secure02.fanaticsretailgroup.com

- Fanatics, Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 04:8f:c6:aa:b9:a3:91:7b:35:b2:e4:06:b6:17:9b:a9 was issued on by DigiCert Inc.

With 83 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fanatics, Inc.

Organization: Fanatics, Inc.
State / Province: Florida
Locality: Jacksonville
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:8f:c6:aa:b9:a3:91:7b:35:b2:e4:06:b6:17:9b:a9
Serial Number (int): 6063439877251763039681386856159091625
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ad:15:8a:3a:5b:fa:ab:ba:85:48:38:d2:31:be:74:a3:61:94:f9:30
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): ef:ff:b8:85:91:c0:be:05:fb:b8:2b:74:1a:62:ed:c2:59:04:39:f9
Fingerprint (sha256): 34:9a:28:61:6a:55:8c:fa:60:65:6d:97:aa:2d:47:6d:e8:a3:dd:6f:10:8c:39:52:fb:05:f4:2a:0e:ac:b7:0a

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g7.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g7.crl

Check the revocation status for certificate secure02.fanaticsretailgroup.com

83

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure02.fanaticsretailgroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.westcoastconferenceshop.com
www.wakeforestshop.com
www.usaultimatestore.com
www.unlvalumni-fanatics.com
www.ukteamshop.com
www.uconnalumnifanatics.com
www.tournamentofrosesshop.com
www.tourdefrance-fanatics.com
www.teamexpressfanatics.com
www.taxslayerbowlshop.com
www.sportsmemorabilia.com
www.sifanatics.com
www.sbnationfanatics.com
www.rivalsfanstore.com
www.rebelshop.com
www.ramblinwreckstore.com
www.phillylovesarmynavygear.com
www.pftfanatics.com
www.pac12giftshop.com
www.operationhattrickfanatics.com
www.northeastconferenceshop.com
www.mycarolinafanshop.com
www.msualumnifanatics.com
www.marshallalumnifanatics.com
www.lsushop.net
www.louisvillealumnishop.com
www.indianauniversitystore.com
www.hollywoodmemorabilia.com
www.hockeyeastshop.com
www.heismanshop.com
www.hailstatestore.com
www.gtalumnifanatics.com
www.gmualumnifanatics.com
www.fansidedfanatics.com
www.fanaticsoutlet.com
www.fanaticsauthentic.com
www.dunhamsfanatics.com
www.colosseum-fanatics.com
www.brfanatics.com
www.bigtallfanatics.com
www.beardownshop.com
www.247sportsfanaticsshop.com
wakeforestshop.com
ukteamshop.com
sportsmemorabilia.com
soe.fanatics.com
shop4.mancity.com.teamfanshop.com
shop3.mancity.com.teamfanshop.com
shop3.atleticodemadrid.com.teamfanshop.com
shop2.mancity.com.teamfanshop.com
shop2.atleticodemadrid.com.teamfanshop.com
shop.mancity.com.teamfanshop.com
shop.atleticodemadrid.com.teamfanshop.com
secure02.fanaticsretailgroup.com
sdk-host.frgsites.com
rebelshop.com
phillylovesarmynavygear.com
partners.teamfanshop.com
operationhattrick.fanatics.com
mycarolinafanshop.com
lsushop.net
locker.fanatics.com
ladyfanatics.com
la2028.teamfanshop.com
kidsfanatics.com
jax.frgimages.com
hollywoodmemorabilia.com
hm.teamfanshop.com
hailstatestore.com
fanviz.frgdata.com
fanviz.frgdata-beta.com
fanviz.frgdata-alpha.com
fanaticsoutlet.com
fanaticsauthentic.com
cyslockerroom.teamfanshop.com
cdn2.sportsmemorabilia.com
cdn.sportsmemorabilia.com
cbas.fanatics.com
bigtallfanatics.com
beardownshop.com
ansel.frgimages.com
alt.frgimages.com
alt-west.frgimages.com

