peoplesoft-pr.safeway.com

- Safeway Inc. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 06:5a:cf:3a:45:f8:13:2d:2f:16:af:69:d3:55:0d:1d was issued on by DigiCert Inc.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Safeway Inc.

Organization: Safeway Inc.
State / Province: California
Locality: Pleasanton
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:5a:cf:3a:45:f8:13:2d:2f:16:af:69:d3:55:0d:1d
Serial Number (int): 8446877767653381286496912393725349149
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 4a:a1:53:6b:21:dd:0e:1f:fa:e5:9a:31:53:59:fc:0d:66:6d:fe:bb
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 2c:e5:c5:7d:8c:42:ae:ff:c5:f3:4c:09:c4:89:19:c6:0c:c8:f7:e0
Fingerprint (sha256): 14:cb:d5:61:2a:d9:0c:ba:d4:bf:53:ca:6a:31:24:a7:4d:ad:9c:37:29:de:d9:4a:91:20:c1:56:58:c4:53:1a

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate peoplesoft-pr.safeway.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for peoplesoft-pr.safeway.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www-stage.albertsonscompanies.com
www-qa3.albertsonscompanies.com
www-qa2.albertsonscompanies.com
www-qa1.albertsonscompanies.com
supplierspreview.safeway.com
shop-stage.albertsons.com
shop-stage-ak.albertsons.com
private-nimbus-qi.safeway.com
private-nimbus-qac.safeway.com
private-nimbus-qa2.safeway.com
private-nimbus-qa1.safeway.com
private-nimbus-qa.safeway.com
private-nimbus-prf.safeway.com
private-nimbus-beta.safeway.com
peoplesoft-pr.safeway.com
partner-nimbus-qi.safeway.com
partner-nimbus-qac.safeway.com
partner-nimbus-qa2.safeway.com
partner-nimbus-qa1.safeway.com
partner-nimbus-qa.safeway.com
partner-nimbus-prf.safeway.com
partner-nimbus-beta.safeway.com
order-ahead-qa.safeway.com
order-ahead-qa.albertsons.com
nimbus-qi.safeway.com
nimbus-qac.safeway.com
nimbus-qa2.safeway.com
nimbus-qa1.safeway.com
nimbus-qa.safeway.com
nimbus-prf.safeway.com
nimbus-beta.safeway.com
mcloud-qa.safeway.com
jobs-stage.vons.com
jobs-stage.tomthumb.com
jobs-stage.starmarket.com
jobs-stage.shaws.com
jobs-stage.safeway.com
jobs-stage.randalls.com
jobs-stage.pavilions.com
jobs-stage.luckylowprices.com
jobs-stage.jewelosco.com
jobs-stage.haggen.com
jobs-stage.carrsqc.com
jobs-stage.andronicos.com
jobs-stage.albertsonscompanies.com
jobs-stage.albertsons.com
jobs-stage.acmemarkets.com
jobs-qa3.vons.com
jobs-qa3.tomthumb.com
jobs-qa3.starmarket.com
jobs-qa3.shaws.com
jobs-qa3.safeway.com
jobs-qa3.randalls.com
jobs-qa3.pavilions.com
jobs-qa3.luckylowprices.com
jobs-qa3.jewelosco.com
jobs-qa3.haggen.com
jobs-qa3.carrsqc.com
jobs-qa3.andronicos.com
jobs-qa3.albertsonscompanies.com
jobs-qa3.albertsons.com
jobs-qa3.acmemarkets.com
jobs-qa2.vons.com
jobs-qa2.tomthumb.com
jobs-qa2.starmarket.com
jobs-qa2.shaws.com
jobs-qa2.safeway.com
jobs-qa2.randalls.com
jobs-qa2.pavilions.com
jobs-qa2.luckylowprices.com
jobs-qa2.jewelosco.com
jobs-qa2.haggen.com
jobs-qa2.carrsqc.com
jobs-qa2.andronicos.com
jobs-qa2.albertsonscompanies.com
jobs-qa2.albertsons.com
jobs-qa2.acmemarkets.com
jobs-qa1.vons.com
jobs-qa1.tomthumb.com
jobs-qa1.starmarket.com
jobs-qa1.shaws.com
jobs-qa1.safeway.com
jobs-qa1.randalls.com
jobs-qa1.pavilions.com
jobs-qa1.luckylowprices.com
jobs-qa1.jewelosco.com
jobs-qa1.haggen.com
jobs-qa1.carrsqc.com
jobs-qa1.andronicos.com
jobs-qa1.albertsonscompanies.com
