secure04.dv.fanaticsretailgroup.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:54:f6:a5:dc:c2:62:b7:04:e8:e2:d7:70:6e:c6:cf:6e:e3 was issued on by Let's Encrypt.

With 70 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=secure04.dv.fanaticsretailgroup.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:54:f6:a5:dc:c2:62:b7:04:e8:e2:d7:70:6e:c6:cf:6e:e3
Serial Number (int): 377360713841875492187419821372112118968035
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2a:02:db:b2:65:c9:eb:8a:69:64:50:36:37:61:67:e6:79:82:35:38
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f8:66:11:0c:3f:76:55:5d:0b:8a:56:e9:ec:ea:49:be:81:c7:29:3b
Fingerprint (sha256): 30:1e:8e:dc:f2:71:e7:4e:af:15:53:de:a7:fb:f3:d9:38:07:6c:3a:c1:39:81:e7:e9:a1:47:c4:25:42:bb:3c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate secure04.dv.fanaticsretailgroup.com

70

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure04.dv.fanaticsretailgroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

asiastore.fcbayern.com
boutique.letour.fr
chelseamegastore.com
dfb-fanshop.de
englandrugbystore.com
englandstore.com
europe.nflshop.com
euroshop.rydercup.com
evertondirect.evertonfc.com
f1store.formula1.com
kitbag.com
m.asiastore.fcbayern.com
m.boutique.letour.fr
m.chelseamegastore.com
m.dfb-fanshop.de
m.englandrugbystore.com
m.englandstore.com
m.europe.nflshop.com
m.euroshop.rydercup.com
m.evertondirect.evertonfc.com
m.f1store.formula1.com
m.kitbag.com
m.overwatchleaguestore.com
m.shop.atleticodemadrid.com
m.shop.avfc.co.uk
m.shop.mancity.com
m.shop.psg.fr
m.shop.realmadrid.com
m.softbankhawksstore.jp
m.store.leicestertigers.com
m.store.manutd.com
overwatchleaguestore.com
payment.kitbag.com
payments.asiastore.fcbayern.com
payments.boutique.letour.fr
payments.chelseamegastore.com
payments.dfb-fanshop.de
payments.englandrugbystore.com
payments.englandstore.com
payments.europe.nflshop.com
payments.euroshop.rydercup.com
payments.evertondirect.evertonfc.com
payments.f1store.formula1.com
payments.overwatchleaguestore.com
payments.shop.atleticodemadrid.com
payments.shop.avfc.co.uk
payments.shop.europeantour.com
payments.shop.mancity.com
payments.shop.psg.fr
payments.shop.realmadrid.com
payments.softbankhawksstore.jp
payments.store.leicestertigers.com
payments.store.manutd.com
secure04.dv.fanaticsretailgroup.com
shop.atleticodemadrid.com
shop.avfc.co.uk
shop.europeantour.com
shop.mancity.com
shop.psg.fr
shop.realmadrid.com
softbankhawksstore.jp
store.leicestertigers.com
store.manutd.com
www.chelseamegastore.com
www.dfb-fanshop.de
www.englandrugbystore.com
www.englandstore.com
www.kitbag.com
www.overwatchleaguestore.com
www.softbankhawksstore.jp

Other certificates including the domain name fanaticsretailgroup.com

(limited to 100 certificates)
secure02.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure05.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure04.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
image.email-aaanational.com
secure02.fanaticsretailgroup.com
image.email-aaanational.com
image.email-aaanational.com
secure06.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
returns.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
image.email-aaanational.com
returns.fanaticsretailgroup.com
secure07.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure07.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
image.email-aaanational.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
*.sites.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure07.fanaticsretailgroup.com
secure04.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
san-2-s1.tlsprovisioning.exacttarget.com
image.email-aaanational.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
returns.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
image.email-aaanational.com
secure03.fanaticsretailgroup.com
san-2-s1.tlsprovisioning.exacttarget.com
secure03.fanaticsretailgroup.com
secure04.dv.fanaticsretailgroup.com
secure04.dv.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
image.email-aaanational.com
secure06.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
image.email-aaanational.com
secure04.dv.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure07.fanaticsretailgroup.com
secure05.fanaticsretailgroup.com
image.email-aaanational.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
image.email-aaanational.com
secure07.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure04.fanaticsretailgroup.com
image.email-aaanational.com
returns.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
image.email-aaanational.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
image.email-aaanational.com
secure03.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com

