secure02.teamfanshop.com

Issued by R3

About this certificate

This digital certificate with serial number 03:63:83:26:ba:49:3d:3d:11:01:53:00:d5:1c:01:be:a7:7d was issued on by Let's Encrypt.

With 81 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=secure02.teamfanshop.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:63:83:26:ba:49:3d:3d:11:01:53:00:d5:1c:01:be:a7:7d
Serial Number (int): 295199142073512890678676819534668682405757
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ac:ef:a2:f1:66:da:9f:62:ac:09:5d:f8:6c:bd:03:95:d3:32:19:7f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2f:87:51:5c:c1:ce:93:58:0a:ad:57:19:12:51:9d:c5:28:f8:53:96
Fingerprint (sha256): 11:30:5f:10:ee:c9:52:2d:3e:3a:de:2c:3a:83:57:b3:d5:7c:56:ba:83:91:be:33:de:41:41:b1:2a:a6:65:8a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate secure02.teamfanshop.com

81

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure02.teamfanshop.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cdn.sportsmemorabilia.com
clemsonalumni.teamfanshop.com
f1store2.formula1.com
f1store3.formula1.com
f1store4.formula1.com
fi.blizzardgearstore.com
fr.lids.ca
m.blizzardgearstore.com
patronshop.masters.com
secure02.teamfanshop.com
shop.2022usagames.org
shop.arnoldpalmer.com
shop.calbears.com
shop.collegefootballplayoff.com
shop.collegevault.com
shop.floridagators.com
shop.gamecocksonline.com
shop.goairforcefalcons.com
shop.gocreighton.com
shop.gophersports.com
shop.goseawolves.com
shop.handshigh.com
shop.hokiesports.com
shop.navysports.com
shop.pac-12.com
shop.panthers.com
shop.sportingnews.com
shop.themw.com
shop.thesundevils.com
shop.ucfknights.com
shop.usab.com
shop.uscho.com
shop.usctrojans.com
shop.utsports.com
shop.villanova.com
shop2.atleticodemadrid.com
shop2.international.nhl.com
shop3.atleticodemadrid.com
store.lionsrugby.com
store.lionsrugby.com.teamfanshop.com
store.miseleccion.us
store.psg.fr
store2.fanatics-intl.com
store2.lionsrugby.com
store2.lionsrugby.com.teamfanshop.com
store2.psg.fr
store3.fanatics-intl.com
store3.psg.fr
uhteamshop.com
us.store.manutd.com
www-open.teamfanshop.com
www.bigskyshop.com
www.bigtallfanatics.com
www.fanaticsauthentic.com
www.fanaticsoutlet.com
www.grizzliesstore.com
www.hokiegear.com
www.hollywoodmemorabilia.com
www.hornetsfanshop.com
www.kitbag-us.com
www.kustore.com
www.lids.ca
www.lids.com
www.lpgaproshop.com
www.pgatourfanshop.com
www.ramsfanshop.com
www.rivalsfanstore.com
www.rutgersalumnishop.com
www.secstore.com
www.shopcaa.com
www.shopncaasports.com
www.shoptpc.com
www.sportsmemorabilia.com
www.teamusashop.com
www.theplayerschampionshipstore.com
www.ukteamshop.com
www.us.store.manutd.com
www2.blizzardgearstore.com
www2.mlbshopeurope.com
www3.blizzardgearstore.com
www3.mlbshopeurope.com

Other certificates including the domain name teamfanshop.com

(limited to 100 certificates)
secure03.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
*.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure02.teamfanshop.com
secure02.teamfanshop.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure02.fanaticsretailgroup.com
secure03.teamfanshop.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.teamfanshop.com
secure02.teamfanshop.com
secure03.teamfanshop.com
owa.fanatics.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure02.teamfanshop.com
images.teamfanshop.com
secure01.fanaticsretailgroup.com
images.teamfanshop.com
secure02.teamfanshop.com
secure02.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure03.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure03.fanaticsretailgroup.com
secure01.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
*.teamfanshop.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure03.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.teamfanshop.com
secure03.fanaticsretailgroup.com
secure01.teamfanshop.com
secure02.teamfanshop.com
secure03.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.teamfanshop.com
secure03.teamfanshop.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.teamfanshop.com
secure02.fanaticsretailgroup.com
WH-DMZ-EDGE01.footballfanatics.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure03.teamfanshop.com
secure02.teamfanshop.com

