ngcp-qa2.tomthumb.com
- Safeway Inc. -
Issued by GeoTrust SSL CA - G3
About this certificate
This digital certificate with serial number 26:a2:71:0a:a0:fe:17:81:f8:08:de:b5:8f:dd:5c:c1 was issued on by GeoTrust Inc..
With 42 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Safeway Inc.
Organization:
Safeway Inc.
Organization unit: Akamai SAN SSL OV
Organization unit: Akamai SAN SSL OV
State / Province:
California
Locality: Pleasanton
Country: US
Locality: Pleasanton
Country: US
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 26:a2:71:0a:a0:fe:17:81:f8:08:de:b5:8f:dd:5c:c1Serial Number (int): 51354108685301062769097088980137893057
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c
Fingerprint (sha1): d2:7d:1c:9c:4a:74:60:81:cb:b1:aa:38:79:55:50:63:0c:45:55:3c
Fingerprint (sha256): 1f:39:6c:f0:ad:d0:ad:ae:f2:b9:bc:2e:6f:e2:20:77:8c:d7:f9:38:c3:7b:e7:57:f3:b9:55:e8:10:47:ea:8d
Issuing Certificate URL: http://gn.symcb.com/gn.crt
Revocation information
OCSP Server: http://gn.symcd.comCRL Distribution Point: http://gn.symcb.com/gn.crl
Check the revocation status for certificate ngcp-qa2.tomthumb.com
42
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ngcp-qa2.tomthumb.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mcomqa.safeway.com
ngcp-qa1.pavilions.com
peoplesoft-q1.safeway.com
peoplesoft-q3.safeway.com
ngcp-qac.tomthumb.com
shopecomqa.safeway.com
ngcp-qa1.vons.com
ngcp-qac.safeway.com
ngcp-prf.randalls.com
ngcp-qac.vons.com
ngcp-qa2.vons.com
ngcp-qa2.safeway.com
ngcp-qa1.carrsqc.com
ngcp-qa2.randalls.com
ngcp-prf.pavilions.com
ngcp-qac.carrsqc.com
shopecompreview.safeway.com
ngcp-prf.carrsqc.com
ngcp-qac.pavilions.com
ngcp-qa1.randalls.com
ngcp-qa2.carrsqc.com
ngcp-qa1.tomthumb.com
shopecomqa.albertsons.com
peoplesoft-q5.safeway.com
shopecompreview.albertsons.com
peoplesoft-q4.safeway.com
mcomqa.vons.com
ngcp-prf.tomthumb.com
mcompreview.vons.com
ngcp-qa1.safeway.com
ngcp-prf.vons.com
shopecomqa.vons.com
peoplesoft-q2.safeway.com
ngcp-qa2.pavilions.com
mcompreview.safeway.com
ngcp-qac.randalls.com
qa.partners.safeway.com
identity-qa.safeway.com
shopecompreview.vons.com
ngcp-prf.safeway.com
pwreset-qa.safeway.com
ngcp-qa2.tomthumb.com
ngcp-qa1.pavilions.com
peoplesoft-q1.safeway.com
peoplesoft-q3.safeway.com
ngcp-qac.tomthumb.com
shopecomqa.safeway.com
ngcp-qa1.vons.com
ngcp-qac.safeway.com
ngcp-prf.randalls.com
ngcp-qac.vons.com
ngcp-qa2.vons.com
ngcp-qa2.safeway.com
ngcp-qa1.carrsqc.com
ngcp-qa2.randalls.com
ngcp-prf.pavilions.com
ngcp-qac.carrsqc.com
shopecompreview.safeway.com
ngcp-prf.carrsqc.com
ngcp-qac.pavilions.com
ngcp-qa1.randalls.com
ngcp-qa2.carrsqc.com
ngcp-qa1.tomthumb.com
shopecomqa.albertsons.com
peoplesoft-q5.safeway.com
shopecompreview.albertsons.com
peoplesoft-q4.safeway.com
mcomqa.vons.com
ngcp-prf.tomthumb.com
mcompreview.vons.com
ngcp-qa1.safeway.com
ngcp-prf.vons.com
shopecomqa.vons.com
peoplesoft-q2.safeway.com
ngcp-qa2.pavilions.com
mcompreview.safeway.com
ngcp-qac.randalls.com
qa.partners.safeway.com
identity-qa.safeway.com
shopecompreview.vons.com
ngcp-prf.safeway.com
pwreset-qa.safeway.com
ngcp-qa2.tomthumb.com
Other certificates including the domain name tomthumb.com
