redirects.tesco.com

- Tesco PLC -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number cb:cc:c2:8e:8d:ab:10:9f:00:00:00:00:54:cf:6b:d9 was issued on by Entrust, Inc..

With 68 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Tesco PLC

Company registration number: 00445790
Organization: Tesco PLC
Locality: Welwyn Garden City
Country: GB

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): cb:cc:c2:8e:8d:ab:10:9f:00:00:00:00:54:cf:6b:d9
Serial Number (int): 270896457785185403676151028452695174105
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: af:61:cd:3b:58:0b:dd:62:4a:5a:78:2d:ce:9a:8a:a1:18:db:02:7b
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): 15:a9:b7:9a:0a:b6:42:a0:76:cd:cb:04:9a:08:64:72:76:f6:e6:a4
Fingerprint (sha256): 04:42:4c:fa:0a:53:64:94:a4:0e:89:ac:0b:22:d8:5c:a4:9a:bc:1a:3a:4c:be:c1:4c:0b:09:5e:66:35:3e:3a

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate redirects.tesco.com

68

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for redirects.tesco.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

redirects.tesco.com
www.redirects.tesco.com
yourtescorsa.co.uk
www.yourtescorsa.co.uk
www.thereportingplace.co.uk
www.tescoyouthacademy.co.uk
www.tescowinefair.com
www.tescovalue.pl
www.tescovalue.cz
www.tescosoftware.com
www.tescosfinance.co.uk
www.tescopfs.com
www.tescopersonalfinance.co.uk
www.tescoopticians.com
www.tescomaintenance.com
www.tescohistory.com
www.tescoentertainment.com
www.tescocompare.com
www.tescoclothing.com
www.tescocafe.co.uk
www.tescobroadband.com
www.tesco.co.uk
www.tesco-beauty.com
www.tesco-baby.ie
www.tesco-baby.com
www.tasteni.com
www.outattesco.com
www.itsawonderfulloaf.com
www.eathappyproject.com
www.clubcard.com
www.clothingattesco.com
www.cafecomment.co.uk
tescoyouthacademy.co.uk
tescowinefair.com
tescovalue.pl
tescovalue.cz
tescosoftware.com
tescosfinance.co.uk
tescopfs.com
tescopersonalfinance.co.uk
tescoopticians.com
tescomaintenance.com
tescoentertainment.com
tescoconnect.ocset.net
tescocompare.com
tescoclothing.com
tescocafe.co.uk
tescobroadband.com
tesco.co.uk
tesco-beauty.com
tesco-baby.ie
tesco-baby.com
tasteni.com
store.tesco.co.uk
sdc-tesco.com.tesco.com
outattesco.com
orchard.tesco.com
myproduct.tesco.com
myproduct.NFT.tesco.com
lets-dothis.org.uk
email.tesco.net
eathappyproject.com
direct.tesco.com
clubcard.com
clothingattesco.com
challenge.lets-dothis.org.uk
cafecomment.co.uk
cafe.tescoviews.com

