ngcp-qa2.safeway.com

- Safeway Inc -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 05:b4:9f:07:38:83:11:ab:39:0f:fc:a0:8c:ec:6b:cd was issued on by DigiCert Inc.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Safeway Inc

Organization: Safeway Inc
Organization unit: Akamai SAN SSL OV
State / Province: California
Locality: Pleasanton
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:b4:9f:07:38:83:11:ab:39:0f:fc:a0:8c:ec:6b:cd
Serial Number (int): 7583978888674579824202363818501499853
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: a4:01:25:07:07:9d:54:6a:c7:cd:23:0b:b5:bd:3b:d6:71:5d:c9:65
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 45:0a:78:31:e9:7d:1a:b5:26:08:e0:95:1e:ba:39:bf:c6:aa:7f:2e
Fingerprint (sha256): 16:5c:24:17:0e:9a:bc:41:38:f6:1b:9d:ce:c5:8f:92:97:22:c2:4f:f5:6c:18:9b:38:c2:01:1b:05:87:1d:99

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate ngcp-qa2.safeway.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ngcp-qa2.safeway.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ngcp-qa2.safeway.com
shop-dev2.pavilions.com
payments-qa.albertsonscompanies.com
ngcp-qa1.safeway.com
shop-qa2.randalls.com
ngcp-qa2.carrsqc.com
api-qa3-origin.vons.com
ngcp-qac.pavilions.com
shop-dev2.tomthumb.com
shop-qa3.jewelosco.com
api-qa3-origin.starmarket.com
www-qa3.jewelosco.com
www-dev3.albertsons.com
ngcp-qa1.tomthumb.com
shop-qa2.pavilions.com
ngcp-qa2.pavilions.com
www-qa3.albertsons.com
shop-qa3.safeway.com
www-qa3.vons.com
ngcp-qa1.vons.com
api-qa3-origin.carrsqc.com
peoplesoft-q2.safeway.com
api-qa3-origin.shaws.com
ngcp-qac.safeway.com
www-qa3.randalls.com
www-dev3.safeway.com
ngcp-prv-qa.safeway.com
ngcp-prf.tomthumb.com
shop-dev2.safeway.com
ngcp-qa3.safeway.com
ngcp-qa1.pavilions.com
shop-qa2.safeway.com
shopecomqa.safeway.com
shop-dev2.randalls.com
shop-dev2.albertsons.com
ngcp-qac.vons.com
shop-qa2.vons.com
ngcp-prf.vons.com
www-qa3.shaws.com
shop-dev2.vons.com
www-qa3.pavilions.com
ngcp-prf.randalls.com
api-qa3-origin.safeway.com
ngcp-prf.carrsqc.com
shop-qa3.tomthumb.com
www.shopecompreview.pavilions.com
shopecomqa2.pavilions.com
shopecomqa.pavilions.com
www-qa3.tomthumb.com
shop-qa3.pavilions.com
shopecompreview.vons.com
ngcp-qi-preview.safeway.com
api-qa3-origin.albertsons.com
www-qa3.carrsqc.com
www-dev3.pavilions.com
ngcp-prf.safeway.com
qa.partners.safeway.com
www-qa3.starmarket.com
payments-stage.albertsonscompanies.com
www-qa3.safeway.com
shop-qa2.tomthumb.com
ngcp-prf.pavilions.com
peoplesoft-q3.safeway.com
ngcp-qa1.carrsqc.com
mcompreview.safeway.com
payments-perf.albertsonscompanies.com
mcompreview.vons.com
shopecomqa3.pavilions.com
api-qa3-origin.jewelosco.com
www-dev3.vons.com
shop-qa3.vons.com
ngcp-qa1.randalls.com
www-dev3.jewelosco.com
ngcp-qac.randalls.com
ngcp-qa2.randalls.com
api-qa3-origin.pavilions.com
peoplesoft-q5.safeway.com
www.shopecompreview.jewelosco.com
www-dev3.tomthumb.com
ngcp-qac.tomthumb.com
www-dev3.randalls.com
shop-qa3.randalls.com
shop-dev2.jewelosco.com
api-qa3-origin.randalls.com
shopecompreview.pavilions.com
identity-qa.safeway.com
shop-qa3.albertsons.com
shop-qa2.albertsons.com
peoplesoft-q4.safeway.com
shopecompreview.safeway.com
payments-acceptance.albertsonscompanies.com
shopecomqa.vons.com
ngcp-qa2.vons.com
peoplesoft-q1.safeway.com
ngcp-qa2.tomthumb.com
api-qa3-origin.tomthumb.com
shop-qa2.jewelosco.com
pwreset-qa.safeway.com

