tiffany.at

- Tiffany & Co. -

Issued by DigiCert Secure Site CN CA G3

About this certificate

This digital certificate with serial number 07:56:8e:8a:95:28:fb:aa:93:19:ef:76:5e:62:cd:84 was issued on by DigiCert Inc.

With 25 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Tiffany & Co.

Organization: Tiffany & Co.
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:56:8e:8a:95:28:fb:aa:93:19:ef:76:5e:62:cd:84
Serial Number (int): 9754024582141363748757520233238023556
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: f8:40:2e:48:2f:0f:fb:55:80:89:57:be:f4:6f:4c:9c:99:d1:e3:74
AuthorityKeyId: 44:d9:c8:4a:33:8e:d3:52:8d:a7:92:94:61:1f:9a:c8:a5:b7:ec:cb

Fingerprint (sha1): b8:02:af:82:91:1b:08:5d:96:7c:51:c1:b1:e6:2d:dc:29:03:0c:dc
Fingerprint (sha256): 4e:a6:1b:e0:b6:ca:73:96:a4:a6:4f:54:15:ab:08:10:9d:db:91:9a:f2:9a:06:bb:b7:8b:03:0b:22:d1:52:da

Issuing Certificate URL: http://cacerts.digicert.cn/DigiCertSecureSiteCNCAG3.crt

Revocation information

OCSP Server: http://ocsp.digicert.cn
CRL Distribution Point: http://crl.digicert.cn/DigiCertSecureSiteCNCAG3.crl

Check the revocation status for certificate tiffany.at

25

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tiffany.at

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tiffany.at
be.tiffany.com
fr.tiffany.ca
nl.tiffany.com
www.International.tiffany.com
www.Tiffany.at
www.Tiffany.cn
www.Tiffany.co.jp
www.Tiffany.co.uk
www.Tiffany.de
www.Tiffany.fr
www.Tiffany.ie
www.Tiffany.it
www.Tiffany.kr
www.estore-tco.com
www.estore-tco.jp
www.salesservice.tiffany.com
www.tiffany.ca
www.tiffany.com
www.tiffany.com.au
www.tiffany.com.br
www.tiffany.com.mx
www.tiffany.es
www.tiffanytrade.jp
www.zh.tiffany.com

Other certificates including the domain name tiffany.at

(limited to 100 certificates)
pa.tiffany.com
dev3.edev.tiffany.com
qa2-aem.tiffany.com
www.tiffany.es
www.tiffany.com
www.tiffany.com
www.tiffany.es
qa3-aem.tiffany.com
www.pa.tiffany.com
ps2b.tiffany.com
www.tiffany.com
www.pa.tiffany.com
qa1-aem.tiffany.com
test1.edev.tiffany.com
www.estore-tco.com
qa1-aem.tiffany.com
www.estore-tco.com
www.qa1.tiffany.com
www.tiffany.es
www.pa.tiffany.com
www.pa.tiffany.com
sstats.tiffany.at
www.qa1.tiffany.com
sstats.tiffany.at
www.pa.tiffany.com
ps-aem.tiffany.com
qa3-aem.tiffany.com
qa1-aem.tiffany.com
www.tiffany.com
dev1.edev.tiffany.com
qa.tiffany.com
www.tiffany.es
ps-aem.tiffany.com
www.qa1.tiffany.com
www.tiffany.com
www.tiffany.es
www.tiffany.com
www.estore-tco.com
dev2.edev.tiffany.com
dev3.edev.tiffany.com
TIFFANY AND CO.
www.pa.tiffany.com
tiffany.at
www.tiffany.es
www.tiffany.es
www.pa.tiffany.com
dev2.edev.tiffany.com
ps2b.tiffany.com
www.tiffany.com
www.tiffany.es
dev2.edev.tiffany.com
www.tiffany.es
sstats.tiffany.at
www.pa.tiffany.com
www.qa1.tiffany.com
www.tiffany.es
www.tiffany.com
test3.edev.tiffany.com
qa3.tiffany.com
www.tiffany.es
www.tiffany.es
dev3.edev.tiffany.com
test2.edev.tiffany.com
tiffany.at
www.tiffany.es
TIFFANY AND CO.
www.tiffany.com
www.pa.tiffany.com
www.qa.tiffany.com
www.tiffany.com
www.qa1.tiffany.com
tiffany.at
www.qa1.tiffany.com
www.pa.tiffany.com
qa2.tiffany.com
pa.tiffany.com
www.qa1.tiffany.com
www.pa.tiffany.com
pa.tiffany.com
www.tiffany.es
www.tiffany.es
www.tiffany.es
pa-aem.tiffany.com
www.qa1.tiffany.com
www.tiffany.es
qa2-aem.tiffany.com
qa2-aem.tiffany.com
www.pa.tiffany.com
test1.edev.tiffany.com
test3.edev.tiffany.com
m.tiffany.com
www.tiffany.com
sstats.tiffany.at
pa-aem.tiffany.com
www.qa1.tiffany.com
www.tiffany.com
qa3-aem.tiffany.com
www.tiffany.com
sstats.tiffany.at
sstats.tiffany.at