Other certificates including the domain name tesco.com

(limited to 100 certificates)
origin-wdc.customerorder-ppe.api.tesco.com
mmslauat.my.tesco.com
enterprise.ui.tesco.com
payplus.tesco.com
digitalcontent.tesco.com
www.cedarcom.co.uk
tescolocation.api.tesco.com
ppe.tesco.com
ppe.digitalcontent.tesco.com
origin-aws1.cec.tesco.com
insight.dev.global.tesco.org
origin-euw.pricepromotion.api.tesco.com
clj-wdc-api.global.tesco.org
click.mail.tesco.com
enterprise2.ui.tesco.com
origin-wdc.supplychain.tesco.com
csmailings.tesco.com
ppe.tesco.com
origin-eun.price-promomgrtn-ppe.api.tesco.com
customer-service.tesco.com
locationsurvey.tesco.com
ppe.tesco.com
origin-pwdcz1d1.tpc.tesco.com
origin-wdc.profile-system-ppe.api.tesco.com
origin-aws1.storedvalue.api.tesco.com
payment-ppe.api.tesco.com
enterprise.api.tesco.com
origin-ld8.activedirectory.api.tesco.com
redirects.tesco.com
origin-aws1.search.api.tesco.com
preprod.origin-aws1.contentservice.tesco.com
origin-wdc.payplus-ppe4-ppe.api.tesco.com
cdo.qa.cdo.tesco.com
origin-wdc.customerorder.api.tesco.com
enterprise.ui.tescolotus.com
origin-eun.price-promocmd-perf.api.tesco.com
tracking.customerexperience.tesco.com
search-ppe.sys.api.tesco.com
redirects.tesco.com
origin-wdc.di-ppe.task.api.tesco.com
cdo.prod.cdo.tesco.com
origin-aws1.media-ingestion.digitalcontent-ppe.api.tesco.com
cdo.tesco.com
origin-aws1.price-ppe.api.tesco.com
cdo.prod.cdo.tesco.com
tracking.customerexperience.tesco.com
assets-ppe.api.tesco.com
Origin-wdc.customerprofile.api.tesco.com
cec.tesco.com
origin-wdc.secure-ppe.tesco.com
digitalcontent.tesco.com
thowa.tesco.com
payment.api.tesco.com
sellers.tesco.com
origin-aws1.fulfilment-ppe.tesco.com
origin-aws1.int.mca.tesco.com
techsupport.tesco.com
origin-wdc.supplierorder-supplierslot-ppe.api.tesco.com
m3.tesco.com
supplychain.tesco.com
ppe.api.tesco.com
origin-cdc-payplus-ppe.tesco.com
contact.api.tesco.com
hybrid.tesco.org
tescostoreprefs.tesco.com
storedvalue.api.tesco.com
redirects.tesco.com
ppe.digitalcontent.tesco.com
origin-wdc.supplierorder-ppe.api.tesco.com
authoring-assets.ppe.eun.app.digitalcontent.tesco.com
webmail.cn.tesco.com
enterprise.api.tesco.com
origin-aws1.www.tesco.com
enterprise.api.tesco.com
enterprise.ui.tesco.com
origin-aws1.cec.tesco.com
origin-aws1.int.mca.tesco.com
origin-wdc.secure-assets-til.ap.tesco.com
origin-wdc.orderfulfilment.api.tesco.com
api-ppe.tesco.com
origin-aws.digitalcontent.api.tesco.com
origin-aws1.payment-ppe.api.tesco.com
card.sys-api.tesco.com
origin-euw.price-promoquery-dev.api.tesco.com
authoring-ppe.assets.tesco.com
origin-eun.pricepromotion.api.tesco.com
enterprise1.ui.tesco.com
origin-wdc-tul.www.tesco.com
origin-euw.price-promoquery-ppe.api.tesco.com
identity.api.tesco.com
api.analytics.mobile.tesco.com
Origin-wdc.identity.api.tesco.com
origin-pcdcz2d4.tpc.tesco.com
origin-sdc.tap2system.api.tesco.com
origin-wdc.rangeplan-txt.sys-api.tesco.com
partners.tesco.com
enterprise2.ui.tesco.com
origin-aws1.price.api.tesco.com
shipping-transport.api.tesco.com
origin-aws1.ccc-portal-ppe.tesco.com

Certificate

The complete raw certificate details for redirects.tesco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzmF+sM8/mp6rhf3hVzp
0/DfShjArKo+MY0eHwqggXPMp8kzOEf47gmCjRlvR1/nEpB9hrL0AH5PPs/cpg+x
GXPM4BJy8IbYpR+j8Yc5Vv/gfOwajHmg0/Iz+RblEs0vQ5mMzAE5L6PixNwMfLzO
DNyqaWF5qodHSH0dsTLez0VrK6CSS4D2we6y13VXDiAfFDEaDjYCNTKWl2rHHqHL
/wZLt52BTGV1zBi4xnuaomuAmKDuggsXNhtk65RNuk9F0X8J8C3zTnDcvV/yOPWN
HI87uRxUeTxwgTrvtlScKfoc7d6Am7jdWt9ehN6Oae5VI5mn2oslTufjdVisaYBx
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270896457785185403676151028452695174105
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-06 15:45:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-27 16:15:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Welwyn Garden City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tesco PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00445790'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'redirects.tesco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23129975633622351576608763973469564566975735524813422504792012154765666881464783405203644251233247002705347283997689076600227644549943020698780902744504517709026156229407956619312975390624430574760992041030461341792923610864390595669702889426304604471356594251000533818471422774282514398969792847437667232972391632721950891371653334795753723728055058609277100052741888900132299018883886247602916681376359852339716106030299236883415097099683918151769546155579400470575633715389838870279706775750918163970351416629069985205636229760406821561529127023410100534257706334690405122246879196506049374860879947531275095535953
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1435 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redirects.tesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redirects.tesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourtescorsa.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yourtescorsa.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thereportingplace.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tescoyouthacademy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tescowinefair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tescovalue.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tescovalue.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tescosoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tescosfinance.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tescopfs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tescopersonalfinance.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tescoopticians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tescomaintenance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tescohistory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tescoentertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tescocompare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tescoclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tescocafe.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tescobroadband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tesco.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tesco-beauty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tesco-baby.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tesco-baby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tasteni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.outattesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itsawonderfulloaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eathappyproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clothingattesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cafecomment.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescoyouthacademy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescowinefair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescovalue.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescovalue.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescosoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescosfinance.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescopfs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescopersonalfinance.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescoopticians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescomaintenance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescoentertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescoconnect.ocset.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescocompare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescoclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescocafe.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescobroadband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tesco.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tesco-beauty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tesco-baby.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tesco-baby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasteni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.tesco.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdc-tesco.com.tesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outattesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orchard.tesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myproduct.tesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myproduct.NFT.tesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lets-dothis.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.tesco.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eathappyproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'direct.tesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clothingattesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'challenge.lets-dothis.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cafecomment.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cafe.tescoviews.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							af61cd3b580bdd624a5a782dce9a8aa118db027b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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