pl.bestbuy.com

- Best Buy Co -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 13:ad:8d:28:b9:2b:25:17:0f:96:03:91:8b:1f:e6:01 was issued on by GeoTrust Inc..

With 57 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Best Buy Co

Organization: Best Buy Co
Organization unit: Akamai SAN SSL OV
State / Province: Minnesota
Locality: Richfield
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 13:ad:8d:28:b9:2b:25:17:0f:96:03:91:8b:1f:e6:01
Serial Number (int): 26156462322627428001161726035975202305
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 8a:0f:25:63:94:e6:e6:9e:42:96:d8:75:37:4b:19:a0:a1:22:24:62
Fingerprint (sha256): 03:2d:64:f9:35:fd:c0:c0:5d:83:12:ee:1d:c1:8e:70:d9:fc:fc:23:f2:76:8b:a6:97:c5:b6:d8:b7:ea:0f:58

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate pl.bestbuy.com

57

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pl.bestbuy.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pisces-ssl.test.bbystatic.com
cloudtestcg2rta.bestbuy.com
www.stage.insigniaproducts.com
denver-commerce-ssl.bestbuy.com
css-ssl.stage.bbystatic.com
js-ssl.cloud-test.bbystatic.com
misc-ssl.stage.bbystatic.com
js-ssl-usweb.cloud-test.bbystatic.com
images-ssl.stage.bbystatic.com
images-ssl.cloud-test.bbystatic.com
js-ssl-usweb.stage.bbystatic.com
denver-mdot-ssl.bestbuy.com
images-ssl.stage.bestbuy.com
uat.geeksquad.com
staging-download.digitallibrary.bestbuy.com
pisces-ssl.stage.bbystatic.com
misc-ssl-usweb.cloud-test.bbystatic.com
sts-ext-cld.stage.bestbuy.com
denver-ssl.bestbuy.com
app-ssl.cloud-test.bestbuy.com
cloud-test-ssl.bestbuy.com
www-ssl.stage.bestbuy.com
www-ssl.test.bestbuy.com
images-ssl-usweb.stage.bbystatic.com
apid-ext-cld.stage.bestbuy.com
www.stage.dynexproducts.com
apid-ext-cld.test.bestbuy.com
misc-ssl-usweb.stage.bbystatic.com
str2-bbyca-ssl.bestbuy.com
sts-ext-cld.test.bestbuy.com
pl-deals.bbystatic.com
css-ssl.cloud-test.bbystatic.com
commerce-ssl.stage.bestbuy.com
images-ssl-usweb.cloud-test.bbystatic.com
str2-fsca-ssl.bestbuy.com
apidr-ssl.futureshop.ca
pl.context.bestbuy.com
str2-fsca-ssl-kiosk.bestbuy.com
app-ssl.stage.bestbuy.com
str2-bbyca-ssl-kiosk.bestbuy.com
cloud-test.dynexproducts.com
www.stage.pacificsales.com
apidr-ssl.bestbuy.ca
img-ssl.stage.bbystatic.com
js-ssl.stage.bbystatic.com
bbyawstagservices-pl.l7ss.bestbuy.com
www.stage.rocketfishproducts.com
misc-ssl.cloud-test.bbystatic.com
css-ssl-usweb.stage.bbystatic.com
ssl.m.stage.bestbuy.com
stagecg2rta.bestbuy.com
cloud-test.insigniaproducts.com
cloud-test.pacificsales.com
css-ssl-usweb.cloud-test.bbystatic.com
ssl.m.cloud-test.bestbuy.com
cloud-test.rocketfishproducts.com
pl.bestbuy.com

