www.aldi.co.uk
- ALDI lnternational Services SE & Co. oHG -
Issued by Trusted Secure Certificate Authority 5
About this certificate
This digital certificate with serial number 2b:2b:4e:e5:58:f2:e8:1e:85:8e:9f:b5:ab:a0:75:4f was issued on by Corporation Service Company.
With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
ALDI lnternational Services SE & Co. oHG
Organization:
ALDI lnternational Services SE & Co. oHG
State / Province:
Nordrhein-Westfalen
Country: DE
Country: DE
Corporation Service Company
Organization:
Corporation Service Company
State / Province:
DE
Locality: Wilmington
Country: US
Locality: Wilmington
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 2b:2b:4e:e5:58:f2:e8:1e:85:8e:9f:b5:ab:a0:75:4fSerial Number (int): 57381672782395017784392151074766615887
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId: 12:5a:66:1e:b2:fa:55:69:5e:e9:a0:7f:7c:9c:70:89:ef:dd:77:c5
AuthorityKeyId: f2:bb:55:ee:fc:8f:cf:d0:3f:14:68:1a:95:7e:79:0e:ab:17:30:f4
Fingerprint (sha1): 72:6a:63:16:38:34:03:79:ad:0c:ba:78:ad:e9:1c:df:06:45:a6:8d
Fingerprint (sha256): f5:3c:9f:93:f6:1c:a7:52:04:3b:e5:a7:b4:d1:0e:3d:5e:2c:c2:b5:5a:7f:30:15:98:b1:c5:cc:99:96:38:c5
Issuing Certificate URL: http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt
Revocation information
OCSP Server: http://ocsp.usertrust.comCRL Distribution Point: http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl
Check the revocation status for certificate www.aldi.co.uk
12
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.aldi.co.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.aldi.co.uk
aldi.co.uk
aldi.ie
assets.aldi-digital.co.uk
assets.aldi-digital.ie
assets.aldi.co.uk
assets.aldi.ie
preview.aldi.ie
prod-ws.aldi.co.uk
prod-ws.aldi.ie
www.aldi.ie
www.preview.aldi.ie
aldi.co.uk
aldi.ie
assets.aldi-digital.co.uk
assets.aldi-digital.ie
assets.aldi.co.uk
assets.aldi.ie
preview.aldi.ie
prod-ws.aldi.co.uk
prod-ws.aldi.ie
www.aldi.ie
www.preview.aldi.ie
Other certificates including the domain name aldi.co.uk
(limited to 100 certificates)
sslcertificate3.queue-it.net
www.dr-admin.aldi.co.uk
stage-ptp.aldi.co.uk
www.aldi-sued.com
ameportal.aldi.co.uk
customerservice.aldi.co.uk
ppe-store.aldi.co.uk
queue.disneymovieclub.go.com
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
staging.store.dev.shopandgo.aldi.co.uk
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
www.ppe-store.aldi.co.uk
ame.aldi.co.uk
www.aldi.co.uk
sslcertificate3.queue-it.net
ppe-admin.aldi.co.uk
the-aldi-testers-club.aldi.co.uk
www.aldi.co.uk
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
fit-admin.aldi.co.uk
www.aldi.co.uk
www.aldi-sued.com
www.ppe-store.aldi.co.uk
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
customerservice.aldi.co.uk
www.def-store.aldi.co.uk
ameportal.aldi.co.uk
live-admin.aldi.co.uk
product.prd.shopandgo.aldi.co.uk
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
www.fit-store.aldi.co.uk
clocks.wfm.aldi.co.uk
test-ptp.aldi-international.com
www.aldi.co.uk
www.aldi-sued.com
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
mia.aldi.co.uk
stage-ptp.aldi.co.uk
