shop-qa1.safeway.com

- Safeway Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0f:ec:52:68:86:1c:3a:ca:de:95:e0:2c:e6:1a:ad:3e was issued on by DigiCert Inc.

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Safeway Inc.

Organization: Safeway Inc.
State / Province: California
Locality: Pleasanton
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:ec:52:68:86:1c:3a:ca:de:95:e0:2c:e6:1a:ad:3e
Serial Number (int): 21165473434209477212902906727235235134
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e1:8b:c3:cd:3e:df:f6:94:7a:7e:eb:f1:07:f9:a5:36:51:e1:af:08
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): ae:2e:43:a9:1c:d4:56:41:8e:75:94:08:8a:52:ab:d8:6b:01:e2:ad
Fingerprint (sha256): 62:dc:e2:61:1c:61:ad:65:0a:a1:e5:84:85:7e:e5:ac:bb:5b:5a:a6:cf:e6:bc:8e:b9:90:84:c6:10:4a:ab:c8

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate shop-qa1.safeway.com

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shop-qa1.safeway.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shop-qa1.safeway.com
api-qa2.pavilions.com
shopecomqa.pavilions.com
shopecomqa2.albertsons.com
www-qa2.tomthumb.com
shop-qa1.shaws.com
shop-qa1.acmemarkets.com
shop-qa1.randalls.com
www-qa1.albertsons.com
api-qa1.albertsons.com
www-qa1.pavilions.com
www-qa1.tomthumb.com
www-qa2.haggen.com
www-qa1.randalls.com
www-qa3.luckylowprices.com
api-qa1.jewelosco.com
shop-qa1.tomthumb.com
www-qa1.haggen.com
api-qa2.safeway.com
shop-qa2.shaws.com
www-qa2.jewelosco.com
www-qa3.haggen.com
api-qa2.acmemarkets.com
shop-qa1.carrsqc.com
shopecomqa.albertsons.com
api-qa2.shaws.com
api-qa1.carrsqc.com
api-qa1.safeway.com
www-stage.luckylowprices.com
www-qa2.acmemarkets.com
www-qa1.shaws.com
shop-qa1.jewelosco.com
shop-qa2.starmarket.com
www-qa2.luckylowprices.com
shop-qa1.albertsons.com
api-qa2.randalls.com
www-qa2.recipesandmeals.com
api-qa1.tomthumb.com
api-qa2.tomthumb.com
api-qa2.starmarket.com
api-qa1.vons.com
www-qa1.vons.com
www-qa3.justforu.com
www-stage.justforu.com
shop-qa1.vons.com
www-qa1.luckylowprices.com
api-qa1.acmemarkets.com
www-qa2.pavilions.com
api-qa2.vons.com
shop-qa2.carrsqc.com
shopecomqa2.pavilions.com
www-qa1.recipesandmeals.com
ngcp-prf.pavilions.com
www-qa1.acmemarkets.com
www-qa2.justforu.com
www-qa2.starmarket.com
api-qa1.pavilions.com
ngcp-qa2.pavilions.com
www-qa3.recipesandmeals.com
www-qa1.safeway.com
www-qa2.carrsqc.com
www-qa2.shaws.com
api-qa2.albertsons.com
ngcp-prf.albertsons.com
shopecompreview.albertsons.com
www-qa2.vons.com
shopecompreview.pavilions.com
www-qa1.jewelosco.com
www-qa2.safeway.com
api-qa1.starmarket.com
api-qa1.shaws.com
shop-qa2.acmemarkets.com
api-qa2.carrsqc.com
ngcp-qa2.albertsons.com
api-qa2.jewelosco.com
www-qa1.justforu.com
www-qa2.albertsons.com
shop-qa1.pavilions.com
shop-qa1.starmarket.com
api-qa1.randalls.com
www-qa1.carrsqc.com
www-qa2.randalls.com
www-qa1.starmarket.com
www-stage.recipesandmeals.com

