www.tiffany.es

- Tiffany and Co -

Issued by GeoTrust SSL CA - G4

About this certificate

This digital certificate with serial number 06:91 was issued on by GeoTrust Inc..

With 44 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Tiffany and Co

Organization: Tiffany and Co
Organization unit: Akamai SAN SSL OV
State / Province: New York
Locality: New York
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:91
Serial Number (int): 1681
Serial Number lenght: 11 bits, 2 octets

SubjectKeyId:
AuthorityKeyId: ac:32:ed:5a:c9:e0:de:30:9c:90:58:55:26:63:f6:72:a6:54:5f:e3

Fingerprint (sha1): 29:21:2e:a7:2a:e2:0b:41:c5:15:ca:a6:d0:e5:0f:42:77:e9:05:1f
Fingerprint (sha256): 3e:69:af:ec:23:b4:76:5b:ef:1b:89:57:e0:70:41:e8:94:bc:e7:9a:af:7a:4a:51:01:88:bc:08:bb:56:d9:75

Issuing Certificate URL: http://gw.symcb.com/gw.crt

Revocation information

OCSP Server: http://gw.symcd.com
CRL Distribution Point: http://gw.symcb.com/gw.crl

Check the revocation status for certificate www.tiffany.es

44

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.tiffany.es

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.tiffany.com.mx
zh.tiffany.com
www.tiffany.ru
www.tiffany.com.ru
www.tiffanywatches.com
www.tiffanytrade.com
www.tiffany.kr
www.tiffany.it
www.tiffany.ie
www.tiffany.fr
www.tiffany.de
www.tiffany.com.au
www.tiffany.co.uk
www.tiffany.at
www.pa.tiffanytrade.com
www.pa.tiffany.com
www.pa.tiffany.co.uk
www.pa.tiffany.co.jp
www.m.tiffany.com
nl.tiffany.com
m.tiffany.kr
m.tiffany.it
m.tiffany.ie
m.tiffany.fr
m.tiffany.es
m.tiffany.de
m.tiffany.com.mx
m.tiffany.com.au
m.tiffany.com
m.tiffany.co.uk
m.tiffany.co.jp
m.tiffany.cn
m.tiffany.ca
m.tiffany.at
m-zh.tiffany.com
m-nl.tiffany.com
m-international.tiffany.com
m-be.tiffany.com
cdn.tiffany.com
be.tiffany.com
www.zh.tiffany.com
www.whatmakeslovetrue.com
www.tiffany.es
tiffany.es

Other certificates including the domain name tiffany.es

(limited to 100 certificates)
pa.tiffany.com
dev3.edev.tiffany.com
qa2-aem.tiffany.com
www.tiffany.es
www.tiffany.com
sstats.tiffany.es
www.tiffany.com
www.tiffany.es
qa3-aem.tiffany.com
www.pa.tiffany.com
ps2b.tiffany.com
sstats.tiffany.es
www.tiffany.com
www.pa.tiffany.com
qa1-aem.tiffany.com
test1.edev.tiffany.com
www.estore-tco.com
qa1-aem.tiffany.com
www.qa1.tiffany.com
www.tiffany.es
www.pa.tiffany.com
www.pa.tiffany.com
sstats.tiffany.es
www.qa1.tiffany.com
www.pa.tiffany.com
ps-aem.tiffany.com
qa3-aem.tiffany.com
qa1-aem.tiffany.com
www.tiffany.com
dev1.edev.tiffany.com
qa.tiffany.com
www.tiffany.es
ps-aem.tiffany.com
www.qa1.tiffany.com
www.tiffany.com
www.tiffany.es
www.tiffany.com
sstats.tiffany.es
www.estore-tco.com
dev2.edev.tiffany.com
dev3.edev.tiffany.com
TIFFANY AND CO.
www.pa.tiffany.com
tiffany.at
www.tiffany.es
www.tiffany.es
www.pa.tiffany.com
dev2.edev.tiffany.com
ps2b.tiffany.com
www.tiffany.com
www.tiffany.es
dev2.edev.tiffany.com
www.tiffany.es
www.pa.tiffany.com
www.qa1.tiffany.com
www.tiffany.es
www.tiffany.com
test3.edev.tiffany.com
qa3.tiffany.com
www.tiffany.es
www.tiffany.es
dev3.edev.tiffany.com
test2.edev.tiffany.com
www.tiffany.es
TIFFANY AND CO.
www.tiffany.com
www.pa.tiffany.com
www.qa.tiffany.com
www.tiffany.com
www.qa1.tiffany.com
tiffany.at
www.qa1.tiffany.com
www.pa.tiffany.com
qa2.tiffany.com
pa.tiffany.com
www.qa1.tiffany.com
www.pa.tiffany.com
pa.tiffany.com
sstats.tiffany.es
www.tiffany.es
www.tiffany.es
www.tiffany.es
pa-aem.tiffany.com
www.qa1.tiffany.com
www.tiffany.es
qa2-aem.tiffany.com
qa2-aem.tiffany.com
www.pa.tiffany.com
test1.edev.tiffany.com
test3.edev.tiffany.com
m.tiffany.com
www.tiffany.com
pa-aem.tiffany.com
www.qa1.tiffany.com
www.tiffany.com
qa3-aem.tiffany.com
www.tiffany.com
www.tiffany.es
sstats.tiffany.es
www.tiffany.es