Other certificates including the domain name safeway.com

(limited to 100 certificates)
peoplesoft-pr.safeway.com
qnv011d50.safeway.com
slvnqa8a.safeway.com
qgv013514.safeway.com
qgv012b98.safeway.com
slvgpr16.safeway.com
phvgqz5i.safeway.com
incapsula.com
shop-qa3.safeway.com
qgv01233f.safeway.com
dgv011deb.safeway.com
shop-dev1-origin.safeway.com
qnv0126ec.safeway01.ad.safeway.com
qgv012520.safeway.com
qnv01253d.safeway01.ad.safeway.com
qav0108d9.safeway.com
qgv011491.safeway.com
www-qa1.albertsons.com
dgv0146e0.safeway.com
vocollect.safeway.com
stats.safeway.com
ecom-sci-nsxperf.safeway.com
www-qa2.albertsons.com
pgv0125c9.safeway.com
pgv013240.safeway.com
phvgqz5x.safeway.com
qnv011e30.addmz.safeway.com
qgv013048.safeway.com
pgv01304d.safeway.com
client-nimbus-qa1.safeway.com
ffen-dev-b2c.safeway.com
qnv0123cc.safeway01.ad.safeway.com
pgv011b41.safeway.com
pnv0129e3.safeway01.ad.safeway.com
pnv010f0f.safeway.com
dgv011d5a.safeway.com
rewardsb2b-sprf.safeway.com
qgv012170.safeway.com
reach.safeway.com
qgv013496.safeway.com
pgv012457.safeway.com
qnv013101.safeway01.ad.safeway.com
pnv011ef4.addmz.safeway.com
qgv011e60.safeway.com
ecom-mif-nsxdev.safeway.com
qgv012027.safeway.com
dgv013002.safeway.com
qgv012d14.safeway.com
ecom-sif-nsxqa.safeway.com
pgv012522.safeway.com
qgv012a32.safeway.com
qnv0126ff.safeway01.ad.safeway.com
qgv012f25.safeway.com
qgv012593.safeway.com
suppliers.safeway.com
pgv0124b5.safeway.com
qgv01233f.safeway.com
qgv01350a.safeway.com
sdaub-qa.safeway.com
dafi-atlas.safeway.com
pgv012ece.safeway.com
pgv011d7e.safeway.com
www.safeway.com
sdau-perf.safeway.com
events.biggestfantour.com
api-prod-origin.safeway.com
imperva.com
dgv0127fa.safeway.com
pgv0130c5.safeway.com
pgv01304f.safeway.com
*.safeway.com
qgv013037.safeway.com
dgv01233b.safeway.com
incapsula.com
pnv011e2e.safeway01.ad.safeway.com
logixdev-beta.safeway.com
pnv0128df.safeway01.ad.safeway.com
qnv014139.safeway.com
logixpa-beta.safeway.com
pgv011c66.safeway.com
ngcp-qi.tomthumb.com
imperva.com
dgv014861.safeway.com
delivery.safeway.com
fastforward.safeway.com
sdauc-perf.safeway.com
pgv0130d5.safeway.com
ppapo.safeway.com
sp2k-atlasdev.safeway.com
qnv013107.safeway01.ad.safeway.com
dgv011d56.safeway.com
pgv0126ad.safeway.com
eb2b.safeway.com
qgv012d26.safeway.com
qgv013271.safeway.com
qnv012700.safeway01.ad.safeway.com
qgv01274e.safeway.com
pgv011ee8.safeway.com
shop-qa3-origin.safeway.com
qacollab2016.safeway.com