Certificate

The complete raw certificate details for secure04.dv.fanaticsretailgroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4NmVHr85EOOHt6oLUoS
fXbqBl6TQZiQ3q2/SORi9r+0o0ic1kG0zLI6Oqw+neEl587nl9AAYr+5L6M6GZEG
ep/MMdBNaFwfL5M+eOmYIZf2myC30tGQfn1+bsPAGDXFpl6VFVUGS7mQGiYuhS2p
SPT71+lqieqQ6JT42I3D+5Y+H4ZOUlcAlYIIhXMC6UQqVkBNuF3HNib+lQd6Pq/O
6BbtospY6azhFjYAjdnAJ3EMcxUkZzQs7zDdJeXGPmJYBoIfK04+Obtm+P+EQ4rR
ueiTaGfQ7LfhLf2LUuimfXajAfRvK8DB8+OwAIU8aLt+N3Bxf2atEEXGdtn+qWgm
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 377360713841875492187419821372112118968035
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-20 08:27:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-20 08:27:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure04.dv.fanaticsretailgroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22661452209061466646291780620285871274858439025633518817380938920059787419870217905711092489651627179671696083721329758828495313748146885385074847489559206988510239319404864569596528826461827483423252837419676677529541041154004242124458689550359324077962340788200636489688072472406457737093281695263685740432295766711124030000401832939994525771598598332712456154651215052462105765298946381991876136875993242896707386165142442974779016626371599986901019503372746613555137345457749978348635166263746808691975288154538395623904678699170511949098669831608732504345708672412048549728675526320862727031958748314724211369503
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2a02dbb265c9eb8a69645036376167e679823538
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1740 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asiastore.fcbayern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boutique.letour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chelseamegastore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfb-fanshop.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'englandrugbystore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'englandstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'europe.nflshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'euroshop.rydercup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evertondirect.evertonfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f1store.formula1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitbag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.asiastore.fcbayern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.boutique.letour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.chelseamegastore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.dfb-fanshop.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.englandrugbystore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.englandstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.europe.nflshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.euroshop.rydercup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.evertondirect.evertonfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.f1store.formula1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.kitbag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.overwatchleaguestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.shop.atleticodemadrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.shop.avfc.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.shop.mancity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.shop.psg.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.shop.realmadrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.softbankhawksstore.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.store.leicestertigers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.store.manutd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overwatchleaguestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.kitbag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.asiastore.fcbayern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.boutique.letour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.chelseamegastore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.dfb-fanshop.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.englandrugbystore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.englandstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.europe.nflshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.euroshop.rydercup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.evertondirect.evertonfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.f1store.formula1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.overwatchleaguestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.shop.atleticodemadrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.shop.avfc.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.shop.europeantour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.shop.mancity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.shop.psg.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.shop.realmadrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.softbankhawksstore.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.store.leicestertigers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.store.manutd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure04.dv.fanaticsretailgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.atleticodemadrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.avfc.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.europeantour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.mancity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.psg.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.realmadrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softbankhawksstore.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.leicestertigers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.manutd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chelseamegastore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dfb-fanshop.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.englandrugbystore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.englandstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kitbag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.overwatchleaguestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.softbankhawksstore.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000017061ec9bd2000004030047304502206786029390c4d8f25ac4ef1e1783b3c43dab47dd68779e7f399cd25221c31343022100873973a24f6dcd8246803b72bd627b3d754e272e35eca7574bb3fb9d1b4fa17e007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017061ec9bd100000403004730450221008ad57bf6dd8a7e97b7364fb2ea68c01247bfcf3c559f1de662bf6da2964d4dcf02202a808db0196de579f32a45c6363ff8cbfc769eb31f3a0e18fd2d0bb619081a7e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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