pl.bestbuy.com

- Best Buy Co, Inc. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0b:09:e8:1b:c0:ca:29:82:5d:c5:51:94:cd:c5:ae:68 was issued on by DigiCert Inc.

With 79 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Best Buy Co, Inc.

Organization: Best Buy Co, Inc.
Organization unit: Akamai SAN SSL OV
State / Province: Minnesota
Locality: Richfield
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:09:e8:1b:c0:ca:29:82:5d:c5:51:94:cd:c5:ae:68
Serial Number (int): 14672946343214844046393954959664459368
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: cd:83:38:0f:97:f5:08:7c:75:dc:68:9e:6e:9f:d7:63:7d:88:3f:8c
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 9c:d7:14:bc:be:f4:46:3c:82:8d:10:74:f8:8a:b6:ce:77:36:c9:46
Fingerprint (sha256): 02:2f:3d:68:92:4b:03:b4:43:ed:93:08:5a:2c:e7:43:f8:09:72:1c:09:0a:d9:02:be:09:5f:b3:07:af:26:ad

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate pl.bestbuy.com

79

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pl.bestbuy.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pl.bestbuy.com
cloudtestcg2rta.bestbuy.com
proofing.bestbuy.ca
js-ssl-usweb.stage.bbystatic.com
denver-commerce-ssl.bestbuy.com
apid-ext-dc.test.bestbuy.com
calidad.bestbuy.com.mx
images.stage.bestbuy.com
www.stage.bestbuy.com.mx
crest.stage.bestbuy.com
app.stage.bestbuy.com
assets.test.bbystatic.com
assets.stage.bbystatic.com
misc-ssl-usweb.stage.bbystatic.com
css-ssl-usweb.stage.bbystatic.com
mdr.bestbuy.ca
ssl.m.stage.bestbuy.com
sts-ext-dc.test.bestbuy.com
stage.pisces.bbystatic.com
images-ssl-usweb.cloud-test.bbystatic.com
denver-mdot-ssl.bestbuy.com
apidr-ssl.bestbuy.ca
www-ssl.stage.bestbuy.com
www.stage.bestbuy.com
images.test.bestbuy.com
msi-stg.bbycastatic.ca
commerce-ssl.stage.bestbuy.com
test.pisces.bbystatic.com
www.stage.insigniaproducts.com
context.stage.bestbuy.com
stagecg2rta.bestbuy.com
www.test.bestbuy.com.mx
denver-ssl.bestbuy.com
wdr.bestbuy.ca
assets-dbx.test.bbystatic.com
stage.bby.us
mdr-ssl.bestbuy.ca
misc-ssl-usweb.cloud-test.bbystatic.com
api-proxy.stage.bby-ext-gw.com
assets-dbx.stage.bbystatic.com
staging-download.digitallibrary.bestbuy.com
www-bbyca6.bestbuy.com
img.stage.bbystatic.com
www-ssl.test.bestbuy.com
app.test.bestbuy.com
crest.test.bestbuy.com
uat.geeksquad.com
cloud-test.dynexproducts.com
pl.deals.bestbuy.com
apid-ext-dc.stage.bestbuy.com
uploads.stage.bbystatic.com
sts-ext-dc.stage.bestbuy.com
app-ssl.cloud-test.bestbuy.com
prod-like.bestbuy.com.mx
api-proxy.test.bby-ext-gw.com
apidr-ssl.futureshop.ca
js-ssl-usweb.cloud-test.bbystatic.com
bbyawstagservices-pl.l7ss.bestbuy.com
www.stage.rocketfishproducts.com
img.test.bbystatic.com
pl.context.bestbuy.com
apid-ext-cld.test.bestbuy.com
www.stage.dynexproducts.com
staging.bestbuy.ca
sts-ext-cld.stage.bestbuy.com
cloud-test.insigniaproducts.com
commerce-ssl.test.bestbuy.com
apid-ext-cld.stage.bestbuy.com
mexico.stage.bbystatic.com
www.test.bestbuy.com
css-ssl-usweb.cloud-test.bbystatic.com
sts-ext-cld.test.bestbuy.com
mexico.test.bbystatic.com
context.test.bestbuy.com
images-ssl-usweb.stage.bbystatic.com
test.bby.us
uploads.test.bbystatic.com
cloud-test.rocketfishproducts.com
app-ssl.stage.bestbuy.com

