secure01.fanaticsretailgroup.com

- Fanatics, Inc -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 04:7f:6c:da:2b:7e:08:b3:71:4c:b7:9b:89:c6:26:51 was issued on by DigiCert Inc.

With 82 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fanatics, Inc

Organization: Fanatics, Inc
State / Province: Florida
Locality: Jacksonville
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:7f:6c:da:2b:7e:08:b3:71:4c:b7:9b:89:c6:26:51
Serial Number (int): 5978541469610430255122418456177550929
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 16:70:08:4f:b1:6a:21:0a:30:8a:bc:4f:62:02:6b:c1:92:f7:b3:6b
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 65:13:3e:41:9f:e6:b3:26:b4:d9:63:19:d2:6d:3c:84:82:6d:40:3f
Fingerprint (sha256): 2c:dc:23:db:c3:dc:d8:45:fb:04:2f:d4:f9:2e:b8:58:55:71:1c:ad:dd:ca:77:67:88:4b:9d:7e:43:ab:9c:b7

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate secure01.fanaticsretailgroup.com

82

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure01.fanaticsretailgroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure01.fanaticsretailgroup.com
m.fansedge.com
www01.frgbeta.com
mlb.frgimages.com
ladyfanatics.com
worldseries.fanatics.com
shop.mlb.com
nba.frgimages.com
nba-gs-warriors-mobilegw.fanatics.com
product-images.fanatics.com
ansel.frgimages.com
fansedge.com
ansel.frgbeta.com
uhteamshop.com
nabetsi.fanatics.com
www.collegebasketballstorepromotionalcode.com
images.surffanatics.com
images.teamfanshop.com
nflshop.frgimages.com
espnshop.frgimages.com
m.fanatics.com
m1.fansedge.com
www.kidfanatics.com
kiosk.frgalpha.com
worldseries.mlbshop.com
kidfanatics.com
www.frglpt.com
mshop.mlb.com
ansel.frgsites.com
dev-routing.fanatics.com
cbas-static.frgsites.com
m.mlbshop.com
owl-mobile-sdk.fanatics.com
www.collegefootballstore.com
qc3-www.fanatics.com
kiosk.frgbeta.com
mobilegw.fanatics.com
api.frgapi.com
www.fansedge.com
surffanatics.com
yahoosports.teamfanshop.com
www.frgbeta.com
www.collegebasketballstore.com
flow.frgx.io
qc-routing.fanatics.com
www02.frgbeta.com
mobile.footballfanatics.com
ord-s02.fanatics.com
fanatics.frgimages.com
api.frgalpha.com
majesticathletic.com
collegebasketballstore.com
shop.denverbroncos.com
nascar.frgimages.com
www.starstruck.com
secure02.fanaticsretailgroup.com
www.gnomefanatics.com
www.mlbshop.com
qc2-www.fanatics.com
gnomefanatics.com
feeds.frgimages.com
mlsstore.frgimages.com
nfl-tb-buccaneers-mobile-sdk.fanatics.com
lpgaproshop.teamfanshop.com
www.majesticathletic.com
qc3-m.fanatics.com
lids.teamfanshop.com
api.frgbeta.com
www1.fansedge.com
www.frgalpha.com
ansel.frgalpha.com
kiosk.frgsites.com
qc3-images.fanatics.com
www.surffanatics.com
fanatics-preview.frgsites.com
fansedge.frgimages.com
nhl.frgimages.com
ord-s05.fanatics.com
mailshrimp.frgdata.com
mlbshop.com
qc3-mobilegw.fanatics.com
www.ladyfanatics.com

Other certificates including the domain name fanaticsretailgroup.com

(limited to 100 certificates)
secure02.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure05.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure04.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
image.email-aaanational.com
secure02.fanaticsretailgroup.com
image.email-aaanational.com
image.email-aaanational.com
secure06.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
returns.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
image.email-aaanational.com
returns.fanaticsretailgroup.com
secure07.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure07.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
image.email-aaanational.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
*.sites.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure07.fanaticsretailgroup.com
secure04.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
san-2-s1.tlsprovisioning.exacttarget.com
image.email-aaanational.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
returns.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
image.email-aaanational.com
secure03.fanaticsretailgroup.com
san-2-s1.tlsprovisioning.exacttarget.com
secure03.fanaticsretailgroup.com
secure04.dv.fanaticsretailgroup.com
secure04.dv.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
image.email-aaanational.com
secure06.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
image.email-aaanational.com
secure04.dv.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure07.fanaticsretailgroup.com
secure05.fanaticsretailgroup.com
image.email-aaanational.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
image.email-aaanational.com
secure07.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure04.fanaticsretailgroup.com
image.email-aaanational.com
returns.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
image.email-aaanational.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
image.email-aaanational.com
secure03.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com

