qa2-aem.tiffany.com

- Tiffany & Co. -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 46:a6:32:76:7b:ee:d4:2c:eb:c1:c2:0e:85:4f:20:a5 was issued on by COMODO CA Limited.

With 25 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Tiffany & Co.

Organization: Tiffany & Co.
Organization unit: IT
Organization unit: Unified Communications
Address: 727 Fifth Avenue
Postal code: 10022
State / Province: NY
Locality: New York
Country: US

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 46:a6:32:76:7b:ee:d4:2c:eb:c1:c2:0e:85:4f:20:a5
Serial Number (int): 93908904491219634279748495452798918821
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 43:aa:93:1c:8d:03:92:90:f3:de:1f:82:21:15:de:b4:be:38:e7:ec
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): b6:00:18:7e:12:f2:83:5b:9e:83:be:7a:93:71:a7:1a:28:49:dc:07
Fingerprint (sha256): 8f:cf:b2:05:c1:03:59:f5:d7:3c:7d:8b:03:87:52:cb:a5:b0:80:15:25:54:a2:6a:65:5e:46:ba:2b:ce:f5:5e

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate qa2-aem.tiffany.com

25

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qa2-aem.tiffany.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

qa2-aem.tiffany.com
www.qa2-aem.be.tiffany.com
www.qa2-aem.estore-tco.com
www.qa2-aem.estore-tco.jp
www.qa2-aem.fr.tiffany.ca
www.qa2-aem.international.tiffany.com
www.qa2-aem.nl.tiffany.com
www.qa2-aem.pkb.tiffany.com
www.qa2-aem.tiffany.at
www.qa2-aem.tiffany.ca
www.qa2-aem.tiffany.cn
www.qa2-aem.tiffany.co.jp
www.qa2-aem.tiffany.co.uk
www.qa2-aem.tiffany.com
www.qa2-aem.tiffany.com.au
www.qa2-aem.tiffany.com.br
www.qa2-aem.tiffany.com.mx
www.qa2-aem.tiffany.de
www.qa2-aem.tiffany.es
www.qa2-aem.tiffany.fr
www.qa2-aem.tiffany.ie
www.qa2-aem.tiffany.it
www.qa2-aem.tiffany.kr
www.qa2-aem.tiffany.ru
www.qa2-aem.zh.tiffany.com

Other certificates including the domain name tiffany.com

(limited to 100 certificates)
appointments.tiffany.com
neo.tiffany.com
cara.tiffany.com
media.tiffany.com
www.tiffany.com
pa.tiffany.com
international.tiffany.com
subscribe.tiffany.com
ukukcacs02.tiffany.com
dev3.edev.tiffany.com
neo.tiffany.com
media.tiffany.com
san-002.ceros.com
qa2-aem.tiffany.com
uk.tiffany.com
qa2-aem.tiffany.com
www.tiffany.com
leapfrog-ssl-9.gcs-web.com
subscribe.tiffany.com
pkb.tiffany.com
www.tiffany.es
www.tiffany.com
neo.tiffany.com
san-002.ceros.com
www.tiffany.com
fonts.tiffany.com
appfront.tiffany.com
api.tiffany.com
www.tiffany.es
qa3-aem.tiffany.com
subscribe.tiffany.com
www.tiffany.com
sts.tiffany.com
san-002.ceros.com
media.tiffany.com
cara.tiffany.com
secure5s.scene7.com
subscribe.tiffany.com
san-002.ceros.com
mi.tiffany.com
san-002.ceros.com
san-35-s12.tlsprovisioning.exacttarget.com
san-002.ceros.com
uk.tiffany.com
neo.tiffany.com
www.pa.tiffany.com
san-35-s12.tlsprovisioning.exacttarget.com
san-002.ceros.com
sstats.be.tiffany.com
ps2b.tiffany.com
sts.tiffany.com
cybebrark.tiffany.com
san-35-s12.tlsprovisioning.exacttarget.com
san-002.ceros.com
san-002.ceros.com
tconsacsp04.tiffany.com
leapfrog-ssl-9.gcs-web.com
subscribe.tiffany.com
adobeconsole-qa.tiffany.com
qa-cara.tiffany.com
san-002.ceros.com
ps2b.tiffany.com
hk-payment.tiffany.com
mail.tiffany.com
leapfrog-ssl-9.gcs-web.com
mail.tiffany.com
ukukcacs01.tiffany.com
connect.tiffany.com
www.tiffany.com
sftp.tiffany.com
connect.tiffany.com
san-35-s12.tlsprovisioning.exacttarget.com
ukukcacs02.tiffany.com
t.tco.tiffany.com
neo.tiffany.com
media.tiffany.com
ringfinder-stage.tiffany.com
tco.tiffany.com
www.tiffany.com
www.pa.tiffany.com
qa-api.tiffany.com
sts.tiffany.com
qa1-aem.tiffany.com
test1.edev.tiffany.com
mail.tiffany.com
qa-api.tiffany.com
www.estore-tco.com
qa1-aem.tiffany.com
appfront.tiffany.com
san-002.ceros.com
san-002.ceros.com
www.estore-tco.com
sstats.tiffany.com
san-35-s12.tlsprovisioning.exacttarget.com
sftp.tiffany.com
leapfrog-ssl-9.gcs-web.com
www.tiffany.com
www.qa1.tiffany.com
enroll.tiffany.com
www.tiffany.es

