secure03.fanaticsretailgroup.com

- Fanatics, Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 07:e4:46:41:98:2c:9a:c9:d1:9f:a3:47:83:bd:f3:3a was issued on by DigiCert Inc.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fanatics, Inc.

Organization: Fanatics, Inc.
State / Province: Florida
Locality: Jacksonville
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:e4:46:41:98:2c:9a:c9:d1:9f:a3:47:83:bd:f3:3a
Serial Number (int): 10489864619838816049989608546580165434
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 6b:6b:b6:5f:72:b0:93:63:99:9e:3e:3a:b4:28:04:f2:7c:7c:f5:49
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 6c:20:f2:19:6a:26:9b:5b:7f:09:72:a7:10:0e:39:ca:18:9f:f3:19
Fingerprint (sha256): 2e:f5:60:26:1e:a9:30:ab:a0:f9:1c:fe:c1:c7:02:5e:45:88:59:03:a8:b0:f9:93:62:c2:81:ca:c4:ca:60:e6

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate secure03.fanaticsretailgroup.com

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure03.fanaticsretailgroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure03.fanaticsretailgroup.com
payments.fanatics.es
fanatics.co.uk
www.fanatics-intl.com
www.fanatics.co.uk
store.washingtonfootball.teamfanshop.com
android-mlbshop.frgapps.com
owl.sdk.frgsites.com
fanatics.fr
m.fanatics.de
nfl-cle-browns.sdk.frgsites.com
fausportshop.com
nfl-ny-jets.sdk.frgsites.com
europe2.nflshop.com.teamfanshop.com
ios-nhlshop.frgapps.com
m.fanatics.co.uk
payments.fanatics-intl.com
www.fanatics.de
www.fanatics.es
nfl-det-lions.sdk.frgsites.com
pac12giftshop.com
nba-bos-celtics.sdk.frgsites.com
europe.nflshop.com.teamfanshop.com
m.fanatics-intl.com
dev.apps.frgportal.com
euroshop2.rydercup.com.teamfanshop.com
shop3.international.nhl.com.teamfanshop.com
westcoastconferenceshop.com
nba-sac-kings.sdk.frgsites.com
nba.sdk.frgsites.com
m.fanatics.es
nfl-kc-chiefs.sdk.frgsites.com
hockeyeastshop.com
email.frgimages.com
ios-fanatics.frgapps.com
nba-mem-grizzlies.sdk.frgsites.com
payments.fanatics.co.uk
ios-nbastore.frgapps.com
shop2.international.nhl.com.teamfanshop.com
nba-orl-magic.sdk.frgsites.com
nfl-phi-eagles.sdk.frgsites.com
nfl.sdk.frgsites.com
nfl-jax-jaguars.sdk.frgsites.com
nfl-ind-colts.sdk.frgsites.com
android-nbastore.frgapps.com
nfl-bal-ravens.sdk.frgsites.com
nfl-sac-kings.sdk.frgsites.com
payments.fanatics.fr
nfl-ny-giants.sdk.frgsites.com
nfl-was-redskins.sdk.frgsites.com
fanatics.de
www.mlbshopeurope.com.teamfanshop.com
payments.fanatics.de
fanaticsauctions.com
nba-no-pelicans.sdk.frgsites.com
www.3mlbshopeurope.com.teamfanshop.com
www.fanaticsauctions.com
partners.frgbeta.com
tournamentofrosesshop.com
www2.mlbshopeurope.com.teamfanshop.com
nfl-cin-bengals.sdk.frgsites.com
heismanshop.com
nfl-hou-texans.sdk.frgsites.com
kitbag.teamfanshop.com
louisvillealumnishop.com
txamfanatics.com
ios-mlbshop.frgapps.com
fanatics-intl.com
nfl-den-broncos.sdk.frgsites.com
qc.apps.frgportal.com
nfl-no-saints.sdk.frgsites.com
taxslayerbowlshop.com
nfl-sea-seahawks.sdk.frgsites.com
emailqc.frgimages.com
fanatics.es
www.txamfanatics.com
nba-chi-bulls.sdk.frgsites.com
nfl-tb-buccaneers.sdk.frgsites.com
android-nflshop.frgapps.com
m.fanatics.fr
ios-nflshop.frgapps.com
android-nhlshop.frgapps.com
euroshop.rydercup.com.teamfanshop.com
usaultimatestore.com
nba-gs-warriors.sdk.frgsites.com
mls.sdk.frgsites.com
nfl-chi-bears.sdk.frgsites.com
nba-dall-mavericks.sdk.frgsites.com
android-fanatics.frgapps.com
www.fanatics.fr
nba-por-trailblazers.sdk.frgsites.com
nfl-az-cardinals.sdk.frgsites.com
shop.international.nhl.com.teamfanshop.com