sit-store.aldi.co.uk
live-admin.aldi.co.uk
masterdata.prd.shopandgo.aldi.co.uk
sslcertificate3.queue-it.net
www.aldi.co.uk
imperva.com
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
def-admin.aldi.co.uk
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
dev-block.ukcsd-order.aldi.co.uk
sslcertificate3.queue-it.net
queue.disneymovieclub.go.com
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
www.aldi.co.uk
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
staging.checkout.dev.shopandgo.aldi.co.uk
staff.dev.shopandgo.aldi.co.uk
sslcertificate3.queue-it.net
backoffice.dev.shopandgo.aldi.co.uk
groceries.aldi.co.uk
queue.disneymovieclub.go.com
sslcertificate3.queue-it.net
leaflets.aldi.co.uk
shopandgo.aldi.co.uk
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
leaflets.aldi.co.uk
sslcertificate3.queue-it.net
imperva.com
www.aldi-sued.com
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
gateway-test.aldi.co.uk
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
mia.aldi.co.uk
masterdata.dev.shopandgo.aldi.co.uk
sslcertificate3.queue-it.net
www.dr-admin.aldi.co.uk
stage-ptp.aldi.co.uk
www.aldi-sued.com
ameportal.aldi.co.uk
customerservice.aldi.co.uk
ppe-store.aldi.co.uk
queue.disneymovieclub.go.com
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
staging.store.dev.shopandgo.aldi.co.uk
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
www.ppe-store.aldi.co.uk
ame.aldi.co.uk
www.aldi.co.uk
sslcertificate3.queue-it.net
ppe-admin.aldi.co.uk
the-aldi-testers-club.aldi.co.uk
www.aldi.co.uk
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
fit-admin.aldi.co.uk
www.aldi.co.uk
www.aldi-sued.com
www.ppe-store.aldi.co.uk
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
customerservice.aldi.co.uk
www.def-store.aldi.co.uk
ameportal.aldi.co.uk
live-admin.aldi.co.uk
product.prd.shopandgo.aldi.co.uk
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
www.fit-store.aldi.co.uk
clocks.wfm.aldi.co.uk
test-ptp.aldi-international.com
www.aldi.co.uk
www.aldi-sued.com
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
mia.aldi.co.uk
stage-ptp.aldi.co.uk
sit-store.aldi.co.uk
live-admin.aldi.co.uk
masterdata.prd.shopandgo.aldi.co.uk
sslcertificate3.queue-it.net
www.aldi.co.uk
imperva.com
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
def-admin.aldi.co.uk
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
dev-block.ukcsd-order.aldi.co.uk
sslcertificate3.queue-it.net
queue.disneymovieclub.go.com
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
www.aldi.co.uk
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
staging.checkout.dev.shopandgo.aldi.co.uk
staff.dev.shopandgo.aldi.co.uk
sslcertificate3.queue-it.net
backoffice.dev.shopandgo.aldi.co.uk
groceries.aldi.co.uk
queue.disneymovieclub.go.com
sslcertificate3.queue-it.net
leaflets.aldi.co.uk
shopandgo.aldi.co.uk
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
leaflets.aldi.co.uk
sslcertificate3.queue-it.net
imperva.com
www.aldi-sued.com
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
gateway-test.aldi.co.uk
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