Certificate

The complete raw certificate details for www.tiffany.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHpDCCBoygAwIBAgICBpEwDQYJKoZIhvcNAQELBQAwRDELMAkGA1UEBhMCVVMx
FjAUBgNVBAoTDUdlb1RydXN0IEluYy4xHTAbBgNVBAMTFEdlb1RydXN0IFNTTCBD
QSAtIEc0MB4XDTE1MDMyMzE3MTkwMFoXDTE2MDMyNTE3MDkxNlowgYExCzAJBgNV
BAYTAlVTMREwDwYDVQQIEwhOZXcgWW9yazERMA8GA1UEBxMITmV3IFlvcmsxFzAV
BgNVBAoTDlRpZmZhbnkgYW5kIENvMRowGAYDVQQLExFBa2FtYWkgU0FOIFNTTCBP
VjEXMBUGA1UEAxMOd3d3LnRpZmZhbnkuZXMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCjF3qEFfSdgbAkkWzHlxPM0kAgIX3dHcjmUbxhs1qi9CuysMfS
1Ly3JNtJUkePVsG5CnFS0Gb7hYZeshBb/LC26e6eADVOTtgf+DNFAMBOPRbKDzuO
ElpNGaKyfDOve1wyovizY9LrQv0wVZfiufDuVlx/JjxczSMctaASL0iSmjqlYr2o
MJbIWkSG6uwoRm8iKuFQ5XQq5l651hyWwKW7wzreHy2NVI1o2nkyNbM2HYH5pK78
ICheLeo+mWP/n3zxBSmd7fIMjDrqaeCoU8jeVSFkFmvz0rV9oQWJ44anrud/NnOh
EkXwPNqUUjLpv3N099nZXdWCHN1BSOxb/f6PAgMBAAGjggRgMIIEXDAfBgNVHSME
GDAWgBSsMu1ayeDeMJyQWFUmY/ZyplRf4zBXBggrBgEFBQcBAQRLMEkwHwYIKwYB
BQUHMAGGE2h0dHA6Ly9ndy5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9n
dy5zeW1jYi5jb20vZ3cuY3J0MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwggMYBgNVHREEggMPMIIDC4ISd3d3LnRpZmZhbnku
Y29tLm14gg56aC50aWZmYW55LmNvbYIOd3d3LnRpZmZhbnkucnWCEnd3dy50aWZm
YW55LmNvbS5ydYIWd3d3LnRpZmZhbnl3YXRjaGVzLmNvbYIUd3d3LnRpZmZhbnl0
cmFkZS5jb22CDnd3dy50aWZmYW55Lmtygg53d3cudGlmZmFueS5pdIIOd3d3LnRp
ZmZhbnkuaWWCDnd3dy50aWZmYW55LmZygg53d3cudGlmZmFueS5kZYISd3d3LnRp
ZmZhbnkuY29tLmF1ghF3d3cudGlmZmFueS5jby51a4IOd3d3LnRpZmZhbnkuYXSC
F3d3dy5wYS50aWZmYW55dHJhZGUuY29tghJ3d3cucGEudGlmZmFueS5jb22CFHd3
dy5wYS50aWZmYW55LmNvLnVrghR3d3cucGEudGlmZmFueS5jby5qcIIRd3d3Lm0u
dGlmZmFueS5jb22CDm5sLnRpZmZhbnkuY29tggxtLnRpZmZhbnkua3KCDG0udGlm
ZmFueS5pdIIMbS50aWZmYW55LmllggxtLnRpZmZhbnkuZnKCDG0udGlmZmFueS5l
c4IMbS50aWZmYW55LmRlghBtLnRpZmZhbnkuY29tLm14ghBtLnRpZmZhbnkuY29t
LmF1gg1tLnRpZmZhbnkuY29tgg9tLnRpZmZhbnkuY28udWuCD20udGlmZmFueS5j
by5qcIIMbS50aWZmYW55LmNuggxtLnRpZmZhbnkuY2GCDG0udGlmZmFueS5hdIIQ
bS16aC50aWZmYW55LmNvbYIQbS1ubC50aWZmYW55LmNvbYIbbS1pbnRlcm5hdGlv
bmFsLnRpZmZhbnkuY29tghBtLWJlLnRpZmZhbnkuY29tgg9jZG4udGlmZmFueS5j
b22CDmJlLnRpZmZhbnkuY29tghJ3d3cuemgudGlmZmFueS5jb22CGXd3dy53aGF0
bWFrZXNsb3ZldHJ1ZS5jb22CDnd3dy50aWZmYW55LmVzggp0aWZmYW55LmVzMCsG
A1UdHwQkMCIwIKAeoByGGmh0dHA6Ly9ndy5zeW1jYi5jb20vZ3cuY3JsMAwGA1Ud
EwEB/wQCMAAwWgYDVR0gBFMwUTBPBgpghkgBhvhFAQc2MEEwPwYIKwYBBQUHAgEW
M2h0dHBzOi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvcmVwb3NpdG9yeS9s
ZWdhbDANBgkqhkiG9w0BAQsFAAOCAQEAj65STtiykrivU8x1CMG/msnweTYRxoea
mfrIdx0A4oiR1jhdat2+cDie6dqJRoRmmk0aV3unzLKUdVwi4wY9JeETC8oFuNJH
5T7QUui8HiGd1XzJ39bN911UZIgvIzSFAWp7Y40S1vXI5+U8yFtNR17Z1nm/m4aF
ZWTVFptREkZLnp6zN/jBxzPKIYefNXNPs1py9b2NWFi7SyhuZQxSakTLJxO6emiL
qVLtU+kKyEspiaSan1g8e7U40mN2OuWMZwY/zyeE1O9xW2KYIo+6uvQTrnnbKYV7
VB6pvSLhApm7g+Htlpg0xCIrVkacBqTL/BJtm7ayyHsBK7Cs/xqmig==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxd6hBX0nYGwJJFsx5cT
zNJAICF93R3I5lG8YbNaovQrsrDH0tS8tyTbSVJHj1bBuQpxUtBm+4WGXrIQW/yw
tunungA1Tk7YH/gzRQDATj0Wyg87jhJaTRmisnwzr3tcMqL4s2PS60L9MFWX4rnw
7lZcfyY8XM0jHLWgEi9Ikpo6pWK9qDCWyFpEhursKEZvIirhUOV0KuZeudYclsCl
u8M63h8tjVSNaNp5MjWzNh2B+aSu/CAoXi3qPplj/5988QUpne3yDIw66mngqFPI
3lUhZBZr89K1faEFieOGp67nfzZzoRJF8DzalFIy6b9zdPfZ2V3VghzdQUjsW/3+
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1681