Certificate

The complete raw certificate details for qa2-aem.tiffany.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 93908904491219634279748495452798918821
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '10022'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '727 Fifth Avenue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Tiffany & Co.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unified Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qa2-aem.tiffany.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 827121432663028116426438310852416197378542694515593897359091427676612307954470824803187274879682594060803065172533638342886335011712322058876996274471366181034156396440187899805782468939802594232575755735241866748020516133866340057881276115267840480186054776057208826600256629755014236273278343467437629728776364568907341113268674733251231208484953615218224283630840227452820007480649727711953605011553978397122770725599495890624254824286443040636642886356818539528162855784834470869699542825285457156609998899834142566003668724574120763921162421625885091179737714954226988141337801532704643092406342374539617209020739030531390248315198576309718213758070744527449627653309735171348071337264160814321990010364925688499349274974695398316536674614446909201172454689520881398410647301357585083422245079388015946203306490686461642534611760377299737227416665308312076855863906986986077635385996802718312683496312844097330420270459884365645201881321288622506087903486953036912070270704698768175690554199139304620429001740149475300569811740346702728393898647117255829910023241807051201950519208188203133701858948987412138069528202104620848940821408112820890663760838905831977869965357728202829242215266261426781572307042069007815257800984531
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							43aa931c8d039290f3de1f822115deb4be38e7ec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (662 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2-aem.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2-aem.be.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2-aem.estore-tco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2-aem.estore-tco.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2-aem.fr.tiffany.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2-aem.international.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2-aem.nl.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2-aem.pkb.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2-aem.tiffany.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2-aem.tiffany.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2-aem.tiffany.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2-aem.tiffany.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2-aem.tiffany.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2-aem.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2-aem.tiffany.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2-aem.tiffany.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2-aem.tiffany.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2-aem.tiffany.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2-aem.tiffany.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2-aem.tiffany.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2-aem.tiffany.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2-aem.tiffany.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2-aem.tiffany.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2-aem.tiffany.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa2-aem.zh.tiffany.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							0166007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016635001fe9000004030046304402203370b8b0207f0d8bfccf4220f6bdba6bb42cce5ca66ee95b442f460c78b78a89022014ea28f7c4d8e9608cbc0ebc1f9d11135666caf94d8014668cc908a18bf0621d0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001663500201f00000403004730450221009eaf1d3dc8c441325df654975e89ded00729b72df8024433523863bbaabc70ef02207de9618784a0d787804f8b7de0f2c6be760b72971a6406472b6a331008a96d6f0075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016635002058000004030046304402202d9a07d1ef17eed3e148b39c956848142f5c214c254be6e356c87edb30cf15150220143e4d77479193b42c2174e31bec2391bbd5431dd4027757ac9ba9db26dd1aef
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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