mia.aldi.co.uk
masterdata.dev.shopandgo.aldi.co.uk
sslcertificate3.queue-it.net
Certificate
The complete raw certificate details for www.aldi.co.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHkTCCBnmgAwIBAgIQKytO5Vjy6B6Fjp+1q6B1TzANBgkqhkiG9w0BAQsFADCB hjELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAkRFMRMwEQYDVQQHEwpXaWxtaW5ndG9u MSQwIgYDVQQKExtDb3Jwb3JhdGlvbiBTZXJ2aWNlIENvbXBhbnkxLzAtBgNVBAMT JlRydXN0ZWQgU2VjdXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSA1MB4XDTIyMDgz MTAwMDAwMFoXDTIzMDgzMTIzNTk1OVowdzELMAkGA1UEBhMCREUxHDAaBgNVBAgT E05vcmRyaGVpbi1XZXN0ZmFsZW4xMTAvBgNVBAoMKEFMREkgbG50ZXJuYXRpb25h bCBTZXJ2aWNlcyBTRSAmIENvLiBvSEcxFzAVBgNVBAMTDnd3dy5hbGRpLmNvLnVr MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaf67ZSxtcNU8lfZ1zc4 EceglOd70WmUytYOiiVOxdPos76NyLLJYbtIrL3rmyPzGE+Kbu4kz8gJOdPb5FYY 0pr3UG1XY+vJ7sr1fyL4rQhakUL9ldVtk08AxdHWaFZ61+JgOugFZBMaJib29JqP EpqUbwSFXresgtMa/3NhrKgTa1tqVn8ryNrmDcZzRVMYpDGkzp0cl3c7bY+tM5c7 RguG0018kJS+wTozniEpZUqa1odEVSZ3+16kwM5dLtVhOARU9LkESBUsHHMB6ASz L79JV8jB24ncJ/pRc+XuVNpVh4Etw+PEjevxDGRFEPab8XYGQ6ruz8RkzLhLBRhi PwIDAQABo4IEBzCCBAMwHwYDVR0jBBgwFoAU8rtV7vyPz9A/FGgalX55DqsXMPQw HQYDVR0OBBYEFBJaZh6y+lVpXumgf3yccInv3XfFMA4GA1UdDwEB/wQEAwIFoDAM BgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBLBgNV HSAERDBCMDYGCysGAQQBsjEBAgIIMCcwJQYIKwYBBQUHAgEWGWh0dHBzOi8vY3Bz LnVzZXJ0cnVzdC5jb20wCAYGZ4EMAQICMFAGA1UdHwRJMEcwRaBDoEGGP2h0dHA6 Ly9jcmwudXNlcnRydXN0LmNvbS9UcnVzdGVkU2VjdXJlQ2VydGlmaWNhdGVBdXRo b3JpdHk1LmNybDCBggYIKwYBBQUHAQEEdjB0MEsGCCsGAQUFBzAChj9odHRwOi8v Y3J0LnVzZXJ0cnVzdC5jb20vVHJ1c3RlZFNlY3VyZUNlcnRpZmljYXRlQXV0aG9y aXR5NS5jcnQwJQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3NwLnVzZXJ0cnVzdC5jb20w ggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB2AK33vvp8/xDIi509nB4+GGq0Zyld z7EMJMqFhjTr3IKKAAABgvNemWoAAAQDAEcwRQIhANQcxBTdi/INMctUVK4tFR+D LpiAw9U1sHOvRmTS1FBUAiAhuG1ywsQPojuTGrpHZT0aHdwZaA+eTvddQJQWXN2l fQB1AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABgvNemS4AAAQD AEYwRAIgJykdJFifoMELkoSvji6tSj//yh+816nZmdjnQIsWX8kCIAxaOT26EurS PZLHtpXexvn0lBvU/M3lU4b8VlC9+QLtAHYA6D7Q2j71BjUy51covIlryQPTy9ER a+zraeF3fW0GvW4AAAGC816ZAgAABAMARzBFAiBxZpkeO+2Ds4aCRE44zhv6q9N4 9hH0h4zzHtcxAWj98AIhALnOU/GrzRTY99DlJWobwx+XgUm00EWHHuaXDHf/bzTb MIHeBgNVHREEgdYwgdOCDnd3dy5hbGRpLmNvLnVrggphbGRpLmNvLnVrggdhbGRp Lmllghlhc3NldHMuYWxkaS1kaWdpdGFsLmNvLnVrghZhc3NldHMuYWxkaS1kaWdp dGFsLmllghFhc3NldHMuYWxkaS5jby51a4IOYXNzZXRzLmFsZGkuaWWCD3ByZXZp ZXcuYWxkaS5pZYIScHJvZC13cy5hbGRpLmNvLnVrgg9wcm9kLXdzLmFsZGkuaWWC C3d3dy5hbGRpLmllghN3d3cucHJldmlldy5hbGRpLmllMA0GCSqGSIb3DQEBCwUA A4IBAQCI8HnS2Dbh09gy2PQ4YnkmNRMqP9nPovZjwu2wPTgUJMLjgC/bcqpe5Gp6 sq/fxsVdspDGwQdn45oHOAThS4gtLq1LVSP0NzIEjUhx/LMmXcghO4u3xZFloEPg PdPAZvIIQ90Lnt3xeF3nZmVqu+eAYwloakpUpy98vbPpKrukwg2Z1NZEwWfadmi2 rjXm/uBi60AZnzxWmUj/81IMMU4cFMZhrERuDhmDFpU15EJQpI0P69fxEUmzRC5Q hcoKFaDiubUgCr9n7jF3Hsi61bNAHyO0UnGwxKEvCwxr0cWIePcdzdILr5Y3J7Np JiB3d/aBsWBTDxGn9mryDzI/pNaD -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaf67ZSxtcNU8lfZ1zc4 EceglOd70WmUytYOiiVOxdPos76NyLLJYbtIrL3rmyPzGE+Kbu4kz8gJOdPb5FYY 0pr3UG1XY+vJ7sr1fyL4rQhakUL9ldVtk08AxdHWaFZ61+JgOugFZBMaJib29JqP