(limited to 100 certificates)
peoplesoft-pr.safeway.com
incapsula.com
shop-qa3.safeway.com
shop-dev1-origin.safeway.com
www-qa1.albertsons.com
www-qa2.albertsons.com
local.pharmacy.tomthumb.com
local.tomthumb.com
auth.tomthumb.com
api-prod-origin.safeway.com
imperva.com
incapsula.com
ngcp-qi.tomthumb.com
imperva.com
shop-qa3-origin.safeway.com
shop-qa1.safeway.com
www-qa3.albertsons.com
shop-qa1.safeway.com
incapsula.com
embed-answers.cority.com.pagescdn.com
ngcp-qa2.tomthumb.com
www-dev1.albertsons.com
imperva.com
shop-qa1.safeway.com
api-qa1-origin.safeway.com
shop-dev1-origin.safeway.com
incapsula.com
peoplesoft-pr.safeway.com
www-dev2.albertsons.com
shop-qa1.safeway.com
peoplesoft-pr.safeway.com
shop-qa1.safeway.com
api-qa3-origin.safeway.com
ctsecure.mywebgrocer.com
api-stage-origin.safeway.com
www.tomthumb.com
api-dev1-origin.safeway.com
shop-dev2-origin.safeway.com
pharmacy.tomthumb.com
pharmacy.tomthumb.com
blog-hitchhikers.yext.com
shop-qa3.safeway.com
shop-prod-origin.safeway.com
shop-qa1.safeway.com
incapsula.com
auth.tomthumb.com
ngcp-qa2.safeway.com
shop-qa1-origin.safeway.com
www-qa2.albertsons.com
www-dev1-origin.safeway.com
peoplesoft-pr.safeway.com
san3.yext-cdn.com
imperva.com
www.safeway.com
shop-qa2-origin.safeway.com
www.tomthumb.com
shop-qa1-origin.safeway.com
www-beta.albertsons.com
shop-dev3-origin.safeway.com
peoplesoft-pr.safeway.com
api-qa1-origin.safeway.com
san2.yext-cdn.com
ecom-dev1-azweb.safeway.com
san2.yext-cdn.com
ngcp-qa2.safeway.com
pharmacy.tomthumb.com
delivery.tomthumb.com
www.tomthumb.com
imperva.com
pharmacy.tomthumb.com
www-stage-origin.safeway.com
local.tomthumb.com
www-qa1.albertsons.com
incapsula.com
shop-qa1.safeway.com
local.pharmacy.tomthumb.com
shop-dev3-origin.safeway.com
imperva.com
api-prod-origin.safeway.com
incapsula.com
local.tomthumb.com
www-dev3.albertsons.com
shop-qa3.safeway.com
imperva.com
auth-q.tomthumb.com
api-prod.safeway.com
shop-qa1.safeway.com
api-prod-origin.safeway.com
coupons.albertsons.com
ngcp-qa2.tomthumb.com
shop-qa3-origin.safeway.com
www.tomthumb.com
imperva.com
www-stage-origin.safeway.com
ngcp-qa2.safeway.com
shop-dev1-origin.safeway.com
www-qa1-origin.safeway.com
api-qa2-origin.safeway.com
shop-qa3-origin.safeway.com
shop-prod-origin.safeway.com
incapsula.com
shop-qa3.safeway.com
shop-dev1-origin.safeway.com
www-qa1.albertsons.com
www-qa2.albertsons.com
local.pharmacy.tomthumb.com
local.tomthumb.com
auth.tomthumb.com
api-prod-origin.safeway.com
imperva.com
incapsula.com
ngcp-qi.tomthumb.com
imperva.com
shop-qa3-origin.safeway.com
shop-qa1.safeway.com
www-qa3.albertsons.com
shop-qa1.safeway.com
incapsula.com
embed-answers.cority.com.pagescdn.com
ngcp-qa2.tomthumb.com
www-dev1.albertsons.com
imperva.com
shop-qa1.safeway.com
api-qa1-origin.safeway.com
shop-dev1-origin.safeway.com
incapsula.com
peoplesoft-pr.safeway.com
www-dev2.albertsons.com
shop-qa1.safeway.com
peoplesoft-pr.safeway.com
shop-qa1.safeway.com
api-qa3-origin.safeway.com
ctsecure.mywebgrocer.com
api-stage-origin.safeway.com
www.tomthumb.com
api-dev1-origin.safeway.com
shop-dev2-origin.safeway.com
pharmacy.tomthumb.com
pharmacy.tomthumb.com
blog-hitchhikers.yext.com
shop-qa3.safeway.com
