sp2k-atlasdev.safeway.com

- Safeway, Inc. -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number e8:2a:21:94:45:fa:cd:8c:7d:ab:19:c5:62:ab:04:39 was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Safeway, Inc.

Organization: Safeway, Inc.
Organization unit: ATLAS API
Organization unit: EliteSSL
Address: 11555 Dublin Canyon Rd
Postal code: 94588
State / Province: California
Locality: Pleasanton
Country: US

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): e8:2a:21:94:45:fa:cd:8c:7d:ab:19:c5:62:ab:04:39
Serial Number (int): 308599652557101585699632458378269885497
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 3d:d2:89:b1:d6:a8:dc:99:40:93:1a:77:cd:7c:2f:34:1d:f6:e9:25
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): ff:f2:64:7d:0a:4c:76:05:60:a4:29:32:a7:73:6e:70:76:aa:be:7d
Fingerprint (sha256): 03:f9:c6:ae:b0:e1:1c:d0:3c:af:87:66:24:b3:8c:5b:4d:7b:8d:22:46:c3:c9:5c:d2:08:39:2e:62:f8:9f:b9

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate sp2k-atlasdev.safeway.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sp2k-atlasdev.safeway.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sp2k-atlasdev.safeway.com
www.sp2k-atlasdev.safeway.com

Other certificates including the domain name safeway.com

(limited to 100 certificates)
peoplesoft-pr.safeway.com
qnv011d50.safeway.com
slvnqa8a.safeway.com
qgv013514.safeway.com
qgv012b98.safeway.com
slvgpr16.safeway.com
phvgqz5i.safeway.com
incapsula.com
shop-qa3.safeway.com
qgv01233f.safeway.com
dgv011deb.safeway.com
shop-dev1-origin.safeway.com
qnv0126ec.safeway01.ad.safeway.com
qgv012520.safeway.com
qnv01253d.safeway01.ad.safeway.com
qav0108d9.safeway.com
qgv011491.safeway.com
www-qa1.albertsons.com
dgv0146e0.safeway.com
vocollect.safeway.com
stats.safeway.com
ecom-sci-nsxperf.safeway.com
www-qa2.albertsons.com
pgv0125c9.safeway.com
pgv013240.safeway.com
phvgqz5x.safeway.com
qnv011e30.addmz.safeway.com
qgv013048.safeway.com
pgv01304d.safeway.com
client-nimbus-qa1.safeway.com
ffen-dev-b2c.safeway.com
qnv0123cc.safeway01.ad.safeway.com
pgv011b41.safeway.com
pnv0129e3.safeway01.ad.safeway.com
pnv010f0f.safeway.com
dgv011d5a.safeway.com
rewardsb2b-sprf.safeway.com
qgv012170.safeway.com
reach.safeway.com
qgv013496.safeway.com
pgv012457.safeway.com
qnv013101.safeway01.ad.safeway.com
pnv011ef4.addmz.safeway.com
qgv011e60.safeway.com
ecom-mif-nsxdev.safeway.com
qgv012027.safeway.com
dgv013002.safeway.com
qgv012d14.safeway.com
ecom-sif-nsxqa.safeway.com
pgv012522.safeway.com
qgv012a32.safeway.com
qnv0126ff.safeway01.ad.safeway.com
qgv012f25.safeway.com
qgv012593.safeway.com
suppliers.safeway.com
pgv0124b5.safeway.com
qgv01233f.safeway.com
qgv01350a.safeway.com
sdaub-qa.safeway.com
dafi-atlas.safeway.com
pgv012ece.safeway.com
pgv011d7e.safeway.com
www.safeway.com
sdau-perf.safeway.com
events.biggestfantour.com
api-prod-origin.safeway.com
imperva.com
dgv0127fa.safeway.com
pgv0130c5.safeway.com
pgv01304f.safeway.com
*.safeway.com
qgv013037.safeway.com
dgv01233b.safeway.com
incapsula.com
pnv011e2e.safeway01.ad.safeway.com
logixdev-beta.safeway.com
pnv0128df.safeway01.ad.safeway.com
qnv014139.safeway.com
logixpa-beta.safeway.com
pgv011c66.safeway.com
ngcp-qi.tomthumb.com
imperva.com
dgv014861.safeway.com
delivery.safeway.com
fastforward.safeway.com
sdauc-perf.safeway.com
pgv0130d5.safeway.com
ppapo.safeway.com
sp2k-atlasdev.safeway.com
qnv013107.safeway01.ad.safeway.com
dgv011d56.safeway.com
pgv0126ad.safeway.com
eb2b.safeway.com
qgv012d26.safeway.com
qgv013271.safeway.com
qnv012700.safeway01.ad.safeway.com
qgv01274e.safeway.com
pgv011ee8.safeway.com
shop-qa3-origin.safeway.com
qacollab2016.safeway.com

Certificate

The complete raw certificate details for sp2k-atlasdev.safeway.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9VAM3IoGR1fd+ijnlriM
nu+BpvjhCon4i0pNRbfoXwrpe9o6FZAzmw7xQ6vosL5WqwPU2lYLRdaNV3QildzF
KiDdnS2Gx5lTJ32RRWykyyIv/BlgFAmj/wjqmeLCZAd3jEf7gyXTeG/uQje+RsdT
67xPMI08km6A5GwUpGw0/3Bc4aRvlGWovN9wBoOgFCSfo05pEpjvjUxXJGIOGcs5
voUjMfU3897iOrss2SSagClr95jFPmmtMOLrAsY/EmmXtA2M+L7pIhF7ySzqB9SS
gUMRRzSzrBcYJF72xvjdlny9/yDyB9hTpSbIVisEmzXaYxnRo89GpaRJ/cc5kpCf
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308599652557101585699632458378269885497
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '94588'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pleasanton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '11555 Dublin Canyon Rd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Safeway, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ATLAS API'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EliteSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sp2k-atlasdev.safeway.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30967858961332749187000425501926339132673295391867538901364796096355515930322315240238016303926377853692023886327223510385238581190171860484006710607964937316641747404810532960302227848173957335738745260315152268532269593594144864054628567546120205444923351995331912317965583478848806613060227522752529529663641032150364769687684146885698925350149979954343808872681422077550596074384750032845397368232585848002462962345853272306463094639105262574114867117285707772956475688766797923335035915010589140603057807109787493881928127884022872249422127227471245174219581831656102260216737061883586531710788658173940165812041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3dd289b1d6a8dc9940931a77cd7c2f341df6e925
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp2k-atlasdev.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sp2k-atlasdev.safeway.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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