carrefour.pl

Issued by Certum Level II CA

About this certificate

This digital certificate with serial number 1e:1c:4d:8f:30:e2:c8:7c:66:06:f7:fe:21:a2:f4:f0 was issued on by Unizeto Technologies S.A..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates SHOULD NOT use the noticeRef option (RFC 5280: 4.2.1.4)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

Certificate Subject

CN=carrefour.pl,C=PL,1.2.840.113549.1.9.1=#0c1f6d696368616c5f6d616c616e6f77736b69406361727265666f75722e636f6d

Unizeto Technologies S.A.

Organization: Unizeto Technologies S.A.
Organization unit: Certum Certification Authority
Country: PL

This certificate has expire since

Certificate Details

Serial Number (hex): 1e:1c:4d:8f:30:e2:c8:7c:66:06:f7:fe:21:a2:f4:f0
Serial Number (int): 40023797275882616553838130194649642224
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 8a:db:b6:e7:60:61:12:9d:b4:d6:73:67:01:05:28:02:70:38:a7:99
AuthorityKeyId: 80:62:11:de:c0:6b:a7:10:e1:08:f0:55:b4:30:83:bf:fa:8f:08:60

Fingerprint (sha1): c4:94:a2:9c:36:6f:06:75:95:d8:ba:72:24:f7:a8:ed:e3:b2:b4:09
Fingerprint (sha256): a4:01:bd:36:8e:da:e9:7a:e8:5e:97:c0:b4:77:41:15:3f:96:5b:0a:fc:31:8a:f7:cb:03:48:be:13:ed:71:63

Issuing Certificate URL: http://www.certum.pl/l2.cer

Revocation information

OCSP Server: http://ocsp.certum.pl
CRL Distribution Point: http://crl.certum.pl/l2.crl

Check the revocation status for certificate carrefour.pl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for carrefour.pl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Microsoft Server-Gated Cryptography
Netscape Server-Gated Cryptography

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

carrefour.pl
www.carrefour.pl

Other certificates including the domain name carrefour.pl

(limited to 100 certificates)
esambo.carrefour.pl
20latrazem.carrefour.pl
trk.carrefour.pl
incapsula.com
newsletter.carrefour.pl
newsletter.carrefour.pl
loteria.carrefour.pl
franko.carrefour.pl
franet.carrefour.pl
satysfakcja.carrefour.pl
trk.carrefour.pl
imperva.com
imperva.com
carrefour.pl
test.carrefour.pl
c4webservice.labo.carrefour.pl
sklep.carrefour.pl
20latrazem.carrefour.pl
rodzinka.carrefour.pl
serwiskorporacyjny.carrefour.pl
trk.carrefour.pl
fastpages.pl
trk.carrefour.pl
franko.carrefour.pl
c4scango.carrefour.pl
c4mqtt.carrefour.pl
talenty.carrefour.pl
imperva.com
20latrazem.carrefour.pl
carrefour.pl
scid-labo.carrefour.pl
c4webservice.carrefour.pl
promoplanner.carrefour.pl
targi.carrefour.pl
rodzinka.carrefour.pl
scid-labo.carrefour.pl
zakupycodzienne.carrefour.pl
wiem.carrefour.pl
trk.carrefour.pl
carrefour.pl
franet.carrefour.pl
20latrazem.carrefour.pl
media.carrefour.pl
satysfakcja.carrefour.pl
sklep.carrefour.pl
carrefour.pl
franko.carrefour.pl
app.shoper.carrefour.pl
media.carrefour.pl
loteria.carrefour.pl
apimobile.carrefour.pl
carrefour.pl
twojapodroz.carrefour.pl
satysfakcja.carrefour.pl
incapsula.com
scid-labo2.carrefour.pl
esambo.carrefour.pl
szalona5zplusem.carrefour.pl
zakupycodzienne.carrefour.pl
sklep.carrefour.pl
20latrazem.carrefour.pl
20latrazem.carrefour.pl
trk.carrefour.pl
cdn.carrefour.pl
cdn.carrefour.pl
c4scango.carrefour.pl
trk.carrefour.pl
serwiskorporacyjny.carrefour.pl
carrefour.pl
newsletter.carrefour.pl
imperva.com
carrefour.pl
c4webservice.carrefour.pl
beta.carrefour.pl
trk.carrefour.pl
trk.carrefour.pl
20latrazem.carrefour.pl
carrefour.pl
actforfood.carrefour.pl
imperva.com
c4mqtt.labo.carrefour.pl
sasiatki.test.carrefour.pl
kontocarrefour.carrefour.pl
satysfakcja.carrefour.pl
kontocarrefour.carrefour.pl
media.carrefour.pl
twojapodroz.carrefour.pl
newsletter.carrefour.pl
franko.carrefour.pl
cdn.carrefour.pl
sasiatki.test.carrefour.pl
trk.carrefour.pl
sasiatki.test.carrefour.pl
imperva.com
esambo.carrefour.pl
loteria.carrefour.pl
test.carrefour.pl
c4webservice.labo.carrefour.pl
targi.carrefour.pl
20latrazem.carrefour.pl