shop-prod-origin.safeway.com
shop-qa1.safeway.com
incapsula.com
auth.tomthumb.com
ngcp-qa2.safeway.com
shop-qa1-origin.safeway.com
www-qa2.albertsons.com
www-dev1-origin.safeway.com
peoplesoft-pr.safeway.com
san3.yext-cdn.com
imperva.com
www.safeway.com
shop-qa2-origin.safeway.com
www.tomthumb.com
shop-qa1-origin.safeway.com
www-beta.albertsons.com
shop-dev3-origin.safeway.com
peoplesoft-pr.safeway.com
api-qa1-origin.safeway.com
san2.yext-cdn.com
ecom-dev1-azweb.safeway.com
san2.yext-cdn.com
ngcp-qa2.safeway.com
pharmacy.tomthumb.com
delivery.tomthumb.com
www.tomthumb.com
imperva.com
pharmacy.tomthumb.com
www-stage-origin.safeway.com
local.tomthumb.com
www-qa1.albertsons.com
incapsula.com
shop-qa1.safeway.com
local.pharmacy.tomthumb.com
shop-dev3-origin.safeway.com
imperva.com
api-prod-origin.safeway.com
incapsula.com
local.tomthumb.com
www-dev3.albertsons.com
shop-qa3.safeway.com
imperva.com
auth-q.tomthumb.com
api-prod.safeway.com
shop-qa1.safeway.com
api-prod-origin.safeway.com
coupons.albertsons.com
ngcp-qa2.tomthumb.com
shop-qa3-origin.safeway.com
www.tomthumb.com
imperva.com
www-stage-origin.safeway.com
ngcp-qa2.safeway.com
shop-dev1-origin.safeway.com
www-qa1-origin.safeway.com
api-qa2-origin.safeway.com
shop-qa3-origin.safeway.com
shop-prod-origin.safeway.com
Certificate
The complete raw certificate details for ngcp-qa2.tomthumb.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIKTDCCCTSgAwIBAgIQJqJxCqD+F4H4CN61j91cwTANBgkqhkiG9w0BAQsFADBE MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTYwNzA2MDAwMDAwWhcNMTcxMDA1MjM1 OTU5WjCBijELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExEzARBgNV BAcMClBsZWFzYW50b24xFTATBgNVBAoMDFNhZmV3YXkgSW5jLjEaMBgGA1UECwwR QWthbWFpIFNBTiBTU0wgT1YxHjAcBgNVBAMMFW5nY3AtcWEyLnRvbXRodW1iLmNv bTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMMAO97r7PE8KUyz8VzU lp38NZl//6gj6fmy8UpnIaKD9vA7t+MJ9OsNTvyot4ij5WNYNhKcma61ESInOLEJ Vbom55JV0SJxQpxUGQ3yd2mziT1i2Kvo5sJdla9MpkDMn9OXnYQtXtZ89028XBzl wJtTvcly4vdy0H+oQwSTLsAfkmGHJS79voicmimgkerGM8xpgB86eDgNM4bcIbXh HfpHI1Iv1KBFdK4LZCN4IqxAbPIp61TDxGJVCoMErcHwp3V8Tv2uR3+npfEp8OqR V4qkXzTLVa7a8r+WqVx7DPTeEFLf6QqEFANbgfUCuc9C1mNWEPA3mZsRsjkKvYI0 XeECAwEAAaOCBvEwggbtMIID5QYDVR0RBIID3DCCA9iCEm1jb21xYS5zYWZld2F5 LmNvbYIWbmdjcC1xYTEucGF2aWxpb25zLmNvbYIZcGVvcGxlc29mdC1xMS5zYWZl d2F5LmNvbYIZcGVvcGxlc29mdC1xMy5zYWZld2F5LmNvbYIVbmdjcC1xYWMudG9t dGh1bWIuY29tghZzaG9wZWNvbXFhLnNhZmV3YXkuY29tghFuZ2NwLXFhMS52b25z LmNvbYIUbmdjcC1xYWMuc2FmZXdheS5jb22CFW5nY3AtcHJmLnJhbmRhbGxzLmNv bYIRbmdjcC1xYWMudm9ucy5jb22CEW5nY3AtcWEyLnZvbnMuY29tghRuZ2NwLXFh Mi5zYWZld2F5LmNvbYIUbmdjcC1xYTEuY2FycnNxYy5jb22CFW5nY3AtcWEyLnJh bmRhbGxzLmNvbYIWbmdjcC1wcmYucGF2aWxpb25zLmNvbYIUbmdjcC1xYWMuY2Fy cnNxYy5jb22CG3Nob3BlY29tcHJldmlldy5zYWZld2F5LmNvbYIUbmdjcC1wcmYu Y2FycnNxYy5jb22CFm5nY3AtcWFjLnBhdmlsaW9ucy5jb22CFW5nY3AtcWExLnJh bmRhbGxzLmNvbYIUbmdjcC1xYTIuY2FycnNxYy5jb22CFW5nY3AtcWExLnRvbXRo dW1iLmNvbYIZc2hvcGVjb21xYS5hbGJlcnRzb25zLmNvbYIZcGVvcGxlc29mdC1x NS5zYWZld2F5LmNvbYIec2hvcGVjb21wcmV2aWV3LmFsYmVydHNvbnMuY29tghlw ZW9wbGVzb2Z0LXE0LnNhZmV3YXkuY29tgg9tY29tcWEudm9ucy5jb22CFW5nY3At cHJmLnRvbXRodW1iLmNvbYIUbWNvbXByZXZpZXcudm9ucy5jb22CFG5nY3AtcWEx LnNhZmV3YXkuY29tghFuZ2NwLXByZi52b25zLmNvbYITc2hvcGVjb21xYS52b25z