Certificate

The complete raw certificate details for ngcp-qa2.safeway.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/l4H8adSg1UPULYMePb
G0a+PUmluX3kOkMQUySqFBuC31Etb7+3a+/Mrtfb9EAicx9ysITPrp8YExgho3k/
yBfr5Kwg7+Dm79vQw5NZtcVBSekjVn9dpkln5xVmrk+/KdRFzwATUSPwaPixc4Dc
uy/kxgdR/yLgNFgj8u/FXWKSWnVdYZfMfPeuwWzGF2V/+MuJ9No1ZVrbaFFJKM4X
qDnSyGxGnzcbxSOh8yqbtdm/Bc8QMnhkCNk/hDtZjAWsKN4Il+yikTlapk5o9uE7
1zVj1y5pcw6UNFZeV5s8jnpGnBrqAs4DIRSoJEeHzppfT4f+X5+1bpWuwQ5Lo2IW
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7583978888674579824202363818501499853
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pleasanton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Safeway Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Akamai SAN SSL OV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ngcp-qa2.safeway.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25244440552894131737055687003292272635617681032057846685451756308174837133547965136244221683606670202116959664075236771098786680704854708036171054025484440835888451136912192575614406243221423336473106995457189482555983598249957057000568715685577731101967389747413261018961041117614743541189298588512583761783944962883204268442736911548643882258283024233379228149402829634908431638059067775027456146039454129755699900880331718715103093274919697581186371852290582642628220138033119888084326599758200183795105731405061394357167674618463611495198331165858941303428247778105387846772657531572547948099905949204380500760303
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a4012507079d546ac7cd230bb5bd3bd6715dc965
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2439 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qa2.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-dev2.pavilions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments-qa.albertsonscompanies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qa1.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-qa2.randalls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qa2.carrsqc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-qa3-origin.vons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qac.pavilions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-dev2.tomthumb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-qa3.jewelosco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-qa3-origin.starmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa3.jewelosco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev3.albertsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qa1.tomthumb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-qa2.pavilions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qa2.pavilions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa3.albertsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-qa3.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa3.vons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qa1.vons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-qa3-origin.carrsqc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peoplesoft-q2.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-qa3-origin.shaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qac.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa3.randalls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev3.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-prv-qa.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-prf.tomthumb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-dev2.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qa3.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qa1.pavilions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-qa2.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopecomqa.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-dev2.randalls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-dev2.albertsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qac.vons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-qa2.vons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-prf.vons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa3.shaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-dev2.vons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa3.pavilions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-prf.randalls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-qa3-origin.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-prf.carrsqc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-qa3.tomthumb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopecompreview.pavilions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopecomqa2.pavilions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopecomqa.pavilions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa3.tomthumb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-qa3.pavilions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopecompreview.vons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qi-preview.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-qa3-origin.albertsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa3.carrsqc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev3.pavilions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-prf.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.partners.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa3.starmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments-stage.albertsonscompanies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa3.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-qa2.tomthumb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-prf.pavilions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peoplesoft-q3.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qa1.carrsqc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcompreview.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments-perf.albertsonscompanies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcompreview.vons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopecomqa3.pavilions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-qa3-origin.jewelosco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev3.vons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-qa3.vons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qa1.randalls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev3.jewelosco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qac.randalls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qa2.randalls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-qa3-origin.pavilions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peoplesoft-q5.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopecompreview.jewelosco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev3.tomthumb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qac.tomthumb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev3.randalls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-qa3.randalls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-dev2.jewelosco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-qa3-origin.randalls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopecompreview.pavilions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity-qa.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-qa3.albertsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-qa2.albertsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peoplesoft-q4.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopecompreview.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments-acceptance.albertsonscompanies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopecomqa.vons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qa2.vons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peoplesoft-q1.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qa2.tomthumb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-qa3-origin.tomthumb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-qa2.jewelosco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pwreset-qa.safeway.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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