enterprise.ui.itesco.cz

- Tesco Stores CR a.s. -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number 58:83:7e:89:c4:6d:ad:27:a6:ae:04:da:d8:52:50:ed was issued on by Entrust, Inc..

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Tesco Stores CR a.s.

Company registration number: 45308314
Organization: Tesco Stores CR a.s.
Locality: Praha 10
Country: CZ

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 58:83:7e:89:c4:6d:ad:27:a6:ae:04:da:d8:52:50:ed
Serial Number (int): 117654821016200636339716909960598278381
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 81:ec:c1:bc:0b:df:b5:27:f4:d7:fb:11:92:da:4a:35:f5:c4:8e:00
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): 75:5d:07:61:a7:64:91:2a:f3:c7:93:da:08:49:ca:9c:84:d6:10:d3
Fingerprint (sha256): 6e:16:33:83:ab:ba:76:ee:3c:52:82:c7:1a:01:b6:8d:b6:1a:a5:65:64:dc:88:c2:b7:f9:e7:7c:00:21:4f:17

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate enterprise.ui.itesco.cz

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for enterprise.ui.itesco.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

enterprise.ui.itesco.cz
click-and-collect.cz
clubcard.hu
corporate.itesco.cz
corporate.tesco.hu
corporate.tesco.pl
corporate.tesco.sk
f-f-moda.cz
f-f-moda.sk
ff-moda.cz
ff-moda.sk
ffmoda.cz
ffmoda.sk
hiper-hitel.hu
hiperhitel.hu
itesco.org
itesco.sk
klikniavyzdvihni.com
klikniavyzdvihni.sk
klikniavyzvedni.com
klikniavyzvedni.cz
mojemaletesco.pl
mojemaletesco.sk
on-line-potraviny.cz
on-linepotraviny.cz
ponuka.tesco.sk
potraviny-domov.sk
potravinydomov.sk
simpleonline.cz
simpletarif.cz
simpletm.cz
tesco-mobile.cz
tesco-polska.pl
tesco-shop.sk
tesco-stores.cz
tesco-stores.sk
tescobaby.hu
tescobiztositasok.hu
tescoclubcard.cz
tescoclubcard.sk
tescocr.cz
tescofinance.cz
tescofinance.sk
tescofinancie.sk
tescomagyarorszag.hu
tescopoukazky.cz
tescopoukazky.sk
tescopujcka.cz
tescorecepty.cz
tescosurveys.com
tescoutazasok.hu
www.clubcard.hu
www.f-f-moda.cz
www.f-f-moda.sk
www.ff-moda.cz
www.ff-moda.sk
www.ffmoda.cz
www.ffmoda.sk
www.hiper-hitel.hu
www.hiperhitel.hu
www.itesco.org
www.itesco.sk
www.klikniavyzdvihni.com
www.klikniavyzdvihni.sk
www.klikniavyzvedni.com
www.klikniavyzvedni.cz
www.mojemaletesco.pl
www.mojemaletesco.sk
www.ponuka.tesco.sk
www.potraviny-domov.sk
www.potravinydomov.sk
www.simpleonline.cz
www.simpletarif.cz
www.simpletm.cz
www.tesco-polska.pl
www.tesco-shop.sk
www.tesco-stores.sk
www.tescobaby.hu
www.tescobiztositasok.hu
www.tescocr.cz
www.tescofinance.cz
www.tescofinance.sk
www.tescofinancie.sk
www.tescomagyarorszag.hu
www.tescosurveys.com
www.tescoutazasok.hu