LmNvbYIZcGVvcGxlc29mdC1xMi5zYWZld2F5LmNvbYIWbmdjcC1xYTIucGF2aWxp b25zLmNvbYIXbWNvbXByZXZpZXcuc2FmZXdheS5jb22CFW5nY3AtcWFjLnJhbmRh bGxzLmNvbYIXcWEucGFydG5lcnMuc2FmZXdheS5jb22CF2lkZW50aXR5LXFhLnNh ZmV3YXkuY29tghhzaG9wZWNvbXByZXZpZXcudm9ucy5jb22CFG5nY3AtcHJmLnNh ZmV3YXkuY29tghZwd3Jlc2V0LXFhLnNhZmV3YXkuY29tghVuZ2NwLXFhMi50b210 aHVtYi5jb20wCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwKwYDVR0fBCQwIjAg oB6gHIYaaHR0cDovL2duLnN5bWNiLmNvbS9nbi5jcmwwgZ0GA1UdIASBlTCBkjCB jwYGZ4EMAQICMIGEMD8GCCsGAQUFBwIBFjNodHRwczovL3d3dy5nZW90cnVzdC5j b20vcmVzb3VyY2VzL3JlcG9zaXRvcnkvbGVnYWwwQQYIKwYBBQUHAgIwNQwzaHR0 cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9yZXBvc2l0b3J5L2xlZ2Fs MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBTSb/eW 9IU/cjwwfSPahXibo3xafDBXBggrBgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0 dHA6Ly9nbi5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9nbi5zeW1jYi5j b20vZ24uY3J0MIIBfwYKKwYBBAHWeQIEAgSCAW8EggFrAWkAdgDd6x0reg1PpiCL ga2BaHB+Lo6dAdVciI09EcTNtuy+zAAAAVXBYnFOAAAEAwBHMEUCIQDNlB12CSGq xP1V3u7XoLLLuAPLhwBCYVcu0zJZ0nUrkQIgCLMSY3a0onUZWnS+zmRbvfTF8Aut zDV/Cc55PqP9vgQAdwCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAA AVXBYnGIAAAEAwBIMEYCIQCmwtqS5cIoxopsI4ACfFLu2+UG2qXXUD+H9Vgj8dRA PQIhAPoj29ZZgsjgQ3E9ml/Av4gVOH3tJG/63D0htFrXi/KSAHYAaPaY+B9kgr46 jO65KB1M/HFRXWeT1ETRCmesu09P+8QAAAFVwWJxcwAABAMARzBFAiAoSNATddNU 9j7NGijqKhSoPqoQX0rkB4MX23RvfNEMpAIhAIVztuChZ5EjKJC4CfZq83hwTksg 9lV88Sd+7TgYE6PsMA0GCSqGSIb3DQEBCwUAA4IBAQDV6eZoxvi8CUnjBXLU/83/ 3Bp5UQC0eceuyWCSc/q9iowbbJiImP30AJzXoYEhxAjYDhz9WA+C9ZldukiZrK2w Bgpu3AbhvO855PympigrN8IlA8DBOOnUG0Wgkb19qDxTq+be2TKacj69tbPhFpXu GGF3KeYGbP92BRQqLyw0L+Dsldm4JMSmLKkEh5boEC9y1zZOmIMfUlS+CLiGMQMX NQbUH2HfEWdDFvZTbSuaa/8wOLZFIBdPAV+xpcChlPyUNHG2y/NaG4AvKqp/I3Dg K7bDSJ+EksXOzl9PdDTIPhngzEJ5747T1q/Vr3ZtZjFUJgUCtDGOF56tGHqOfaxA -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwA73uvs8TwpTLPxXNSW nfw1mX//qCPp+bLxSmchooP28Du34wn06w1O/Ki3iKPlY1g2EpyZrrURIic4sQlV uibnklXRInFCnFQZDfJ3abOJPWLYq+jmwl2Vr0ymQMyf05edhC1e1nz3TbxcHOXA m1O9yXLi93LQf6hDBJMuwB+SYYclLv2+iJyaKaCR6sYzzGmAHzp4OA0zhtwhteEd +kcjUi/UoEV0rgtkI3girEBs8inrVMPEYlUKgwStwfCndXxO/a5Hf6el8Snw6pFX iqRfNMtVrtryv5apXHsM9N4QUt/pCoQUA1uB9QK5z0LWY1YQ8DeZmxGyOQq9gjRd 4QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 51354108685301062769097088980137893057 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-05 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Pleasanton' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Safeway Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Akamai SAN SSL OV' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ngcp-qa2.tomthumb.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24616584794106577724064467369042257596744417982931790098235869362029947191085391572766706617610071190338515188093738312963355423504115446398336311529582468454334066649227016691679844940894312372459960348732297386822533882445247794205759182392654111155512142745659726649258797218983662903797431983843691588606576950877104972179355684676310450565636527019509662467741612999117104610818026425178535703074692820840554942947307181571476221771328623196670203275452546484419590677430533375598049459831309484967894789703035431954537150526106674167910343847425472665612012658046365474839100231567936700949889974798751334948321 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (988 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcomqa.safeway.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qa1.pavilions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peoplesoft-q1.safeway.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peoplesoft-q3.safeway.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qac.tomthumb.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopecomqa.safeway.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qa1.vons.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qac.safeway.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-prf.randalls.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qac.vons.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qa2.vons.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qa2.safeway.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qa1.carrsqc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qa2.randalls.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-prf.pavilions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qac.carrsqc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopecompreview.safeway.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-prf.carrsqc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qac.pavilions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qa1.randalls.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qa2.carrsqc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qa1.tomthumb.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopecomqa.albertsons.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peoplesoft-q5.safeway.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopecompreview.albertsons.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peoplesoft-q4.safeway.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcomqa.vons.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-prf.tomthumb.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcompreview.vons.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qa1.safeway.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-prf.vons.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopecomqa.vons.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peoplesoft-q2.safeway.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qa2.pavilions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcompreview.safeway.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qac.randalls.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.partners.safeway.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity-qa.safeway.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopecompreview.vons.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-prf.safeway.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pwreset-qa.safeway.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qa2.tomthumb.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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