secure01.teamfanshop.com

Issued by R3

About this certificate

This digital certificate with serial number 03:3f:b5:7c:91:f6:32:61:67:c7:5f:54:61:6e:8c:89:37:a5 was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=secure01.teamfanshop.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3f:b5:7c:91:f6:32:61:67:c7:5f:54:61:6e:8c:89:37:a5
Serial Number (int): 283015883983802503744064153056785119917989
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a2:cb:b5:e1:5d:8a:b2:40:21:b5:3c:b0:fb:04:00:19:5d:e8:2d:d4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b3:da:a6:5d:ab:fb:72:21:1e:39:ae:8f:17:11:f4:db:dd:fd:22:88
Fingerprint (sha256): 13:b0:ff:ff:79:a8:f3:2c:ec:30:7b:67:e1:15:19:e3:0c:a4:df:19:30:4c:4a:2a:e5:b4:88:20:a9:6a:b6:6b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate secure01.teamfanshop.com

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure01.teamfanshop.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

beastmodeonline.com
blizzardgearstore.com
boutique.hockeycanada.ca
boutiquecfm.ca
buckyslockerroom.com
fr.shop.hockeycanada.ca
lpgaproshop.com
nllshop.com
secure01.teamfanshop.com
shop.big12sports.com
shop.bigtenstore.com
shop.cbssports.com
shop.clemsontigers.com
shop.csurams.com
shop.cubuffs.com
shop.ecu.edu
shop.ecupirates.com
shop.famuathletics.com
shop.friars.com
shop.georgiadogs.com
shop.gnacsports.com
shop.goarmysports.com
shop.gobearcats.com
shop.gocards.com
shop.gocrimson.com
shop.godrakebulldogs.com
shop.goducks.com
shop.goheels.com
shop.gopsusports.com
shop.goredbirds.com
shop.gostanford.com
shop.gousfbulls.com
shop.govandals.com
shop.gowyo.com
shop.gozags.com
shop.guhoyas.com
shop.hockeycanada.ca
shop.huskers.com
shop.internationalchampionscup.com
shop.ivyleaguesports.com
shop.kstatesports.com
shop.lmulions.com
shop.monumentalsportsnetwork.com
shop.msuspartans.com
shop.ohiobobcats.com
shop.okstate.com
shop.osubeavers.com
shop.overwatchleague.com
shop.pepperdinesports.com
shop.pga.com
shop.rolltide.com
shop.samfordsports.com
shop.santaclarabroncos.com
shop.seminoles.com
shop.shupirates.com
shop.soonersports.com
shop.southernmiss.com
shop.stanford.edu
shop.texassports.com
shop.texastech.com
shop.theacc.com
shop.theamerican.org
shop.uabsports.com
shop.uicflames.com
shop.ulmwarhawks.com
shop.umterps.com
shop.und.com
shop.unhwildcats.com
shop.utahstateaggies.com
shop.vucommodores.com
shop.wsucougars.com
shop2.mancity.com
shop3.mancity.com
shop4.mancity.com
store.fightingillini.com
store.kentuckyderby.com
store.s-pulse.co.jp
www.beastmodeonline.com
www.blizzardgearstore.com
www.boutiquecfm.ca
www.buckyslockerroom.com
www.hornetsfanshop.com
www.nllshop.com
www.oualumnistore.com
www.shockerlocker.com
www.shopmiamihurricanes.com
www.shopwvu.com
www.stanfordalumnifanshop.com
www.uhteamshop.com
www.usgashop.com

Other certificates including the domain name teamfanshop.com

(limited to 100 certificates)
secure03.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
*.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure02.teamfanshop.com
secure02.teamfanshop.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure02.fanaticsretailgroup.com
secure03.teamfanshop.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.teamfanshop.com
secure02.teamfanshop.com
secure03.teamfanshop.com
owa.fanatics.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure02.teamfanshop.com
images.teamfanshop.com
secure01.fanaticsretailgroup.com
images.teamfanshop.com
secure02.teamfanshop.com
secure02.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure03.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure03.fanaticsretailgroup.com
secure01.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
*.teamfanshop.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure03.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.teamfanshop.com
secure03.fanaticsretailgroup.com
secure01.teamfanshop.com
secure02.teamfanshop.com
secure03.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.teamfanshop.com
secure03.teamfanshop.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.teamfanshop.com
secure02.fanaticsretailgroup.com
WH-DMZ-EDGE01.footballfanatics.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure03.teamfanshop.com
secure02.teamfanshop.com
secure02.teamfanshop.com

