secure04.dv.fanaticsretailgroup.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:be:9c:09:d4:94:d2:eb:46:f3:f3:4d:7e:9e:f8:26:34:f9 was issued on by Let's Encrypt.

With 71 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=secure04.dv.fanaticsretailgroup.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:be:9c:09:d4:94:d2:eb:46:f3:f3:4d:7e:9e:f8:26:34:f9
Serial Number (int): 326197918119935101998495612757386922964217
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cf:6c:a6:32:c5:1a:94:a8:b6:7e:b0:c9:5b:aa:4a:d9:1c:64:23:6f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): dc:2e:7f:e6:74:69:0a:f3:63:4e:12:e6:b7:92:8c:66:4a:dc:a0:2d
Fingerprint (sha256): 22:55:21:30:35:ef:8b:c1:73:05:b4:b6:d0:91:2a:b9:01:de:3c:3f:10:32:ed:5a:ce:9d:19:1f:33:8b:55:00

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate secure04.dv.fanaticsretailgroup.com

71

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure04.dv.fanaticsretailgroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

asiastore.fcbayern.com
boutique.letour.fr
chelseamegastore.com
dfb-fanshop.de
englandrugbystore.com
englandstore.com
europe.nflshop.com
euroshop.rydercup.com
evertondirect.evertonfc.com
f1store.formula1.com
kitbag.com
m.asiastore.fcbayern.com
m.boutique.letour.fr
m.chelseamegastore.com
m.dfb-fanshop.de
m.englandrugbystore.com
m.englandstore.com
m.europe.nflshop.com
m.euroshop.rydercup.com
m.evertondirect.evertonfc.com
m.f1store.formula1.com
m.kitbag.com
m.overwatchleaguestore.com
m.shop.atleticodemadrid.com
m.shop.avfc.co.uk
m.shop.mancity.com
m.shop.psg.fr
m.shop.realmadrid.com
m.softbankhawksstore.jp
m.store.leicestertigers.com
m.store.manutd.com
overwatchleaguestore.com
payment.kitbag.com
payments.asiastore.fcbayern.com
payments.boutique.letour.fr
payments.chelseamegastore.com
payments.dfb-fanshop.de
payments.englandrugbystore.com
payments.englandstore.com
payments.europe.nflshop.com
payments.euroshop.rydercup.com
payments.evertondirect.evertonfc.com
payments.f1store.formula1.com
payments.mlbshopeurope.com
payments.overwatchleaguestore.com
payments.shop.atleticodemadrid.com
payments.shop.avfc.co.uk
payments.shop.europeantour.com
payments.shop.mancity.com
payments.shop.psg.fr
payments.shop.realmadrid.com
payments.softbankhawksstore.jp
payments.store.leicestertigers.com
payments.store.manutd.com
secure04.dv.fanaticsretailgroup.com
shop.atleticodemadrid.com
shop.avfc.co.uk
shop.europeantour.com
shop.mancity.com
shop.psg.fr
shop.realmadrid.com
softbankhawksstore.jp
store.leicestertigers.com
store.manutd.com
www.chelseamegastore.com
www.dfb-fanshop.de
www.englandrugbystore.com
www.englandstore.com
www.kitbag.com
www.overwatchleaguestore.com
www.softbankhawksstore.jp

Other certificates including the domain name fanaticsretailgroup.com

(limited to 100 certificates)
secure02.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure05.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure04.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
image.email-aaanational.com
secure02.fanaticsretailgroup.com
image.email-aaanational.com
image.email-aaanational.com
secure06.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
returns.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
image.email-aaanational.com
returns.fanaticsretailgroup.com
secure07.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure07.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
image.email-aaanational.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
*.sites.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure07.fanaticsretailgroup.com
secure04.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
san-2-s1.tlsprovisioning.exacttarget.com
image.email-aaanational.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
returns.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
image.email-aaanational.com
secure03.fanaticsretailgroup.com
san-2-s1.tlsprovisioning.exacttarget.com
secure03.fanaticsretailgroup.com
secure04.dv.fanaticsretailgroup.com
secure04.dv.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
image.email-aaanational.com
secure06.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
image.email-aaanational.com
secure04.dv.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure07.fanaticsretailgroup.com
secure05.fanaticsretailgroup.com
image.email-aaanational.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
image.email-aaanational.com
secure07.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure04.fanaticsretailgroup.com
image.email-aaanational.com
returns.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
image.email-aaanational.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
image.email-aaanational.com
secure03.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com

