www.pa.tiffany.com
- Tiffany and Company -
Issued by DigiCert TLS RSA SHA256 2020 CA1
About this certificate
This digital certificate with serial number 04:f4:8a:7d:a3:a2:48:e9:5b:0c:16:82:37:ed:43:5d was issued on by DigiCert Inc.
With 64 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Tiffany and Company
Organization:
Tiffany and Company
State / Province:
New York
Locality: New York
Country: US
Locality: New York
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:f4:8a:7d:a3:a2:48:e9:5b:0c:16:82:37:ed:43:5dSerial Number (int): 6586641343310026545232968682056794973
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 8c:b9:ed:f3:6a:cb:03:2f:29:b4:1f:69:08:6a:a1:16:fb:db:c1:4c
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4
Fingerprint (sha1): 38:e1:75:fc:04:46:d0:c2:9d:24:f2:bb:97:3c:10:84:c4:a3:0a:17
Fingerprint (sha256): ce:d4:6f:0d:14:e9:21:bb:a5:32:64:26:88:28:36:0e:2c:86:a1:46:e0:d3:f4:b7:73:40:d7:b5:55:ec:9b:09
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
Check the revocation status for certificate www.pa.tiffany.com
64
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.pa.tiffany.com
Public Key Algorithm
ECDSA
Key Size
256
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Agreement
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.pa.tiffany.com
pa.media.tiffany.com
pa.pkb.tiffany.com
production-test.be.tiffany.com
production-test.nl.tiffany.com
production-test.tiffany.at
production-test.tiffany.de
production-test.tiffany.es
production-test.tiffany.fr
production-test.tiffany.gr
production-test.tiffany.ie
production-test.tiffany.it
production-test.tiffany.lu
production-test.tiffany.pt
www.international.tiffany.com
www.ps-az.tiffany.cn
www.ps.be.tiffany.com
www.ps.estore-tco.com
www.ps.estore-tco.jp
www.ps.fr.tiffany.ca
www.ps.international.tiffany.com
www.ps.nl.tiffany.com
www.ps.salesservice.tiffany.com
www.ps.tiffany.at
www.ps.tiffany.ca
www.ps.tiffany.cn
www.ps.tiffany.co.jp
www.ps.tiffany.co.uk
www.ps.tiffany.com
www.ps.tiffany.com.au
www.ps.tiffany.com.br
www.ps.tiffany.com.mx
www.ps.tiffany.de
www.ps.tiffany.es
www.ps.tiffany.fr
www.ps.tiffany.ie
www.ps.tiffany.it
www.ps.tiffany.kr
www.ps.tiffanytrade.com
www.ps.tiffanytrade.jp
www.ps.zh.tiffany.com
www.qaperf.be.tiffany.com
www.qaperf.estore-tco.com
www.qaperf.estore-tco.jp
www.qaperf.fr.tiffany.ca
www.qaperf.international.tiffany.com
www.qaperf.nl.tiffany.com
www.qaperf.tiffany.at
www.qaperf.tiffany.ca
www.qaperf.tiffany.cn
www.qaperf.tiffany.co.jp
www.qaperf.tiffany.co.uk
www.qaperf.tiffany.com
www.qaperf.tiffany.com.au
www.qaperf.tiffany.com.br
www.qaperf.tiffany.com.mx
www.qaperf.tiffany.de
www.qaperf.tiffany.es
www.qaperf.tiffany.fr
www.qaperf.tiffany.ie
www.qaperf.tiffany.it
www.qaperf.tiffany.kr
www.qaperf.tiffanytrade.jp
www.qaperf.zh.tiffany.com
pa.media.tiffany.com
pa.pkb.tiffany.com
production-test.be.tiffany.com
production-test.nl.tiffany.com
production-test.tiffany.at
production-test.tiffany.de
production-test.tiffany.es
production-test.tiffany.fr
production-test.tiffany.gr
production-test.tiffany.ie