jobs-qa1.albertsons.com
jobs-qa1.acmemarkets.com
employeeqa.safeway.com
easqa.safeway.com
easbi-qa.safeway.com
direct2hrqa.safeway.com
api.np.stratus.albertsons.com

Other certificates including the domain name safeway.com

(limited to 100 certificates)
peoplesoft-pr.safeway.com
qnv011d50.safeway.com
slvnqa8a.safeway.com
qgv013514.safeway.com
qgv012b98.safeway.com
slvgpr16.safeway.com
phvgqz5i.safeway.com
incapsula.com
shop-qa3.safeway.com
qgv01233f.safeway.com
dgv011deb.safeway.com
shop-dev1-origin.safeway.com
qnv0126ec.safeway01.ad.safeway.com
qgv012520.safeway.com
qnv01253d.safeway01.ad.safeway.com
qav0108d9.safeway.com
qgv011491.safeway.com
www-qa1.albertsons.com
dgv0146e0.safeway.com
vocollect.safeway.com
stats.safeway.com
ecom-sci-nsxperf.safeway.com
www-qa2.albertsons.com
pgv0125c9.safeway.com
pgv013240.safeway.com
phvgqz5x.safeway.com
qnv011e30.addmz.safeway.com
qgv013048.safeway.com
pgv01304d.safeway.com
client-nimbus-qa1.safeway.com
ffen-dev-b2c.safeway.com
qnv0123cc.safeway01.ad.safeway.com
pgv011b41.safeway.com
pnv0129e3.safeway01.ad.safeway.com
pnv010f0f.safeway.com
dgv011d5a.safeway.com
rewardsb2b-sprf.safeway.com
qgv012170.safeway.com
reach.safeway.com
qgv013496.safeway.com
pgv012457.safeway.com
qnv013101.safeway01.ad.safeway.com
pnv011ef4.addmz.safeway.com
qgv011e60.safeway.com
ecom-mif-nsxdev.safeway.com
qgv012027.safeway.com
dgv013002.safeway.com
qgv012d14.safeway.com
ecom-sif-nsxqa.safeway.com
pgv012522.safeway.com
qgv012a32.safeway.com
qnv0126ff.safeway01.ad.safeway.com
qgv012f25.safeway.com
qgv012593.safeway.com
suppliers.safeway.com
pgv0124b5.safeway.com
qgv01233f.safeway.com
qgv01350a.safeway.com
sdaub-qa.safeway.com
dafi-atlas.safeway.com
pgv012ece.safeway.com
pgv011d7e.safeway.com
www.safeway.com
sdau-perf.safeway.com
events.biggestfantour.com
api-prod-origin.safeway.com
imperva.com
dgv0127fa.safeway.com
pgv0130c5.safeway.com
pgv01304f.safeway.com
*.safeway.com
qgv013037.safeway.com
dgv01233b.safeway.com
incapsula.com
pnv011e2e.safeway01.ad.safeway.com
logixdev-beta.safeway.com
pnv0128df.safeway01.ad.safeway.com
qnv014139.safeway.com
logixpa-beta.safeway.com
pgv011c66.safeway.com
ngcp-qi.tomthumb.com
imperva.com
dgv014861.safeway.com
delivery.safeway.com
fastforward.safeway.com
sdauc-perf.safeway.com
pgv0130d5.safeway.com
ppapo.safeway.com
sp2k-atlasdev.safeway.com
qnv013107.safeway01.ad.safeway.com
dgv011d56.safeway.com
pgv0126ad.safeway.com
eb2b.safeway.com
qgv012d26.safeway.com
qgv013271.safeway.com
qnv012700.safeway01.ad.safeway.com
qgv01274e.safeway.com
pgv011ee8.safeway.com
shop-qa3-origin.safeway.com
qacollab2016.safeway.com

Certificate

The complete raw certificate details for peoplesoft-pr.safeway.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIQVTCCDz2gAwIBAgIQBlrPOkX4Ey0vFq9p01UNHTANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0yMTA4MjUwMDAwMDBaFw0yMjA4MjUyMzU5NTlaMHIxCzAJBgNVBAYTAlVTMRMw
EQYDVQQIEwpDYWxpZm9ybmlhMRMwEQYDVQQHEwpQbGVhc2FudG9uMRUwEwYDVQQK
EwxTYWZld2F5IEluYy4xIjAgBgNVBAMTGXBlb3BsZXNvZnQtcHIuc2FmZXdheS5j
b20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB4DUGs/onkV8huIYK
CQSpcv5FCS01iiLhM8QnZoXoAtpERMrgRR3RpVfeNJ6rivAQSlBXrxf0FB5WwNHh
Ojabw6wY0nU5c276BsDEC8xcdh9jkKXRQTMB39HCtwWV+Lqw+yjFlRxWKGQV1Cof
jAUWh4d6aPdoc/OnTIiCNbJg28SChLU7bNcD3210ivAytzWKFSiIiZAdYBZIqIwS
