secure02.teamfanshop.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:55:06:18:58:dc:c8:0c:4b:fb:e6:e4:0d:4f:a5:27:e6:7c was issued on by Let's Encrypt.

With 66 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=secure02.teamfanshop.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:55:06:18:58:dc:c8:0c:4b:fb:e6:e4:0d:4f:a5:27:e6:7c
Serial Number (int): 377381246700764223054366459598620991153788
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 20:0c:4b:98:d1:a5:20:da:ac:9a:f1:48:3a:88:fa:8a:2b:0f:62:23
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 28:04:58:05:69:25:13:8c:d1:e4:50:76:ef:c7:f7:07:e7:ae:7a:d6
Fingerprint (sha256): 29:c6:e3:67:52:43:06:8e:c6:b2:1e:b5:e8:a7:14:7d:5e:6e:0b:9c:af:a0:17:df:71:60:a6:ea:12:86:ec:35

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate secure02.teamfanshop.com

66

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure02.teamfanshop.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cdn.sportsmemorabilia.com
clemsonalumni.teamfanshop.com
fanshop.scheels.com
fi.blizzardgearstore.com
fr.lids.ca
m.blizzardgearstore.com
payments.blizzardgearstore.com
secure02.teamfanshop.com
shop.arnoldpalmer.com
shop.calbears.com
shop.collegefootballplayoff.com
shop.collegevault.com
shop.cuse.com
shop.floridagators.com
shop.gamecocksonline.com
shop.goairforcefalcons.com
shop.gocreighton.com
shop.goseawolves.com
shop.handshigh.com
shop.hokiesports.com
shop.navysports.com
shop.nflpa.com
shop.pac-12.com
shop.sportingnews.com
shop.themw.com
shop.thesundevils.com
shop.uconnhuskies.com
shop.usab.com
shop.uscho.com
shop.usctrojans.com
shop.utsports.com
shop.villanova.com
store.miseleccion.us
store.psg.fr
store2.psg.fr
store3.psg.fr
uhteamshop.com
us.shop.realmadrid.com
us.store.manutd.com
www-open.teamfanshop.com
www.bigskyshop.com
www.bigtallfanatics.com
www.fanaticsauthentic.com
www.fanaticsoutlet.com
www.grizzliesstore.com
www.hokiegear.com
www.hollywoodmemorabilia.com
www.hornetsfanshop.com
www.kitbag-us.com
www.kustore.com
www.lids.ca
www.lids.com
www.lpgaproshop.com
www.pgatourfanshop.com
www.ramsfanshop.com
www.rivalsfanstore.com
www.rutgersalumnishop.com
www.secstore.com
www.shopcaa.com
www.shopncaasports.com
www.shoptpc.com
www.sportsmemorabilia.com
www.teamusashop.com
www.theplayerschampionshipstore.com
www.ukteamshop.com
www.us.store.manutd.com

Other certificates including the domain name teamfanshop.com

(limited to 100 certificates)
secure03.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
*.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure02.teamfanshop.com
secure02.teamfanshop.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure02.fanaticsretailgroup.com
secure03.teamfanshop.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.teamfanshop.com
secure02.teamfanshop.com
secure03.teamfanshop.com
owa.fanatics.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure02.teamfanshop.com
images.teamfanshop.com
secure01.fanaticsretailgroup.com
images.teamfanshop.com
secure02.teamfanshop.com
secure02.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure03.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure03.fanaticsretailgroup.com
secure01.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
*.teamfanshop.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure03.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.teamfanshop.com
secure03.fanaticsretailgroup.com
secure01.teamfanshop.com
secure02.teamfanshop.com
secure03.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.teamfanshop.com
secure03.teamfanshop.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.teamfanshop.com
secure02.fanaticsretailgroup.com
WH-DMZ-EDGE01.footballfanatics.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure03.teamfanshop.com
secure02.teamfanshop.com
secure02.teamfanshop.com