Certificate

The complete raw certificate details for tiffany.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIEzCCBvugAwIBAgIQB1aOipUo+6qTGe92XmLNhDANBgkqhkiG9w0BAQsFADBM
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSYwJAYDVQQDEx1E
aWdpQ2VydCBTZWN1cmUgU2l0ZSBDTiBDQSBHMzAeFw0yMzA4MTEwMDAwMDBaFw0y
NDA4MTMyMzU5NTlaMGAxCzAJBgNVBAYTAlVTMREwDwYDVQQIEwhOZXcgWW9yazER
MA8GA1UEBxMITmV3IFlvcmsxFjAUBgNVBAoMDVRpZmZhbnkgJiBDby4xEzARBgNV
BAMTCnRpZmZhbnkuYXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV
h3YI0x9DAbdws3/88gdCUA97JTTzsKe+e5OMCSEfHSxoKIN6ngzuqRe3b0SYNjU3
+tLTbmcpFF648ES8JAP0rrdJAtb/8+DT6c8oAzSlru6d95xl8K+Q+cYMjoA0htW/
c9tGUC2s7tU5PJfUVTsX1gpiiT9XqN/ABRQ+Z9/yQ1oSww/R0SjI4Dwx0dOmAvBY
Q4XTbk9zLehWZuRYmp+YtU5X4VBPhgp9tMH+mfsvAon8USUFEZ1cylZfv9SRBa7s
oeyjz9j/sTKGKA/lmVwRmVMTlgMxzGdTgvHyZjKf2tec6LeaeKoj7jUndQRwFzJf
tOIlWuGgXx9WYns0ho6pAgMBAAGjggTbMIIE1zAfBgNVHSMEGDAWgBRE2chKM47T
Uo2nkpRhH5rIpbfsyzAdBgNVHQ4EFgQU+EAuSC8P+1WAiVe+9G9MnJnR43QwggHY
BgNVHREEggHPMIIBy4IKdGlmZmFueS5hdIIOYmUudGlmZmFueS5jb22CDWZyLnRp
ZmZhbnkuY2GCDm5sLnRpZmZhbnkuY29tgh13d3cuSW50ZXJuYXRpb25hbC50aWZm
YW55LmNvbYIOd3d3LlRpZmZhbnkuYXSCDnd3dy5UaWZmYW55LmNughF3d3cuVGlm
ZmFueS5jby5qcIIRd3d3LlRpZmZhbnkuY28udWuCDnd3dy5UaWZmYW55LmRlgg53
d3cuVGlmZmFueS5mcoIOd3d3LlRpZmZhbnkuaWWCDnd3dy5UaWZmYW55Lml0gg53
d3cuVGlmZmFueS5rcoISd3d3LmVzdG9yZS10Y28uY29tghF3d3cuZXN0b3JlLXRj
by5qcIIcd3d3LnNhbGVzc2VydmljZS50aWZmYW55LmNvbYIOd3d3LnRpZmZhbnku
Y2GCD3d3dy50aWZmYW55LmNvbYISd3d3LnRpZmZhbnkuY29tLmF1ghJ3d3cudGlm
ZmFueS5jb20uYnKCEnd3dy50aWZmYW55LmNvbS5teIIOd3d3LnRpZmZhbnkuZXOC
E3d3dy50aWZmYW55dHJhZGUuanCCEnd3dy56aC50aWZmYW55LmNvbTAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEQGA1UdHwQ9
MDswOaA3oDWGM2h0dHA6Ly9jcmwuZGlnaWNlcnQuY24vRGlnaUNlcnRTZWN1cmVT
aXRlQ05DQUczLmNybDA+BgNVHSAENzA1MDMGBmeBDAECAjApMCcGCCsGAQUFBwIB
FhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMweAYIKwYBBQUHAQEEbDBqMCMG
CCsGAQUFBzABhhdodHRwOi8vb2NzcC5kaWdpY2VydC5jbjBDBggrBgEFBQcwAoY3
aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY24vRGlnaUNlcnRTZWN1cmVTaXRlQ05D
QUczLmNydDAJBgNVHRMEAjAAMIIBfQYKKwYBBAHWeQIEAgSCAW0EggFpAWcAdQDu
zdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYnlpIj0AAAEAwBGMEQC
IBvK+tT+Ja/r6w0lr2q7GY3cthLeLTIkTse9kBiKjfNvAiBGCFg5lZdrDqZ9h7tx
5z/yYAq/zOP0l+KINV3G2X+pMQB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7
v6s52IRzAAABieWkiTAAAAQDAEcwRQIhAPuSlDWaOLa2QAZHjQsbxaL0H8LAPD7O
tvzKo42C/EzSAiAIFQdfJEBUiOMAfsyNT01dHgSAVfpmCGhmp24A7jpKYQB2ANq2
v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABieWkiTcAAAQDAEcwRQIg
UoW2NBrSSX2nwZjLfFW0PxCwjKUzcW7iE6Tf5sfThFUCIQCKDlie6uzfGeU37D3h
BXM4JcSp+aBBWJRT5amkZoKOVDANBgkqhkiG9w0BAQsFAAOCAQEAVA73dq4yEQuc
SR+zjXv6qk0HlEWBsOcRFkAyMenMI4mRuAXR9J4pajIwvnOhbOiZOAhFJo58Rs3J
av++bsctv8SaJDv7ojJfm7JUikM11/8zZbGjtxiImwXFHg8MSVF4gj9WkSnF7vmU
j188o9hMBBQfXWzinTgK901N3cmtINVso6BjbL+x5gAV952EfLCBq7VGh1cQhEyz
CZdpN6MTMC239ozit9l/MOj/xRDCyEoutPhzLT//F9zwct133Jq1Vc0fVkC3wQ1g
rzrImGF3t7EFLvuz91FkvzqKRM/Knb/w/NJOtItpEgoX62/TyNjbuQ+lhTvaPlDg
sGUwGKD9Pw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Yd2CNMfQwG3cLN//PIH
QlAPeyU087CnvnuTjAkhHx0saCiDep4M7qkXt29EmDY1N/rS025nKRReuPBEvCQD
9K63SQLW//Pg0+nPKAM0pa7unfecZfCvkPnGDI6ANIbVv3PbRlAtrO7VOTyX1FU7
F9YKYok/V6jfwAUUPmff8kNaEsMP0dEoyOA8MdHTpgLwWEOF025Pcy3oVmbkWJqf
mLVOV+FQT4YKfbTB/pn7LwKJ/FElBRGdXMpWX7/UkQWu7KHso8/Y/7EyhigP5Zlc
EZlTE5YDMcxnU4Lx8mYyn9rXnOi3mniqI+41J3UEcBcyX7TiJVrhoF8fVmJ7NIaO
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9754024582141363748757520233238023556
