recipecenter.stopandshop.com

- Ahold Information Services Inc. -

Issued by AffirmTrust Certificate Authority - OV1

About this certificate

This digital certificate with serial number 44:63:e8:c4:b3:8d:14:36:00:00:00:00:58:07:ee:19 was issued on by AffirmTrust.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ahold Information Services Inc.

Organization: Ahold Information Services Inc.
State / Province: South Carolina
Locality: Greenville
Country: US

AffirmTrust

Organization: AffirmTrust
Organization unit: See www.affirmtrust.com/repository
Country: CA

This certificate has expire since

Certificate Details

Serial Number (hex): 44:63:e8:c4:b3:8d:14:36:00:00:00:00:58:07:ee:19
Serial Number (int): 90906262205685498018072190722635197977
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 49:90:8b:79:2a:49:56:5c:7e:ef:bf:30:10:a9:e5:cc:5c:56:3e:30
AuthorityKeyId: fe:60:c3:0d:a4:a2:9d:21:4f:7a:78:4c:62:c5:db:14:fc:39:78:c4

Fingerprint (sha1): 6b:45:7a:77:50:7b:77:18:11:75:e1:f8:f7:fe:d0:ed:d2:bd:d9:f4
Fingerprint (sha256): 0e:6e:4b:b0:de:a5:01:16:f5:ea:5c:b2:67:c1:dc:76:0b:93:c4:96:38:a8:d0:65:e7:3f:18:3a:ab:bd:35:88

Issuing Certificate URL: http://aia.affirmtrust.com/aftov1ca.crt

Revocation information

OCSP Server: http://ocsp.affirmtrust.com
CRL Distribution Point: http://crl.affirmtrust.com/crl/aftov1ca.crl

Check the revocation status for certificate recipecenter.stopandshop.com

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for recipecenter.stopandshop.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app.recipecenter.giantfood.com
app.recipecenter.giantfoodstores.com
app.recipecenter.martinsfoods.com
app.recipecenter.richmond.martinsfoods.com
app.recipecenter.stopandshop.com
beta.recipecenter.giantfood.com
beta.recipecenter.giantfoodstores.com
beta.recipecenter.martinsfoods.com
beta.recipecenter.richmond.martinsfoods.com
beta.recipecenter.stopandshop.com
m.recipecenter.giantfood.com
m.recipecenter.giantfoodstores.com
m.recipecenter.martinsfoods.com
m.recipecenter.richmond.martinsfoods.com
m.recipecenter.stopandshop.com
recipecenter.giantfood.com
recipecenter.giantfoodstores.com
recipecenter.martinsfoods.com
recipecenter.richmond.martinsfoods.com
recipecenter.stopandshop.com