EpqUbwSFXresgtMa/3NhrKgTa1tqVn8ryNrmDcZzRVMYpDGkzp0cl3c7bY+tM5c7 RguG0018kJS+wTozniEpZUqa1odEVSZ3+16kwM5dLtVhOARU9LkESBUsHHMB6ASz L79JV8jB24ncJ/pRc+XuVNpVh4Etw+PEjevxDGRFEPab8XYGQ6ruz8RkzLhLBRhi PwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 57381672782395017784392151074766615887 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wilmington' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporation Service Company' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trusted Secure Certificate Authority 5' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-31 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-31 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ALDI lnternational Services SE & Co. oHG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.aldi.co.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20912154437222357065734081059070584191207920581944781594084561088155159614035371587620565070371578014371367176504327511172850617096482120281576858621277270042445815766475856437870751527868156583682105012062186255233793340927389349697225766151314476040338123548007825927042335614195542641515718325069603458323477778748417692086399646871598286921737220354961223499381192867470052164675247420775763194315400826406782238968422664676631628850731316587337868782459738870496650369968875037950961534180129425904773801640570720347314588088288669332667947569632607643845866741058883610004833009526874905801290664462304765567551 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f2bb55eefc8fcfd03f14681a957e790eab1730f4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 125a661eb2fa55695ee9a07f7c9c7089efdd77c5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.8 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (214 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldi.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aldi.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aldi.ie' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.aldi-digital.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.aldi-digital.ie' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.aldi.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.aldi.ie' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.aldi.ie' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-ws.aldi.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-ws.aldi.ie' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldi.ie' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preview.aldi.ie' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0088f079d2d836e1d3d832d8f43862792635132a3fd9cfa2f663c2edb03d381424c2e3802fdb72aa5ee46a7ab2afdfc6c55db290c6c10767e39a073804e14b882d2ead4b5523f43732048d4871fcb3265dc8213b8bb7c59165a043e03dd3c066f20843dd0b9eddf1785de766656abbe7806309686a4a54a72f7cbdb3e92abba4c20d99d4d644c167da7668b6ae35e6fee062eb40199f3c569948fff3520c314e1c14c661ac446e0e1983169535e44250a48d0febd7f11149b3442e5085ca0a15a0e2b9b5200abf67ee31771ec8bad5b3401f23b45271b0c4a12f0b0c6bd1c58878f71dcdd20baf963727b36926207777f681b160530f11a7f66af20f323fa4d683