secure02.teamfanshop.com

Issued by R3

About this certificate

This digital certificate with serial number 03:a8:67:97:eb:20:6e:7a:e3:8a:a8:eb:03:a2:0c:42:0a:0e was issued on by Let's Encrypt.

With 81 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=secure02.teamfanshop.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a8:67:97:eb:20:6e:7a:e3:8a:a8:eb:03:a2:0c:42:0a:0e
Serial Number (int): 318641994727325636868763996281199938112014
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cb:88:21:04:74:51:72:ef:d0:83:42:b8:3d:71:b0:b1:7e:34:2c:68
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 22:ea:66:44:e6:f7:2e:3b:79:e1:18:3e:20:87:93:4f:20:f9:48:2d
Fingerprint (sha256): 20:b9:d3:65:02:1f:e1:06:e8:33:87:02:f5:ba:15:6a:dc:ed:d9:d3:bd:fc:b6:c3:6a:dc:41:aa:79:2b:32:90

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate secure02.teamfanshop.com

81

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure02.teamfanshop.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cdn.sportsmemorabilia.com
clemsonalumni.teamfanshop.com
f1store2.formula1.com
f1store3.formula1.com
f1store4.formula1.com
fi.blizzardgearstore.com
fr.lids.ca
m.blizzardgearstore.com
patronshop.masters.com
secure02.teamfanshop.com
shop.arnoldpalmer.com
shop.calbears.com
shop.collegefootballplayoff.com
shop.collegevault.com
shop.cuse.com
shop.floridagators.com
shop.gamecocksonline.com
shop.goairforcefalcons.com
shop.gocreighton.com
shop.gophersports.com
shop.goseawolves.com
shop.handshigh.com
shop.hokiesports.com
shop.navysports.com
shop.pac-12.com
shop.panthers.com
shop.sportingnews.com
shop.themw.com
shop.thesundevils.com
shop.ucfknights.com
shop.usab.com
shop.uscho.com
shop.usctrojans.com
shop.utsports.com
shop.villanova.com
shop2.atleticodemadrid.com
shop2.international.nhl.com
shop3.atleticodemadrid.com
store.lionsrugby.com
store.lionsrugby.com.teamfanshop.com
store.miseleccion.us
store.psg.fr
store2.fanatics-intl.com
store2.lionsrugby.com
store2.lionsrugby.com.teamfanshop.com
store2.psg.fr
store3.fanatics-intl.com
store3.psg.fr
uhteamshop.com
us.store.manutd.com
www-open.teamfanshop.com
www.bigskyshop.com
www.bigtallfanatics.com
www.fanaticsauthentic.com
www.fanaticsoutlet.com
www.grizzliesstore.com
www.hokiegear.com
www.hollywoodmemorabilia.com
www.hornetsfanshop.com
www.kitbag-us.com
www.kustore.com
www.lids.ca
www.lids.com
www.lpgaproshop.com
www.pgatourfanshop.com
www.ramsfanshop.com
www.rivalsfanstore.com
www.rutgersalumnishop.com
www.secstore.com
www.shopcaa.com
www.shopncaasports.com
www.shoptpc.com
www.sportsmemorabilia.com
www.teamusashop.com
www.theplayerschampionshipstore.com
www.ukteamshop.com
www.us.store.manutd.com
www2.blizzardgearstore.com
www2.mlbshopeurope.com
www3.blizzardgearstore.com
www3.mlbshopeurope.com

Other certificates including the domain name teamfanshop.com

(limited to 100 certificates)
secure03.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
*.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure02.teamfanshop.com
secure02.teamfanshop.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure02.fanaticsretailgroup.com
secure03.teamfanshop.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.teamfanshop.com
secure02.teamfanshop.com
secure03.teamfanshop.com
owa.fanatics.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure02.teamfanshop.com
images.teamfanshop.com
secure01.fanaticsretailgroup.com
images.teamfanshop.com
secure02.teamfanshop.com
secure02.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure03.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure03.fanaticsretailgroup.com
secure01.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
*.teamfanshop.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure03.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.teamfanshop.com
secure03.fanaticsretailgroup.com
secure01.teamfanshop.com
secure02.teamfanshop.com
secure03.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.teamfanshop.com
secure03.teamfanshop.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.teamfanshop.com
secure02.fanaticsretailgroup.com
WH-DMZ-EDGE01.footballfanatics.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure03.teamfanshop.com
secure02.teamfanshop.com
secure02.teamfanshop.com

Certificate

The complete raw certificate details for secure02.teamfanshop.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzikBh7WfX0GzoT/nVZws
MZPU9qHQQBxwP5hrjJGQijlq6mCkKOrnDNLXC6VAb42hF9zLmDajLNAn3gpCQfu0
2i+0estryX3uv4ppPwDQM9JB6pYj+djC8KoEA2ert8Rm3kRJ+vK0cNSO9n3tjQwg
InD3r+f/n47gWMevoManfxGFL/XDf30cqwPVpJKw6fQC4azewY+9Y8ks3D/3MV5i
DTBeF+UbYb2dNzxkjN0VAdYyu0II2c5OiWvK94sKUj49hgwe9c7WkSBrqOORzZM6
RKo/XWeCwlou2jonbkrG9qHeE8GsqmsBkFv9/QJlWwsSfu4Nyc/c3CrCBZNvesrd
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318641994727325636868763996281199938112014
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-06 19:23:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-06 19:23:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure02.teamfanshop.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26025311623912298801507759235069141560037978729817046670728401205327158474802749103715016837756080431565021385988293353188229342708429076129797872932005172466948941514317405925799440051168813293384575216581110675852526905280095307087014595640621942598209701464716518282952806478468462872651753524218319493838254411051524796602534400792233404179986176245764214891313018895535803923971494791775543292134703704386181601058010018273502824144721463412641218525826185407751419114037520456442732694640199707755079334032964680423364011843212461953285799588754501056659302440155002993790762544767381305865422314949867935030771
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cb882104745172efd08342b83d71b0b17e342c68
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1846 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.sportsmemorabilia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clemsonalumni.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f1store2.formula1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f1store3.formula1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f1store4.formula1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fi.blizzardgearstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.lids.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.blizzardgearstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patronshop.masters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure02.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.arnoldpalmer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.calbears.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.collegefootballplayoff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.collegevault.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.cuse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.floridagators.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gamecocksonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.goairforcefalcons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gocreighton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gophersports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.goseawolves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.handshigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.hokiesports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.navysports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.pac-12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.panthers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.themw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.thesundevils.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ucfknights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.usab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.uscho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.usctrojans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.utsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.villanova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop2.atleticodemadrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop2.international.nhl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop3.atleticodemadrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.lionsrugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.lionsrugby.com.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.miseleccion.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.psg.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store2.fanatics-intl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store2.lionsrugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store2.lionsrugby.com.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store2.psg.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store3.fanatics-intl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store3.psg.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhteamshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.store.manutd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-open.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigskyshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigtallfanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fanaticsauthentic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fanaticsoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grizzliesstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hokiegear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hollywoodmemorabilia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hornetsfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kitbag-us.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kustore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lids.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lpgaproshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pgatourfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ramsfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rivalsfanstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rutgersalumnishop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopcaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopncaasports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shoptpc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsmemorabilia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teamusashop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theplayerschampionshipstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ukteamshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.us.store.manutd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.blizzardgearstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.mlbshopeurope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3.blizzardgearstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3.mlbshopeurope.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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