www.kay.com

- Sterling Jewelers, Inc -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 02:a2:17:22:a0:c1:b0:e8:0e:a2:3a:e9:38:d1:48:22 was issued on by DigiCert Inc.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Sterling Jewelers, Inc

Organization: Sterling Jewelers, Inc
State / Province: Ohio
Locality: Akron
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:a2:17:22:a0:c1:b0:e8:0e:a2:3a:e9:38:d1:48:22
Serial Number (int): 3500077321582642966837698114138228770
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: a5:be:08:68:28:0c:3d:2a:56:9a:1f:88:51:ee:68:ea:33:6f:fc:69
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 63:2b:e0:c1:0a:21:49:d4:a2:7e:32:01:30:75:05:11:a0:86:dd:24
Fingerprint (sha256): 5e:47:a5:de:ea:e0:f8:3b:76:a6:52:9d:3d:84:fb:10:78:29:ba:08:3d:33:d1:a7:76:1f:7a:f5:79:a9:8e:16

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.kay.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.kay.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.kay.com
uat9ecomapi.jewels.com
uat9.zalesoutlet.com
uat9.zales.com
uat9.peoplesjewellers.com
uat9.kayoutlet.com
uat9.kay.com
uat9.jared.com
uat9.gordonsjewelers.com
uat9.banter.com
uat8ecomapi.jewels.com
uat8.zalesoutlet.com
uat8.zales.com
uat8.peoplesjewellers.com
uat8.kayoutlet.com
uat8.kay.com
uat8.jared.com
uat8.gordonsjewelers.com
uat8.banter.com
uat7ecomapi.jewels.com
uat7.zalesoutlet.com
uat7.zales.com
uat7.peoplesjewellers.com
uat7.kayoutlet.com
uat7.kay.com
uat7.jared.com
uat7.gordonsjewelers.com
uat7.banter.com
uat6ecomapi.jewels.com
uat6.zalesoutlet.com
uat6.zales.com
uat6.peoplesjewellers.com
uat6.pagoda.com
uat6.kayoutlet.com
uat6.kay.com
uat6.jared.com
uat6.gordonsjewelers.com
uat6.banter.com
uat5ecomapi.jewels.com
uat5.kayoutlet.com
uat5.kay.com
uat5.jared.com
uat5.banter.com
uat4ecomapi.jewels.com
uat4.kayoutlet.com
uat4.kay.com
uat4.jared.com
uat4.banter.com
uat3ecomapi.jewels.com
uat3.kayoutlet.com
uat3.kay.com
uat3.jared.com
uat3.banter.com
uat2ecomapi.jewels.com
uat2.kayoutlet.com
uat2.kay.com
uat2.jared.com
uat2.banter.com
uat1ecomapi.jewels.com
uat1.kayoutlet.com
uat1.kay.com
uat1.jared.com
uat1.banter.com
trn1.zalesoutlet.com
trn1.zales.com
trn1.peoplesjewellers.com
trn1.pagoda.com
trn1.kayoutlet.com
trn1.kay.com
trn1.jared.com
trn1.gordonsjewelers.com
perfecomapi.jewels.com
perf.kayoutlet.com
perf.kay.com
perf.jared.com
perf.banter.com
dev5.kayoutlet.com
dev5.kay.com
dev5.jared.com
dev5.banter.com
dev4.kayoutlet.com
dev4.kay.com
dev4.jared.com
dev4.banter.com
dev3.kayoutlet.com
dev3.kay.com
dev3.jared.com
dev3.banter.com
dev2.kayoutlet.com
dev2.kay.com
dev2.jared.com
dev2.banter.com
dev1.kayoutlet.com
dev1.kay.com
dev1.jared.com
dev1.banter.com