Certificate

The complete raw certificate details for secure02.teamfanshop.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIK9DCCCdygAwIBAgISBFUGGFjcyAxL++bkDU+lJ+Z8MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDA2MzAxOTEwMDNaFw0y
MDA5MjgxOTEwMDNaMCMxITAfBgNVBAMTGHNlY3VyZTAyLnRlYW1mYW5zaG9wLmNv
bTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALpgq9jRslg+8vRx1Har
A51i0kYdMpbbsaBqEwHEOGbOS9Di+B/jtkk6ziBV77SBjiPyJC/qi4ctalPkOE2Y
t/d5Yf9UYn8wol1RRYEqBYC6YlaexE9hN0kwGlDhEIUn8sHM2vql0h7KVv+u92az
SvK6MZNc0/Crp+wl96w3ogHlcpyonX0DK5oguSSQa+L3P1uv4vx62VUPB1mln/55
LjKnGP2HbGSrHUapyR+8GsE8W9jFd6njmG5om7441xNQMiUGljBJBXP0tjwf8yWk
geiEIw1GPTx/A6kxvCHNEUN82r69DIqdSGHJ8NWLM8GChG5PEkIo6NV6SGlqu3Pc
XbkCAwEAAaOCB/kwggf1MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUIAxLmNGlINqs
mvFIOoj6iisPYiMwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYI
KwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0
c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0
c2VuY3J5cHQub3JnLzCCBawGA1UdEQSCBaMwggWfghljZG4uc3BvcnRzbWVtb3Jh
YmlsaWEuY29tgh1jbGVtc29uYWx1bW5pLnRlYW1mYW5zaG9wLmNvbYITZmFuc2hv
cC5zY2hlZWxzLmNvbYIYZmkuYmxpenphcmRnZWFyc3RvcmUuY29tggpmci5saWRz
LmNhghdtLmJsaXp6YXJkZ2VhcnN0b3JlLmNvbYIecGF5bWVudHMuYmxpenphcmRn
ZWFyc3RvcmUuY29tghhzZWN1cmUwMi50ZWFtZmFuc2hvcC5jb22CFXNob3AuYXJu
b2xkcGFsbWVyLmNvbYIRc2hvcC5jYWxiZWFycy5jb22CH3Nob3AuY29sbGVnZWZv
b3RiYWxscGxheW9mZi5jb22CFXNob3AuY29sbGVnZXZhdWx0LmNvbYINc2hvcC5j
dXNlLmNvbYIWc2hvcC5mbG9yaWRhZ2F0b3JzLmNvbYIYc2hvcC5nYW1lY29ja3Nv
bmxpbmUuY29tghpzaG9wLmdvYWlyZm9yY2VmYWxjb25zLmNvbYIUc2hvcC5nb2Ny
ZWlnaHRvbi5jb22CFHNob3AuZ29zZWF3b2x2ZXMuY29tghJzaG9wLmhhbmRzaGln
aC5jb22CFHNob3AuaG9raWVzcG9ydHMuY29tghNzaG9wLm5hdnlzcG9ydHMuY29t
gg5zaG9wLm5mbHBhLmNvbYIPc2hvcC5wYWMtMTIuY29tghVzaG9wLnNwb3J0aW5n
bmV3cy5jb22CDnNob3AudGhlbXcuY29tghVzaG9wLnRoZXN1bmRldmlscy5jb22C
FXNob3AudWNvbm5odXNraWVzLmNvbYINc2hvcC51c2FiLmNvbYIOc2hvcC51c2No
by5jb22CE3Nob3AudXNjdHJvamFucy5jb22CEXNob3AudXRzcG9ydHMuY29tghJz
aG9wLnZpbGxhbm92YS5jb22CFHN0b3JlLm1pc2VsZWNjaW9uLnVzggxzdG9yZS5w
c2cuZnKCDXN0b3JlMi5wc2cuZnKCDXN0b3JlMy5wc2cuZnKCDnVodGVhbXNob3Au
Y29tghZ1cy5zaG9wLnJlYWxtYWRyaWQuY29tghN1cy5zdG9yZS5tYW51dGQuY29t
ghh3d3ctb3Blbi50ZWFtZmFuc2hvcC5jb22CEnd3dy5iaWdza3lzaG9wLmNvbYIX
d3d3LmJpZ3RhbGxmYW5hdGljcy5jb22CGXd3dy5mYW5hdGljc2F1dGhlbnRpYy5j
b22CFnd3dy5mYW5hdGljc291dGxldC5jb22CFnd3dy5ncml6emxpZXNzdG9yZS5j
b22CEXd3dy5ob2tpZWdlYXIuY29tghx3d3cuaG9sbHl3b29kbWVtb3JhYmlsaWEu
Y29tghZ3d3cuaG9ybmV0c2ZhbnNob3AuY29tghF3d3cua2l0YmFnLXVzLmNvbYIP
d3d3Lmt1c3RvcmUuY29tggt3d3cubGlkcy5jYYIMd3d3LmxpZHMuY29tghN3d3cu
bHBnYXByb3Nob3AuY29tghZ3d3cucGdhdG91cmZhbnNob3AuY29tghN3d3cucmFt
c2ZhbnNob3AuY29tghZ3d3cucml2YWxzZmFuc3RvcmUuY29tghl3d3cucnV0Z2Vy
c2FsdW1uaXNob3AuY29tghB3d3cuc2Vjc3RvcmUuY29tgg93d3cuc2hvcGNhYS5j
b22CFnd3dy5zaG9wbmNhYXNwb3J0cy5jb22CD3d3dy5zaG9wdHBjLmNvbYIZd3d3
LnNwb3J0c21lbW9yYWJpbGlhLmNvbYITd3d3LnRlYW11c2FzaG9wLmNvbYIjd3d3
LnRoZXBsYXllcnNjaGFtcGlvbnNoaXBzdG9yZS5jb22CEnd3dy51a3RlYW1zaG9w
LmNvbYIXd3d3LnVzLnN0b3JlLm1hbnV0ZC5jb20wTAYDVR0gBEUwQzAIBgZngQwB
AgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRz
ZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwDwlaRZ8gDRgkAQ
LS+TiI6tS/4dR+OZ4dA0prCoqo6ycwAAAXMG2cveAAAEAwBIMEYCIQDJR3ktrgJn
YBK3B6awd9yJrNEdmLXiG3ZVrEBb2dHP4gIhAIly0cydE+dyNzLMZbxjE4Z3adxB
hIHOwICrSra82tbhAHYAB7dcG+V9aP/xsMYdIxXHuuZXfFeUt2ruvGE6GmnTohwA
AAFzBtnMAAAABAMARzBFAiEAp4oiW33MFFDGTGyAaPbs828+BHjifmEd4HxpduHu
X/wCIBpWX+RZIm+5NOIUu2dlP5DGObX+dW+BC0YAx51xPAx3MA0GCSqGSIb3DQEB
CwUAA4IBAQAAU646q3wMWfHVO5Fv/6jBJsaVX7zH9Ivh0YFITDi65vesuZjd2K7H
wmRPPtvHxL6BjLpPBRSFwmX8PboUxtkGrdSGDize/ge4cN5p4HZNH++6+yGGtMa1
v1DV2jeJm3sOCGEnB1qzwIvZXW7QvM7M9czkTF+WRyX2pktZ7BK293M0Kw3zl+fC
bJYAV/u2kpih6KTQRuaIahRztT7KX+DCCLbWGDnoAVJLRuSL/3tJ9PWiAIH78vXv
oo6IVNBWLJcrGlW3rHzUyNBn22IuxXqWAOqFFiZ7ejqfy3t1ZrSRTU/13b/eoJe/
t6EoPXVQWXfy0LXRxFqox1NV5H6vykJx
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumCr2NGyWD7y9HHUdqsD
nWLSRh0yltuxoGoTAcQ4Zs5L0OL4H+O2STrOIFXvtIGOI/IkL+qLhy1qU+Q4TZi3
93lh/1RifzCiXVFFgSoFgLpiVp7ET2E3STAaUOEQhSfywcza+qXSHspW/673ZrNK
8roxk1zT8Kun7CX3rDeiAeVynKidfQMrmiC5JJBr4vc/W6/i/HrZVQ8HWaWf/nku
MqcY/YdsZKsdRqnJH7wawTxb2MV3qeOYbmibvjjXE1AyJQaWMEkFc/S2PB/zJaSB
6IQjDUY9PH8DqTG8Ic0RQ3zavr0Mip1IYcnw1YszwYKEbk8SQijo1XpIaWq7c9xd
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 377381246700764223054366459598620991153788
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-30 19:10:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-28 19:10:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure02.teamfanshop.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23527995107147776076122134086400794167238309455882533623674920626671867549035651766104517967358730584008921831900539397096521252445633088017360981351461537051769379461005631189874399562885817862962941884087514445744997566321623944516448622771208027220773463489350783717078891055906470002209159851467151858393419835986375110919091931757099422799631804358972422905993118572586867623339852295646670474378111482487605622671568027974955505720464047010643217156564412122412264794168506619992351334829232503104167845299519525707486734652993816934095046432062277916809978508745351971875917945282330531619299634935293798014393