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-23 17:19:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-25 17:09:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tiffany and Co'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Akamai SAN SSL OV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.tiffany.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20588421427771445015697975269290202862791507568976878965941919919649921151259930285721870039545420752663536190947491748516970901334966941375368176298588228754644182144662409454831904084524704641919856256858569691632957892774320218048204270476380068735668365787948003578548190406371674805392882018955176800692586540083174550707368024299084933638558455012579396320898201026895663131782320039995294108611092189179831064412683543170975333537433938882134072128976612375629049073242976829492092493516751583729692415230539424396897910579379311493809596579903131471300456634358753155865683101854443131679073134993973731786383
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ac32ed5ac9e0de309c9058552663f672a6545fe3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gw.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gw.symcb.com/gw.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (783 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffany.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zh.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffany.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffany.com.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffanywatches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffanytrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffany.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffany.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffany.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffany.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffany.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffany.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffany.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffany.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pa.tiffanytrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pa.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pa.tiffany.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pa.tiffany.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nl.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tiffany.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tiffany.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tiffany.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tiffany.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tiffany.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tiffany.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tiffany.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tiffany.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tiffany.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tiffany.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tiffany.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tiffany.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tiffany.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-zh.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-nl.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-international.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-be.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zh.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whatmakeslovetrue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffany.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiffany.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gw.symcb.com/gw.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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