secure01.teamfanshop.com

Issued by R3

About this certificate

This digital certificate with serial number 04:c4:04:43:c4:6a:dc:35:dc:f2:33:71:4b:15:42:25:b7:fd was issued on by Let's Encrypt.

With 91 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=secure01.teamfanshop.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c4:04:43:c4:6a:dc:35:dc:f2:33:71:4b:15:42:25:b7:fd
Serial Number (int): 415150156423236206283116751330977656453117
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3e:e3:d1:3c:52:70:19:2d:a7:16:81:df:94:57:b6:56:a1:4b:7f:d4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a5:28:74:98:a8:95:0f:1d:d7:c4:ba:d6:6f:03:47:9e:30:37:7b:ea
Fingerprint (sha256): 15:53:d7:57:e6:ee:12:da:b3:85:05:33:7f:6d:5f:04:a1:ca:96:46:90:14:87:ac:e2:06:27:97:62:ff:e0:9c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate secure01.teamfanshop.com

91

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure01.teamfanshop.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

beastmodeonline.com
blizzardgearstore.com
boutique.hockeycanada.ca
boutiquecfm.ca
buckyslockerroom.com
fr.shop.hockeycanada.ca
lpgaproshop.com
nllshop.com
secure01.teamfanshop.com
shop.big12sports.com
shop.bigtenstore.com
shop.btn.com
shop.cbssports.com
shop.clemsontigers.com
shop.csurams.com
shop.cubuffs.com
shop.ecu.edu
shop.ecupirates.com
shop.famuathletics.com
shop.friars.com
shop.georgiadogs.com
shop.gnacsports.com
shop.goarmysports.com
shop.gobearcats.com
shop.gocards.com
shop.gocrimson.com
shop.godrakebulldogs.com
shop.goducks.com
shop.goheels.com
shop.gopsusports.com
shop.goredbirds.com
shop.gostanford.com
shop.gousfbulls.com
shop.govandals.com
shop.gowyo.com
shop.gozags.com
shop.guhoyas.com
shop.hockeycanada.ca
shop.huskers.com
shop.internationalchampionscup.com
shop.ivyleaguesports.com
shop.kstatesports.com
shop.lmulions.com
shop.monumentalsportsnetwork.com
shop.msuspartans.com
shop.ohiobobcats.com
shop.okstate.com
shop.osubeavers.com
shop.overwatchleague.com
shop.pepperdinesports.com
shop.pga.com
shop.rolltide.com
shop.rutgersnewarkathletics.com
shop.samfordsports.com
shop.santaclarabroncos.com
shop.seminoles.com
shop.shupirates.com
shop.soonersports.com
shop.southernmiss.com
shop.stanford.edu
shop.texassports.com
shop.texastech.com
shop.theacc.com
shop.theamerican.org
shop.uabsports.com
shop.uicflames.com
shop.ulmwarhawks.com
shop.umterps.com
shop.und.com
shop.unhwildcats.com
shop.utahstateaggies.com
shop.wsucougars.com
shop2.mancity.com
shop3.mancity.com
shop4.mancity.com
store.fightingillini.com
store.kentuckyderby.com
store.s-pulse.co.jp
www.beastmodeonline.com
www.blizzardgearstore.com
www.boutiquecfm.ca
www.buckyslockerroom.com
www.hornetsfanshop.com
www.nllshop.com
www.oualumnistore.com
www.shockerlocker.com
www.shopmiamihurricanes.com
www.shopwvu.com
www.stanfordalumnifanshop.com
www.uhteamshop.com
www.usgashop.com

Other certificates including the domain name teamfanshop.com

(limited to 100 certificates)
secure03.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
*.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure02.teamfanshop.com
secure02.teamfanshop.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure02.fanaticsretailgroup.com
secure03.teamfanshop.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.teamfanshop.com
secure02.teamfanshop.com
secure03.teamfanshop.com
owa.fanatics.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure02.teamfanshop.com
images.teamfanshop.com
secure01.fanaticsretailgroup.com
images.teamfanshop.com
secure02.teamfanshop.com
secure02.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure03.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure03.fanaticsretailgroup.com
secure01.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
*.teamfanshop.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure03.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.teamfanshop.com
secure03.fanaticsretailgroup.com
secure01.teamfanshop.com
secure02.teamfanshop.com
secure03.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.teamfanshop.com
secure03.teamfanshop.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.teamfanshop.com
secure02.fanaticsretailgroup.com
WH-DMZ-EDGE01.footballfanatics.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure03.teamfanshop.com
secure02.teamfanshop.com

