secure02.teamfanshop.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:97:ab:eb:bc:0e:35:6b:82:13:0a:a9:d5:bc:a9:31:4d:bd was issued on by Let's Encrypt.

With 80 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=secure02.teamfanshop.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:97:ab:eb:bc:0e:35:6b:82:13:0a:a9:d5:bc:a9:31:4d:bd
Serial Number (int): 400060303123362403304780289179301989928381
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2d:9d:f5:94:b4:52:92:f5:00:e5:fb:30:6d:b3:19:d3:a0:db:9c:64
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 57:6d:7a:52:23:91:8f:15:90:f6:10:7f:f6:c1:f4:bd:8a:8f:1e:ca
Fingerprint (sha256): 13:3c:22:00:e0:9f:e1:7d:d1:41:23:cf:1c:85:15:f5:c2:9d:d7:9c:4e:9b:1e:ac:29:ed:7d:3d:7c:a7:98:e8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate secure02.teamfanshop.com

80

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure02.teamfanshop.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cdn.sportsmemorabilia.com
clemsonalumni.teamfanshop.com
f1store2.formula1.com
f1store3.formula1.com
f1store4.formula1.com
fi.blizzardgearstore.com
fr.lids.ca
m.blizzardgearstore.com
payments.blizzardgearstore.com
preview.shop.mancity.com
secure02.teamfanshop.com
shop.arnoldpalmer.com
shop.calbears.com
shop.collegefootballplayoff.com
shop.collegevault.com
shop.cuse.com
shop.floridagators.com
shop.gamecocksonline.com
shop.goairforcefalcons.com
shop.gocreighton.com
shop.gophersports.com
shop.goseawolves.com
shop.handshigh.com
shop.hokiesports.com
shop.navysports.com
shop.nflpa.com
shop.pac-12.com
shop.panthers.com
shop.sportingnews.com
shop.themw.com
shop.thesundevils.com
shop.ucfknights.com
shop.usab.com
shop.uscho.com
shop.usctrojans.com
shop.utsports.com
shop.villanova.com
shop2.atleticodemadrid.com
shop3.atleticodemadrid.com
store.lionsrugby.com
store.lionsrugby.com.teamfanshop.com
store.miseleccion.us
store.psg.fr
store2.fanatics-intl.com
store2.lionsrugby.com
store2.lionsrugby.com.teamfanshop.com
store2.psg.fr
store3.fanatics-intl.com
store3.psg.fr
uhteamshop.com
us.store.manutd.com
www-open.teamfanshop.com
www.bigskyshop.com
www.bigtallfanatics.com
www.fanaticsauthentic.com
www.fanaticsoutlet.com
www.grizzliesstore.com
www.hokiegear.com
www.hollywoodmemorabilia.com
www.hornetsfanshop.com
www.kitbag-us.com
www.kustore.com
www.lids.ca
www.lids.com
www.lpgaproshop.com
www.pgatourfanshop.com
www.ramsfanshop.com
www.rivalsfanstore.com
www.rutgersalumnishop.com
www.secstore.com
www.shopcaa.com
www.shopncaasports.com
www.shoptpc.com
www.sportsmemorabilia.com
www.teamusashop.com
www.theplayerschampionshipstore.com
www.ukteamshop.com
www.us.store.manutd.com
www2.blizzardgearstore.com
www3.blizzardgearstore.com

Other certificates including the domain name teamfanshop.com

(limited to 100 certificates)
secure03.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
*.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure02.teamfanshop.com
secure02.teamfanshop.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure02.fanaticsretailgroup.com
secure03.teamfanshop.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.teamfanshop.com
secure02.teamfanshop.com
secure03.teamfanshop.com
owa.fanatics.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure02.teamfanshop.com
images.teamfanshop.com
secure01.fanaticsretailgroup.com
images.teamfanshop.com
secure02.teamfanshop.com
secure02.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure03.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure03.fanaticsretailgroup.com
secure01.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
*.teamfanshop.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure03.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.teamfanshop.com
secure03.fanaticsretailgroup.com
secure01.teamfanshop.com
secure02.teamfanshop.com
secure03.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.teamfanshop.com
secure03.teamfanshop.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.teamfanshop.com
secure02.fanaticsretailgroup.com
WH-DMZ-EDGE01.footballfanatics.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure03.teamfanshop.com
secure02.teamfanshop.com

Certificate

The complete raw certificate details for secure02.teamfanshop.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3PmXYWy2IB5YOJG+Cgj
pSUYy+XZZIlr4xJC566NnGVvv7amMcQNFJYBw5YjTr6K0cIoJNWK8oDzUZrUh5vf
mJbe/8HSPHaUynP2YZeN/h5GEOZucYv+GCTs5sjvUv9F4vPSx64cEVTZODTMTrpa
2mazGB7K9C+6rkZV/7rBiTKPw6CDYrO2C7D/buEP8LzY3FvebylFNyopHACfb+xw
HwLIRYO5kUOI693M1ilS3vR3xx1ji0XLJNerms8QdDhWXHDRNqKQ1orX6joKnxEn
eDFUc7hs8Vr1cdHNffbDIMH7QSqUBTsKRVb1j/RMUJuJER9CeSLYFfcIrlIpXByH
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 400060303123362403304780289179301989928381
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-29 01:56:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-28 01:56:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure02.teamfanshop.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19624089623039383963654825818413017017454775577506666544306214416828261546371104029315050297674952874620852340508509976634910929796624415281877196761280257867601318106317803073756987802270736157208037662724183820430370929045755153412943303229504835862174029685787331989918823115896486200809228206128471936564871039195418664197693760758206645787823142259968129975952151771698971897736119135880888432486298086077705013539122312330582704123277506748293715327797849728109424775119879379692276313347401632701535571931340505985228813138835522563245561558291151331619621630066402417009815971619747855849620997903233723434933
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2d9df594b45292f500e5fb306db319d3a0db9c64
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1819 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.sportsmemorabilia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clemsonalumni.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f1store2.formula1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f1store3.formula1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f1store4.formula1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fi.blizzardgearstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.lids.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.blizzardgearstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.blizzardgearstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.shop.mancity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure02.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.arnoldpalmer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.calbears.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.collegefootballplayoff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.collegevault.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.cuse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.floridagators.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gamecocksonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.goairforcefalcons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gocreighton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gophersports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.goseawolves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.handshigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.hokiesports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.navysports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.nflpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.pac-12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.panthers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.themw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.thesundevils.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ucfknights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.usab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.uscho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.usctrojans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.utsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.villanova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop2.atleticodemadrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop3.atleticodemadrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.lionsrugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.lionsrugby.com.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.miseleccion.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.psg.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store2.fanatics-intl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store2.lionsrugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store2.lionsrugby.com.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store2.psg.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store3.fanatics-intl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store3.psg.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhteamshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.store.manutd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-open.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigskyshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigtallfanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fanaticsauthentic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fanaticsoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grizzliesstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hokiegear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hollywoodmemorabilia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hornetsfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kitbag-us.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kustore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lids.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lpgaproshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pgatourfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ramsfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rivalsfanstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rutgersalumnishop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopcaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopncaasports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shoptpc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsmemorabilia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teamusashop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theplayerschampionshipstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ukteamshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.us.store.manutd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.blizzardgearstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3.blizzardgearstore.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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