Certificate

The complete raw certificate details for secure04.dv.fanaticsretailgroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pOfOILeoXA8cK+CBmMF
A9zm/X+1govNHv5SLraVQ0HTg/yVoj2WeumdD0iGyQO1qRco5eecmS/WP4i8Pzzp
locT6w1kKiJvmqZ8kY8ildYE/ZIqBMsFI8+V9Ig2U5QPKIeKLaLVWo5u/BZGvG60
baCUqIsDcTa2FZit228z4VA9fGGFd2aIQ0aKsLWea3xdTtTKetuGre6jrzAzBJhr
l0C53pV3KTuxlv5qOI4pR8VtUysP/iBreG7CT9XENQzwghyBeBKQEdbMIWc3i+i/
259dRb9HX1OzOI5eg7uR6KrIq20DmMHy1y1/YdDt1+Eig+BCErKGKSqZ/wFXHIkn
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326197918119935101998495612757386922964217
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-27 09:18:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-27 09:18:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure04.dv.fanaticsretailgroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29107605241828620586521270082155219250846611006318953952579082193173135822958908805553027525449659857942483293023345459898342413766276037487093166267406473327926470382611186047366679927314872643175929065209784922717263482119125809555131429733286337564604457773251928932952628006731340407417987180719708376005877700207743195267848243344351604932432378123767046401396413214468741900819226142175368972377245913019361613623705726738747922535328013622297569656246776447230913526333938738868994638318600390456903719520612801557883618258010061626902363778566393885560347065108913558448855622492171235250676982187092462872541
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf6ca632c51a94a8b67eb0c95baa4ad91c64236f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1768 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asiastore.fcbayern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boutique.letour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chelseamegastore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfb-fanshop.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'englandrugbystore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'englandstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'europe.nflshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'euroshop.rydercup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evertondirect.evertonfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f1store.formula1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitbag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.asiastore.fcbayern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.boutique.letour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.chelseamegastore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.dfb-fanshop.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.englandrugbystore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.englandstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.europe.nflshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.euroshop.rydercup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.evertondirect.evertonfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.f1store.formula1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.kitbag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.overwatchleaguestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.shop.atleticodemadrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.shop.avfc.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.shop.mancity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.shop.psg.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.shop.realmadrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.softbankhawksstore.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.store.leicestertigers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.store.manutd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overwatchleaguestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.kitbag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.asiastore.fcbayern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.boutique.letour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.chelseamegastore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.dfb-fanshop.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.englandrugbystore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.englandstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.europe.nflshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.euroshop.rydercup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.evertondirect.evertonfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.f1store.formula1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.mlbshopeurope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.overwatchleaguestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.shop.atleticodemadrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.shop.avfc.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.shop.europeantour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.shop.mancity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.shop.psg.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.shop.realmadrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.softbankhawksstore.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.store.leicestertigers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.store.manutd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure04.dv.fanaticsretailgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.atleticodemadrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.avfc.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.europeantour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.mancity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.psg.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.realmadrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softbankhawksstore.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.leicestertigers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.manutd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chelseamegastore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dfb-fanshop.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.englandrugbystore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.englandstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kitbag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.overwatchleaguestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.softbankhawksstore.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001708627ff4f0000040300483046022100d4b2b7eb85571ca2bdebafee54d7914efab7eb30767fceeb86e5bb43f3a5a674022100a19175d5775d98cf9a7387b4e58a188d47f29088501a6fcaa727aef7d37253a1007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001708627ff4c0000040300483046022100e66a7005bd66afb8b00a89db2a3293a1daa930b2965f1ed426788afbf9fba500022100dd10082e60a53237e098a07670a7d09c879339ab976302279811abc54a1c2c9a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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