secure03.fanaticsretailgroup.com

- Fanatics, Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 01:b6:01:7f:93:8c:10:12:e6:f2:29:b5:78:f3:da:1b was issued on by DigiCert Inc.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fanatics, Inc.

Organization: Fanatics, Inc.
State / Province: Florida
Locality: Jacksonville
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:b6:01:7f:93:8c:10:12:e6:f2:29:b5:78:f3:da:1b
Serial Number (int): 2274256414088119429567957580110879259
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: a2:12:e2:84:9a:c6:dd:1e:fe:c6:ca:dd:70:44:06:6b:dd:c4:66:b3
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 36:ae:57:69:ac:cf:57:7c:8d:52:8e:37:21:c2:d9:fb:b5:ca:92:17
Fingerprint (sha256): 33:8f:54:b0:75:5b:9a:76:dd:bb:cd:c5:26:71:d9:66:4d:f8:ac:7a:da:b0:c2:f9:bc:8c:87:0a:1c:48:f8:f1

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g7.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g7.crl

Check the revocation status for certificate secure03.fanaticsretailgroup.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure03.fanaticsretailgroup.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

android-fanatics.frgapps.com
android-mlbshop.frgapps.com
android-nbastore.frgapps.com
android-nflshop.frgapps.com
android-nhlshop.frgapps.com
assets.frgportal.com
email.frgimages.com
emailqc.frgimages.com
euroshop.rydercup.com.teamfanshop.com
euroshop2.rydercup.com.teamfanshop.com
fanatics-intl.com
fanatics.co.uk
fanatics.de
fanatics.es
fanatics.fr
fanaticsauctions.com
fausportshop.com
heismanshop.com
hockeyeastshop.com
ios-fanatics.frgapps.com
ios-mlbshop.frgapps.com
ios-nbastore.frgapps.com
ios-nflshop.frgapps.com
ios-nhlshop.frgapps.com
kitbag.teamfanshop.com
louisvillealumnishop.com
m.fanatics-intl.com
m.fanatics.co.uk
m.fanatics.de
m.fanatics.es
m.fanatics.fr
mls.sdk.frgsites.com
nba-bos-celtics.sdk.frgsites.com
nba-chi-bulls.sdk.frgsites.com
nba-dall-mavericks.sdk.frgsites.com
nba-gs-warriors.sdk.frgsites.com
nba-mem-grizzlies.sdk.frgsites.com
nba-no-pelicans.sdk.frgsites.com
nba-orl-magic.sdk.frgsites.com
nba-por-trailblazers.sdk.frgsites.com
nba-sac-kings.sdk.frgsites.com
nba.sdk.frgsites.com
nfl-az-cardinals.sdk.frgsites.com
nfl-bal-ravens.sdk.frgsites.com
nfl-chi-bears.sdk.frgsites.com
nfl-cin-bengals.sdk.frgsites.com
nfl-cle-browns.sdk.frgsites.com
nfl-den-broncos.sdk.frgsites.com
nfl-det-lions.sdk.frgsites.com
nfl-hou-texans.sdk.frgsites.com
nfl-ind-colts.sdk.frgsites.com
nfl-jax-jaguars.sdk.frgsites.com
nfl-kc-chiefs.sdk.frgsites.com
nfl-no-saints.sdk.frgsites.com
nfl-ny-giants.sdk.frgsites.com
nfl-ny-jets.sdk.frgsites.com
nfl-phi-eagles.sdk.frgsites.com
nfl-sac-kings.sdk.frgsites.com
nfl-sea-seahawks.sdk.frgsites.com
nfl-tb-buccaneers.sdk.frgsites.com
nfl-was-redskins.sdk.frgsites.com
nfl.sdk.frgsites.com
owl.sdk.frgsites.com
pac12giftshop.com
partners.frgbeta.com
payments.fanatics-intl.com
payments.fanatics.co.uk
payments.fanatics.de
payments.fanatics.es
payments.fanatics.fr
secure03.fanaticsretailgroup.com
shop.2022usagames.org.teamfanshop.com
shop.international.nhl.com.teamfanshop.com
shop2.international.nhl.com.teamfanshop.com
shop3.international.nhl.com.teamfanshop.com
store2.fanatics-intl.com
store3.fanatics-intl.com
taxslayerbowlshop.com
tournamentofrosesshop.com
txamfanatics.com
usaultimatestore.com
westcoastconferenceshop.com
www.fanatics-intl.com
www.fanatics.co.uk
www.fanatics.de
www.fanatics.es
www.fanatics.fr
www.fanaticsauctions.com
www.mlbshopeurope.com.teamfanshop.com
www.tiendaNFL.com.mx.teamfanshop.com
www.txamfanatics.com
www2.mlbshopeurope.com.teamfanshop.com

