www-dev3.albertsons.com

- Safeway, Inc. -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 4c:9b:91:89:5c:22:32:10:26:e5:b7:94:6e:da:9b:23 was issued on by COMODO CA Limited.

With 37 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Safeway, Inc.

Organization: Safeway, Inc.
Organization unit: Venafi API
State / Province: California
Country: US

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:9b:91:89:5c:22:32:10:26:e5:b7:94:6e:da:9b:23
Serial Number (int): 101829085524891259367242826746777213731
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: c1:96:20:1b:14:7c:78:1a:7d:ee:c7:e9:3b:2d:b9:60:e4:9f:bc:f5
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): 52:45:98:83:a6:04:a4:04:5d:bf:aa:d9:b8:a0:80:eb:ca:a6:e6:aa
Fingerprint (sha256): 6b:dd:7b:f6:a2:ff:40:94:5d:bb:ed:31:29:29:b3:bc:73:a5:97:39:3f:c1:96:c2:0d:77:94:d1:59:f7:45:9e

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate www-dev3.albertsons.com

37

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www-dev3.albertsons.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www-dev3.albertsons.com
author-dev3.albertsons-cms.com
www-dev3-origin.acmemarkets.com
www-dev3-origin.albertsons.com
www-dev3-origin.albertsonscompanies.com
www-dev3-origin.andronicos.com
www-dev3-origin.carrsqc.com
www-dev3-origin.haggen.com
www-dev3-origin.jewelosco.com
www-dev3-origin.justforu.com
www-dev3-origin.lucernefoods.com
www-dev3-origin.luckylowprices.com
www-dev3-origin.pavilions.com
www-dev3-origin.randalls.com
www-dev3-origin.recipesandmeals.com
www-dev3-origin.safeway.com
www-dev3-origin.shaws.com
www-dev3-origin.starmarket.com
www-dev3-origin.tomthumb.com
www-dev3-origin.vons.com
www-dev3.acmemarkets.com
www-dev3.albertsonscompanies.com
www-dev3.andronicos.com
www-dev3.carrsqc.com
www-dev3.haggen.com
www-dev3.jewelosco.com
www-dev3.justforu.com
www-dev3.lucernefoods.com
www-dev3.luckylowprices.com
www-dev3.pavilions.com
www-dev3.randalls.com
www-dev3.recipesandmeals.com
www-dev3.safeway.com
www-dev3.shaws.com
www-dev3.starmarket.com
www-dev3.tomthumb.com
www-dev3.vons.com

Other certificates including the domain name albertsons.com

(limited to 100 certificates)
delivery.albertsons.com
incapsula.com
shop-qa3.safeway.com
shop-dev1-origin.safeway.com
abscorpvisitor.albertsons.com
www-qa1.albertsons.com
www-qa2.albertsons.com
dgm010dc7.albertsons.com
enterprise-data-catalog.albertsons.com
www-dev.albertsons.com
rxds.qa2.westus.aks.az.albertsons.com
events.biggestfantour.com
api-prod-origin.safeway.com
imperva.com
incapsula.com
ngcp-qi.tomthumb.com
imperva.com
shop-qa3-origin.safeway.com
shop-qa1.safeway.com
rxpandera.albertsons.com
www-qa3.albertsons.com
magentocloud44.map.fastly.net
shop-qa1.safeway.com
magentocloud44.map.fastly.net
incapsula.com
san1.yext-cdn.com
ngcp-qa2.tomthumb.com
www-dev1.albertsons.com
imperva.com
emedc.perf.aks.platform.albertsons.com
*.sandboxeast.stratus.albertsons.com
cq5.albertsons.com
shop-qa1.safeway.com
emailsignup.albertsons.com
api-qa1-origin.safeway.com
shop-dev1-origin.safeway.com
incapsula.com
delivery.albertsons.com
peoplesoft-pr.safeway.com
identity.safeway.com
oemdv.albertsons.com
swycorpvisitor.safeway.com
events.biggestfantour.com
virtual.albertsons.com
www-dev2.albertsons.com
ldap.albertsons.com
shop-qa1.safeway.com
magentocloud44.map.fastly.net
shop-qa1.safeway.com
api-qa3-origin.safeway.com
*.np.stratus.albertsons.com
ctsecure.mywebgrocer.com
api-stage-origin.safeway.com
wpsun939.albertsons.com
api-dev1-origin.safeway.com
physicians.florida-allergy.com
www.albertsons.com
coupons.albertsons.com
shop-dev2-origin.safeway.com
dev-jenkinsoc.albertsons.com
magentocloud44.map.fastly.net
magentocloud44.map.fastly.net
changes.albertsons.com
blog-hitchhikers.yext.com
san1.yext-cdn.com
shop-qa3.safeway.com
myapps.albertsons.com
shop-prod-origin.safeway.com
magentocloud44.map.fastly.net
shop-qa1.safeway.com
incapsula.com
delivery.albertsons.com
ngcp-qa2.safeway.com
shop-qa1-origin.safeway.com
magentocloud44.map.fastly.net
www-qa2.albertsons.com
magentocloud44.map.fastly.net
magentocloud44.map.fastly.net
pan0115ce.albertsons.com
www-dev1-origin.safeway.com
san3.yext-cdn.com
sonar.stratus.albertsons.com
imperva.com
virtual.albertsons.com
shop-qa2-origin.safeway.com
www.tomthumb.com
shop-qa1-origin.safeway.com
securemail.albertsons.com
webex1.albertsons.com
www-beta.albertsons.com
local.fuel.albertsons.com
auth.albertsons.com
shop-dev3-origin.safeway.com
peoplesoft-pr.safeway.com
api-qa1-origin.safeway.com
ecom-dev1-azweb.safeway.com
auth-q.albertsons.com
restaurants.swisschalet.com.pagescdn.com
ngcp-qa2.safeway.com
virtual.albertsons.com

