qa3-aem.tiffany.com

- Tiffany & Co. -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number b6:75:a6:b5:54:a8:be:c0:95:3b:fb:d9:d9:29:f1:9f was issued on by COMODO CA Limited.

With 48 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Tiffany & Co.

Organization: Tiffany & Co.
Organization unit: IT
Organization unit: Unified Communications
Address: 727 Fifth Avenue
Postal code: 10022
State / Province: NY
Locality: New York
Country: US

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): b6:75:a6:b5:54:a8:be:c0:95:3b:fb:d9:d9:29:f1:9f
Serial Number (int): 242530375211795626125014749024113783199
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 43:aa:93:1c:8d:03:92:90:f3:de:1f:82:21:15:de:b4:be:38:e7:ec
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): 85:06:5c:d6:c9:93:15:3d:72:ce:b9:32:bb:68:60:7c:2e:79:11:9a
Fingerprint (sha256): 3a:59:d8:cb:64:fd:d5:e1:65:dd:fb:3f:34:93:60:be:47:f9:9c:e1:40:56:a0:c3:0c:a0:6b:2d:26:f2:59:4f

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate qa3-aem.tiffany.com

48

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qa3-aem.tiffany.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

qa3-aem.tiffany.com
qa3-aem.be.tiffany.com
qa3-aem.estore-tco.com
qa3-aem.estore-tco.jp
qa3-aem.fr.tiffany.ca
qa3-aem.international.tiffany.com
qa3-aem.nl.tiffany.com
qa3-aem.pkb.tiffany.com
qa3-aem.tiffany.at
qa3-aem.tiffany.ca
qa3-aem.tiffany.cn
qa3-aem.tiffany.co.jp
qa3-aem.tiffany.co.uk
qa3-aem.tiffany.com.au
qa3-aem.tiffany.com.br
qa3-aem.tiffany.com.mx
qa3-aem.tiffany.de
qa3-aem.tiffany.es
qa3-aem.tiffany.fr
qa3-aem.tiffany.ie
qa3-aem.tiffany.it
qa3-aem.tiffany.kr
qa3-aem.tiffany.ru
qa3-aem.zh.tiffany.com
www.qa3-aem.be.tiffany.com
www.qa3-aem.estore-tco.com
www.qa3-aem.estore-tco.jp
www.qa3-aem.fr.tiffany.ca
www.qa3-aem.international.tiffany.com
www.qa3-aem.nl.tiffany.com
www.qa3-aem.pkb.tiffany.com
www.qa3-aem.tiffany.at
www.qa3-aem.tiffany.ca
www.qa3-aem.tiffany.cn
www.qa3-aem.tiffany.co.jp
www.qa3-aem.tiffany.co.uk
www.qa3-aem.tiffany.com
www.qa3-aem.tiffany.com.au
www.qa3-aem.tiffany.com.br
www.qa3-aem.tiffany.com.mx
www.qa3-aem.tiffany.de
www.qa3-aem.tiffany.es
www.qa3-aem.tiffany.fr
www.qa3-aem.tiffany.ie
www.qa3-aem.tiffany.it
www.qa3-aem.tiffany.kr
www.qa3-aem.tiffany.ru
www.qa3-aem.zh.tiffany.com

Other certificates including the domain name tiffany.com

(limited to 100 certificates)
appointments.tiffany.com
neo.tiffany.com
cara.tiffany.com
media.tiffany.com
www.tiffany.com
pa.tiffany.com
international.tiffany.com
subscribe.tiffany.com
ukukcacs02.tiffany.com
dev3.edev.tiffany.com
neo.tiffany.com
media.tiffany.com
san-002.ceros.com
qa2-aem.tiffany.com
uk.tiffany.com
qa2-aem.tiffany.com
www.tiffany.com
leapfrog-ssl-9.gcs-web.com
subscribe.tiffany.com
pkb.tiffany.com
www.tiffany.es
www.tiffany.com
neo.tiffany.com
san-002.ceros.com
www.tiffany.com
fonts.tiffany.com
appfront.tiffany.com
api.tiffany.com
www.tiffany.es
qa3-aem.tiffany.com
subscribe.tiffany.com
www.tiffany.com
sts.tiffany.com
san-002.ceros.com
media.tiffany.com
cara.tiffany.com
secure5s.scene7.com
subscribe.tiffany.com
san-002.ceros.com
mi.tiffany.com
san-002.ceros.com
san-35-s12.tlsprovisioning.exacttarget.com
san-002.ceros.com
uk.tiffany.com
neo.tiffany.com
www.pa.tiffany.com
san-35-s12.tlsprovisioning.exacttarget.com
san-002.ceros.com
sstats.be.tiffany.com
ps2b.tiffany.com
sts.tiffany.com
cybebrark.tiffany.com
san-35-s12.tlsprovisioning.exacttarget.com
san-002.ceros.com
san-002.ceros.com
tconsacsp04.tiffany.com
leapfrog-ssl-9.gcs-web.com
subscribe.tiffany.com
adobeconsole-qa.tiffany.com
qa-cara.tiffany.com
san-002.ceros.com
ps2b.tiffany.com
hk-payment.tiffany.com
mail.tiffany.com
leapfrog-ssl-9.gcs-web.com
mail.tiffany.com
ukukcacs01.tiffany.com
connect.tiffany.com
www.tiffany.com
sftp.tiffany.com
connect.tiffany.com
san-35-s12.tlsprovisioning.exacttarget.com
ukukcacs02.tiffany.com
t.tco.tiffany.com
neo.tiffany.com
media.tiffany.com
ringfinder-stage.tiffany.com
tco.tiffany.com
www.tiffany.com
www.pa.tiffany.com
qa-api.tiffany.com
sts.tiffany.com
qa1-aem.tiffany.com
test1.edev.tiffany.com
mail.tiffany.com
qa-api.tiffany.com
www.estore-tco.com
qa1-aem.tiffany.com
appfront.tiffany.com
san-002.ceros.com
san-002.ceros.com
www.estore-tco.com
sstats.tiffany.com
san-35-s12.tlsprovisioning.exacttarget.com
sftp.tiffany.com
leapfrog-ssl-9.gcs-web.com
www.tiffany.com
www.qa1.tiffany.com
enroll.tiffany.com
www.tiffany.es