Other certificates including the domain name bestbuy.com

(limited to 100 certificates)
san.bestbuy.com
attechapi-app-int-east.stage.browse.bestbuy.com
kibana.test.monitoring.bestbuy.com
bttnview-njs-int-east.test.browse.bestbuy.com
advsmlssrvc-app-int-west.prod.browse.bestbuy.com
swift1.prod.skyblue.bestbuy.com
access.bestbuy.com
pricevw-njs-ext-west.prod.browse.bestbuy.com
ofrsvapi-app-ext-east.test.browse.bestbuy.com
commerce-api.test.bestbuy.com
apid-app-west-int.prod.browse.bestbuy.com
identity-ingress-global.dev.gcp.bestbuy.com
apex-configservice-global.test.gcp.bestbuy.com
mexico-web-west.prod.browse.bestbuy.com
platmanpb-app-int-west.prod.browse.bestbuy.com
accessfedpl.bestbuy.com
lstsrvces-app-ext-east.test.browse.bestbuy.com
bestbuyconnect.com
drwsmpanntwlv-app-int-east.test.cgraph.bestbuy.com
priceviewn-app-ext-east.test.browse.bestbuy.com
profulfil-web-east.test.browse.bestbuy.com
bbytagservices.bestbuy.com
tableau-qa.na.bestbuy.com
dhodawkthrtne-app-int-east.prod.browse.bestbuy.com
marf-app-int-east.prod.browse.bestbuy.com
bryntstpplctn-app-int-east.prod.browse.bestbuy.com
trnrsksrv-app-int-west.prod.browse.bestbuy.com
airwatch-linux.bestbuy.com
ugc-slr-east.prod.browse.bestbuy.com
*.bestbuy.com
ordrhstrpblsh-app-int-west.prod.browse.bestbuy.com
leviathanapi-app-ext-east.stage.aws.bestbuy.com
aw.bestbuy.com
sherlock-core-stage.test.gcp.bestbuy.com
trk.email.bestbuy.com
sidcs-app-east.stage.browse.bestbuy.com
*.bestbuy.com
span-api-east-int.prod.browse.bestbuy.com
secure03.lithium.com
ggleassrt-app-int-east.stage.browse.bestbuy.com
fulfview-njs-int-east.test.browse.bestbuy.com
cartagg-app-int-east.test.browse.bestbuy.com
sercalendar-app-int-east.stage.browse.bestbuy.com
sentry-app-int-east.stage.cgraph.bestbuy.com
plt-images-ssl-pls.stage.bestbuy.com
psccreturns-app-int-east.stage.browse.bestbuy.com
remixslr-app-int-east.test.browse.bestbuy.com
sts.bestbuy.com
mexico-web-east.prod.browse.bestbuy.com
dhodawkthrtne-app-int-west.prod.browse.bestbuy.com
bttnstate-app-int-east.prod.browse.bestbuy.com
MPOSDEV.na.bestbuy.com
lstsrvces-app-ext-east.stage.browse.bestbuy.com
pdmpblshr-app-int-east.test.browse.bestbuy.com
appdirectory.bestbuy.com
drwsmpanmthrt-app-int-east.test.cgraph.bestbuy.com
payments-prod.actdvc.bestbuy.com
shipping-app-int-east.test.browse.bestbuy.com
images-ssl.bestbuy.com
mexco-njs-ext-west.prod.cgraph.bestbuy.com
ostmonitor-app-int-east.stage.browse.bestbuy.com
shipping-api-east-int.test.browse.bestbuy.com
hub.bestbuy.com
pl.bestbuy.com
dhdatrggerrex-app-int-west.prod.browse.bestbuy.com
ext.location-west.prod.browse.bestbuy.com
fulfview-njs-int-west.prod.browse.bestbuy.com
bestbuybusiness.com
actdvcs-app-east.test.browse.bestbuy.com
vpt-slr-int-east.stage.browse.bestbuy.com
ofrsvapi-app-int-east.prod.browse.bestbuy.com
csi-app-ext-west.prod.browse.bestbuy.com
cap-pt-spring-use.bestbuy.com
secure03.lithium.com
esd-pl1.bestbuy.com
aaa.bestbuy.com
vpt-slr-int-east.test.browse.bestbuy.com
pl.bestbuy.com
cfgread-app-west.prod.browse.bestbuy.com
dhdarelsrfdaf-app-ext-east.prod.browse.bestbuy.com
search-slr-east.stage.browse.bestbuy.com
solrindex-app-int-east.stage.browse.bestbuy.com
suggest-web-east.prod.browse.bestbuy.com
aquisview-njs-int-east.prod.browse.bestbuy.com
BBYSTAR-HP-DEV.bestbuy.com
jwaller-app-int-east.test.cgraph.bestbuy.com
carbonaggaws-njs-int-west.prod.cgraph.bestbuy.com
cx-ccai-dfcx-api-stage.prod.gcp.bestbuy.com
searchruleslr-app-int-west.prod.browse.bestbuy.com
pdmingest-app-int-west.prod.browse.bestbuy.com
scheddelvsrvc-app-ext-west.prod.browse.bestbuy.com
payments-stage.actdvc.bestbuy.com
epro-qa.bestbuybusiness.com
stscld-app-ext-east.prod.browse.bestbuy.com
pl.bestbuy.com
suggest-web-east-int.stage.browse.bestbuy.com
gglepaidm-app-int-east.test.browse.bestbuy.com
mytlc.bestbuy.com
zkagentsvc-app-int-east.test.browse.bestbuy.com
profulfil-web-east.prod.browse.bestbuy.com

