ppe.digitalcontent.tesco.com

- Tesco PLC -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number 0f:25:3b:3b:50:3d:7b:b1:75:20:9f:00:46:7d:b2:7f was issued on by Entrust, Inc..

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Tesco PLC

Company registration number: 00445790
Organization: Tesco PLC
Locality: Welwyn Garden City
Country: GB

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:25:3b:3b:50:3d:7b:b1:75:20:9f:00:46:7d:b2:7f
Serial Number (int): 20131736282000859891258777591120507519
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b3:7e:59:b2:03:20:2e:75:e9:2d:ac:c2:0a:89:75:09:c0:53:ea:44
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): ed:ec:03:1e:ce:70:2c:dc:df:58:d0:93:4a:31:13:11:7d:92:f3:84
Fingerprint (sha256): 06:c3:0b:ab:6e:df:9d:ef:67:cf:b5:f4:c0:b3:4d:45:a6:a9:fc:df:29:62:84:d1:9d:f9:e8:fa:8e:77:ab:24

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate ppe.digitalcontent.tesco.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ppe.digitalcontent.tesco.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ppe.digitalcontent.tesco.com
media-ingestion.ppe.euw.api.digitalcontent.tesco.com
media-ingestion.ppe.eun.api.digitalcontent.tesco.com
media-details.ppe.euw.api.digitalcontent.tesco.com
media-details.ppe.eun.api.digitalcontent.tesco.com
media-delivery.ppe.euw.api.digitalcontent.tesco.com
media-delivery.ppe.eun.api.digitalcontent.tesco.com
authoring-assets.ppe.euw.app.digitalcontent.tesco.com
authoring-assets.ppe.eun.app.digitalcontent.tesco.com
ugc-delivery.ppe.euw.api.digitalcontent.tesco.com
ugc-delivery.ppe.eun.api.digitalcontent.tesco.com
ugc-management.ppe.euw.api.digitalcontent.tesco.com
ugc-management.ppe.eun.api.digitalcontent.tesco.com
ugc-moderation.ppe.euw.api.digitalcontent.tesco.com
ugc-moderation.ppe.eun.api.digitalcontent.tesco.com
media-assetsupload.ppe.euw.api.digitalcontent.tesco.com
media-assetsupload.ppe.eun.api.digitalcontent.tesco.com
ugc-config-server.ppe.euw.api.digitalcontent.tesco.com
ugc-config-server.ppe.eun.api.digitalcontent.tesco.com
content-delivery-facade.ppe.euw.api.digitalcontent.tesco.com
content-delivery-facade.ppe.eun.api.digitalcontent.tesco.com
content-authoring.ppe.euw.app.digitalcontent.tesco.com
content-authoring.ppe.eun.app.digitalcontent.tesco.com
recipe-delivery.ppe.euw.api.digitalcontent.tesco.com
recipe-delivery.ppe.eun.api.digitalcontent.tesco.com
content-delivery-facade-preview.ppe.euw.api.digitalcontent.tesco.com
content-delivery-facade-preview.ppe.eun.api.digitalcontent.tesco.com
dcxp-media-delivery.ppe.euw.api.digitalcontent.tesco.com
dcxp-content-delivery-api.ppe.euw.api.digitalcontent.tesco.com
dcxp-content-delivery-api-preview.ppe.euw.api.digitalcontent.tesco.com

Other certificates including the domain name tesco.com

(limited to 100 certificates)
origin-wdc.customerorder-ppe.api.tesco.com
mmslauat.my.tesco.com
enterprise.ui.tesco.com
payplus.tesco.com
digitalcontent.tesco.com
www.cedarcom.co.uk
tescolocation.api.tesco.com
ppe.tesco.com
ppe.digitalcontent.tesco.com
origin-aws1.cec.tesco.com
insight.dev.global.tesco.org
origin-euw.pricepromotion.api.tesco.com
clj-wdc-api.global.tesco.org
click.mail.tesco.com
enterprise2.ui.tesco.com
origin-wdc.supplychain.tesco.com
csmailings.tesco.com
ppe.tesco.com
origin-eun.price-promomgrtn-ppe.api.tesco.com
customer-service.tesco.com
locationsurvey.tesco.com
ppe.tesco.com
origin-pwdcz1d1.tpc.tesco.com
origin-wdc.profile-system-ppe.api.tesco.com
origin-aws1.storedvalue.api.tesco.com
payment-ppe.api.tesco.com
enterprise.api.tesco.com
origin-ld8.activedirectory.api.tesco.com
redirects.tesco.com
origin-aws1.search.api.tesco.com
preprod.origin-aws1.contentservice.tesco.com
origin-wdc.payplus-ppe4-ppe.api.tesco.com
cdo.qa.cdo.tesco.com
origin-wdc.customerorder.api.tesco.com
enterprise.ui.tescolotus.com
origin-eun.price-promocmd-perf.api.tesco.com
tracking.customerexperience.tesco.com
search-ppe.sys.api.tesco.com
redirects.tesco.com
origin-wdc.di-ppe.task.api.tesco.com
cdo.prod.cdo.tesco.com
origin-aws1.media-ingestion.digitalcontent-ppe.api.tesco.com
cdo.tesco.com
origin-aws1.price-ppe.api.tesco.com
cdo.prod.cdo.tesco.com
tracking.customerexperience.tesco.com
assets-ppe.api.tesco.com
Origin-wdc.customerprofile.api.tesco.com
cec.tesco.com
origin-wdc.secure-ppe.tesco.com
digitalcontent.tesco.com
thowa.tesco.com
payment.api.tesco.com
sellers.tesco.com
origin-aws1.fulfilment-ppe.tesco.com
origin-aws1.int.mca.tesco.com
techsupport.tesco.com
origin-wdc.supplierorder-supplierslot-ppe.api.tesco.com
m3.tesco.com
supplychain.tesco.com
ppe.api.tesco.com
origin-cdc-payplus-ppe.tesco.com
contact.api.tesco.com
hybrid.tesco.org
tescostoreprefs.tesco.com
storedvalue.api.tesco.com
redirects.tesco.com
ppe.digitalcontent.tesco.com
origin-wdc.supplierorder-ppe.api.tesco.com
authoring-assets.ppe.eun.app.digitalcontent.tesco.com
webmail.cn.tesco.com
enterprise.api.tesco.com
origin-aws1.www.tesco.com
enterprise.api.tesco.com
enterprise.ui.tesco.com
origin-aws1.cec.tesco.com
origin-aws1.int.mca.tesco.com
origin-wdc.secure-assets-til.ap.tesco.com
origin-wdc.orderfulfilment.api.tesco.com
api-ppe.tesco.com
origin-aws.digitalcontent.api.tesco.com
origin-aws1.payment-ppe.api.tesco.com
card.sys-api.tesco.com
origin-euw.price-promoquery-dev.api.tesco.com
authoring-ppe.assets.tesco.com
origin-eun.pricepromotion.api.tesco.com
enterprise1.ui.tesco.com
origin-wdc-tul.www.tesco.com
origin-euw.price-promoquery-ppe.api.tesco.com
identity.api.tesco.com
api.analytics.mobile.tesco.com
Origin-wdc.identity.api.tesco.com
origin-pcdcz2d4.tpc.tesco.com
origin-sdc.tap2system.api.tesco.com
origin-wdc.rangeplan-txt.sys-api.tesco.com
partners.tesco.com
enterprise2.ui.tesco.com
origin-aws1.price.api.tesco.com
shipping-transport.api.tesco.com
origin-aws1.ccc-portal-ppe.tesco.com