production-test.tiffany.it
production-test.tiffany.lu
production-test.tiffany.pt
www.international.tiffany.com
www.ps-az.tiffany.cn
www.ps.be.tiffany.com
www.ps.estore-tco.com
www.ps.estore-tco.jp
www.ps.fr.tiffany.ca
www.ps.international.tiffany.com
www.ps.nl.tiffany.com
www.ps.salesservice.tiffany.com
www.ps.tiffany.at
www.ps.tiffany.ca
www.ps.tiffany.cn
www.ps.tiffany.co.jp
www.ps.tiffany.co.uk
www.ps.tiffany.com
www.ps.tiffany.com.au
www.ps.tiffany.com.br
www.ps.tiffany.com.mx
www.ps.tiffany.de
www.ps.tiffany.es
www.ps.tiffany.fr
www.ps.tiffany.ie
www.ps.tiffany.it
www.ps.tiffany.kr
www.ps.tiffanytrade.com
www.ps.tiffanytrade.jp
www.ps.zh.tiffany.com
www.qaperf.be.tiffany.com
www.qaperf.estore-tco.com
www.qaperf.estore-tco.jp
www.qaperf.fr.tiffany.ca
www.qaperf.international.tiffany.com
www.qaperf.nl.tiffany.com
www.qaperf.tiffany.at
www.qaperf.tiffany.ca
www.qaperf.tiffany.cn
www.qaperf.tiffany.co.jp
www.qaperf.tiffany.co.uk
www.qaperf.tiffany.com
www.qaperf.tiffany.com.au
www.qaperf.tiffany.com.br
www.qaperf.tiffany.com.mx
www.qaperf.tiffany.de
www.qaperf.tiffany.es
www.qaperf.tiffany.fr
www.qaperf.tiffany.ie
www.qaperf.tiffany.it
www.qaperf.tiffany.kr
www.qaperf.tiffanytrade.jp
www.qaperf.zh.tiffany.com
Other certificates including the domain name tiffany.com
(limited to 100 certificates)
appointments.tiffany.com
neo.tiffany.com
cara.tiffany.com
media.tiffany.com
www.tiffany.com
pa.tiffany.com
international.tiffany.com
subscribe.tiffany.com
ukukcacs02.tiffany.com
dev3.edev.tiffany.com
neo.tiffany.com
media.tiffany.com
san-002.ceros.com
qa2-aem.tiffany.com
uk.tiffany.com
qa2-aem.tiffany.com
www.tiffany.com
leapfrog-ssl-9.gcs-web.com
subscribe.tiffany.com
pkb.tiffany.com
www.tiffany.es
www.tiffany.com
neo.tiffany.com
san-002.ceros.com
www.tiffany.com
fonts.tiffany.com
appfront.tiffany.com
api.tiffany.com
www.tiffany.es
qa3-aem.tiffany.com
subscribe.tiffany.com
www.tiffany.com
sts.tiffany.com
san-002.ceros.com
media.tiffany.com
cara.tiffany.com
secure5s.scene7.com
subscribe.tiffany.com
san-002.ceros.com
mi.tiffany.com
san-002.ceros.com
san-35-s12.tlsprovisioning.exacttarget.com
san-002.ceros.com
uk.tiffany.com
neo.tiffany.com
www.pa.tiffany.com
san-35-s12.tlsprovisioning.exacttarget.com
san-002.ceros.com
sstats.be.tiffany.com
ps2b.tiffany.com
sstats.tiffany.com
sts.tiffany.com
cybebrark.tiffany.com
san-35-s12.tlsprovisioning.exacttarget.com
san-002.ceros.com
san-002.ceros.com
tconsacsp04.tiffany.com
leapfrog-ssl-9.gcs-web.com
subscribe.tiffany.com
adobeconsole-qa.tiffany.com
qa-cara.tiffany.com
san-002.ceros.com
ps2b.tiffany.com
hk-payment.tiffany.com
mail.tiffany.com
leapfrog-ssl-9.gcs-web.com
mail.tiffany.com
ukukcacs01.tiffany.com
connect.tiffany.com
www.tiffany.com
sftp.tiffany.com
connect.tiffany.com
san-35-s12.tlsprovisioning.exacttarget.com
ukukcacs02.tiffany.com
t.tco.tiffany.com
neo.tiffany.com
media.tiffany.com
ringfinder-stage.tiffany.com
tco.tiffany.com
www.tiffany.com
www.pa.tiffany.com
qa-api.tiffany.com
sts.tiffany.com
qa1-aem.tiffany.com
test1.edev.tiffany.com
mail.tiffany.com