d9UH/JmE+kQ15s4Tg8hMIjuFyudXzagTFVyPwmE7Yt56B4BifxbQ7q4gFL6vKqbv
v96vEGV6r+BA4c8cYc9X0Y3ntMmCbAkjjGCpMEKpyjrP6IJHAvVCUYESzxAaIxA7
yM/HAgMBAAGjggz5MIIM9TAfBgNVHSMEGDAWgBSQWP+wnHWoUVR3se3yo0MWOJ5s
xTAdBgNVHQ4EFgQUSqFTayHdDh/65ZoxU1n8DWZt/rswggn7BgNVHREEggnyMIIJ
7oIhd3d3LXN0YWdlLmFsYmVydHNvbnNjb21wYW5pZXMuY29tgh93d3ctcWEzLmFs
YmVydHNvbnNjb21wYW5pZXMuY29tgh93d3ctcWEyLmFsYmVydHNvbnNjb21wYW5p
ZXMuY29tgh93d3ctcWExLmFsYmVydHNvbnNjb21wYW5pZXMuY29tghxzdXBwbGll
cnNwcmV2aWV3LnNhZmV3YXkuY29tghlzaG9wLXN0YWdlLmFsYmVydHNvbnMuY29t
ghxzaG9wLXN0YWdlLWFrLmFsYmVydHNvbnMuY29tgh1wcml2YXRlLW5pbWJ1cy1x
aS5zYWZld2F5LmNvbYIecHJpdmF0ZS1uaW1idXMtcWFjLnNhZmV3YXkuY29tgh5w
cml2YXRlLW5pbWJ1cy1xYTIuc2FmZXdheS5jb22CHnByaXZhdGUtbmltYnVzLXFh
MS5zYWZld2F5LmNvbYIdcHJpdmF0ZS1uaW1idXMtcWEuc2FmZXdheS5jb22CHnBy
aXZhdGUtbmltYnVzLXByZi5zYWZld2F5LmNvbYIfcHJpdmF0ZS1uaW1idXMtYmV0
YS5zYWZld2F5LmNvbYIZcGVvcGxlc29mdC1wci5zYWZld2F5LmNvbYIdcGFydG5l
ci1uaW1idXMtcWkuc2FmZXdheS5jb22CHnBhcnRuZXItbmltYnVzLXFhYy5zYWZl
d2F5LmNvbYIecGFydG5lci1uaW1idXMtcWEyLnNhZmV3YXkuY29tgh5wYXJ0bmVy
LW5pbWJ1cy1xYTEuc2FmZXdheS5jb22CHXBhcnRuZXItbmltYnVzLXFhLnNhZmV3
YXkuY29tgh5wYXJ0bmVyLW5pbWJ1cy1wcmYuc2FmZXdheS5jb22CH3BhcnRuZXIt
bmltYnVzLWJldGEuc2FmZXdheS5jb22CGm9yZGVyLWFoZWFkLXFhLnNhZmV3YXku
Y29tgh1vcmRlci1haGVhZC1xYS5hbGJlcnRzb25zLmNvbYIVbmltYnVzLXFpLnNh
ZmV3YXkuY29tghZuaW1idXMtcWFjLnNhZmV3YXkuY29tghZuaW1idXMtcWEyLnNh
ZmV3YXkuY29tghZuaW1idXMtcWExLnNhZmV3YXkuY29tghVuaW1idXMtcWEuc2Fm
ZXdheS5jb22CFm5pbWJ1cy1wcmYuc2FmZXdheS5jb22CF25pbWJ1cy1iZXRhLnNh
ZmV3YXkuY29tghVtY2xvdWQtcWEuc2FmZXdheS5jb22CE2pvYnMtc3RhZ2Uudm9u
cy5jb22CF2pvYnMtc3RhZ2UudG9tdGh1bWIuY29tghlqb2JzLXN0YWdlLnN0YXJt
YXJrZXQuY29tghRqb2JzLXN0YWdlLnNoYXdzLmNvbYIWam9icy1zdGFnZS5zYWZl
d2F5LmNvbYIXam9icy1zdGFnZS5yYW5kYWxscy5jb22CGGpvYnMtc3RhZ2UucGF2
aWxpb25zLmNvbYIdam9icy1zdGFnZS5sdWNreWxvd3ByaWNlcy5jb22CGGpvYnMt
c3RhZ2UuamV3ZWxvc2NvLmNvbYIVam9icy1zdGFnZS5oYWdnZW4uY29tghZqb2Jz
LXN0YWdlLmNhcnJzcWMuY29tghlqb2JzLXN0YWdlLmFuZHJvbmljb3MuY29tgiJq
b2JzLXN0YWdlLmFsYmVydHNvbnNjb21wYW5pZXMuY29tghlqb2JzLXN0YWdlLmFs
YmVydHNvbnMuY29tghpqb2JzLXN0YWdlLmFjbWVtYXJrZXRzLmNvbYIRam9icy1x
YTMudm9ucy5jb22CFWpvYnMtcWEzLnRvbXRodW1iLmNvbYIXam9icy1xYTMuc3Rh
cm1hcmtldC5jb22CEmpvYnMtcWEzLnNoYXdzLmNvbYIUam9icy1xYTMuc2FmZXdh
eS5jb22CFWpvYnMtcWEzLnJhbmRhbGxzLmNvbYIWam9icy1xYTMucGF2aWxpb25z
LmNvbYIbam9icy1xYTMubHVja3lsb3dwcmljZXMuY29tghZqb2JzLXFhMy5qZXdl
bG9zY28uY29tghNqb2JzLXFhMy5oYWdnZW4uY29tghRqb2JzLXFhMy5jYXJyc3Fj
LmNvbYIXam9icy1xYTMuYW5kcm9uaWNvcy5jb22CIGpvYnMtcWEzLmFsYmVydHNv
bnNjb21wYW5pZXMuY29tghdqb2JzLXFhMy5hbGJlcnRzb25zLmNvbYIYam9icy1x
YTMuYWNtZW1hcmtldHMuY29tghFqb2JzLXFhMi52b25zLmNvbYIVam9icy1xYTIu
dG9tdGh1bWIuY29tghdqb2JzLXFhMi5zdGFybWFya2V0LmNvbYISam9icy1xYTIu
c2hhd3MuY29tghRqb2JzLXFhMi5zYWZld2F5LmNvbYIVam9icy1xYTIucmFuZGFs
bHMuY29tghZqb2JzLXFhMi5wYXZpbGlvbnMuY29tghtqb2JzLXFhMi5sdWNreWxv
d3ByaWNlcy5jb22CFmpvYnMtcWEyLmpld2Vsb3Njby5jb22CE2pvYnMtcWEyLmhh
Z2dlbi5jb22CFGpvYnMtcWEyLmNhcnJzcWMuY29tghdqb2JzLXFhMi5hbmRyb25p
Y29zLmNvbYIgam9icy1xYTIuYWxiZXJ0c29uc2NvbXBhbmllcy5jb22CF2pvYnMt
cWEyLmFsYmVydHNvbnMuY29tghhqb2JzLXFhMi5hY21lbWFya2V0cy5jb22CEWpv
YnMtcWExLnZvbnMuY29tghVqb2JzLXFhMS50b210aHVtYi5jb22CF2pvYnMtcWEx
LnN0YXJtYXJrZXQuY29tghJqb2JzLXFhMS5zaGF3cy5jb22CFGpvYnMtcWExLnNh
ZmV3YXkuY29tghVqb2JzLXFhMS5yYW5kYWxscy5jb22CFmpvYnMtcWExLnBhdmls
aW9ucy5jb22CG2pvYnMtcWExLmx1Y2t5bG93cHJpY2VzLmNvbYIWam9icy1xYTEu