Certificate

The complete raw certificate details for qa3-aem.tiffany.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyr5X31IgWa5bv2brxJe5
W/m6gt2djeg/1jtNtoFoORl6zy6aOuFVWsD20OOxd4tmcAW337oTjKsGJWdT9qSf
LaMNwHMf0EL5R8GnZlQuXml8GKm0qH5+KSKdC6H2sRaTaiIty+urKWlBQ0D7OZvg
aBEVy0k4lRBgo8sRIIBJ6s9rltKfceHDq3j45MKYzV9EQjqdOchTTbt7j1a7x+5O
TNtvorNt/ozwn5bYR+thBOvLap1VtOu5LHz/taMrtmpRf/KKEPVuDJ+aMI9KrfqG
A5G74JAbcwaGKROSA8Mq/CVqF4LdQGUpPqxvvm+utyj5GckBxpFDLWFM/LqoEjS3
UbbSJ0TBTYJzQqx+jEfNoBCbtN/5q+oA+t7e1V158+jKX/GkZJ4sTaIZPPn4ZF80
Ws8r2I0mL/7ueRlL68PGpVUcJZyLyHSHaOct3up+0Bu/CseEShJ0xkYYsaj5iSZr
YsqcVfOWwMUy5ATPMlJwcNTUzb6LK6BaWyYA1LsV3Oq+6oiX25fdPCDnWr1H94k/
AG1jtjQSzztA8b85cbdIqI8KT1qjy6R1LhQYnLQGhf0QNXkua27nAid99W9NTnir
LtyXY1xwgJI01JLfQuPBMYxG+aezKrhbdQutmndGsNFoO6djvFyYAyb7U1zYiAif
ntIIpk4DFmD1uMjoedhCR9MCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 242530375211795626125014749024113783199
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '10022'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '727 Fifth Avenue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Tiffany & Co.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unified Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qa3-aem.tiffany.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 827121432663028116426438310852416197378542694515593897359091427676612307954470824803187274879682594060803065172533638342886335011712322058876996274471366181034156396440187899805782468939802594232575755735241866748020516133866340057881276115267840480186054776057208826600256629755014236273278343467437629728776364568907341113268674733251231208484953615218224283630840227452820007480649727711953605011553978397122770725599495890624254824286443040636642886356818539528162855784834470869699542825285457156609998899834142566003668724574120763921162421625885091179737714954226988141337801532704643092406342374539617209020739030531390248315198576309718213758070744527449627653309735171348071337264160814321990010364925688499349274974695398316536674614446909201172454689520881398410647301357585083422245079388015946203306490686461642534611760377299737227416665308312076855863906986986077635385996802718312683496312844097330420270459884365645201881321288622506087903486953036912070270704698768175690554199139304620429001740149475300569811740346702728393898647117255829910023241807051201950519208188203133701858948987412138069528202104620848940821408112820890663760838905831977869965357728202829242215266261426781572307042069007815257800984531
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							43aa931c8d039290f3de1f822115deb4be38e7ec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1182 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa3-aem.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa3-aem.be.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa3-aem.estore-tco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa3-aem.estore-tco.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa3-aem.fr.tiffany.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa3-aem.international.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa3-aem.nl.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa3-aem.pkb.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa3-aem.tiffany.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa3-aem.tiffany.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa3-aem.tiffany.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa3-aem.tiffany.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa3-aem.tiffany.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa3-aem.tiffany.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa3-aem.tiffany.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa3-aem.tiffany.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa3-aem.tiffany.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa3-aem.tiffany.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa3-aem.tiffany.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa3-aem.tiffany.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa3-aem.tiffany.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa3-aem.tiffany.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa3-aem.tiffany.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa3-aem.zh.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3-aem.be.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3-aem.estore-tco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3-aem.estore-tco.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3-aem.fr.tiffany.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3-aem.international.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3-aem.nl.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3-aem.pkb.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3-aem.tiffany.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3-aem.tiffany.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3-aem.tiffany.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3-aem.tiffany.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3-aem.tiffany.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3-aem.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3-aem.tiffany.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3-aem.tiffany.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3-aem.tiffany.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3-aem.tiffany.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3-aem.tiffany.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3-aem.tiffany.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3-aem.tiffany.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3-aem.tiffany.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3-aem.tiffany.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3-aem.tiffany.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa3-aem.zh.tiffany.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b19559b5d3cb2c6ae1057feed62991e8ff3e492da43c87a0ac985e41687188d8a0dcf2302d5782f74c9d91dfacb78d29d45c28c5a349feab0e2ed302be2655af2efb51aace9f514b9b3eeae5efdc21419ed2bff1ac430679e0165e06cc394d58682d046d7c7d4ccd19d9947bce13bb0bf2ef4528c230d2c3f1895f9728703476421373bcb4fe0f2de90615a95edfee703ba475bbe7592f09e0014a7f646a7b3ae695ac993c42a159f10e059a2c7974720830cadc7ae18beb4d6c0eeebfe8f1b0378064e12581ea9d4b77341c281b8da44633726ed147f625b719b481e2d6b486cd6c89cd5bce9ab2a4a1d94df2ee9d08a8f794d3db3e22f8e81ce9e949b02db0