qa-api.tiffany.com
www.estore-tco.com
qa1-aem.tiffany.com
appfront.tiffany.com
san-002.ceros.com
san-002.ceros.com
www.estore-tco.com
sstats.tiffany.com
san-35-s12.tlsprovisioning.exacttarget.com
sftp.tiffany.com
leapfrog-ssl-9.gcs-web.com
www.tiffany.com
www.qa1.tiffany.com
enroll.tiffany.com
neo.tiffany.com
cara.tiffany.com
media.tiffany.com
www.tiffany.com
pa.tiffany.com
international.tiffany.com
subscribe.tiffany.com
ukukcacs02.tiffany.com
dev3.edev.tiffany.com
neo.tiffany.com
media.tiffany.com
san-002.ceros.com
qa2-aem.tiffany.com
uk.tiffany.com
qa2-aem.tiffany.com
www.tiffany.com
leapfrog-ssl-9.gcs-web.com
subscribe.tiffany.com
pkb.tiffany.com
www.tiffany.es
www.tiffany.com
neo.tiffany.com
san-002.ceros.com
www.tiffany.com
fonts.tiffany.com
appfront.tiffany.com
api.tiffany.com
www.tiffany.es
qa3-aem.tiffany.com
subscribe.tiffany.com
www.tiffany.com
sts.tiffany.com
san-002.ceros.com
media.tiffany.com
cara.tiffany.com
secure5s.scene7.com
subscribe.tiffany.com
san-002.ceros.com
mi.tiffany.com
san-002.ceros.com
san-35-s12.tlsprovisioning.exacttarget.com
san-002.ceros.com
uk.tiffany.com
neo.tiffany.com
www.pa.tiffany.com
san-35-s12.tlsprovisioning.exacttarget.com
san-002.ceros.com
sstats.be.tiffany.com
ps2b.tiffany.com
sstats.tiffany.com
sts.tiffany.com
cybebrark.tiffany.com
san-35-s12.tlsprovisioning.exacttarget.com
san-002.ceros.com
san-002.ceros.com
tconsacsp04.tiffany.com
leapfrog-ssl-9.gcs-web.com
subscribe.tiffany.com
adobeconsole-qa.tiffany.com
qa-cara.tiffany.com
san-002.ceros.com
ps2b.tiffany.com
hk-payment.tiffany.com
mail.tiffany.com
leapfrog-ssl-9.gcs-web.com
mail.tiffany.com
ukukcacs01.tiffany.com
connect.tiffany.com
www.tiffany.com
sftp.tiffany.com
connect.tiffany.com
san-35-s12.tlsprovisioning.exacttarget.com
ukukcacs02.tiffany.com
t.tco.tiffany.com
neo.tiffany.com
media.tiffany.com
ringfinder-stage.tiffany.com
tco.tiffany.com
www.tiffany.com
www.pa.tiffany.com
qa-api.tiffany.com
sts.tiffany.com
qa1-aem.tiffany.com
test1.edev.tiffany.com
mail.tiffany.com
qa-api.tiffany.com
www.estore-tco.com
qa1-aem.tiffany.com
appfront.tiffany.com
san-002.ceros.com
san-002.ceros.com
www.estore-tco.com
sstats.tiffany.com
san-35-s12.tlsprovisioning.exacttarget.com
sftp.tiffany.com
leapfrog-ssl-9.gcs-web.com
www.tiffany.com
www.qa1.tiffany.com
enroll.tiffany.com
Certificate
The complete raw certificate details for www.pa.tiffany.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIMDjCCCvagAwIBAgIQBPSKfaOiSOlbDBaCN+1DXTANBgkqhkiG9w0BAQsFADBP MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMzEwMDIwMDAwMDBa Fw0yNDEwMDEyMzU5NTlaMG4xCzAJBgNVBAYTAlVTMREwDwYDVQQIEwhOZXcgWW9y azERMA8GA1UEBxMITmV3IFlvcmsxHDAaBgNVBAoTE1RpZmZhbnkgYW5kIENvbXBh bnkxGzAZBgNVBAMTEnd3dy5wYS50aWZmYW55LmNvbTBZMBMGByqGSM49AgEGCCqG SM49AwEHA0IABAjn/3DaqSrrEiXPsnvyErWqTz0Dz2S0nkuPfbTtfoQsMBP2bHEn D1vHXms8HCACtJqtYIedjEr4LC8wY3DYsCijggmQMIIJjDAfBgNVHSMEGDAWgBS3 a6LqqKqEjHnqtNoPmLLFlXa59DAdBgNVHQ4EFgQUjLnt82rLAy8ptB9pCGqhFvvb wUwwggY2BgNVHREEggYtMIIGKYISd3d3LnBhLnRpZmZhbnkuY29tghRwYS5tZWRp YS50aWZmYW55LmNvbYIScGEucGtiLnRpZmZhbnkuY29tgh5wcm9kdWN0aW9uLXRl