Official websites use .mil
Secure .mil websites use HTTPS
Wear over the crown of the head. The tiara need not be removed indoors.