Other certificates including the domain name fanaticsretailgroup.com

(limited to 100 certificates)
secure02.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure05.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure04.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
image.email-aaanational.com
secure02.fanaticsretailgroup.com
image.email-aaanational.com
image.email-aaanational.com
secure06.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
returns.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
image.email-aaanational.com
returns.fanaticsretailgroup.com
secure07.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure07.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
image.email-aaanational.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
*.sites.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure07.fanaticsretailgroup.com
secure04.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
san-2-s1.tlsprovisioning.exacttarget.com
image.email-aaanational.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
returns.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
image.email-aaanational.com
secure03.fanaticsretailgroup.com
san-2-s1.tlsprovisioning.exacttarget.com
secure03.fanaticsretailgroup.com
secure04.dv.fanaticsretailgroup.com
secure04.dv.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
image.email-aaanational.com
secure06.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
image.email-aaanational.com
secure04.dv.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure07.fanaticsretailgroup.com
secure05.fanaticsretailgroup.com
image.email-aaanational.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
image.email-aaanational.com
secure07.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure04.fanaticsretailgroup.com
image.email-aaanational.com
returns.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
image.email-aaanational.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
image.email-aaanational.com
secure03.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com

Certificate

The complete raw certificate details for secure03.fanaticsretailgroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNmPw7cPsD6kT3ySAzYd
qMksR/PAHH7I42h3YuTwMYxnK3TO7P91sZ+ycv3jx7NieQzvTzBguhQ2LDa7cHre
A68KoIQ7TYkYnXoh9GPiWC2b5Kvv0rYNh/pSm63AF4fwzS2rz0JG3ijM3/QsIap0
EbWWP2Tk7ZBRf0v4qbVLNbuvBZiQTxozzrHAoz74HhGzIkkSEDHmOnsm/HL+TTix
wN4eu6PJW9Xw/Ww+lW3XAZb97GJH54+sunUuJMczbNWx9P2Ajcyw3znN/avnKg77
H0UmsHUu760EwX3kRN29uECyVxTvhvKYva302+D9erUQF7aeU1R6nVaPtuJyugmb
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10489864619838816049989608546580165434
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Florida'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jacksonville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fanatics, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure03.fanaticsretailgroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23840084947293781926378326265292727831310888272284424614656121028732646356372966807592178723485028413689386324003177002057309562435416308752502805983772461289766974705251823840365058707018959307672819552915031414229692650440589353669263212214535710052826083035702334925839379993759802718161205908650258400351510978541571488094255706875315549350094136273760900424492451452642038753037306356413178889711168681972306714730643440004413141219918642513854596400571612697584121134352224888701729335072053867146616025100652046622597240221705259128549153402784098613909343184202780223289601077429431359381274063380551568038771
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6b6bb65f72b09363999e3e3ab42804f27c7cf549
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2583 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure03.fanaticsretailgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.fanatics.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanatics.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fanatics-intl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fanatics.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.washingtonfootball.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'android-mlbshop.frgapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owl.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanatics.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.fanatics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-cle-browns.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fausportshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-ny-jets.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'europe2.nflshop.com.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ios-nhlshop.frgapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.fanatics.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.fanatics-intl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fanatics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fanatics.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-det-lions.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pac12giftshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nba-bos-celtics.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'europe.nflshop.com.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.fanatics-intl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.apps.frgportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'euroshop2.rydercup.com.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop3.international.nhl.com.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westcoastconferenceshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nba-sac-kings.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nba.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.fanatics.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-kc-chiefs.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hockeyeastshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.frgimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ios-fanatics.frgapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nba-mem-grizzlies.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.fanatics.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ios-nbastore.frgapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop2.international.nhl.com.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nba-orl-magic.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-phi-eagles.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-jax-jaguars.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-ind-colts.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'android-nbastore.frgapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-bal-ravens.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-sac-kings.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.fanatics.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-ny-giants.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-was-redskins.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanatics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mlbshopeurope.com.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.fanatics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanaticsauctions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nba-no-pelicans.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.3mlbshopeurope.com.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fanaticsauctions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.frgbeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tournamentofrosesshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.mlbshopeurope.com.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-cin-bengals.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heismanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-hou-texans.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitbag.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'louisvillealumnishop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'txamfanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ios-mlbshop.frgapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanatics-intl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-den-broncos.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qc.apps.frgportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-no-saints.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taxslayerbowlshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-sea-seahawks.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emailqc.frgimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanatics.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.txamfanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nba-chi-bulls.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-tb-buccaneers.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'android-nflshop.frgapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.fanatics.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ios-nflshop.frgapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'android-nhlshop.frgapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'euroshop.rydercup.com.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usaultimatestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nba-gs-warriors.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mls.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-chi-bears.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nba-dall-mavericks.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'android-fanatics.frgapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fanatics.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nba-por-trailblazers.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-az-cardinals.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.international.nhl.com.teamfanshop.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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