www.destinationxl.com

- DESTINATION XL GROUP, INC. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0a:c5:31:d5:05:8f:66:d5:3e:c6:5a:a2:ef:73:8e:dd was issued on by DigiCert Inc.

With 78 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

DESTINATION XL GROUP, INC.

Organization: DESTINATION XL GROUP, INC.
State / Province: Massachusetts
Locality: Canton
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:c5:31:d5:05:8f:66:d5:3e:c6:5a:a2:ef:73:8e:dd
Serial Number (int): 14316173154370501298386019470976192221
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 47:bb:8a:75:03:af:8b:83:d5:59:09:ea:65:9a:e5:03:bb:73:df:d9
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 0e:ab:31:03:26:0a:48:3d:3e:9f:23:3b:33:b4:21:31:79:11:9b:d9
Fingerprint (sha256): 34:39:f2:57:7b:49:93:da:0d:7a:aa:cc:73:23:62:22:6f:e7:7b:1f:b4:c2:ee:a7:c8:c4:45:25:6c:27:02:e5

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.destinationxl.com

78

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.destinationxl.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

xlrewards.com
www.xlrewards.com
www.shop.casualmale.com
www.shoesxl.com
www.rochesterclothing.eu
www.rochesterclothing.com
www.rochesterbigandtall.com
www.m.destinationxl.com
www.m.beta.destinationxl.com
www.livingxl.com
www.dxloutlet.com
www.dxlfactory.com
www.dxl.com
www.destinationxl.com
www.casualmalexl.com
www.casualmalexl.ca
www.casualmale.com
www.casualmale.ca
www.btdirect.com
www.bigandtall.com
uat2.dxl.com
uat2.destinationxl.com
uat.crm.destinationxl.com
uat.beta.rochester-big-and-tall.destinationxl.com
uat.beta.instore.dxl.com
uat.beta.instore.destinationxl.com
uat.beta.destinationxl.com
testl.destinationxl.com
test-beta.destinationxl.com
t.destinationxl.com
shop.casualmale.com
shoesxl.com
shoes-xl.destinationxl.com
rochesterclothing.eu
rochesterclothing.com
rochesterbigandtall.com
rochester-big-and-tall.destinationxl.com
prodl.shoes-xl.destinationxl.com
prodl.rochester-big-and-tall.destinationxl.com
prodl.m.destinationxl.com
prodl.living-xl.destinationxl.com
prodl.destinationxl.com
prodl.casual-male-big-and-tall.destinationxl.com
prodl.big-and-tall-direct.destinationxl.com
m.destinationxl.com
m.beta.destinationxl.com
livingxl.com
living-xl.destinationxl.com
investor.dxl.com
investor.destinationxl.com
instore.destinationxl.com
instore.beta.destinationxl.com
images.dxl.com
images.destinationxl.com
image.bigandtall.com
failover.casualmale.com
dxloutlet.com
dxlfactory.com
dxl.com
dev-beta.destinationxl.com
destinationxl.com
casualmalexl.com
casualmale.com
casual-male-big-and-tall.destinationxl.com
btdirect.com
bigandtall.com
big-and-tall-direct.destinationxl.com
beta.shoes-xl.destinationxl.com
beta.rochester-big-and-tall.destinationxl.com
beta.m.destinationxl.com
beta.living-xl.destinationxl.com
beta.instore.destinationxl.com
beta.destinationxl.com
beta.casual-male-big-and-tall.destinationxl.com
beta.big-and-tall-direct.destinationxl.com
beta-test.destinationxl.com
app.rochesterclothing.com
app.casualmale.com