amV3ZWxvc2NvLmNvbYITam9icy1xYTEuaGFnZ2VuLmNvbYIUam9icy1xYTEuY2Fy
cnNxYy5jb22CF2pvYnMtcWExLmFuZHJvbmljb3MuY29tgiBqb2JzLXFhMS5hbGJl
cnRzb25zY29tcGFuaWVzLmNvbYIXam9icy1xYTEuYWxiZXJ0c29ucy5jb22CGGpv
YnMtcWExLmFjbWVtYXJrZXRzLmNvbYIWZW1wbG95ZWVxYS5zYWZld2F5LmNvbYIR
ZWFzcWEuc2FmZXdheS5jb22CFGVhc2JpLXFhLnNhZmV3YXkuY29tghdkaXJlY3Qy
aHJxYS5zYWZld2F5LmNvbYIdYXBpLm5wLnN0cmF0dXMuYWxiZXJ0c29ucy5jb20w
DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA+
BgNVHR8ENzA1MDOgMaAvhi1odHRwOi8vY2RwLmdlb3RydXN0LmNvbS9HZW9UcnVz
dFJTQUNBMjAxOC5jcmwwPgYDVR0gBDcwNTAzBgZngQwBAgIwKTAnBggrBgEFBQcC
ARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMHUGCCsGAQUFBwEBBGkwZzAm
BggrBgEFBQcwAYYaaHR0cDovL3N0YXR1cy5nZW90cnVzdC5jb20wPQYIKwYBBQUH
MAKGMWh0dHA6Ly9jYWNlcnRzLmdlb3RydXN0LmNvbS9HZW9UcnVzdFJTQUNBMjAx
OC5jcnQwDAYDVR0TAQH/BAIwADCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHYA
RqVV63X6kSAwtaKJafTzfREsQXS+/Um4havy/HD+bUcAAAF7fTADYQAABAMARzBF
AiBdOaVfn2coySOFG4z5GxMv13YdnB08kAJ6a/MTHRQNYQIhAN75E7kKXKzs56EY
gHBnfyxYiaJDjYca0SxDSY8NVKOGAHcAUaOw9f0BeZxWbbg3eI8MpHrMGyfL956I
QpoN/tSLBeUAAAF7fTADaQAABAMASDBGAiEAm6HGW0WZTUfCvknfgHkFLW+BXFsv
xjUrm+S0KXb5uWwCIQC2wn8HYbxC/rnlQauKacOSs37djLpMiTr8cawqj+AKZAB1
AEHIyrHfIkZKEMahOglCh15OMYsbA+vrS8do8JBilgb2AAABe30wAywAAAQDAEYw
RAIgaxTCYivLqHfvptca+WRu0isCEXOK1kcBj8zzu5h9q/0CIBcJ1VmGiqSYNUPr
K1kvQmbj34u6oM8xW7rcPS2ht545MA0GCSqGSIb3DQEBCwUAA4IBAQBKTxEnC4xG
DYLxcnKnPnUwc5Wax2MF4EpfnC/xqk4DBZKImoDSIFwfYXevuIEMwGklvck1J2Zz
UlJDFIH7JXmPsjIGeszaqgl/kcW659DOzNimCsEqkQx6/tCCDZDRx0r1DbGdrhxk
6qR4X56IUGo4D5WHUGF7z3wXWzkw1oY+KhhUgNziLIsgR1745Ye3NAlFsGxt073A
9M8PwGYuA/1v4ieeuBZTeOR7+P1nQy6O6Fo6RNNUmwUnB8pRoMcy09Ic/Sqc44CM
72CLpPuSua+bzj0v22jclF9GnEN/jXfkbQA0sq7JcCyXQ+a4ksc6jPwghS2JzzTu
3NH6rYeRhGRN
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweA1BrP6J5FfIbiGCgkE
qXL+RQktNYoi4TPEJ2aF6ALaRETK4EUd0aVX3jSeq4rwEEpQV68X9BQeVsDR4To2
m8OsGNJ1OXNu+gbAxAvMXHYfY5Cl0UEzAd/RwrcFlfi6sPsoxZUcVihkFdQqH4wF
FoeHemj3aHPzp0yIgjWyYNvEgoS1O2zXA99tdIrwMrc1ihUoiImQHWAWSKiMEnfV
B/yZhPpENebOE4PITCI7hcrnV82oExVcj8JhO2LeegeAYn8W0O6uIBS+ryqm77/e
rxBleq/gQOHPHGHPV9GN57TJgmwJI4xgqTBCqco6z+iCRwL1QlGBEs8QGiMQO8jP
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8446877767653381286496912393725349149
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pleasanton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Safeway Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'peoplesoft-pr.safeway.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24474553516645221936364648953887231446497265368841004486522694237644210860796086989233752114060555343576456991093716516916197013152593826465316805256503213829961967963963032355240973891492455858692603478017231987047135585446924964935828902469199006531888122211847291293670514785236208854514263986637520318117842077281764677641102162512715255461594236798209982752044014520148562892457704950888266774055075749939467586232684394665929788063397780889715115096569077243765942244834458745514591038522864942515342126766580777455706564760777671754183403015298110773481088568560251373169895623241899196689706057011817622327239