Other certificates including the domain name fanaticsretailgroup.com

(limited to 100 certificates)
secure02.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure05.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure04.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
image.email-aaanational.com
secure02.fanaticsretailgroup.com
image.email-aaanational.com
image.email-aaanational.com
secure06.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
returns.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
image.email-aaanational.com
returns.fanaticsretailgroup.com
secure07.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure07.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
image.email-aaanational.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
*.sites.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure07.fanaticsretailgroup.com
secure04.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
san-2-s1.tlsprovisioning.exacttarget.com
image.email-aaanational.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
returns.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
image.email-aaanational.com
secure03.fanaticsretailgroup.com
san-2-s1.tlsprovisioning.exacttarget.com
secure03.fanaticsretailgroup.com
secure04.dv.fanaticsretailgroup.com
secure04.dv.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
image.email-aaanational.com
secure06.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
image.email-aaanational.com
secure04.dv.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure07.fanaticsretailgroup.com
secure05.fanaticsretailgroup.com
image.email-aaanational.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
image.email-aaanational.com
secure07.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure04.fanaticsretailgroup.com
image.email-aaanational.com
returns.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
image.email-aaanational.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
image.email-aaanational.com
secure03.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com

Certificate

The complete raw certificate details for secure02.fanaticsretailgroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINgzCCDGugAwIBAgIQBI/GqrmjkXs1suQGthebqTANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMjEwMjIzMDAwMDAwWhcN
MjExMDAxMjM1OTU5WjB6MQswCQYDVQQGEwJVUzEQMA4GA1UECBMHRmxvcmlkYTEV
MBMGA1UEBxMMSmFja3NvbnZpbGxlMRcwFQYDVQQKEw5GYW5hdGljcywgSW5jLjEp
MCcGA1UEAxMgc2VjdXJlMDIuZmFuYXRpY3NyZXRhaWxncm91cC5jb20wggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSkpieAzmVtocV/C5JyoGwFXQhnAG8
By0TffJvCoecLAbI4rKXAi92m33jZDgI0RmQFnpba7rhlUs98O7MNgdzZ7hiHYDi
6XDwZ3+oPiF8hTL8KYjWaWLljbnjgT2TyGdZLme2TxMtRRg6bq4wExDB1WbSTvpN
