beta-preprod.stopandshop.com

- Ahold Information Services Inc. -

Issued by AffirmTrust Certificate Authority - OV1

About this certificate

This digital certificate with serial number 66:71:94:d8:97:92:d6:80:00:00:00:00:58:08:93:e0 was issued on by AffirmTrust.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ahold Information Services Inc.

Organization: Ahold Information Services Inc.
State / Province: South Carolina
Locality: Greenville
Country: US

AffirmTrust

Organization: AffirmTrust
Organization unit: See www.affirmtrust.com/repository
Country: CA

This certificate has expire since

Certificate Details

Serial Number (hex): 66:71:94:d8:97:92:d6:80:00:00:00:00:58:08:93:e0
Serial Number (int): 136171004071890050686829347409804956640
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: d7:18:87:f3:8d:98:7a:0e:c7:51:a7:49:48:ae:e5:c4:9a:19:1e:f7
AuthorityKeyId: fe:60:c3:0d:a4:a2:9d:21:4f:7a:78:4c:62:c5:db:14:fc:39:78:c4

Fingerprint (sha1): c9:10:83:b0:ea:4f:6a:ff:e9:5c:31:2e:48:0b:20:7a:bc:2e:1c:bb
Fingerprint (sha256): 1b:63:cf:fd:7a:43:db:40:03:70:ce:73:c6:b8:3d:f1:3c:81:5f:b2:8c:48:77:5b:ae:d4:13:ed:3b:f5:46:d4

Issuing Certificate URL: http://aia.affirmtrust.com/aftov1ca.crt

Revocation information

OCSP Server: http://ocsp.affirmtrust.com
CRL Distribution Point: http://crl.affirmtrust.com/crl/aftov1ca.crl

Check the revocation status for certificate beta-preprod.stopandshop.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for beta-preprod.stopandshop.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

beta-preprod.stopandshop.com

Other certificates including the domain name stopandshop.com

(limited to 100 certificates)
pharmacy.stopandshop.com
coupons.stopandshop.com
answers-autozone.pagescdn.com
staging.stopandshop.com
circular.stopandshop.com
nonprd-api.pdl.stopandshop.com
recipecenter.stopandshop.com
san3.yext-cdn.com
images.stopandshop.com
pharmacy.stopandshop.com
stores.maxit-pawn.com
pharmacy.stopandshop.com
beta-preprod.stopandshop.com
recipecenter.stopandshop.com
ssl418162.cloudflaressl.com
locations.bannerbank.com
answers-autozone.pagescdn.com
circular.stopandshop.com
stopandshop.com
stopandshop.com
circular.stopandshop.com
mortgage.wf.com
locations.bannerbank.com
pharmacy.stopandshop.com
pharmacy.stopandshop.com
ssl418161.cloudflaressl.com
recipecenter.stopandshop.com
recipecenter.stopandshop.com
krispy-new-maps.krispy.com.pagescdn.com
stores.stopandshop.com
locations.seniorbridge.com
san3.yext-cdn.com
stopandshop.com
synergichealthcareers.yext-cdn.com
stores.stopandshop.com
images.stopandshop.com
www.stopandshop.com
ssl418161.cloudflaressl.com
staging.stopandshop.com
pharmacy.stopandshop.com
dd.stopandshop.com
locations.seniorbridge.com
recipecenter.stopandshop.com
dealers.poolguardusa.com
ssl418162.cloudflaressl.com
answers.ihacares.com.yext-cdn.com
circular.stopandshop.com
refer.stopandshop.com
stores.stopandshop.com
sni.cloudflaressl.com
synergichealthcareers.yext-cdn.com
circular.stopandshop.com
ssl418161.cloudflaressl.com
stores.torafuku.jp
stopandshop.com
stores.stopandshop.com
sit.peapod.com
images.stopandshop.com
store-events.louandgrey.com
api.pdl.stopandshop.com
san3.yext-cdn.com
www.farmersatlanta.com
beta.stopandshop.com
smartlabel.stopandshop.com
pharmacy.stopandshop.com
san3.yext-cdn.com
express.stopandshop.com
stores.stopandshop.com
pharmacy.stopandshop.com
ssl418163.cloudflaressl.com
ssl418163.cloudflaressl.com
circular.stopandshop.com
sni.cloudflaressl.com
stores.torafuku.jp
sni.cloudflaressl.com
stores.tenpura-tensei.jp
www.stopandshop.com
ssl418163.cloudflaressl.com
ssl418162.cloudflaressl.com
standorte.hansaton.at
san3.yext-cdn.com
stores.stopandshop.com
san3.yext-cdn.com
beta.stopandshop.com
ssl418162.cloudflaressl.com
nonprd-api.pdl.stopandshop.com
san3.yext-cdn.com
sni.cloudflaressl.com
www.stopandshop.com
stores.stopandshop.com
events.lifelinescreening.com
krispy-new-maps.krispy.com.pagescdn.com
sni.cloudflaressl.com
ssl418161.cloudflaressl.com
ssl418163.cloudflaressl.com
stores.stopandshop.com
ssl418163.cloudflaressl.com
www.farmersatlanta.com
answers.ihacares.com.yext-cdn.com
san3.yext-cdn.com

Certificate

The complete raw certificate details for beta-preprod.stopandshop.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBCUHZTrLwLgMBa4FkU6
T636qya2KScuxAnpZNOe8b7yvwrH5pcvI5bNXmQtOVzLf99YdRX7B2qi8ImUD6B1
SgYn0+RmWF3qS3t4rugHjj4U/H5DbK/G5DgSRAVY+Vi5yqNWuByYockF9sFhnTy0
SC/Cuh4rmDrkVSg0xssPw/a6wIDsHrXwxB6rxA2Wow7vZqLzJmR4uSS4wJOXZoUr
ptxeT1gK7WfTDZh8FZ6UBwojLSi2ONS/5seqaWASb2N2xTPboOU7pmNeqPKaErg/
LlEwhuUUoi8xhm7LENZn2ijwfUW7JIeLO4kb0LjV0C3mlxoVZXeCYy92jR6aL9aW
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 136171004071890050686829347409804956640
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.affirmtrust.com/repository'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust Certificate Authority - OV1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-20 14:40:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-20 15:10:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'South Carolina'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greenville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ahold Information Services Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'beta-preprod.stopandshop.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21721163654869520365526311243687424101216347851482085199430357772802597651215031106779043904964068435412823163529684935370431248685017506544861934901685423721379784042745450775213752449860263410885223656304632230160055634240982285760194426104708850585997669142206793294356007468045570642791737568448545559759271129593273982976710378305736843894320352791492821554300256442120726132523546626447008408370971062282088772304871505957157809138827262289848989110764939811795338115852227608144867097161941208062746013005327704222016390216488748310819486989081429025406654093553060349262071023514711106554938781875824926037683
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-preprod.stopandshop.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.affirmtrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.affirmtrust.com/aftov1ca.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.34697.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.affirmtrust.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.affirmtrust.com/crl/aftov1ca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fe60c30da4a29d214f7a784c62c5db14fc3978c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d71887f38d987a0ec751a74948aee5c49a191ef7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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