sit.peapod.com

- Ahold Information Services Inc. -

Issued by AffirmTrust Certificate Authority - OV1

About this certificate

This digital certificate with serial number c2:9f:b3:cd:92:ff:01:6e:00:00:00:00:58:08:ed:e6 was issued on by AffirmTrust.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ahold Information Services Inc.

Organization: Ahold Information Services Inc.
State / Province: South Carolina
Locality: Greenville
Country: US

AffirmTrust

Organization: AffirmTrust
Organization unit: See www.affirmtrust.com/repository
Country: CA

This certificate has expire since

Certificate Details

Serial Number (hex): c2:9f:b3:cd:92:ff:01:6e:00:00:00:00:58:08:ed:e6
Serial Number (int): 258699453221366180278896453297763839462
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: bc:15:5e:dd:ab:f1:4b:3f:61:ae:59:33:1c:00:d9:23:d1:ad:ae:71
AuthorityKeyId: fe:60:c3:0d:a4:a2:9d:21:4f:7a:78:4c:62:c5:db:14:fc:39:78:c4

Fingerprint (sha1): e5:66:7a:7c:ca:58:fa:2e:2c:61:ce:7d:b0:6e:22:cb:ae:5d:31:72
Fingerprint (sha256): 63:61:fa:1a:6b:60:39:ef:d1:0a:80:2e:ad:13:35:22:65:48:88:0a:c8:6c:e8:25:61:a7:80:9e:c6:b4:50:89

Issuing Certificate URL: http://aia.affirmtrust.com/aftov1ca.crt

Revocation information

OCSP Server: http://ocsp.affirmtrust.com
CRL Distribution Point: http://crl.affirmtrust.com/crl/aftov1ca.crl

Check the revocation status for certificate sit.peapod.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sit.peapod.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sit.giantfood.com
sit.giantfoodstores.com
sit.martinsfoods.com
sit.peapod.com
sit.stopandshop.com

Other certificates including the domain name peapod.com

(limited to 100 certificates)
review.peapod.com
qmgmt03.dc01.peapod.com
gntlstage.peapod.com
ada.peapod.com
tasks.peapod.com
cdn.peapod.com
ssl389904.cloudflaressl.com
kodiak.peapod.com
fs.peapod.com
www.peapod.com
about.peapod.com
aksc-pdlcoreservicesfdln-prd-cu-02.az.prod.peapod.com
mail2.peapod.com
click.customermail.peapod.com
recovery-jenkins.peapod.com
vsan23n06.dc01.peapod.com
cdn.peapod.com
peapod.com
bitbucket.peapod.com
ppradauth.ad.peapod.com
vsan22n09.dc01.peapod.com
access.peapod.com
vsan21n06.dc01.peapod.com
jiracore.test.peapod.com
db.monitoring.peapod.com
jiracore.test.peapod.com
anylogic-tools-prd-e2-02.az.prod.peapod.com
beta1.peapod.com
ssl389902.cloudflaressl.com
loginsight.dc01.peapod.com
build.peapod.com
vsan21n01.dc01.peapod.com
vsan22n08.dc01.peapod.com
ssl389904.cloudflaressl.com
review.peapod.com
mail1.peapod.com
peapod.com
www.peapod.com
stopandshop.review.peapod.com
*.peapod.com
kodiak.peapod.com
review2.peapod.com
www.peapod.com
review2.peapod.com
www.peapod.com
mail1.peapod.com
about.peapod.com
ssl389903.cloudflaressl.com
vsan22n05.dc01.peapod.com
vsan22n02.dc01.peapod.com
webbase.test.peapod.com
repos.peapod.com
*.service.dev.peapod.com
kodiak.peapod.com
bitbucket.test.peapod.com
bitbucket.test.peapod.com
tasks.peapod.com
review.peapod.com
vsan23n08.dc01.peapod.com
access.peapod.com
tasks.peapod.com
ssl389903.cloudflaressl.com
review2.peapod.com
solarwinds.ad.peapod.com
vsan21n09.dc01.peapod.com
*.service.common.peapod.com
peapod.com
about.peapod.com
gkjesx03.ad.peapod.com
www.peapod.com
qmgmt04.dc01.peapod.com
ome02.dc01.peapod.com
connect.peapod.com
ssl389904.cloudflaressl.com
ssl389903.cloudflaressl.com
vsan21n10.dc01.peapod.com
akamai-san45.exacttarget.com
kodiak.peapod.com
bitbucket.peapod.com
build.peapod.com
slogin.peapod.com
build.peapod.com
*.service.prod.peapod.com
sni.cloudflaressl.com
akamai-san45.exacttarget.com
peapod.com
developer.az.dev.peapod.com
ssl389904.cloudflaressl.com
vsan22n01.dc01.peapod.com
ssl389904.cloudflaressl.com
repos.peapod.com
click.customermail.peapod.com
openadmin.common.peapod.com
sit.peapod.com
webbase.test.peapod.com
akamai-san45.exacttarget.com
vsan22n04.dc01.peapod.com
fs.peapod.com
aksc-pdlcoreservicesfdln-prd-e2-02.az.prod.peapod.com
vsan23n10.dc01.peapod.com

Certificate

The complete raw certificate details for sit.peapod.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0htAFxJqNzOoe8cuLfuK
7GRmlmjDUO48IsdOdtzwZNdjzntQ41N1bkNoBpAhoNg2EiqvvcE9beX20FnLTB77
67eiHuLeupJEYiBQ20RuFg5FMTJMnNErjtzPjfXiBNJG+tgKYHClBHqsWUNBCGam
dmGurkKyi3QZMHpFWt9DsJHMF3ScPSp1EIcfzxVkzh7DvykVeh2UEXmyr+eNh6/m
xozbqLRy2lE/YLNoMUKbUbqtwa9pddoLuWBNmBgncpadzZqnS2rOiCgfTadCc+HD
dYI8LKB1pCMr568uoeuSE9iwCdSoPY13unq6NKtYisFWUHqRP3Nkgv/nRm2IpKPc
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 258699453221366180278896453297763839462
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.affirmtrust.com/repository'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust Certificate Authority - OV1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-24 12:04:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-24 12:34:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'South Carolina'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greenville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ahold Information Services Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sit.peapod.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26523481692296101120066523272834701651027231962408262421961658094626912899536685067338123660383608938323155016830986537470227643210931920457394546843336988530921283687481173277885965736361214046825761524853880083571612981540873921601689032527402071860823738446397822585280334373142249913151059862977355923986132669498244094102922072766310097330112413400696217165049626723139491749387743695579983689540936720093742573286921931956574771992010585094427953648967094858519514320232256988290454435568774776818812480986439679913681048807302417623340457319143604821999961732878763702876358385623332879699546774028364556786873
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit.giantfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit.giantfoodstores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit.martinsfoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit.peapod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit.stopandshop.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.affirmtrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.affirmtrust.com/aftov1ca.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.34697.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.affirmtrust.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.affirmtrust.com/crl/aftov1ca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fe60c30da4a29d214f7a784c62c5db14fc3978c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bc155eddabf14b3f61ae59331c00d923d1adae71
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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