Other certificates including the domain name kay.com

(limited to 100 certificates)
imperva.com
sni191bdgl.wpc.edgecastcdn.net
test.kay.com
mstage.jared.com
stores.kay.com
www2.kay.com
stores.kay.com
www.kay.com
*.classrings.kay.com
sni1d146gl.wpc.edgecastcdn.net
mstage.jared.com
origin-uat1.kay.com
www.kay.com
em.kay.com
t.kay.com
imperva.com
chat.kay.com
chat.kay.com
www.kay.com
credithub-dev.azusnc-test.jewels.com
credithub-test.azusnc-test.jewels.com
san2.yext-cdn.com
san2.yext-cdn.com
www.kay.com
test.kay.com
testbridal.kay.com
classrings.kay.com
san2.yext-cdn.com
classrings.kay.com
link.kay.com
link.kay.com
fashion.kay.com
bridal.kay.com
chat.kay.com
t.kay.com
www2.kay.com
www.kay.com
origin-uat1.kay.com
dtm.kay.com
www.kay.com
www.kay.com
test.kay.com
www.kay.com
signetqa.cbi-rings.com
bridal.kay.com
pay.sterlingjewelers.com
san2.yext-cdn.com
perf-creditapis.jewels.com
san2.yext-cdn.com
familyjewelry.kay.com
imperva.com
em.kay.com
locations.c2crestaurants.com
san2.yext-cdn.com
test.kay.com
stores.kay.com
chat.kay.com
www.kay.com
classrings.kay.com
chat.kay.com
san2.yext-cdn.com
em.kay.com
test.kay.com
testpersonalized.kay.com
www.kay.com
san2.yext-cdn.com
smetrics.kay.com
amp-uat3.kay.com
www.kay.com
pay.sterlingjewelers.com
www.kay.com
sni19bd6gl.wpc.edgecastcdn.net
www.kay.com
www.kay.com
pay.kay.com
*.kay.com
pages.email.kay.com
test.kay.com
pt-stores.iqos.com.yext-cdn.com
familyjewelry.kay.com
www.kay.com
m.kay.com
fpc.kay.com
credithub-test.azusnc-test.jewels.com
familyjewelry.kay.com
www.kay.com
classrings.kay.com
www.kay.com
classrings.kay.com
www.kay.com
personalized.jared.com
www.kay.com
www.kay.com
credithub-dev.azusnc-test.jewels.com
www.kay.com
www.kay.com
www.kay.com
san2.yext-cdn.com
*.kay.com
em.kay.com

Certificate

The complete raw certificate details for www.kay.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7yAHnmajjc4Xi/z/2z53
uDSb54edG+2Y8UjOpQkh2u2SlkA3o0n3L7P2E/8mt7bRrCHg3qdyPr9Ta8+CWbtg
On9Y7RAGygVpr+IIJvEZa2YhMTan89NLTlDqS+Kl6esorXdoB7WL/13gP0zmG1SX
zmh1CjuZRI5+cDJTcHjGsa+hQ/XAYQAglfF8fs8rvfC5QW8mmfj85/e6ok5V5ABF
rgv5HgFoZfKfrLteCey8N5MSd8Tekg1c7OupJoVZe8tqKdmAvjyne6/EqQStEUen
7lm36dd0jm9MH8CFe2sF2o5g9ksRlgF7db9ehkIX4I3fQbh/GYavHHZRoNvemnaz
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3500077321582642966837698114138228770
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ohio'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Akron'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sterling Jewelers, Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.kay.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30186749350584727920949836085761550861960230332022610445573088223280837992798991394485927007484492725159485516820999350299638761973257366216686219016591127397196941211618453275804687519665616243612429635053587758401150767035195414905669714377401132718477028262305546804447031145129806076602127952102879195521821863806150694751504120809732154713277585522601427947266599519290014658961819599312188410475297479380136505574614086323619295700914875343199719099393289102287469763224222998451299778281521627439162450874031416085008586604408868919882437897912591016286460295820795043744931850488797490049263513011284528771973
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a5be0868280c3d2a569a1f8851ee68ea336ffc69
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1801 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat9ecomapi.jewels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat9.zalesoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat9.zales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat9.peoplesjewellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat9.kayoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat9.kay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat9.jared.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat9.gordonsjewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat9.banter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat8ecomapi.jewels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat8.zalesoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat8.zales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat8.peoplesjewellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat8.kayoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat8.kay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat8.jared.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat8.gordonsjewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat8.banter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat7ecomapi.jewels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat7.zalesoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat7.zales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat7.peoplesjewellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat7.kayoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat7.kay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat7.jared.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat7.gordonsjewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat7.banter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat6ecomapi.jewels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat6.zalesoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat6.zales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat6.peoplesjewellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat6.pagoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat6.kayoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat6.kay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat6.jared.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat6.gordonsjewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat6.banter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat5ecomapi.jewels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat5.kayoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat5.kay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat5.jared.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat5.banter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat4ecomapi.jewels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat4.kayoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat4.kay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat4.jared.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat4.banter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat3ecomapi.jewels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat3.kayoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat3.kay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat3.jared.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat3.banter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat2ecomapi.jewels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat2.kayoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat2.kay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat2.jared.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat2.banter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat1ecomapi.jewels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat1.kayoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat1.kay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat1.jared.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat1.banter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn1.zalesoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn1.zales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn1.peoplesjewellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn1.pagoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn1.kayoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn1.kay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn1.jared.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn1.gordonsjewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perfecomapi.jewels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf.kayoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf.kay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf.jared.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf.banter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev5.kayoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev5.kay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev5.jared.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev5.banter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev4.kayoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev4.kay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev4.jared.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev4.banter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev3.kayoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev3.kay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev3.jared.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev3.banter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.kayoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.kay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.jared.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.banter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev1.kayoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev1.kay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev1.jared.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev1.banter.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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