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4aa1536b21dd0e1ffae59a315359fc0d666dfebb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2546 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-stage.albertsonscompanies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa3.albertsonscompanies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa2.albertsonscompanies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa1.albertsonscompanies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supplierspreview.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-stage.albertsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-stage-ak.albertsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'private-nimbus-qi.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'private-nimbus-qac.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'private-nimbus-qa2.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'private-nimbus-qa1.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'private-nimbus-qa.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'private-nimbus-prf.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'private-nimbus-beta.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peoplesoft-pr.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner-nimbus-qi.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner-nimbus-qac.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner-nimbus-qa2.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner-nimbus-qa1.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner-nimbus-qa.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner-nimbus-prf.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner-nimbus-beta.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order-ahead-qa.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order-ahead-qa.albertsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nimbus-qi.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nimbus-qac.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nimbus-qa2.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nimbus-qa1.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nimbus-qa.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nimbus-prf.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nimbus-beta.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcloud-qa.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-stage.vons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-stage.tomthumb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-stage.starmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-stage.shaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-stage.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-stage.randalls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-stage.pavilions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-stage.luckylowprices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-stage.jewelosco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-stage.haggen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-stage.carrsqc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-stage.andronicos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-stage.albertsonscompanies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-stage.albertsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-stage.acmemarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-qa3.vons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-qa3.tomthumb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-qa3.starmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-qa3.shaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-qa3.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-qa3.randalls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-qa3.pavilions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-qa3.luckylowprices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-qa3.jewelosco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-qa3.haggen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-qa3.carrsqc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-qa3.andronicos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-qa3.albertsonscompanies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-qa3.albertsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-qa3.acmemarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-qa2.vons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-qa2.tomthumb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-qa2.starmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-qa2.shaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-qa2.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-qa2.randalls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-qa2.pavilions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-qa2.luckylowprices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-qa2.jewelosco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-qa2.haggen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-qa2.carrsqc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-qa2.andronicos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-qa2.albertsonscompanies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-qa2.albertsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-qa2.acmemarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-qa1.vons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-qa1.tomthumb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-qa1.starmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-qa1.shaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-qa1.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-qa1.randalls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-qa1.pavilions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-qa1.luckylowprices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-qa1.jewelosco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-qa1.haggen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-qa1.carrsqc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-qa1.andronicos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-qa1.albertsonscompanies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-qa1.albertsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-qa1.acmemarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employeeqa.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easqa.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easbi-qa.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'direct2hrqa.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.np.stratus.albertsons.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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