Certificate

The complete raw certificate details for ppe.digitalcontent.tesco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+0Pv4bNEkkf5MNYa6jg
orZue9NoZ1p0ZH2js5DGoZIXeIX+G/VgJLPVffYgYhNHy9CeCPRVpxJ6ndAxOI4J
v1vuOHc1CYEkQ9aPR4VukrsMLuOuDt44d4i8OX45M8U6TM5fVXRtshyvFIxHR5h2
oMo2gNEhxORYccx4fhYLZbYiBERBAikT7c9d10EsKkKyWrnWRbVelpne+58cqFuH
w5mtW6nV7ivNJFgEeCiaKnjAJWYl0xwtnwDmJrc8+bHdE2h1dXcBO2oGFJnuj97N
yUBM8tfucpVWfxBXV4PvKqxp5CWFmQSYBehpYITLGSs7xTmu4C02m4c1bBmsSjj/
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20131736282000859891258777591120507519
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-20 11:24:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-25 11:24:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Welwyn Garden City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tesco PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00445790'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ppe.digitalcontent.tesco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26248228518518953444130591633228279361439290740793402486671700842024714807498336267721714050057007592422240070741701704429592740094516570241341777995394245618906941272697564299577916817007328082505616368431229132904380682527554829984807805929230615186597245503327533817600666822852436170098970623351953974380583126899385213372675300364126051937230280718459675956884714584447618931552657098236272139321365878849370324809502473940444456301959173958370167550163251412467406254030722005606224091508101968781363372514389369797646178044384936893080167334384712963657440085348516166629951838349717692951330565429447754317713
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b37e59b203202e75e92dacc20a897509c053ea44
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1680 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppe.digitalcontent.tesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-ingestion.ppe.euw.api.digitalcontent.tesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-ingestion.ppe.eun.api.digitalcontent.tesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-details.ppe.euw.api.digitalcontent.tesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-details.ppe.eun.api.digitalcontent.tesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-delivery.ppe.euw.api.digitalcontent.tesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-delivery.ppe.eun.api.digitalcontent.tesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authoring-assets.ppe.euw.app.digitalcontent.tesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authoring-assets.ppe.eun.app.digitalcontent.tesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ugc-delivery.ppe.euw.api.digitalcontent.tesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ugc-delivery.ppe.eun.api.digitalcontent.tesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ugc-management.ppe.euw.api.digitalcontent.tesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ugc-management.ppe.eun.api.digitalcontent.tesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ugc-moderation.ppe.euw.api.digitalcontent.tesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ugc-moderation.ppe.eun.api.digitalcontent.tesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-assetsupload.ppe.euw.api.digitalcontent.tesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-assetsupload.ppe.eun.api.digitalcontent.tesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ugc-config-server.ppe.euw.api.digitalcontent.tesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ugc-config-server.ppe.eun.api.digitalcontent.tesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-delivery-facade.ppe.euw.api.digitalcontent.tesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-delivery-facade.ppe.eun.api.digitalcontent.tesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-authoring.ppe.euw.app.digitalcontent.tesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-authoring.ppe.eun.app.digitalcontent.tesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recipe-delivery.ppe.euw.api.digitalcontent.tesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recipe-delivery.ppe.eun.api.digitalcontent.tesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-delivery-facade-preview.ppe.euw.api.digitalcontent.tesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-delivery-facade-preview.ppe.eun.api.digitalcontent.tesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcxp-media-delivery.ppe.euw.api.digitalcontent.tesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcxp-content-delivery-api.ppe.euw.api.digitalcontent.tesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcxp-content-delivery-api-preview.ppe.euw.api.digitalcontent.tesco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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