Other certificates including the domain name stopandshop.com

(limited to 100 certificates)
pharmacy.stopandshop.com
coupons.stopandshop.com
answers-autozone.pagescdn.com
staging.stopandshop.com
circular.stopandshop.com
nonprd-api.pdl.stopandshop.com
recipecenter.stopandshop.com
san3.yext-cdn.com
images.stopandshop.com
pharmacy.stopandshop.com
stores.maxit-pawn.com
pharmacy.stopandshop.com
beta-preprod.stopandshop.com
recipecenter.stopandshop.com
ssl418162.cloudflaressl.com
locations.bannerbank.com
answers-autozone.pagescdn.com
circular.stopandshop.com
stopandshop.com
stopandshop.com
circular.stopandshop.com
mortgage.wf.com
locations.bannerbank.com
pharmacy.stopandshop.com
pharmacy.stopandshop.com
ssl418161.cloudflaressl.com
recipecenter.stopandshop.com
recipecenter.stopandshop.com
krispy-new-maps.krispy.com.pagescdn.com
stores.stopandshop.com
locations.seniorbridge.com
san3.yext-cdn.com
stopandshop.com
synergichealthcareers.yext-cdn.com
stores.stopandshop.com
images.stopandshop.com
www.stopandshop.com
ssl418161.cloudflaressl.com
staging.stopandshop.com
pharmacy.stopandshop.com
dd.stopandshop.com
locations.seniorbridge.com
recipecenter.stopandshop.com
dealers.poolguardusa.com
ssl418162.cloudflaressl.com
answers.ihacares.com.yext-cdn.com
circular.stopandshop.com
refer.stopandshop.com
stores.stopandshop.com
sni.cloudflaressl.com
synergichealthcareers.yext-cdn.com
circular.stopandshop.com
ssl418161.cloudflaressl.com
stores.torafuku.jp
stopandshop.com
stores.stopandshop.com
sit.peapod.com
images.stopandshop.com
store-events.louandgrey.com
api.pdl.stopandshop.com
san3.yext-cdn.com
www.farmersatlanta.com
beta.stopandshop.com
smartlabel.stopandshop.com
pharmacy.stopandshop.com
san3.yext-cdn.com
express.stopandshop.com
stores.stopandshop.com
pharmacy.stopandshop.com
ssl418163.cloudflaressl.com
ssl418163.cloudflaressl.com
circular.stopandshop.com
sni.cloudflaressl.com
stores.torafuku.jp
sni.cloudflaressl.com
stores.tenpura-tensei.jp
www.stopandshop.com
ssl418163.cloudflaressl.com
ssl418162.cloudflaressl.com
standorte.hansaton.at
san3.yext-cdn.com
stores.stopandshop.com
san3.yext-cdn.com
beta.stopandshop.com
ssl418162.cloudflaressl.com
nonprd-api.pdl.stopandshop.com
san3.yext-cdn.com
sni.cloudflaressl.com
www.stopandshop.com
stores.stopandshop.com
events.lifelinescreening.com
krispy-new-maps.krispy.com.pagescdn.com
sni.cloudflaressl.com
ssl418161.cloudflaressl.com
ssl418163.cloudflaressl.com
stores.stopandshop.com
ssl418163.cloudflaressl.com
www.farmersatlanta.com
answers.ihacares.com.yext-cdn.com
san3.yext-cdn.com

Certificate

The complete raw certificate details for recipecenter.stopandshop.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxC4S8PJL4Bd+isF5wfaG
2WLt7dyQPkXE5LhdPiKIqpJIDVAQ1uzJsqCzjbuUrKz7s7jL8+zLd0gcwV1VvtK+
36XBRpmSuLKwtAFgV3OupnfzWmWqZkSRhOpNHzUBH2fypEiRzyCfa+XWLVjLWdtx
/0r2ms4og/t32vfJ6XfIybpsr76Of0noOEyxANGIYQf+QRwdE7gfBhUBTzdUhc6a
T9bp42P2cueYRLy8iR+8I9HESLJNl8VqEZMWoW+ZLR9duGPh3w+/CDIyL0Vnrc7x
42255zoxpqVrM9bvvZKZnC00VSbI502hYijUJTDz7GZwG3XbEMN3Q0pNjeMIYTky
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 90906262205685498018072190722635197977
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.affirmtrust.com/repository'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust Certificate Authority - OV1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-04 16:12:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-05 16:42:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'South Carolina'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greenville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ahold Information Services Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'recipecenter.stopandshop.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24765427704132134804742382485190685363857823418493128942559525673795329939072494140612273070918552417073711663741726006573489873584668166599089497111710554729137325642704624698415736784739616451772997145848046982016583050855291530037143429540116136917623350710363684062291318140701288367357673640563935710812171506944239969226189379164725084748748853962632111726311750915957054005236057106728135009989067389555911488959044569536367025727567291925723000785742556373064557784748468595725317313388271768125788306345858434694146020890797880392103906465992506302654151543913347447585507172437256012357221448114960225350387
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.affirmtrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.affirmtrust.com/aftov1ca.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.34697.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.affirmtrust.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.affirmtrust.com/crl/aftov1ca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (711 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.recipecenter.giantfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.recipecenter.giantfoodstores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.recipecenter.martinsfoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.recipecenter.richmond.martinsfoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.recipecenter.stopandshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.recipecenter.giantfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.recipecenter.giantfoodstores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.recipecenter.martinsfoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.recipecenter.richmond.martinsfoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.recipecenter.stopandshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.recipecenter.giantfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.recipecenter.giantfoodstores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.recipecenter.martinsfoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.recipecenter.richmond.martinsfoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.recipecenter.stopandshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recipecenter.giantfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recipecenter.giantfoodstores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recipecenter.martinsfoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recipecenter.richmond.martinsfoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recipecenter.stopandshop.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fe60c30da4a29d214f7a784c62c5db14fc3978c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							49908b792a49565c7eefbf3010a9e5cc5c563e30
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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