Certificate

The complete raw certificate details for secure01.fanaticsretailgroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINNTCCDB2gAwIBAgIQBH9s2it+CLNxTLebicYmUTANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0xOTA0MzAwMDAwMDBaFw0xOTA4MDYxMjAwMDBaMHkxCzAJBgNVBAYTAlVTMRAw
DgYDVQQIEwdGbG9yaWRhMRUwEwYDVQQHEwxKYWNrc29udmlsbGUxFjAUBgNVBAoT
DUZhbmF0aWNzLCBJbmMxKTAnBgNVBAMTIHNlY3VyZTAxLmZhbmF0aWNzcmV0YWls
Z3JvdXAuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJFBns7I
rELsYubyNAK01G9Z4oMZd1aj0mazrPxc5GrrH80DmjZgpmFaJYWLVnztsAMZSe3D
6qPhZ7yvKJcDrh8TbdFNjDhXbCM4/Mfrk3zL8twdim5CEtli4CfZwcYPJkLOss9G
MuBjyaV0X08ENtUtZV2L9Da0xDb5bHaA9lLnDmy3y655i4jmX0lsPco4uZaRBjKq
eoOq92vfjSbOSKrYRhaTKq3J8JQp89rdvxBLylPOV0JPtyFamT7j8UwI/Hn/rdhU
ZwEFGKg5g6NoG3CltCpS2F9q33+rmvFbbSsOC3xSA3rYHNnvZQqknHavPEBWQQc+
cdZot5JDe7C3gwIDAQABo4IJ0jCCCc4wHwYDVR0jBBgwFoAUkFj/sJx1qFFUd7Ht
8qNDFjiebMUwHQYDVR0OBBYEFBZwCE+xaiEKMIq8T2ICa8GS97NrMIIHQgYDVR0R
BIIHOTCCBzWCIHNlY3VyZTAxLmZhbmF0aWNzcmV0YWlsZ3JvdXAuY29tgg5tLmZh
bnNlZGdlLmNvbYIRd3d3MDEuZnJnYmV0YS5jb22CEW1sYi5mcmdpbWFnZXMuY29t
ghBsYWR5ZmFuYXRpY3MuY29tghh3b3JsZHNlcmllcy5mYW5hdGljcy5jb22CDHNo
b3AubWxiLmNvbYIRbmJhLmZyZ2ltYWdlcy5jb22CJW5iYS1ncy13YXJyaW9ycy1t
b2JpbGVndy5mYW5hdGljcy5jb22CG3Byb2R1Y3QtaW1hZ2VzLmZhbmF0aWNzLmNv
bYITYW5zZWwuZnJnaW1hZ2VzLmNvbYIMZmFuc2VkZ2UuY29tghFhbnNlbC5mcmdi
ZXRhLmNvbYIOdWh0ZWFtc2hvcC5jb22CFG5hYmV0c2kuZmFuYXRpY3MuY29tgi13
d3cuY29sbGVnZWJhc2tldGJhbGxzdG9yZXByb21vdGlvbmFsY29kZS5jb22CF2lt
YWdlcy5zdXJmZmFuYXRpY3MuY29tghZpbWFnZXMudGVhbWZhbnNob3AuY29tghVu
ZmxzaG9wLmZyZ2ltYWdlcy5jb22CFmVzcG5zaG9wLmZyZ2ltYWdlcy5jb22CDm0u
ZmFuYXRpY3MuY29tgg9tMS5mYW5zZWRnZS5jb22CE3d3dy5raWRmYW5hdGljcy5j
b22CEmtpb3NrLmZyZ2FscGhhLmNvbYIXd29ybGRzZXJpZXMubWxic2hvcC5jb22C
D2tpZGZhbmF0aWNzLmNvbYIOd3d3LmZyZ2xwdC5jb22CDW1zaG9wLm1sYi5jb22C
EmFuc2VsLmZyZ3NpdGVzLmNvbYIYZGV2LXJvdXRpbmcuZmFuYXRpY3MuY29tghhj
YmFzLXN0YXRpYy5mcmdzaXRlcy5jb22CDW0ubWxic2hvcC5jb22CG293bC1tb2Jp
bGUtc2RrLmZhbmF0aWNzLmNvbYIcd3d3LmNvbGxlZ2Vmb290YmFsbHN0b3JlLmNv
bYIUcWMzLXd3dy5mYW5hdGljcy5jb22CEWtpb3NrLmZyZ2JldGEuY29tghVtb2Jp
bGVndy5mYW5hdGljcy5jb22CDmFwaS5mcmdhcGkuY29tghB3d3cuZmFuc2VkZ2Uu
Y29tghBzdXJmZmFuYXRpY3MuY29tght5YWhvb3Nwb3J0cy50ZWFtZmFuc2hvcC5j
b22CD3d3dy5mcmdiZXRhLmNvbYIed3d3LmNvbGxlZ2ViYXNrZXRiYWxsc3RvcmUu
Y29tggxmbG93LmZyZ3guaW+CF3FjLXJvdXRpbmcuZmFuYXRpY3MuY29tghF3d3cw
Mi5mcmdiZXRhLmNvbYIbbW9iaWxlLmZvb3RiYWxsZmFuYXRpY3MuY29tghRvcmQt
czAyLmZhbmF0aWNzLmNvbYIWZmFuYXRpY3MuZnJnaW1hZ2VzLmNvbYIQYXBpLmZy
Z2FscGhhLmNvbYIUbWFqZXN0aWNhdGhsZXRpYy5jb22CGmNvbGxlZ2ViYXNrZXRi
YWxsc3RvcmUuY29tghZzaG9wLmRlbnZlcmJyb25jb3MuY29tghRuYXNjYXIuZnJn
aW1hZ2VzLmNvbYISd3d3LnN0YXJzdHJ1Y2suY29tgiBzZWN1cmUwMi5mYW5hdGlj
c3JldGFpbGdyb3VwLmNvbYIVd3d3Lmdub21lZmFuYXRpY3MuY29tgg93d3cubWxi
c2hvcC5jb22CFHFjMi13d3cuZmFuYXRpY3MuY29tghFnbm9tZWZhbmF0aWNzLmNv
bYITZmVlZHMuZnJnaW1hZ2VzLmNvbYIWbWxzc3RvcmUuZnJnaW1hZ2VzLmNvbYIp
bmZsLXRiLWJ1Y2NhbmVlcnMtbW9iaWxlLXNkay5mYW5hdGljcy5jb22CG2xwZ2Fw
cm9zaG9wLnRlYW1mYW5zaG9wLmNvbYIYd3d3Lm1hamVzdGljYXRobGV0aWMuY29t
ghJxYzMtbS5mYW5hdGljcy5jb22CFGxpZHMudGVhbWZhbnNob3AuY29tgg9hcGku
ZnJnYmV0YS5jb22CEXd3dzEuZmFuc2VkZ2UuY29tghB3d3cuZnJnYWxwaGEuY29t
ghJhbnNlbC5mcmdhbHBoYS5jb22CEmtpb3NrLmZyZ3NpdGVzLmNvbYIXcWMzLWlt
YWdlcy5mYW5hdGljcy5jb22CFHd3dy5zdXJmZmFuYXRpY3MuY29tgh1mYW5hdGlj
cy1wcmV2aWV3LmZyZ3NpdGVzLmNvbYIWZmFuc2VkZ2UuZnJnaW1hZ2VzLmNvbYIR
bmhsLmZyZ2ltYWdlcy5jb22CFG9yZC1zMDUuZmFuYXRpY3MuY29tghZtYWlsc2hy
aW1wLmZyZ2RhdGEuY29tggttbGJzaG9wLmNvbYIZcWMzLW1vYmlsZWd3LmZhbmF0
aWNzLmNvbYIUd3d3LmxhZHlmYW5hdGljcy5jb20wDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA+BgNVHR8ENzA1MDOgMaAvhi1o
dHRwOi8vY2RwLmdlb3RydXN0LmNvbS9HZW9UcnVzdFJTQUNBMjAxOC5jcmwwTAYD
VR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cu
ZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwdQYIKwYBBQUHAQEEaTBnMCYGCCsG
AQUFBzABhhpodHRwOi8vc3RhdHVzLmdlb3RydXN0LmNvbTA9BggrBgEFBQcwAoYx
aHR0cDovL2NhY2VydHMuZ2VvdHJ1c3QuY29tL0dlb1RydXN0UlNBQ0EyMDE4LmNy
dDAJBgNVHRMEAjAAMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYAu9nfvB+KcbWT
lCOXqpJ7RzhXlQqrUugakJZkNo4e0YUAAAFqb3/AugAABAMARzBFAiEAxMkguCZ7
