enterprise.ui.itesco.cz

- Tesco Stores CR a.s. -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number 02:1b:7c:c7:b6:fa:0f:d0:78:10:a9:66:f5:da:11:1f was issued on by Entrust, Inc..

With 91 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Tesco Stores CR a.s.

Company registration number: 45308314
Organization: Tesco Stores CR a.s.
Locality: Praha 10
Country: CZ

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:1b:7c:c7:b6:fa:0f:d0:78:10:a9:66:f5:da:11:1f
Serial Number (int): 2801178848574043160973759417562042655
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 11:0e:91:4a:5a:45:25:7e:bf:75:e7:5a:6e:d7:20:bf:a6:c3:25:ec
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): 40:6b:49:73:c3:a5:ea:b0:06:a4:ec:5a:a4:93:de:f0:5f:88:99:cd
Fingerprint (sha256): 47:d7:0d:79:c7:46:1a:ef:3f:65:c7:5f:e9:70:da:de:8a:4a:70:26:a1:b3:d4:b8:e6:72:fa:30:47:2e:2f:4d

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate enterprise.ui.itesco.cz

91

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for enterprise.ui.itesco.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

enterprise.ui.itesco.cz
www.tescoutazasok.hu
www.tescosurveys.com
www.tescomagyarorszag.hu
www.tescofinancie.sk
www.tescofinance.sk
www.tescofinance.cz
www.tescocr.cz
www.tescobiztositasok.hu
www.tescobaby.hu
www.tesco-stores.sk
www.tesco-shop.sk
www.tesco-polska.pl
www.simpletm.cz
www.simpletarif.cz
www.simpleonline.cz
www.potravinydomov.sk
www.potraviny-domov.sk
www.ponuka.tesco.sk
www.mojemaletesco.sk
www.mojemaletesco.pl
www.klikniavyzvedni.cz
www.klikniavyzvedni.com
www.klikniavyzdvihni.sk
www.klikniavyzdvihni.com
www.itesco.sk
www.itesco.org
www.hiperhitel.hu
www.hiper-hitel.hu
www.ffmoda.sk
www.ffmoda.pl
www.ffmoda.cz
www.ff-moda.sk
www.ff-moda.pl
www.ff-moda.cz
www.f-f-moda.sk
www.f-f-moda.pl
www.f-f-moda.cz
www.clubcard.hu
tescoutazasok.hu
tescosurveys.com
tescorecepty.cz
tescopujcka.cz
tescopoukazky.sk
tescopoukazky.cz
tescomagyarorszag.hu
tescofinancie.sk
tescofinance.sk
tescofinance.cz
tescocr.cz
tescoclubcard.sk
tescoclubcard.cz
tescobiztositasok.hu
tescobaby.hu
tesco-stores.sk
tesco-shop.sk
tesco-polska.pl
tesco-mobile.cz
simpletm.cz
simpletarif.cz
simpleonline.cz
potravinydomov.sk
potraviny-domov.sk
ponuka.tesco.sk
on-linepotraviny.cz
on-line-potraviny.cz
mojemaletesco.sk
mojemaletesco.pl
klikniavyzvedni.cz
klikniavyzvedni.com
klikniavyzdvihni.sk
klikniavyzdvihni.com
itesco.sk
itesco.org
hiperhitel.hu
hiper-hitel.hu
ffmoda.sk
ffmoda.pl
ffmoda.cz
ff-moda.sk
ff-moda.pl
ff-moda.cz
f-f-moda.sk
f-f-moda.pl
f-f-moda.cz
corporate.tesco.sk
corporate.tesco.pl
corporate.tesco.hu
corporate.itesco.cz
clubcard.hu
click-and-collect.cz