Certificate

The complete raw certificate details for carrefour.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07yNNfP2lpMf5H5UnbXc
5Qd6L2LzMWGOEUiMn2r5RHSbWIaG98vixhopcDgRizdi1Cvw/gREcbIttKbYrpzj
rabC3SwEdXjeikt7iGUQfu1r31ZkEr1oS3f6ILEHMWexe19L44xINUXVg33mai5C
3iggZLIQPICZGPlzmueGgHoIAlR/9IUrwzww2olxlrCNwIcWVHoO+Pja7SS+qRVg
MxNNPAGw/rBAVkGLpTYJFQGL/C2hQEhONetMRNZnMOcFE5dKkfMM8MDQ8r3D7CvV
cs2WKA2oAC3tCl8xPo057m4Qqdg44oc4QAUKO3kJC7raBDGhMTlRjZ+ZtLykHoor
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 40023797275882616553838130194649642224
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unizeto Technologies S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certum Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certum Level II CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-08-21 06:38:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-20 06:38:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'carrefour.pl'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26729260609368114709276017237571266960090927077081717714502544824784554401260665849438063883068419862994074035321272846400612642753642279541131146141786349019206588195359455433818977354650572287827368517093581172359949138066119055529221149878746559611509165297390102788855599606365312519578373520615808239000114853863935039555661669942311980425676347456005809173546424724375656018897919894092578881020025336500976924171595519493269161325057215018119544931947389672538569048727148311973249679773340266587020926677627251069282103711829531898564895329152953786720400980257277184130858405592221165270354311252649829870379
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.certum.pl/l2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.certum.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.certum.pl/l2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 806211dec06ba710e108f055b43083bffa8f0860
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8adbb6e76061129db4d67367010528027038a799
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (308 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.616.1.113527.2.2.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.certum.pl/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'Unizeto Technologies S.A.'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 15
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [85 115 97 103 101 32 111 102 32 116 104 105 115 32 99 101 114 116 105 102 105 99 97 116 101 32 105 115 32 115 116 114 105 99 116 108 121 32 115 117 98 106 101 99 116 101 100 32 116 111 32 116 104 101 32 67 69 82 84 85 77 32 67 101 114 116 105 102 105 99 97 116 105 111 110 32 80 114 97 99 116 105 99 101 32 83 116 97 116 101 109 101 110 116 32 40 67 80 83 41 32 105 110 99 111 114 112 111 114 97 116 101 100 32 98 121 32 114 101 102 101 114 101 110 99 101 32 104 101 114 101 105 110 32 97 110 100 32 105 110 32 116 104 101 32 114 101 112 111 115 105 116 111 114 121 32 97 116 32 104 116 116 112 115 58 47 47 119 119 119 46 99 101 114 116 117 109 46 112 108 47 114 101 112 111 115 105 116 111 114 121 46]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.3 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2 bits)
							06c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefour.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carrefour.pl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00383dd0d90d8176b153d508f1697df4aeae7218b5626750bc2d4cfd61f3e27e989511c3517f74a58b201f6975e0c2c330a91911d5c3f5644db274a7230a30bac9b3723b40cfbdc8d8d6443881ee1046318ace6b59a1e6036edf0e4cb61e4f5694d313830c9800d15ecd00fe1a786beddcfd16f9d439c0e727f5613d47450cc6286ca18ca0d13f6d1030895c3f4c8bb66c8fe269ad99ac567777699802c452b34cb5823f15f2685fe8dcb70949c4e60935ef68896ad64e41284655b036a53db98648d2a9b47ff1ff3048f658a6af8a757037f9be69d495015622e4f6b7646b33c8390e6f272360c08fc53b9db269c29c47a6916fca0ff17fe48d9128ae4a6ce111