Other certificates including the domain name destinationxl.com

(limited to 100 certificates)
preview-testl.destinationxl.com
leapfrog-ssl-15.gcs-web.com
landing.destinationxl.com
UAT.BETA.DESTINATIONXL.COM
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-15.gcs-web.com
careers.destinationxl.com
leapfrog-ssl-15.gcs-web.com
landing.destinationxl.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-15.gcs-web.com
careers.destinationxl.com
destinationxl.com
landing.destinationxl.com
leapfrog-ssl-15.gcs-web.com
careers.destinationxl.com
prodl.destinationxl.com
leapfrog-ssl-15.gcs-web.com
www.destinationxl.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-15.gcs-web.com
www.destinationxl.com
www.destinationxl.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-15.gcs-web.com
landing.destinationxl.com
preview-testl.destinationxl.com
vlgstb.destinationxl.com
landing.destinationxl.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-15.gcs-web.com
instore.destinationxl.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-15.gcs-web.com
instore.destinationxl.com
www.destinationxl.com
leapfrog-ssl-15.gcs-web.com
uat.crm.destinationxl.com
careers.destinationxl.com
destinationxl.com
mail.cmal.com
preview.destinationxl.com
leapfrog-ssl-15.gcs-web.com
careers.destinationxl.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-15.gcs-web.com
gifts.destinationxl.com
qa-gifts.dxl.com
instore.destinationxl.com
www.destinationxl.com
www.destinationxl.com
leapfrog-ssl-15.gcs-web.com
careers.destinationxl.com
careers.destinationxl.com
careers.destinationxl.com
landing.destinationxl.com
beta.destinationxl.com
leapfrog-ssl-15.gcs-web.com
destinationxl.com
careers.destinationxl.com
leapfrog-ssl-15.gcs-web.com
UAT.BETA.DESTINATIONXL.COM
landing.destinationxl.com
landing.destinationxl.com
leapfrog-ssl-15.gcs-web.com
www.destinationxl.com
leapfrog-ssl-15.gcs-web.com
*.destinationxl.com
www.destinationxl.com
landing.destinationxl.com
prodl.destinationxl.com
leapfrog-ssl-15.gcs-web.com
www.destinationxl.com
landing.destinationxl.com
UAT.BETA.DESTINATIONXL.COM
landing.destinationxl.com
www.destinationxl.com
instore.mtm.uat.gamma.destinationxl.com
leapfrog-ssl-15.gcs-web.com
careers.destinationxl.com
leapfrog-ssl-15.gcs-web.com
www.destinationxl.com
www.destinationxl.com
devl.beta.destinationxl.com
leapfrog-ssl-15.gcs-web.com
landing.destinationxl.com
careers.destinationxl.com
careers.destinationxl.com
landing.destinationxl.com
landing.destinationxl.com
vlgstb.destinationxl.com
help.dxl.com
leapfrog-ssl-15.gcs-web.com
careers.destinationxl.com
www.destinationxl.com
mail.cmal.com
www.destinationxl.com
destinationxl.com
leapfrog-ssl-15.gcs-web.com

Certificate

The complete raw certificate details for www.destinationxl.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9tTJ6v6kRF6n63qwyFAW
c1b+A9GIHyF+NXpbXSycOK+4V/siiC7QjV6hnY/IMM+l0vYv9sIUETjtScg3T1WF
MeIzcNahNN/0Hxf81x9rCuyXMosD3kwUpCSramXSxqVxkHgsNx6HdOoyXhXz8dlT
QFr+UteaClOn4AqLD3c08AucBquI7WTJiwGKPknfjovF9JzVi2wjl5dbSgzKYzCZ
XBueGB82OAClDHw0fsDDzS+RgnDZikAh1358kkYu3NVoNou5iZnvRp2aOBngWSJh
EU7qMYKBWto2AGkWWJRPAQgD520D5JomqlCd8CcIBnGC4+FeLHYRjQdNX9RzmFsW
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14316173154370501298386019470976192221
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Canton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DESTINATION XL GROUP, INC.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.destinationxl.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31159553061119089370132191629821463271416115340084419209917898940142000824726826128528146651097239292866934905859132158896548883945367156088360252026938193189171124402822108632397411621673153252499178281803932134110908420572463494357810093872900349042602639152122814987948181477846640170711881344918963759958166209915451345272810114331913125555792070071334306856752597028118239748687754367911008131366606825822555855439197842850537161910224672603817008794561055001003030322750832773835955771257084014057478075960093374286316376321179504590608196283065608851434305124786293749879498326582629147215781429331996010288711
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							47bb8a7503af8b83d55909ea659ae503bb73dfd9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2032 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xlrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xlrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shop.casualmale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shoesxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochesterclothing.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochesterclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochesterbigandtall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m.beta.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dxloutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dxlfactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casualmalexl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casualmalexl.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casualmale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casualmale.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.btdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigandtall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat2.dxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat2.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.crm.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.beta.rochester-big-and-tall.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.beta.instore.dxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.beta.instore.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.beta.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testl.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-beta.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.casualmale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoesxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoes-xl.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochesterclothing.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochesterclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochesterbigandtall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochester-big-and-tall.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodl.shoes-xl.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodl.rochester-big-and-tall.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodl.m.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodl.living-xl.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodl.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodl.casual-male-big-and-tall.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodl.big-and-tall-direct.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.beta.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'living-xl.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.dxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instore.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instore.beta.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.dxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.bigandtall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'failover.casualmale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dxloutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dxlfactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-beta.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casualmalexl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casualmale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casual-male-big-and-tall.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigandtall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'big-and-tall-direct.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.shoes-xl.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.rochester-big-and-tall.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.m.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.living-xl.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.instore.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.casual-male-big-and-tall.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.big-and-tall-direct.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-test.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.rochesterclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.casualmale.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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