5SDY0I3Bukc5LDciQY9clonOgECrug8zb+sCIGmn4fxGrkjq9Eb7/U6pv9nHEbu/
Ix5wtfrCFpbJwQtiAHcAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16ggw8A
AAFqb3/B1AAABAMASDBGAiEA98+Zc3x+vXQl80gpoF3qyIDbTlg6abwous1U11M9
VGcCIQC+4YE19Z+SLCmb9fOdM0QjsqgfAyPH7s9oQUpFMC+LNDANBgkqhkiG9w0B
AQsFAAOCAQEASeRF0ecqy2xdwhEkqlIAJnNi2w4hmQ37kUEZq6Pcz8DQW+3R6/oW
xBxoxd/meMFjSWBsXH0SCgRFMNd11DdsaBZ/EQN+hyehLLklJtqZhWyXIbEx7tmB
WfiliXY5jWpvUMbOFkMtOHh6HeNyHE2nTZVp/qeAe7I6jjB5RSYVdVpSGNplJLok
ICnsl78EwuLENaD/l54Km1jL8M1QIPheW/4KjFAOLVvYifoovhq15jN9mfF/lKhu
9d3wH6bNChOQRG3JrE7IcuuoyImY5PI1hiwaBnLj17pMpnw+mrvWizeMms88DcXM
5343OUtJlma3XiP/Im3+3R5OxTWt9lPwsg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJFBns7IrELsYubyNAK0
1G9Z4oMZd1aj0mazrPxc5GrrH80DmjZgpmFaJYWLVnztsAMZSe3D6qPhZ7yvKJcD
rh8TbdFNjDhXbCM4/Mfrk3zL8twdim5CEtli4CfZwcYPJkLOss9GMuBjyaV0X08E
NtUtZV2L9Da0xDb5bHaA9lLnDmy3y655i4jmX0lsPco4uZaRBjKqeoOq92vfjSbO
SKrYRhaTKq3J8JQp89rdvxBLylPOV0JPtyFamT7j8UwI/Hn/rdhUZwEFGKg5g6No
G3CltCpS2F9q33+rmvFbbSsOC3xSA3rYHNnvZQqknHavPEBWQQc+cdZot5JDe7C3
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5978541469610430255122418456177550929
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-06 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Florida'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jacksonville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fanatics, Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure01.fanaticsretailgroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21784617019853960357521601858885471636582128934279363989232434351290646212019641566111824357075309021895705598555612466517774281111769410731834086263555368614198290577596292209934648541957152439929471000508230389235248035352118160582355799913020993458711948962568411646396869999437178189861548735490993283757859513018060141355483507129866257208260157722780184715984901741691921558206495591334261267208918144480240063177317048915963838133533853149179266330686628669647350234418195623512595561315261042310910834163487655016396865314343775840794776883877890725476266248418766078093644102449367287393452940491455049283459
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1670084fb16a210a308abc4f62026bc192f7b36b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1849 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure01.fanaticsretailgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.fansedge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www01.frgbeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mlb.frgimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ladyfanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldseries.fanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.mlb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nba.frgimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nba-gs-warriors-mobilegw.fanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'product-images.fanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ansel.frgimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fansedge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ansel.frgbeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhteamshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nabetsi.fanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegebasketballstorepromotionalcode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.surffanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nflshop.frgimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnshop.frgimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.fanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm1.fansedge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kidfanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.frgalpha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldseries.mlbshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kidfanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frglpt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mshop.mlb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ansel.