Certificate

The complete raw certificate details for www-dev3.albertsons.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7I6nxHes+Z3k0K/VQs59
mcNsrGci3wt07x0ts6/dlvhNEdSbOteqTe0C96lop67LtZXtYGn/xZplP8nSDWxJ
EwTbpAjxnI7jFhlV470EHTYxr3D1ibhMGP4Fw2pttXp9U02ZnMmK3MKDHf+kb6KT
zQCHBADJ3EJ+6IQYfLkGDkd4asxwCHVrtzSkpgmp0yemMrkMEZWUSPbzb1ux5cwF
Gdo8JslUt7DXEPxdKmSmimNIobL5hKT6PZ/U3zTIWUSmGkh/CiOQYDD6/tdswgwc
V3BkWW22lskbbB7a4Kh2eTIIY016sifP4jf8qlH86aJ/Cr7GvjcJ39eGZSKva+oP
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 101829085524891259367242826746777213731
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Safeway, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Venafi API'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www-dev3.albertsons.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29862585942765931391368314937224486647212764435107162693105931363497051190158610435446256064733767229683465495697724159103574169398223238159509120435483106197173247768323525156659063601669805909880347896012612880992433217238398263705181569289647026097067309549608668411935471752232069740286462028699905119902077990717416029587183964403287354961932341150518735376784420355360416823975132593759268243152812844511070186359946856155085775792017284044573825213488816827294131094627286054353414515147444447506179401373348560762082206576307608142796499262095220268446173158723453240061276043799723657653929810633205264027597
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c196201b147c781a7deec7e93b2db960e49fbcf5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes)
							0165007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000017ebcef3cd00000040300463044022036f654e9d888dac5cd2c0f8bf0efc6ba9c66c5d75dec011970b000360e1dd15702207506b85cf0dfa963fce4d1ccdcc8240ccfaa5323c34ddf8100d92d6c9984d20f0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000017ebcef3cb5000004030046304402203c6c2b66fc0c9992b9a594c916831145ac20ba5d95e43cd504dd7f2b5cbad337022069f74d53741a6ec28f0f225e4cdb4bc02f484ea8b143d21d2e66699ccaff9941007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000017ebcef3c79000004030046304402204acd3bdc91f6bd915e157a626efddcec335d4125e15f0a60e9b1fb2fd3d56d9c02203508d93f0f409679d233c88266daf1670b670a534fb3e9201c4753c0cc6e7a49
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1046 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev3.albertsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author-dev3.albertsons-cms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev3-origin.acmemarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev3-origin.albertsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev3-origin.albertsonscompanies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev3-origin.andronicos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev3-origin.carrsqc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev3-origin.haggen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev3-origin.jewelosco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev3-origin.justforu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev3-origin.lucernefoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev3-origin.luckylowprices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev3-origin.pavilions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev3-origin.randalls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev3-origin.recipesandmeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev3-origin.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev3-origin.shaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev3-origin.starmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev3-origin.tomthumb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev3-origin.vons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev3.acmemarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev3.albertsonscompanies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev3.andronicos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev3.carrsqc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev3.haggen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev3.jewelosco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev3.justforu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev3.lucernefoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev3.luckylowprices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev3.pavilions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev3.randalls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev3.recipesandmeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev3.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev3.shaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev3.starmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev3.tomthumb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev3.vons.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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