c3QuYmUudGlmZmFueS5jb22CHnByb2R1Y3Rpb24tdGVzdC5ubC50aWZmYW55LmNv bYIacHJvZHVjdGlvbi10ZXN0LnRpZmZhbnkuYXSCGnByb2R1Y3Rpb24tdGVzdC50 aWZmYW55LmRlghpwcm9kdWN0aW9uLXRlc3QudGlmZmFueS5lc4IacHJvZHVjdGlv bi10ZXN0LnRpZmZhbnkuZnKCGnByb2R1Y3Rpb24tdGVzdC50aWZmYW55Lmdyghpw cm9kdWN0aW9uLXRlc3QudGlmZmFueS5pZYIacHJvZHVjdGlvbi10ZXN0LnRpZmZh bnkuaXSCGnByb2R1Y3Rpb24tdGVzdC50aWZmYW55Lmx1ghpwcm9kdWN0aW9uLXRl c3QudGlmZmFueS5wdIIdd3d3LmludGVybmF0aW9uYWwudGlmZmFueS5jb22CFHd3 dy5wcy1hei50aWZmYW55LmNughV3d3cucHMuYmUudGlmZmFueS5jb22CFXd3dy5w cy5lc3RvcmUtdGNvLmNvbYIUd3d3LnBzLmVzdG9yZS10Y28uanCCFHd3dy5wcy5m ci50aWZmYW55LmNhgiB3d3cucHMuaW50ZXJuYXRpb25hbC50aWZmYW55LmNvbYIV d3d3LnBzLm5sLnRpZmZhbnkuY29tgh93d3cucHMuc2FsZXNzZXJ2aWNlLnRpZmZh bnkuY29tghF3d3cucHMudGlmZmFueS5hdIIRd3d3LnBzLnRpZmZhbnkuY2GCEXd3 dy5wcy50aWZmYW55LmNughR3d3cucHMudGlmZmFueS5jby5qcIIUd3d3LnBzLnRp ZmZhbnkuY28udWuCEnd3dy5wcy50aWZmYW55LmNvbYIVd3d3LnBzLnRpZmZhbnku Y29tLmF1ghV3d3cucHMudGlmZmFueS5jb20uYnKCFXd3dy5wcy50aWZmYW55LmNv bS5teIIRd3d3LnBzLnRpZmZhbnkuZGWCEXd3dy5wcy50aWZmYW55LmVzghF3d3cu cHMudGlmZmFueS5mcoIRd3d3LnBzLnRpZmZhbnkuaWWCEXd3dy5wcy50aWZmYW55 Lml0ghF3d3cucHMudGlmZmFueS5rcoIXd3d3LnBzLnRpZmZhbnl0cmFkZS5jb22C Fnd3dy5wcy50aWZmYW55dHJhZGUuanCCFXd3dy5wcy56aC50aWZmYW55LmNvbYIZ d3d3LnFhcGVyZi5iZS50aWZmYW55LmNvbYIZd3d3LnFhcGVyZi5lc3RvcmUtdGNv LmNvbYIYd3d3LnFhcGVyZi5lc3RvcmUtdGNvLmpwghh3d3cucWFwZXJmLmZyLnRp ZmZhbnkuY2GCJHd3dy5xYXBlcmYuaW50ZXJuYXRpb25hbC50aWZmYW55LmNvbYIZ d3d3LnFhcGVyZi5ubC50aWZmYW55LmNvbYIVd3d3LnFhcGVyZi50aWZmYW55LmF0 ghV3d3cucWFwZXJmLnRpZmZhbnkuY2GCFXd3dy5xYXBlcmYudGlmZmFueS5jboIY d3d3LnFhcGVyZi50aWZmYW55LmNvLmpwghh3d3cucWFwZXJmLnRpZmZhbnkuY28u dWuCFnd3dy5xYXBlcmYudGlmZmFueS5jb22CGXd3dy5xYXBlcmYudGlmZmFueS5j b20uYXWCGXd3dy5xYXBlcmYudGlmZmFueS5jb20uYnKCGXd3dy5xYXBlcmYudGlm ZmFueS5jb20ubXiCFXd3dy5xYXBlcmYudGlmZmFueS5kZYIVd3d3LnFhcGVyZi50 aWZmYW55LmVzghV3d3cucWFwZXJmLnRpZmZhbnkuZnKCFXd3dy5xYXBlcmYudGlm ZmFueS5pZYIVd3d3LnFhcGVyZi50aWZmYW55Lml0ghV3d3cucWFwZXJmLnRpZmZh bnkua3KCGnd3dy5xYXBlcmYudGlmZmFueXRyYWRlLmpwghl3d3cucWFwZXJmLnpo LnRpZmZhbnkuY29tMD4GA1UdIAQ3MDUwMwYGZ4EMAQICMCkwJwYIKwYBBQUHAgEW G2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAOBgNVHQ8BAf8EBAMCA4gwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGPBgNVHR8EgYcwgYQwQKA+oDyG Omh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRMU1JTQVNIQTI1NjIw MjBDQTEtNC5jcmwwQKA+oDyGOmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdp Q2VydFRMU1JTQVNIQTI1NjIwMjBDQTEtNC5jcmwwfwYIKwYBBQUHAQEEczBxMCQG CCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wSQYIKwYBBQUHMAKG PWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRMU1JTQVNIQTI1 NjIwMjBDQTEtMS5jcnQwDAYDVR0TAQH/BAIwADCCAX4GCisGAQQB1nkCBAIEggFu BIIBagFoAHYA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGK8VAB WAAABAMARzBFAiEA1tGaG3GRoxEwOKjMeh4XBirGv0S/KwFcfjln1XkAVHwCIBhD iYx1ULUTPN7QYtaXWH0APmOHBQjkfZBwooO7sluLAHUASLDja9qmRzQP5WoC+p0w 6xxSActW3SyB2bu/qznYhHMAAAGK8VAA/wAABAMARjBEAiA3pq4iist8ozgu4FfP S1jE5quMRLEUVhO0VnUiir1kdgIgEiQTMjYTvbprcXlRujPw/foYR5YI/w2Fcva+ sUf6mFMAdwDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYrxUAC+ AAAEAwBIMEYCIQD5Xq3gbU7wKUNRRXoi3wlVnh+Bo7OLYZ10MIBIkD44ZgIhAI5e sfehuOhLd8vM1rEoPJYna4LzT7arDJFFVLVSUGNGMA0GCSqGSIb3DQEBCwUAA4IB AQCa/5OU9dkbjE5L23F1gYp3kXS0O0TXzyXlFA92b+x/IOvXSggzjPG9/JxZseFE NpqJQ2U5rMlOYITx3evEoDi2cgeTXYK+LkD8Z00kw1UZn4OGI6D0LonE6CMhQuww bo8esns+PdyqoyZZi3uTLemgdba9qzUsR89GL40misZNtMZwdI3Yh11kAEcTPB+X 7OkN3ZEuLbWq9LXmb1SfZ8zmQDvy5Row/Gdqz83ILJnAG56OLNFerpl2acjgvk8A nEcEPKdL72a7ArNS1BtGw+S6Jwi3VkN6I1xitiGeaAyn0g41mhbchXLaCiQlBfX2 IdbKU1L2ViLfbx9ua6VlY1co -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAECOf/cNqpKusSJc+ye/IStapPPQPP ZLSeS499tO1+hCwwE/ZscScPW8deazwcIAK0mq1gh52MSvgsLzBjcNiwKA== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 6586641343310026545232968682056794973 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-02 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-01 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tiffany and Company' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.pa.tiffany.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey) . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1) . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits) 000408e7ff70daa92aeb1225cfb27bf212b5aa4f3d03cf64b49e4b8f7db4ed7e842c3013f66c71270f5bc75e6b3c1c2002b49aad60879d8c4af82c2f306370d8b028 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8cb9edf36acb032f29b41f69086aa116fbdbc14c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1581 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pa.tiffany.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pa.media.tiffany.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pa.pkb.tiffany.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production-test.be.tiffany.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production-test.nl.tiffany.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production-test.tiffany.at' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production-test.tiffany.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production-test.tiffany.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production-test.tiffany.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production-test.tiffany.gr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production-test.tiffany.ie' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production-test.tiffany.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production-test.tiffany.lu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production-test.tiffany.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.international.tiffany.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps-az.tiffany.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps.be.tiffany.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps.estore-tco.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps.estore-tco.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps.fr.tiffany.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps.international.tiffany.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps.nl.tiffany.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps.salesservice.tiffany.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps.tiffany.at' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps.tiffany.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps.tiffany.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps.tiffany.co.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps.tiffany.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps.tiffany.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps.tiffany.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps.tiffany.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps.tiffany.com.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps.tiffany.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps.tiffany.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps.tiffany.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps.tiffany.ie' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps.tiffany.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps.tiffany.kr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps.tiffanytrade.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps.tiffanytrade.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps.zh.tiffany.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qaperf.be.tiffany.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qaperf.estore-tco.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qaperf.estore-tco.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qaperf.fr.tiffany.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qaperf.international.tiffany.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qaperf.nl.tiffany.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qaperf.tiffany.at' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qaperf.tiffany.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qaperf.tiffany.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qaperf.tiffany.co.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qaperf.tiffany.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qaperf.tiffany.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qaperf.tiffany.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qaperf.tiffany.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qaperf.tiffany.com.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qaperf.tiffany.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qaperf.tiffany.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qaperf.tiffany.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qaperf.tiffany.ie' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qaperf.tiffany.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qaperf.tiffany.kr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qaperf.tiffanytrade.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qaperf.zh.tiffany.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits) 0388 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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