Other certificates including the domain name bestbuy.com

(limited to 100 certificates)
san.bestbuy.com
attechapi-app-int-east.stage.browse.bestbuy.com
kibana.test.monitoring.bestbuy.com
bttnview-njs-int-east.test.browse.bestbuy.com
advsmlssrvc-app-int-west.prod.browse.bestbuy.com
swift1.prod.skyblue.bestbuy.com
access.bestbuy.com
addsource-app-int-east.prod.browse.bestbuy.com
pricevw-njs-ext-west.prod.browse.bestbuy.com
ofrsvapi-app-ext-east.test.browse.bestbuy.com
commerce-api.test.bestbuy.com
apid-app-west-int.prod.browse.bestbuy.com
identity-ingress-global.dev.gcp.bestbuy.com
apex-configservice-global.test.gcp.bestbuy.com
mexico-web-west.prod.browse.bestbuy.com
platmanpb-app-int-west.prod.browse.bestbuy.com
accessfedpl.bestbuy.com
lstsrvces-app-ext-east.test.browse.bestbuy.com
bestbuyconnect.com
drwsmpanntwlv-app-int-east.test.cgraph.bestbuy.com
priceviewn-app-ext-east.test.browse.bestbuy.com
profulfil-web-east.test.browse.bestbuy.com
bbytagservices.bestbuy.com
tableau-qa.na.bestbuy.com
dhodawkthrtne-app-int-east.prod.browse.bestbuy.com
marf-app-int-east.prod.browse.bestbuy.com
bryntstpplctn-app-int-east.prod.browse.bestbuy.com
trnrsksrv-app-int-west.prod.browse.bestbuy.com
airwatch-linux.bestbuy.com
ugc-slr-east.prod.browse.bestbuy.com
*.bestbuy.com
ordrhstrpblsh-app-int-west.prod.browse.bestbuy.com
leviathanapi-app-ext-east.stage.aws.bestbuy.com
aw.bestbuy.com
sherlock-core-stage.test.gcp.bestbuy.com
trk.email.bestbuy.com
sidcs-app-east.stage.browse.bestbuy.com
*.bestbuy.com
span-api-east-int.prod.browse.bestbuy.com
secure03.lithium.com
ggleassrt-app-int-east.stage.browse.bestbuy.com
fulfview-njs-int-east.test.browse.bestbuy.com
cartagg-app-int-east.test.browse.bestbuy.com
sercalendar-app-int-east.stage.browse.bestbuy.com
sentry-app-int-east.stage.cgraph.bestbuy.com
plt-images-ssl-pls.stage.bestbuy.com
psccreturns-app-int-east.stage.browse.bestbuy.com
remixslr-app-int-east.test.browse.bestbuy.com
sts.bestbuy.com
mexico-web-east.prod.browse.bestbuy.com
dhodawkthrtne-app-int-west.prod.browse.bestbuy.com
bttnstate-app-int-east.prod.browse.bestbuy.com
MPOSDEV.na.bestbuy.com
lstsrvces-app-ext-east.stage.browse.bestbuy.com
pdmpblshr-app-int-east.test.browse.bestbuy.com
appdirectory.bestbuy.com
drwsmpanmthrt-app-int-east.test.cgraph.bestbuy.com
payments-prod.actdvc.bestbuy.com
shipping-app-int-east.test.browse.bestbuy.com
images-ssl.bestbuy.com
mexco-njs-ext-west.prod.cgraph.bestbuy.com
ostmonitor-app-int-east.stage.browse.bestbuy.com
shipping-api-east-int.test.browse.bestbuy.com
hub.bestbuy.com
pl.bestbuy.com
dhdatrggerrex-app-int-west.prod.browse.bestbuy.com
ext.location-west.prod.browse.bestbuy.com
fulfview-njs-int-west.prod.browse.bestbuy.com
bestbuybusiness.com
actdvcs-app-east.test.browse.bestbuy.com
vpt-slr-int-east.stage.browse.bestbuy.com
ofrsvapi-app-int-east.prod.browse.bestbuy.com
csi-app-ext-west.prod.browse.bestbuy.com
cap-pt-spring-use.bestbuy.com
secure03.lithium.com
esd-pl1.bestbuy.com
aaa.bestbuy.com
vpt-slr-int-east.test.browse.bestbuy.com
pl.bestbuy.com
cfgread-app-west.prod.browse.bestbuy.com
dhdarelsrfdaf-app-ext-east.prod.browse.bestbuy.com
search-slr-east.stage.browse.bestbuy.com
solrindex-app-int-east.stage.browse.bestbuy.com
suggest-web-east.prod.browse.bestbuy.com
aquisview-njs-int-east.prod.browse.bestbuy.com
BBYSTAR-HP-DEV.bestbuy.com
jwaller-app-int-east.test.cgraph.bestbuy.com
carbonaggaws-njs-int-west.prod.cgraph.bestbuy.com
cx-ccai-dfcx-api-stage.prod.gcp.bestbuy.com
searchruleslr-app-int-west.prod.browse.bestbuy.com
pdmingest-app-int-west.prod.browse.bestbuy.com
scheddelvsrvc-app-ext-west.prod.browse.bestbuy.com
payments-stage.actdvc.bestbuy.com
epro-qa.bestbuybusiness.com
stscld-app-ext-east.prod.browse.bestbuy.com
pl.bestbuy.com
suggest-web-east-int.stage.browse.bestbuy.com
gglepaidm-app-int-east.test.browse.bestbuy.com
mytlc.bestbuy.com
zkagentsvc-app-int-east.test.browse.bestbuy.com