Certificate

The complete raw certificate details for secure02.teamfanshop.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04GR8Wb+ybpYH0mSH0ah
YNIh6lRQRvMSMQLdLLY8AsPoGp/9AP2JWw2wh7aDdNmdRDxm1EvCTl/uXgZYVEWc
DMYdlRD9w2N9oxaGdR64Tt4Ywpor+UMl2ZvKxnGofBVFQ8WRBlU2riJnJaIx+q+j
xgRQko2VSc0ILL6iTwgE3IdkRfmKBicuFc+q/PfRTZQFdC6ZqWLOFfySXSVgzhF5
fEia/vncp52givfDtuN0aN33B0rkLwNjq3pm292OlIY0OVjJI3YyEiEUIJDBihP6
b0bZeae5LqQ+Rss8yjIvvaMGNb8WXkAbgthmKJxp3ecmWrDpzEzAP+IRFL/XNfcQ
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295199142073512890678676819534668682405757
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-11 06:33:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-11 06:33:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure02.teamfanshop.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26700175740436978628512381114804317136232124749210636919848153896096433556228589058109637125643957841363684317993721320721083588217028389972362115688833692806344746066287311961251841637852249776542159248478724725389589574935819972288263375316362495734725859686814885884072207789829373564292582383971531301506116256632952104938310333255167230232924940314480349393097153183193288580509173679045105718430352085057037487725595512519495395902718209355142727694448970978736712523607294078266896242844546054029952700028916191977000399668599351806479506584035448034228469486750150930548844041607354770440800249419362274316373
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							acefa2f166da9f62ac095df86cbd0395d332197f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1854 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.sportsmemorabilia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clemsonalumni.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f1store2.formula1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f1store3.formula1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f1store4.formula1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fi.blizzardgearstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.lids.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.blizzardgearstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patronshop.masters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure02.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.2022usagames.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.arnoldpalmer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.calbears.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.collegefootballplayoff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.collegevault.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.floridagators.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gamecocksonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.goairforcefalcons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gocreighton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gophersports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.goseawolves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.handshigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.hokiesports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.navysports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.pac-12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.panthers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.themw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.thesundevils.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ucfknights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.usab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.uscho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.usctrojans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.utsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.villanova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop2.atleticodemadrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop2.international.nhl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop3.atleticodemadrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.lionsrugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.lionsrugby.com.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.miseleccion.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.psg.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store2.fanatics-intl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store2.lionsrugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store2.lionsrugby.com.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store2.psg.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store3.fanatics-intl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store3.psg.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhteamshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.store.manutd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-open.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigskyshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigtallfanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fanaticsauthentic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fanaticsoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grizzliesstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hokiegear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hollywoodmemorabilia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hornetsfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kitbag-us.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kustore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lids.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lpgaproshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pgatourfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ramsfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rivalsfanstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rutgersalumnishop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopcaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopncaasports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shoptpc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsmemorabilia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teamusashop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theplayerschampionshipstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ukteamshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.us.store.manutd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.blizzardgearstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.mlbshopeurope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3.blizzardgearstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3.mlbshopeurope.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c200000176f05d42440000040300473045022100c612d3b54aaf4d223b35c1e11dbb1adcbcedc4c59dd791b545380e1461b16ea602205399a67f66a68de54ca1deb2050630e121707e352256afa389a13f41e124062c007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000176f05d42480000040300473045022100f21a3ca099e03a022655b07863a471b68a6de9255d885934b258b5537280626202204abb9fb2380ddb2fc125a6bb74caaa256e3ff55330d6096231b5c9972a734739
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00520f555a9aac44cb46d6970dff4a739dc6d308a15eb07276d1d68ecb23063d094519aa0cb3f5d639ad8d56f6c0cc6883462e8170d8eca1b19d784a1c9e58025790a4af816f1473cd5ef117d4c816ff847047b1a3dd1cd7d35f287b63145a0184ba5e34de5e3e5cbd06aa2730bfc52023b027a992322e913b16bfb73e045513a0c8d8f3a61706f72ad63c77a567c31d99e781a30f347b14b7170cbdef73cc86ed744a98c5de2e890a33f936af557697c2d5981a4fa17dcf334ccc8a97cb1dc2a7b93c6f483d4c58f37f1119f71ec119be12efbfbe97a665b65e490609f7401d9a56f1adcedeb904cc907ce960cfbee8a91e00013cfcb909635ec5de1971ea4053