Other certificates including the domain name safeway.com

(limited to 100 certificates)
peoplesoft-pr.safeway.com
qnv011d50.safeway.com
slvnqa8a.safeway.com
qgv013514.safeway.com
qgv012b98.safeway.com
slvgpr16.safeway.com
phvgqz5i.safeway.com
incapsula.com
shop-qa3.safeway.com
qgv01233f.safeway.com
dgv011deb.safeway.com
shop-dev1-origin.safeway.com
qnv0126ec.safeway01.ad.safeway.com
qgv012520.safeway.com
qnv01253d.safeway01.ad.safeway.com
qav0108d9.safeway.com
qgv011491.safeway.com
www-qa1.albertsons.com
dgv0146e0.safeway.com
vocollect.safeway.com
stats.safeway.com
ecom-sci-nsxperf.safeway.com
www-qa2.albertsons.com
pgv0125c9.safeway.com
pgv013240.safeway.com
phvgqz5x.safeway.com
qnv011e30.addmz.safeway.com
qgv013048.safeway.com
pgv01304d.safeway.com
client-nimbus-qa1.safeway.com
ffen-dev-b2c.safeway.com
qnv0123cc.safeway01.ad.safeway.com
pgv011b41.safeway.com
pnv0129e3.safeway01.ad.safeway.com
pnv010f0f.safeway.com
dgv011d5a.safeway.com
rewardsb2b-sprf.safeway.com
qgv012170.safeway.com
reach.safeway.com
qgv013496.safeway.com
pgv012457.safeway.com
qnv013101.safeway01.ad.safeway.com
pnv011ef4.addmz.safeway.com
qgv011e60.safeway.com
ecom-mif-nsxdev.safeway.com
qgv012027.safeway.com
dgv013002.safeway.com
qgv012d14.safeway.com
ecom-sif-nsxqa.safeway.com
pgv012522.safeway.com
qgv012a32.safeway.com
qnv0126ff.safeway01.ad.safeway.com
qgv012f25.safeway.com
qgv012593.safeway.com
suppliers.safeway.com
pgv0124b5.safeway.com
qgv01233f.safeway.com
qgv01350a.safeway.com
sdaub-qa.safeway.com
dafi-atlas.safeway.com
pgv012ece.safeway.com
pgv011d7e.safeway.com
www.safeway.com
sdau-perf.safeway.com
events.biggestfantour.com
api-prod-origin.safeway.com
imperva.com
dgv0127fa.safeway.com
pgv0130c5.safeway.com
pgv01304f.safeway.com
*.safeway.com
qgv013037.safeway.com
dgv01233b.safeway.com
incapsula.com
pnv011e2e.safeway01.ad.safeway.com
logixdev-beta.safeway.com
pnv0128df.safeway01.ad.safeway.com
qnv014139.safeway.com
logixpa-beta.safeway.com
pgv011c66.safeway.com
ngcp-qi.tomthumb.com
imperva.com
dgv014861.safeway.com
delivery.safeway.com
fastforward.safeway.com
sdauc-perf.safeway.com
pgv0130d5.safeway.com
ppapo.safeway.com
sp2k-atlasdev.safeway.com
qnv013107.safeway01.ad.safeway.com
dgv011d56.safeway.com
pgv0126ad.safeway.com
eb2b.safeway.com
qgv012d26.safeway.com
qgv013271.safeway.com
qnv012700.safeway01.ad.safeway.com
qgv01274e.safeway.com
pgv011ee8.safeway.com
shop-qa3-origin.safeway.com
qacollab2016.safeway.com

Certificate

The complete raw certificate details for shop-qa1.safeway.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fZtF9s1AgDPdnGdLdPe
6jTpw3of0g+heiwLWH7vdJAlT1nBNwYyXksjpuKu/7vGXciY9ZmhI67cQF/jsUeh
xo+vNOHXUiVRwPKE9U33BDtr/gXPwcOlz6xwmGhMTtog3uv9JGKIMeU64oyUH+iC
6yYFo3XOUXQCEejVx1QPMxUp69HvKkqoHwCFWqJkweX/BD8GKuWBZU3k8PgE1s47
hrXeiJbwP4ZO0tS5DVFaiszAhdg0lIwfO/ZPJMqLLkH5es0DSWC0hNZlfGwGjC2J
gLQaExvjF6Yrx80a41XNxLGQ+UreTWVHEOUJBKjjftm1L/UNHMJgmr+brTJYkami
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21165473434209477212902906727235235134
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-25 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pleasanton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Safeway Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shop-qa1.safeway.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29535042318333613556766445635591757779967777648544109615035116932554348012822549658671844686305425366044025250156953505955569232136337345636742414628012138686895592116369270843239385189664617780304502781360869515507835406608054952846720613110755871794778305203554000935862435519108042729327870635946504001229961640105974980274266151279494188020376474633897883056480734496645994178684285109443506711095468587138019936577287517227655569961711296201044245223185278941033938884885830483034182507326174249560486359945941237405182770657740868837661681306027417229056936686199975810337816024155924774585341850347251809493743
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e18bc3cd3edff6947a7eebf107f9a53651e1af08
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1969 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-qa1.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-qa2.pavilions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopecomqa.pavilions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopecomqa2.albertsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa2.tomthumb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-qa1.shaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-qa1.acmemarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-qa1.randalls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa1.albertsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-qa1.albertsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa1.pavilions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa1.tomthumb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa2.haggen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa1.randalls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa3.luckylowprices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-qa1.jewelosco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-qa1.tomthumb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa1.haggen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-qa2.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-qa2.shaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa2.jewelosco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa3.haggen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-qa2.acmemarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-qa1.carrsqc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopecomqa.albertsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-qa2.shaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-qa1.carrsqc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-qa1.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-stage.luckylowprices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa2.acmemarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa1.shaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-qa1.jewelosco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-qa2.starmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa2.luckylowprices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-qa1.albertsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-qa2.randalls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa2.recipesandmeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-qa1.tomthumb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-qa2.tomthumb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-qa2.starmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-qa1.vons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa1.vons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa3.justforu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-stage.justforu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-qa1.vons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa1.luckylowprices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-qa1.acmemarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa2.pavilions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-qa2.vons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-qa2.carrsqc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopecomqa2.pavilions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa1.recipesandmeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-prf.pavilions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa1.acmemarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa2.justforu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa2.starmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-qa1.pavilions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qa2.pavilions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa3.recipesandmeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa1.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa2.carrsqc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa2.shaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-qa2.albertsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-prf.albertsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopecompreview.albertsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa2.vons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopecompreview.pavilions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa1.jewelosco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa2.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-qa1.starmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-qa1.shaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-qa2.acmemarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-qa2.carrsqc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qa2.albertsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-qa2.jewelosco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa1.justforu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa2.albertsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-qa1.pavilions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-qa1.starmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-qa1.randalls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa1.carrsqc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa2.randalls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa1.starmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-stage.recipesandmeals.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016a599db5c00000040300473045022100b48ab532830bd690e2c9a5c1db28681f774dd13014be08506f603b6bfef345aa02201c736f9d886469f137d498d94f16ffef60800620021ccc2bdab193c694092cef0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016a599db6dc0000040300473045022100c6d5cfe2b764e5d58ee621f4fb3e8cbbc89a64e579e1a4627517d9dcb2b1e0ab02200cb9d02100601acd3349ae6e05894522c965ef9b02f0103e590be8bf8e3964af
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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