Other certificates including the domain name fanaticsretailgroup.com

(limited to 100 certificates)
secure02.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure05.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure04.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
image.email-aaanational.com
secure02.fanaticsretailgroup.com
image.email-aaanational.com
image.email-aaanational.com
secure06.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
returns.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
image.email-aaanational.com
returns.fanaticsretailgroup.com
secure07.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure07.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
image.email-aaanational.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
*.sites.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure07.fanaticsretailgroup.com
secure04.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
san-2-s1.tlsprovisioning.exacttarget.com
image.email-aaanational.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
returns.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
image.email-aaanational.com
secure03.fanaticsretailgroup.com
san-2-s1.tlsprovisioning.exacttarget.com
secure03.fanaticsretailgroup.com
secure04.dv.fanaticsretailgroup.com
secure04.dv.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
image.email-aaanational.com
secure06.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
image.email-aaanational.com
secure04.dv.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure07.fanaticsretailgroup.com
secure05.fanaticsretailgroup.com
image.email-aaanational.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
image.email-aaanational.com
secure07.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure04.fanaticsretailgroup.com
image.email-aaanational.com
returns.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
image.email-aaanational.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
image.email-aaanational.com
secure03.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com

Certificate

The complete raw certificate details for secure03.fanaticsretailgroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEFDBB22O7LoHAp4S8WC6ZjJxfMSg/
o2tMoWE2y3ou7wbEM4fLz9xnAFw68umdtlQbMhEWQZHqoY8KWqkt9w4HNg==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2274256414088119429567957580110879259
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Florida'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jacksonville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fanatics, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure03.fanaticsretailgroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004143041db63bb2e81c0a784bc582e998c9c5f31283fa36b4ca16136cb7a2eef06c43387cbcfdc67005c3af2e99db6541b3211164191eaa18f0a5aa92df70e0736
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a212e2849ac6dd1efec6cadd7044066bddc466b3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2532 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'android-fanatics.frgapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'android-mlbshop.frgapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'android-nbastore.frgapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'android-nflshop.frgapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'android-nhlshop.frgapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.frgportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.frgimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emailqc.frgimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'euroshop.rydercup.com.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'euroshop2.rydercup.com.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanatics-intl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanatics.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanatics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanatics.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanatics.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanaticsauctions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fausportshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heismanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hockeyeastshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ios-fanatics.frgapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ios-mlbshop.frgapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ios-nbastore.frgapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ios-nflshop.frgapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ios-nhlshop.frgapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitbag.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'louisvillealumnishop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.fanatics-intl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.fanatics.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.fanatics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.fanatics.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.fanatics.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mls.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nba-bos-celtics.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nba-chi-bulls.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nba-dall-mavericks.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nba-gs-warriors.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nba-mem-grizzlies.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nba-no-pelicans.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nba-orl-magic.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nba-por-trailblazers.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nba-sac-kings.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nba.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-az-cardinals.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-bal-ravens.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-chi-bears.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-cin-bengals.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-cle-browns.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-den-broncos.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-det-lions.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-hou-texans.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-ind-colts.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-jax-jaguars.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-kc-chiefs.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-no-saints.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-ny-giants.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-ny-jets.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-phi-eagles.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-sac-kings.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-sea-seahawks.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-tb-buccaneers.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-was-redskins.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owl.sdk.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pac12giftshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.frgbeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.fanatics-intl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.fanatics.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.fanatics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.fanatics.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.fanatics.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure03.fanaticsretailgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.2022usagames.org.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.international.nhl.com.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop2.international.nhl.com.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop3.international.nhl.com.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store2.fanatics-intl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store3.fanatics-intl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taxslayerbowlshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tournamentofrosesshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'txamfanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usaultimatestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westcoastconferenceshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fanatics-intl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fanatics.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fanatics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fanatics.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fanatics.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fanaticsauctions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mlbshopeurope.com.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiendaNFL.com.mx.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.txamfanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.mlbshopeurope.com.teamfanshop.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g7.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g7.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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