Certificate

The complete raw certificate details for pl.bestbuy.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSK9g5MsdqTeIJwCiuxX
HCrjr++ITpzG+nsaBuEU3OceeBU8wHyGotnXeXSZR/mZx0EZ5hjaamP4kS7hZs/E
P8F8xIUtKH1aVw5IZClCpCdSO4+n9m1yw4bTls7eXjafnkcRvQKxO8e1uDVfamLZ
wMRRCIxRfwjGPvyUr/R66XNHmgYkiZ4vn2zvLo0+RmIkdXWuygRaOXfgXktlEBYu
J3Z/NhD/muX0ChONlnhJRhTara/J4NARBsTvroQvckciqgRbi6MLK1fzbZ97lZbI
4DgVs50oK7SAWBr45lO+oQVqn4JHQNPo2iNllxB34FfR/mYDrAbZe28MYYxbR/Ui
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 26156462322627428001161726035975202305
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Richfield'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Best Buy Co'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Akamai SAN SSL OV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'pl.bestbuy.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23876170713537215199429672195364675672511573462302051307780176174643133098041790277748808312742677018654866524529949517478507790536953427752586656330233632553516799187660241590218724573437157846409781949298717687030943921778296688119592099424887433602884749096096374642344308238316805916865943269244596625701350963162713394315063341071303642156432751805605447775597161110887450074841603303712079726508069948348761890072195534258340308961144112826341974635299692184873936736501261407494744772403766809748302524698480102087828599756409341515885650415758339833582859254694818770534924669928294547825926694001972287447671
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1767 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pisces-ssl.test.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudtestcg2rta.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stage.insigniaproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denver-commerce-ssl.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'css-ssl.stage.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'js-ssl.cloud-test.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'misc-ssl.stage.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'js-ssl-usweb.cloud-test.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-ssl.stage.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-ssl.cloud-test.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'js-ssl-usweb.stage.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denver-mdot-ssl.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-ssl.stage.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.geeksquad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-download.digitallibrary.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pisces-ssl.stage.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'misc-ssl-usweb.cloud-test.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sts-ext-cld.stage.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denver-ssl.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-ssl.cloud-test.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud-test-ssl.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-ssl.stage.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-ssl.test.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-ssl-usweb.stage.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apid-ext-cld.stage.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stage.dynexproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apid-ext-cld.test.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'misc-ssl-usweb.stage.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'str2-bbyca-ssl.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sts-ext-cld.test.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl-deals.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'css-ssl.cloud-test.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commerce-ssl.stage.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-ssl-usweb.cloud-test.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'str2-fsca-ssl.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apidr-ssl.futureshop.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl.context.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'str2-fsca-ssl-kiosk.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-ssl.stage.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'str2-bbyca-ssl-kiosk.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud-test.dynexproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stage.pacificsales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apidr-ssl.bestbuy.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img-ssl.stage.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'js-ssl.stage.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbyawstagservices-pl.l7ss.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stage.rocketfishproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'misc-ssl.cloud-test.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'css-ssl-usweb.stage.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.m.stage.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagecg2rta.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud-test.insigniaproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud-test.pacificsales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'css-ssl-usweb.cloud-test.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.m.cloud-test.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud-test.rocketfishproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl.bestbuy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000154c4cac2e9000004030047304502210089aacbca1de4c9f40cd048dd08afa6409cc8f70b84eb18728d6b03ee993540d002203835dee796dc275d40fdb689c515ebb612ca2993654deab823d9df302d3eda27007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000154c4cac3080000040300483046022100c3408c6d55a6a8d6604bc560cf8a079842c20ccfd85f130a7d3e217a5e7e770b0221008f97723d74a4ef4bb704c489d3420dc4e317e12514229ae52df599b935e206d1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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