Other certificates including the domain name itesco.cz

(limited to 100 certificates)
soutez-pedigree.itesco.cz
service.itesco.cz
enterprise.ui.itesco.cz
prihlaseni.itesco.cz
*.itesco.cz
www.tescocommunityfund.eu
tescovalue.sk
enterprise1.ui.itesco.cz
tescovalue.sk
service.itesco.cz
tescovalue.sk
origin-www.itesco.cz
zabezpeceni.itesco.cz
pomahame.itesco.cz
enterprise.ui.itesco.cz
prihlaseni.itesco.cz
prihlaseni.itesco.cz
tescovalue.sk
www.click-and-collect.cz
enterprise1.ui.itesco.cz
enterprise1.ui.itesco.cz
*.itesco.cz
nws.itesco.cz
predsevzeti.itesco.cz
origin-prihlaseni.itesco.cz
tescovalue.sk
www2.itesco.cz
clubcard.cz
m.nakup.itesco.cz
tescovalue.sk
vanoce2019.itesco.cz
zadostopujcku.itesco.cz
*.itesco.cz
soutez-pedigree.itesco.cz
card.tesco.com
enterprise1.ui.itesco.cz
nws.itesco.cz
corporate.itesco.cz
www.itesco.cz
*.itesco.cz
clubcard.cz
origin-prihlaseni.itesco.cz
tescovalue.sk
www2.itesco.cz
www-ppe.itesco.cz
enterprise.ui.itesco.cz
www2.itesco.cz
tescovalue.sk
card.tesco.com
clubcard.cz
card.tesco.com
enterprise.ui.itesco.cz
soutez-pedigree.itesco.cz
enterprise.ui.itesco.cz
tescovalue.sk
soutez-pedigree.itesco.cz
tescovalue.sk
prihlaseni.itesco.cz
predsevzeti.itesco.cz
card.tesco.com
enterprise.ui.itesco.cz
enterprise.ui.itesco.cz
mimoni.itesco.cz
enterprise1.ui.itesco.cz
predsevzeti.itesco.cz
tescovalue.sk
tescovalue.sk
tescovalue.sk
tescovalue.sk
origin-zabezpeceni.itesco.cz
kariera.itesco.cz
card.tesco.com
prihlaseni.itesco.cz
prihlaseni.itesco.cz
www.tescocommunityfund.eu
www.tescocommunityfund.eu
prihlaseni.itesco.cz
link.homecredit.cz
soutez-pedigree.itesco.cz
vanoce2019.itesco.cz
predsevzeti.itesco.cz
soutez-pedigree.itesco.cz
enterprise.ui.itesco.cz
soutez-pedigree.itesco.cz
www.click-and-collect.cz
predsevzeti.itesco.cz
tescovalue.sk
soutez-pedigree.itesco.cz
prihlaseni.itesco.cz
clubcard.cz
vanoce2019.itesco.cz
enterprise.ui.itesco.cz
www.click-and-collect.cz
service.itesco.cz
tescovalue.sk
prihlaseni.itesco.cz
card-ppe.tesco.com
enterprise.ui.itesco.cz
prihlaseni.itesco.cz
enterprise.ui.itesco.cz

Certificate

The complete raw certificate details for enterprise.ui.itesco.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvhtEa2P8PGPL2hunMTv
ixxYYVty1B60FAsncLBQCLBrEa/ZLblWxhG6N2YdqhR99w0B328mg0H9lWGl9c3S
mPB347Gyy5Ckz135B5+TJXchlZU/7IZelaeyVTPFA9OFAouVblyzC54U3Il7lkIt
VBNWqQiRd4trbQjV4avaBz6p6JX7pmZJjTLtGugGHTa7u3Rumvi4GAq5V+6DH7px
iRgCJgHfkoAjvx9Owv5Fov1YO4hGqy7i+BuWf7xfvOqgtBDRKBQDnxI7rVbziM0g
rUeoq2stZG+L7YtL9Pj/AcbLzFoemG5wu4euaVMIt88XgBoiLMAoKdOPeTL9NBAu
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2801178848574043160973759417562042655
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-27 12:01:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-17 12:01:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Praha 10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tesco Stores CR a.s.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '45308314'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'enterprise.ui.itesco.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24107781395062705816462972109878202197048665668445666347761560264081329901282458355161767105422461339798304793114027505721534379113092313614929165239517424528359237206786284607064236927131096485521904123537480530963760173934260313802054358832264081188653064041107270852460367643601783217671707003144322708886458296863856153407368673655041656124710772290488783798200023424083546121901214630225425967136875676535275256597241162814540326634707525894742758054765949710519554616303840608194372513491115191907510821072924445196245606300273428580698235029827638661772189545440830262089857064767192081375458433904082999586361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							110e914a5a45257ebf75e75a6ed720bfa6c325ec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1657 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterprise.ui.itesco.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tescoutazasok.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tescosurveys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tescomagyarorszag.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tescofinancie.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tescofinance.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tescofinance.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tescocr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tescobiztositasok.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tescobaby.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tesco-stores.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tesco-shop.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tesco-polska.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simpletm.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simpletarif.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simpleonline.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.potravinydomov.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.potraviny-domov.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ponuka.tesco.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mojemaletesco.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mojemaletesco.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klikniavyzvedni.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klikniavyzvedni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klikniavyzdvihni.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klikniavyzdvihni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itesco.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itesco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hiperhitel.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hiper-hitel.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ffmoda.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ffmoda.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ffmoda.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ff-moda.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ff-moda.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ff-moda.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.f-f-moda.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.f-f-moda.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.f-f-moda.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubcard.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescoutazasok.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescosurveys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescorecepty.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescopujcka.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescopoukazky.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescopoukazky.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescomagyarorszag.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescofinancie.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescofinance.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescofinance.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescocr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescoclubcard.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescoclubcard.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescobiztositasok.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescobaby.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tesco-stores.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tesco-shop.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tesco-polska.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tesco-mobile.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simpletm.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simpletarif.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simpleonline.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'potravinydomov.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'potraviny-domov.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponuka.tesco.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'on-linepotraviny.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'on-line-potraviny.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mojemaletesco.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mojemaletesco.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikniavyzvedni.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikniavyzvedni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikniavyzdvihni.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikniavyzdvihni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itesco.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itesco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiperhitel.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiper-hitel.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ffmoda.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ffmoda.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ffmoda.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ff-moda.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ff-moda.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ff-moda.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f-f-moda.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f-f-moda.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f-f-moda.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.tesco.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.tesco.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.tesco.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.itesco.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubcard.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'click-and-collect.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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