Certificate

The complete raw certificate details for pl.bestbuy.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFcVZ9g1mc+6LM37nkpa
CP5QEZHzRvSeIOZKjxWf/Bl+MCa9pw7Ooec2Ilr6cNyAvW8XX0GenM+uIcnOzYAK
rW70qWnycO/T104s2k1/MPSD88CsV5pf2Q/zch4uRhKWp9stG3AQxW4ydVWPijzl
5XWAcXZMzs0GaMqyVzAmiSLQjIai76Er3V0Ee/ld22hPtJZKGrTthGYPLcH2gKV3
STiCpcMb1wAZAre5g4dt5cvxx+ek/H5Nq/onqRjdRAEHlbOjljuIo6/1UcC5Ngtb
8MELwfieiocZl04s16YWBuGUWcs0YgNYFX2absAyydhc8EhhLSnvD0b19qQdtIAI
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14672946343214844046393954959664459368
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-19 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Richfield'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Best Buy Co, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Akamai SAN SSL OV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pl.bestbuy.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24280697084920531234301887200933427915086111087396300739296434631714300835866427307763661266046742681974899125468727224466541061544027906103648783217678858496024982650372710167560410957876514560997291125686904546799903958513328304857245919412518499575064395429173020656328380215409176873154976667712138083207003933926737458202076396049116575706398890998239728607938171772442241220011145133649105899393977344824446363340664780053208503530224297458624859485616505689839497765208230911161061502828489924023122813361815326801883139962879469114006200812181138712646992951337554349719874794763273080709802004412079311685829
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cd83380f97f5087c75dc689e6e9fd7637d883f8c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2208 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudtestcg2rta.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proofing.bestbuy.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'js-ssl-usweb.stage.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denver-commerce-ssl.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apid-ext-dc.test.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calidad.bestbuy.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.stage.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stage.bestbuy.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crest.stage.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.stage.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.test.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.stage.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'misc-ssl-usweb.stage.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'css-ssl-usweb.stage.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdr.bestbuy.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.m.stage.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sts-ext-dc.test.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.pisces.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-ssl-usweb.cloud-test.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denver-mdot-ssl.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apidr-ssl.bestbuy.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-ssl.stage.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stage.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.test.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msi-stg.bbycastatic.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commerce-ssl.stage.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.pisces.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stage.insigniaproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'context.stage.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagecg2rta.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test.bestbuy.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denver-ssl.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wdr.bestbuy.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets-dbx.test.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.bby.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdr-ssl.bestbuy.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'misc-ssl-usweb.cloud-test.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-proxy.stage.bby-ext-gw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets-dbx.stage.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-download.digitallibrary.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-bbyca6.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.stage.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-ssl.test.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.test.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crest.test.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.geeksquad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud-test.dynexproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl.deals.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apid-ext-dc.stage.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uploads.stage.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sts-ext-dc.stage.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-ssl.cloud-test.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-like.bestbuy.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-proxy.test.bby-ext-gw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apidr-ssl.futureshop.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'js-ssl-usweb.cloud-test.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbyawstagservices-pl.l7ss.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stage.rocketfishproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.test.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl.context.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apid-ext-cld.test.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stage.dynexproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.bestbuy.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sts-ext-cld.stage.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud-test.insigniaproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commerce-ssl.test.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apid-ext-cld.stage.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mexico.stage.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'css-ssl-usweb.cloud-test.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sts-ext-cld.test.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mexico.test.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'context.test.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-ssl-usweb.stage.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.bby.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uploads.test.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud-test.rocketfishproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-ssl.stage.bestbuy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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