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							200c4b98d1a520daac9af1483a88fa8a2b0f6223
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1443 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.sportsmemorabilia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clemsonalumni.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanshop.scheels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fi.blizzardgearstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.lids.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.blizzardgearstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.blizzardgearstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure02.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.arnoldpalmer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.calbears.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.collegefootballplayoff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.collegevault.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.cuse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.floridagators.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gamecocksonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.goairforcefalcons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gocreighton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.goseawolves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.handshigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.hokiesports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.navysports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.nflpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.pac-12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.themw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.thesundevils.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.uconnhuskies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.usab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.uscho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.usctrojans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.utsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.villanova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.miseleccion.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.psg.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store2.psg.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store3.psg.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhteamshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.shop.realmadrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.store.manutd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-open.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigskyshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigtallfanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fanaticsauthentic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fanaticsoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grizzliesstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hokiegear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hollywoodmemorabilia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hornetsfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kitbag-us.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kustore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lids.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lpgaproshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pgatourfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ramsfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rivalsfanstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rutgersalumnishop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopcaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopncaasports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shoptpc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsmemorabilia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teamusashop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theplayerschampionshipstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ukteamshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.us.store.manutd.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000017306d9cbde0000040300483046022100c947792dae02676012b707a6b077dc89acd11d98b5e21b7655ac405bd9d1cfe20221008972d1cc9d13e7723732cc65bc6313867769dc418481cec080ab4ab6bcdad6e100760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017306d9cc000000040300473045022100a78a225b7dcc1450c64c6c8068f6ecf36f3e0478e27e611de07c6976e1ee5ffc02201a565fe459226fb934e214bb67653f90c639b5fe756f810b4600c79d713c0c77
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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