Certificate

The complete raw certificate details for secure01.teamfanshop.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4styTJwUe9GxjIEPwHf
dKT5myj1q7K7PFwBtLVwD63yFVNNFJXWht9eYeyynfgLNvpCDpccf9LQMTvqIKmK
vRUFau1K+cxNEFVi3DO2Nn2ab+wdFjuk3K9TpUKmppM6XsAdF94D0PkJ/yVHn8Jq
0z4SleOHJWbPWjcgPBkwwGWQ31N9UkvejeUvNto+Xkcqk1LZNMCzie/xb5Mr0cgl
iVddicry5lkHJL/RgfFQ/pu325QJ/gi5CPyAXwL1HluwLohqeBsExQ907CurrvvY
Q4HSQ8dx0mZl78rIqTkOhtYTNmLKhi5AbWI75lA+Oc7Cr/Y9j153BFvE3z60INmB
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283015883983802503744064153056785119917989
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-03 17:59:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-01 17:59:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure01.teamfanshop.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24180147898016512639312396528740726865321239304166489893982152870816444943831621211153827447176433746828156267039504817119500006944204496593300745325667415109597298104664292244897989803453762500825652967139693589576600275923976648988324901958061625103949794170009034324274158503863692899092146908342027102388458409305018086589859872630820936383286786428482996874937721483188520745374095766802631231454988168372743917152898397436696022686713296872645404590093897705233236276084719287611494685855275342937322991186409704534796452551866722591751250640460588396967622389093145056587298441858630408880970659840836064870807
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a2cbb5e15d8ab24021b53cb0fb0400195de82dd4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1937 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beastmodeonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blizzardgearstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boutique.hockeycanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boutiquecfm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buckyslockerroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.shop.hockeycanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lpgaproshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nllshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure01.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.big12sports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.bigtenstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.cbssports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.clemsontigers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.csurams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.cubuffs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ecu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ecupirates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.famuathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.friars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.georgiadogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gnacsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.goarmysports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gobearcats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gocards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gocrimson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.godrakebulldogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.goducks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.goheels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gopsusports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.goredbirds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gostanford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gousfbulls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.govandals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gowyo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gozags.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.guhoyas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.hockeycanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.huskers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.internationalchampionscup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ivyleaguesports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.kstatesports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.lmulions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.monumentalsportsnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.msuspartans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ohiobobcats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.okstate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.osubeavers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.overwatchleague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.pepperdinesports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.pga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.rolltide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.samfordsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.santaclarabroncos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.seminoles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.shupirates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.soonersports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.southernmiss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.texassports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.texastech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.theacc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.theamerican.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.uabsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.uicflames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ulmwarhawks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.umterps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.und.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.unhwildcats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.utahstateaggies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.vucommodores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.wsucougars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop2.mancity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop3.mancity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop4.mancity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.fightingillini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.kentuckyderby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.s-pulse.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beastmodeonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blizzardgearstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boutiquecfm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buckyslockerroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hornetsfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nllshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oualumnistore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shockerlocker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopmiamihurricanes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopwvu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanfordalumnifanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhteamshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usgashop.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca00000179d33ed31f0000040300473045022054c6c9f824fde3179864fd8455dc658b5202a10b82c0592a938300be4e42c4f9022100f593ce935f73c2ff0bc1954af0915a6db585a60763d934a65ff5721ebd4f32d90076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d700000179d33ed3f7000004030047304502200e12dac74a3401331e54ba7e712e5251cf986453652da63bf33d7416dd339d5d022100940f935fcfee01f69c1466971b2447d31439e8561abe7fa2603e06f164a2ba9c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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