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3.tiffany.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3.tiffany.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3.tiffany.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3.tiffany.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3.tiffany.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3.tiffany.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3.tiffany.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3.tiffanytrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3.tiffanytrade.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3.zh.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qaperf.salesservice.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zh.tiffany.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b30b3c0b4000004030046304402202f99c12820d95e9e74312f13bb9641818106b4c14b0b169df817020676e44c5a02207df6f08d2733d1d0f80c937efb4357211c994d7864db2c5035c023e4cb628f2300750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018b30b3c058000004030046304402202fe37930f91ff3a7513b18b2b9a263daa081c6dd7028404dabf7dd2a44403b8102207f390600a2ac2e16922b1aff8912d53b5e2fb775e2e0412f2b81d24c2714978f007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b30b3c0580000040300483046022100bb36a7b811b4d8f8fe474a74b7808641fccf2906022443e50ab1d6d1213ca3bd022100a69b2c010e92ed374d4478901c908d2937cf3ee9c9b553bfc2e3e2c29be61318
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004d1bd1ee00dbdb5160c21d7e73b52f4efaf3a484fa74c1736437c1ad092d654345c628c6bafb0ac3921b039771f5fe5567b98a5588bd633975374236e7023f329fe6cec6d9f185d6d2d3a8588d8a73a856f671bf95492c4b938a8a6a43e961c9f1a249e9e6b8e6080548e7bd93a38cb60c629b2bc8faa116fabecba3f65233a23df6f2ceabd118933c088120b7f7e0b6ce13c29952d25f504130c655ce1b710717fd2a959f8fceb2457475d186b5d4c758b47e970528fe0221d5ce3d6ec6678994a5ad1c44d40bf1b7b70f846eb848c102ade14511866417198b132540fc08077342ca72d6fd0760c8811ba9044417aca5fd89bb0121064882ea876f6ffe76dd