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Secure Site CN CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Tiffany & Co.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tiffany.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26955557302058094123542912823079449079534205406445871473195450512438369633591122685955903776509697243151254329684812862594208620025251595851785461005845112896912998705847320367116880669224948664165656743484617741739171619796695833702922992727471840212837505489438351307839282156849968958472300090740527157703979092587274596234430493121174280685198455893009289468906954326620517003714586350790720312515448605033723672198674816363978014068898160098019775292378406327490160012206362816575609624245471481840540371985300007913285520538336230558855215053183220333192525113353599690124417557748905932836010776933162753101481
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 44d9c84a338ed3528da79294611f9ac8a5b7eccb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f8402e482f0ffb55808957bef46f4c9c99d1e374
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (463 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiffany.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.tiffany.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nl.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.International.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.Tiffany.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.Tiffany.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.Tiffany.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.Tiffany.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.Tiffany.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.Tiffany.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.Tiffany.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.Tiffany.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.Tiffany.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.estore-tco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.estore-tco.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.salesservice.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffany.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffany.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffany.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffany.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffany.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffanytrade.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zh.tiffany.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.digicert.cn/DigiCertSecureSiteCNCAG3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.cn/DigiCertSecureSiteCNCAG3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000189e5a488f4000004030046304402201bcafad4fe25afebeb0d25af6abb198ddcb612de2d32244ec7bd90188a8df36f02204608583995976b0ea67d87bb71e73ff2600abfcce3f497e288355dc6d97fa93100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d8847300000189e5a489300000040300473045022100fb9294359a38b6b64006478d0b1bc5a2f41fc2c03c3eceb6fccaa38d82fc4cd202200815075f24405488e3007ecc8d4f4d5d1e048055fa66086866a76e00ee3a4a61007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab00000189e5a48937000004030047304502205285b6341ad2497da7c198cb7c55b43f10b08ca533716ee213a4dfe6c7d384550221008a0e589eeaecdf19e537ec3de105733825c4a9f9a041589453e5a9a466828e54
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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