smartlabel.stopandshop.com

- Ahold Information Services Inc. -

Issued by AffirmTrust Extended Validation CA - EV1

About this certificate

This digital certificate with serial number 97:e8:4b:5b:14:76:d1:c3:00:00:00:00:58:07:dc:6a was issued on by AffirmTrust.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ahold Information Services Inc.

Company registration number: 1993-12-28
Organization: Ahold Information Services Inc.
State / Province: South Carolina
Locality: Greenville
Country: US

AffirmTrust

Organization: AffirmTrust
Organization unit: See www.affirmtrust.com/repository
Country: CA

This certificate has expire since

Certificate Details

Serial Number (hex): 97:e8:4b:5b:14:76:d1:c3:00:00:00:00:58:07:dc:6a
Serial Number (int): 201919568631518783506481900054857112682
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: ce:e9:f9:d1:59:be:4c:dd:93:4d:70:11:b2:7c:bb:0d:5a:a8:34:61
AuthorityKeyId: db:ef:65:37:0b:e5:47:cb:35:d1:90:1f:03:c1:bc:88:c7:a7:ea:80

Fingerprint (sha1): 7f:3e:b6:53:49:ff:14:d7:ae:a8:6c:0d:cf:56:c3:04:de:92:e8:c6
Fingerprint (sha256): c1:05:ab:6b:55:a5:35:06:62:dd:c6:6e:83:0a:24:98:af:bc:b7:f8:1a:ad:2a:fd:85:be:3d:7c:d0:8f:f7:95

Issuing Certificate URL: http://aia.affirmtrust.com/aftev1ca.crt

Revocation information

OCSP Server: http://ocsp.affirmtrust.com
CRL Distribution Point: http://crl.affirmtrust.com/crl/aftev1ca.crl

Check the revocation status for certificate smartlabel.stopandshop.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for smartlabel.stopandshop.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

smartlabel.giantfood.com
smartlabel.giantfoodstores.com
smartlabel.martinsfoods.com
smartlabel.peapod.com
smartlabel.stopandshop.com

Other certificates including the domain name stopandshop.com

(limited to 100 certificates)
pharmacy.stopandshop.com
coupons.stopandshop.com
answers-autozone.pagescdn.com
staging.stopandshop.com
circular.stopandshop.com
nonprd-api.pdl.stopandshop.com
recipecenter.stopandshop.com
san3.yext-cdn.com
images.stopandshop.com
pharmacy.stopandshop.com
stores.maxit-pawn.com
pharmacy.stopandshop.com
beta-preprod.stopandshop.com
recipecenter.stopandshop.com
ssl418162.cloudflaressl.com
locations.bannerbank.com
answers-autozone.pagescdn.com
circular.stopandshop.com
stopandshop.com
stopandshop.com
circular.stopandshop.com
mortgage.wf.com
locations.bannerbank.com
pharmacy.stopandshop.com
pharmacy.stopandshop.com
ssl418161.cloudflaressl.com
recipecenter.stopandshop.com
recipecenter.stopandshop.com
krispy-new-maps.krispy.com.pagescdn.com
stores.stopandshop.com
locations.seniorbridge.com
san3.yext-cdn.com
stopandshop.com
synergichealthcareers.yext-cdn.com
stores.stopandshop.com
images.stopandshop.com
www.stopandshop.com
ssl418161.cloudflaressl.com
staging.stopandshop.com
pharmacy.stopandshop.com
dd.stopandshop.com
locations.seniorbridge.com
recipecenter.stopandshop.com
dealers.poolguardusa.com
ssl418162.cloudflaressl.com
answers.ihacares.com.yext-cdn.com
circular.stopandshop.com
refer.stopandshop.com
stores.stopandshop.com
sni.cloudflaressl.com
synergichealthcareers.yext-cdn.com
circular.stopandshop.com
ssl418161.cloudflaressl.com
stores.torafuku.jp
stopandshop.com
stores.stopandshop.com
sit.peapod.com
images.stopandshop.com
store-events.louandgrey.com
api.pdl.stopandshop.com
san3.yext-cdn.com
www.farmersatlanta.com
beta.stopandshop.com
smartlabel.stopandshop.com
pharmacy.stopandshop.com
san3.yext-cdn.com
express.stopandshop.com
stores.stopandshop.com
pharmacy.stopandshop.com
ssl418163.cloudflaressl.com
ssl418163.cloudflaressl.com
circular.stopandshop.com
sni.cloudflaressl.com
stores.torafuku.jp
sni.cloudflaressl.com
stores.tenpura-tensei.jp
www.stopandshop.com
ssl418163.cloudflaressl.com
ssl418162.cloudflaressl.com
standorte.hansaton.at
san3.yext-cdn.com
stores.stopandshop.com
san3.yext-cdn.com
beta.stopandshop.com
ssl418162.cloudflaressl.com
nonprd-api.pdl.stopandshop.com
san3.yext-cdn.com
sni.cloudflaressl.com
www.stopandshop.com
stores.stopandshop.com
events.lifelinescreening.com
krispy-new-maps.krispy.com.pagescdn.com
sni.cloudflaressl.com
ssl418161.cloudflaressl.com
ssl418163.cloudflaressl.com
stores.stopandshop.com
ssl418163.cloudflaressl.com
www.farmersatlanta.com
answers.ihacares.com.yext-cdn.com
san3.yext-cdn.com

Certificate

The complete raw certificate details for smartlabel.stopandshop.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNZCrShoDiFisPZqMsfy
VjDlnRX3/aZYVjYODq2jvvnKASESKazM/JiF6RT30X5LazPJGYAZ76rquc+f78RF
2L5XFQJSHbE/ra4hrVuY1yCQY9lL7IvSzDsMcPx4zLZneX+pPipAL1/aNDUXK98X
af/Y5BrO63MOc3CpWI02pVoYJb2TuSF3eOwovRiCdPdHTR62z7oxU1xjJsbQ7T/I
NnMMzHdwIm52hzzKUgGexbhTYN2l3HcFnUOV3255LoWxM5xmtCjyNuSR0eX+8cg+
cqufiDY3kYvFH04QpEtnOqyaDZRVpSngh9+QBocwmCAA4nSa+akGyJu7pxdHP4iv
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 201919568631518783506481900054857112682
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.affirmtrust.com/repository'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust Extended Validation CA - EV1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-02 20:40:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-03 21:10:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'South Carolina'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greenville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'South Carolina'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ahold Information Services Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1993-12-28'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'smartlabel.stopandshop.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25353316761258302544686899092943494651597974455633547789524879731043452275606141203319971464583521338390008358098726374676905821014638367870488366108981053072968603859632392188593678141676845737020943277826203602676764623480398836860054524507840741147852406311715447745188385436833739077710433913832248107048451800613886057528072386188948842312036200167416824695553426095631282730765348432555023378896794416310851897818681578981207840202126466928694397544773072805316446640106715725991698721952483285332149495633850348028336293657521676211099597845922054292991163325416407871273646795582694799843541611975838909640593
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (141 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartlabel.giantfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartlabel.giantfoodstores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartlabel.martinsfoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartlabel.peapod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartlabel.stopandshop.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.affirmtrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.affirmtrust.com/aftev1ca.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.34697.2.1 (AffirmTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.affirmtrust.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.affirmtrust.com/crl/aftev1ca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName dbef65370be547cb35d1901f03c1bc88c7a7ea80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cee9f9d159be4cdd934d7011b27cbb0d5aa83461
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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