Certificate

The complete raw certificate details for secure01.teamfanshop.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwMdEBV9FaQig4Hb9kd7
c+ZN+iXZBClyNasUhlPC+YaqvsRphKkf4mgJVmSYVCtcyLo0wgMS+GTGjftVfVL9
0Bo9S54M85KFXVYvinpe0zDj+FEMHUFz1FtfOjUe5cK802lgMkUdpEltJU6mgiXL
2CBxNaEkQ3jHJn1rujyZs22R3GsjyXq2zOKtGHmHCMqw1DmN13m7lUkmSfgws5ah
Jrcns0n9MPm0HRsKrukpJrFJjBXymdysWOPrh5AQuE5YTM65F+5lViC5LtsA/1wY
rDwa2Vxa43ICQxHUjUoib8oYyERQigej+6SJZYGM/NMYijRZ9JOU4by4G6krlZFo
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 415150156423236206283116751330977656453117
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-12 09:01:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-13 09:01:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure01.teamfanshop.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25122958025470157879371043072254831210649460945320063743765096895010003627872287878524506083897737690070156271070656311944283301363208008016411313917758381310293734384310711798249199983980371475738146279920174439443516853920347353064168664615475264262145475958216977903783659286268106589558048780515189172464980799845596910233510777232443765335187008428363414389714048376425362295381068089577926473492586312105019659472326225208596150076113352775762142033027024486819261560525067359435804178184429698927756244896997859005357113725207870646559851340410921108055719450939270785031871753229369287307198975372190815447081
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3ee3d13c5270192da71681df9457b656a14b7fd4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1961 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beastmodeonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blizzardgearstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boutique.hockeycanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boutiquecfm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buckyslockerroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.shop.hockeycanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lpgaproshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nllshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure01.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.big12sports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.bigtenstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.btn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.cbssports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.clemsontigers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.csurams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.cubuffs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ecu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ecupirates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.famuathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.friars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.georgiadogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gnacsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.goarmysports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gobearcats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gocards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gocrimson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.godrakebulldogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.goducks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.goheels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gopsusports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.goredbirds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gostanford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gousfbulls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.govandals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gowyo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gozags.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.guhoyas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.hockeycanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.huskers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.internationalchampionscup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ivyleaguesports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.kstatesports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.lmulions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.monumentalsportsnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.msuspartans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ohiobobcats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.okstate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.osubeavers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.overwatchleague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.pepperdinesports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.pga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.rolltide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.rutgersnewarkathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.samfordsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.santaclarabroncos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.seminoles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.shupirates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.soonersports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.southernmiss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.texassports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.texastech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.theacc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.theamerican.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.uabsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.uicflames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ulmwarhawks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.umterps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.und.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.unhwildcats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.utahstateaggies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.wsucougars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop2.mancity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop3.mancity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop4.mancity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.fightingillini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.kentuckyderby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.s-pulse.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beastmodeonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blizzardgearstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boutiquecfm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buckyslockerroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hornetsfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nllshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oualumnistore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shockerlocker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopmiamihurricanes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopwvu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanfordalumnifanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhteamshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usgashop.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c20000017795b078c80000040300473045022022901098d06d376fc91e816196650b81eac5739eecf28603e4a785b228167eff022100c6b6b5a08d6a122d24cb4dd58dea63febeb906b58affa90f0d13b6487fb816770077007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d70000017795b078f90000040300483046022100d530d481bb7e25a582968f618b768a81e0e0857568637240f2f82d3e245b5c26022100f956e859954c3a326504b21baeb2c96213a9dc63ef3492554e516d51fd0c9b4f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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