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-routing.fanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbas-static.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.mlbshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owl-mobile-sdk.fanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegefootballstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qc3-www.fanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.frgbeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilegw.fanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.frgapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fansedge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surffanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yahoosports.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frgbeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegebasketballstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flow.frgx.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qc-routing.fanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www02.frgbeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.footballfanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ord-s02.fanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanatics.frgimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.frgalpha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'majesticathletic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegebasketballstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.denverbroncos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nascar.frgimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.starstruck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure02.fanaticsretailgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gnomefanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mlbshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qc2-www.fanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gnomefanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.frgimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mlsstore.frgimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-tb-buccaneers-mobile-sdk.fanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lpgaproshop.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.majesticathletic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qc3-m.fanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lids.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.frgbeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.fansedge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frgalpha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ansel.frgalpha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qc3-images.fanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.surffanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanatics-preview.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fansedge.frgimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhl.frgimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ord-s05.fanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailshrimp.frgdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mlbshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qc3-mobilegw.fanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ladyfanatics.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016a6f7fc0ba0000040300473045022100c4c920b8267be520d8d08dc1ba47392c3722418f5c9689ce8040abba0f336feb022069a7e1fc46ae48eaf446fbfd4ea9bfd9c711bbbf231e70b5fac21696c9c10b620077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016a6f7fc1d40000040300483046022100f7cf99737c7ebd7425f34829a05deac880db4e583a69bc28bacd54d7533d5467022100bee18135f59f922c299bf5f39d334423b2a81f0323c7eecf68414a45302f8b34
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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