Other certificates including the domain name itesco.cz

(limited to 100 certificates)
soutez-pedigree.itesco.cz
service.itesco.cz
enterprise.ui.itesco.cz
prihlaseni.itesco.cz
*.itesco.cz
www.tescocommunityfund.eu
tescovalue.sk
enterprise1.ui.itesco.cz
tescovalue.sk
service.itesco.cz
tescovalue.sk
origin-www.itesco.cz
zabezpeceni.itesco.cz
pomahame.itesco.cz
enterprise.ui.itesco.cz
prihlaseni.itesco.cz
prihlaseni.itesco.cz
tescovalue.sk
www.click-and-collect.cz
enterprise1.ui.itesco.cz
enterprise1.ui.itesco.cz
*.itesco.cz
nws.itesco.cz
predsevzeti.itesco.cz
origin-prihlaseni.itesco.cz
tescovalue.sk
www2.itesco.cz
clubcard.cz
m.nakup.itesco.cz
tescovalue.sk
vanoce2019.itesco.cz
zadostopujcku.itesco.cz
*.itesco.cz
soutez-pedigree.itesco.cz
card.tesco.com
enterprise1.ui.itesco.cz
nws.itesco.cz
corporate.itesco.cz
www.itesco.cz
*.itesco.cz
clubcard.cz
origin-prihlaseni.itesco.cz
tescovalue.sk
www2.itesco.cz
www-ppe.itesco.cz
enterprise.ui.itesco.cz
www2.itesco.cz
tescovalue.sk
card.tesco.com
clubcard.cz
card.tesco.com
enterprise.ui.itesco.cz
soutez-pedigree.itesco.cz
enterprise.ui.itesco.cz
tescovalue.sk
soutez-pedigree.itesco.cz
tescovalue.sk
prihlaseni.itesco.cz
predsevzeti.itesco.cz
card.tesco.com
enterprise.ui.itesco.cz
enterprise.ui.itesco.cz
mimoni.itesco.cz
enterprise1.ui.itesco.cz
predsevzeti.itesco.cz
tescovalue.sk
tescovalue.sk
tescovalue.sk
tescovalue.sk
origin-zabezpeceni.itesco.cz
kariera.itesco.cz
card.tesco.com
prihlaseni.itesco.cz
prihlaseni.itesco.cz
www.tescocommunityfund.eu
www.tescocommunityfund.eu
prihlaseni.itesco.cz
link.homecredit.cz
soutez-pedigree.itesco.cz
vanoce2019.itesco.cz
predsevzeti.itesco.cz
soutez-pedigree.itesco.cz
enterprise.ui.itesco.cz
soutez-pedigree.itesco.cz
www.click-and-collect.cz
predsevzeti.itesco.cz
tescovalue.sk
soutez-pedigree.itesco.cz
prihlaseni.itesco.cz
clubcard.cz
vanoce2019.itesco.cz
enterprise.ui.itesco.cz
www.click-and-collect.cz
service.itesco.cz
tescovalue.sk
prihlaseni.itesco.cz
card-ppe.tesco.com
enterprise.ui.itesco.cz
prihlaseni.itesco.cz
enterprise.ui.itesco.cz

Certificate

The complete raw certificate details for enterprise.ui.itesco.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrS8oLqEfWROdU2kspM6
rcezR59wnr/LGPbt7C6aLQI2AH3LKqUPk8Ywgt1A6AbxJbiHLItbn9xJqGGrEb3c
npHAGYrs4AXbZcjcFg2kzetl8vikvqYpDPRlWMcCv4FSdRe/czuhx9FDsTl9eqeI
3MY/6I5mqYm3H0vjAv2BhBwAFrgWQ3cv5vB3eoRuDZWjpmSag+XLl7MrtjvETT9o
IKYDPOn+jBlsNmImfDhJNz/hBwyR0A0ZlAW9Z9deidMDlBU87VbYWDuR/XOJ3N1X
BVav9bOuLj9sHoEOAvOY/pvkKoy+BasHSH5CM2WttlMbi5gByvS2RH275SB3qnxs
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 117654821016200636339716909960598278381
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-20 16:37:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-17 16:37:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Praha 10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tesco Stores CR a.s.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '45308314'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'enterprise.ui.itesco.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18014963956553438850717823392099733115883851875621278297648580363661085217728961597755142716979370273776023209068409012182754982778766986409788612081071861327061996774784088260744677901712044523416428054718780748176785400781970889759944412927681944608198021695747198186166450036839316994820967966810486178967716183107070507614045142639338171826330626910889631151608641298622734448611512927771147376544528295730079944298901856486208139169955470009301372987020308627062490035744375110006130068491997532067584941101397350970023921802945994026110241454988693889307344663338174275122130777053792222960451454278056573431033
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							81ecc1bc0bdfb527f4d7fb1192da4a35f5c48e00
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1590 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterprise.ui.itesco.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'click-and-collect.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubcard.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.itesco.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.tesco.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.tesco.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.tesco.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f-f-moda.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f-f-moda.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ff-moda.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ff-moda.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ffmoda.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ffmoda.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiper-hitel.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiperhitel.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itesco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itesco.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikniavyzdvihni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikniavyzdvihni.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikniavyzvedni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikniavyzvedni.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mojemaletesco.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mojemaletesco.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'on-line-potraviny.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'on-linepotraviny.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponuka.tesco.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'potraviny-domov.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'potravinydomov.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simpleonline.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simpletarif.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simpletm.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tesco-mobile.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tesco-polska.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tesco-shop.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tesco-stores.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tesco-stores.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescobaby.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescobiztositasok.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescoclubcard.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescoclubcard.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescocr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescofinance.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescofinance.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescofinancie.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescomagyarorszag.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescopoukazky.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescopoukazky.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescopujcka.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescorecepty.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescosurveys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescoutazasok.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubcard.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.f-f-moda.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.f-f-moda.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ff-moda.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ff-moda.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ffmoda.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ffmoda.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hiper-hitel.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hiperhitel.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itesco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itesco.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klikniavyzdvihni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klikniavyzdvihni.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klikniavyzvedni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klikniavyzvedni.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mojemaletesco.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mojemaletesco.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ponuka.tesco.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.potraviny-domov.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.potravinydomov.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simpleonline.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simpletarif.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simpletm.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tesco-polska.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tesco-shop.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tesco-stores.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tescobaby.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tescobiztositasok.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tescocr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tescofinance.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tescofinance.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tescofinancie.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tescomagyarorszag.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tescosurveys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tescoutazasok.hu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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