d1jdzUb4kll6eVC76dK+3cX0I6JdgBq+3UifF8naRm3Rn1KwZKjzRb95dyi7tdV2
5F8DCaKfQ2kkfA2owVc05rHDvewZj7dc8ApII5k1i3l7XRvepOh7eZsT7NgsTjMN
3ZSIGLoRWZwMQKezs4gaDzJLNblv0T4qXrt3JQK/Q294zlCaqVAfHeE3AgMBAAGj
ggowMIIKLDAfBgNVHSMEGDAWgBQPgGEcgjFh1S8o541GOLQs4cbZ4jAdBgNVHQ4E
FgQUrRWKOlv6q7qFSDjSMb50o2GU+TAwgghrBgNVHREEgghiMIIIXoIfd3d3Lndl
c3Rjb2FzdGNvbmZlcmVuY2VzaG9wLmNvbYIWd3d3Lndha2Vmb3Jlc3RzaG9wLmNv
bYIYd3d3LnVzYXVsdGltYXRlc3RvcmUuY29tght3d3cudW5sdmFsdW1uaS1mYW5h
dGljcy5jb22CEnd3dy51a3RlYW1zaG9wLmNvbYIbd3d3LnVjb25uYWx1bW5pZmFu
YXRpY3MuY29tgh13d3cudG91cm5hbWVudG9mcm9zZXNzaG9wLmNvbYIdd3d3LnRv
dXJkZWZyYW5jZS1mYW5hdGljcy5jb22CG3d3dy50ZWFtZXhwcmVzc2ZhbmF0aWNz
LmNvbYIZd3d3LnRheHNsYXllcmJvd2xzaG9wLmNvbYIZd3d3LnNwb3J0c21lbW9y
YWJpbGlhLmNvbYISd3d3LnNpZmFuYXRpY3MuY29tghh3d3cuc2JuYXRpb25mYW5h
dGljcy5jb22CFnd3dy5yaXZhbHNmYW5zdG9yZS5jb22CEXd3dy5yZWJlbHNob3Au
Y29tghl3d3cucmFtYmxpbndyZWNrc3RvcmUuY29tgh93d3cucGhpbGx5bG92ZXNh
cm15bmF2eWdlYXIuY29tghN3d3cucGZ0ZmFuYXRpY3MuY29tghV3d3cucGFjMTJn
aWZ0c2hvcC5jb22CIXd3dy5vcGVyYXRpb25oYXR0cmlja2ZhbmF0aWNzLmNvbYIf
d3d3Lm5vcnRoZWFzdGNvbmZlcmVuY2VzaG9wLmNvbYIZd3d3Lm15Y2Fyb2xpbmFm
YW5zaG9wLmNvbYIZd3d3Lm1zdWFsdW1uaWZhbmF0aWNzLmNvbYIed3d3Lm1hcnNo
YWxsYWx1bW5pZmFuYXRpY3MuY29tgg93d3cubHN1c2hvcC5uZXSCHHd3dy5sb3Vp
c3ZpbGxlYWx1bW5pc2hvcC5jb22CHnd3dy5pbmRpYW5hdW5pdmVyc2l0eXN0b3Jl
LmNvbYIcd3d3LmhvbGx5d29vZG1lbW9yYWJpbGlhLmNvbYIWd3d3LmhvY2tleWVh
c3RzaG9wLmNvbYITd3d3LmhlaXNtYW5zaG9wLmNvbYIWd3d3LmhhaWxzdGF0ZXN0
b3JlLmNvbYIYd3d3Lmd0YWx1bW5pZmFuYXRpY3MuY29tghl3d3cuZ211YWx1bW5p
ZmFuYXRpY3MuY29tghh3d3cuZmFuc2lkZWRmYW5hdGljcy5jb22CFnd3dy5mYW5h
dGljc291dGxldC5jb22CGXd3dy5mYW5hdGljc2F1dGhlbnRpYy5jb22CF3d3dy5k
dW5oYW1zZmFuYXRpY3MuY29tghp3d3cuY29sb3NzZXVtLWZhbmF0aWNzLmNvbYIS
d3d3LmJyZmFuYXRpY3MuY29tghd3d3cuYmlndGFsbGZhbmF0aWNzLmNvbYIUd3d3
LmJlYXJkb3duc2hvcC5jb22CHXd3dy4yNDdzcG9ydHNmYW5hdGljc3Nob3AuY29t
ghJ3YWtlZm9yZXN0c2hvcC5jb22CDnVrdGVhbXNob3AuY29tghVzcG9ydHNtZW1v
cmFiaWxpYS5jb22CEHNvZS5mYW5hdGljcy5jb22CIXNob3A0Lm1hbmNpdHkuY29t
LnRlYW1mYW5zaG9wLmNvbYIhc2hvcDMubWFuY2l0eS5jb20udGVhbWZhbnNob3Au
Y29tgipzaG9wMy5hdGxldGljb2RlbWFkcmlkLmNvbS50ZWFtZmFuc2hvcC5jb22C
IXNob3AyLm1hbmNpdHkuY29tLnRlYW1mYW5zaG9wLmNvbYIqc2hvcDIuYXRsZXRp
Y29kZW1hZHJpZC5jb20udGVhbWZhbnNob3AuY29tgiBzaG9wLm1hbmNpdHkuY29t
LnRlYW1mYW5zaG9wLmNvbYIpc2hvcC5hdGxldGljb2RlbWFkcmlkLmNvbS50ZWFt
ZmFuc2hvcC5jb22CIHNlY3VyZTAyLmZhbmF0aWNzcmV0YWlsZ3JvdXAuY29tghVz
ZGstaG9zdC5mcmdzaXRlcy5jb22CDXJlYmVsc2hvcC5jb22CG3BoaWxseWxvdmVz
YXJteW5hdnlnZWFyLmNvbYIYcGFydG5lcnMudGVhbWZhbnNob3AuY29tgh5vcGVy
YXRpb25oYXR0cmljay5mYW5hdGljcy5jb22CFW15Y2Fyb2xpbmFmYW5zaG9wLmNv
bYILbHN1c2hvcC5uZXSCE2xvY2tlci5mYW5hdGljcy5jb22CEGxhZHlmYW5hdGlj
cy5jb22CFmxhMjAyOC50ZWFtZmFuc2hvcC5jb22CEGtpZHNmYW5hdGljcy5jb22C
EWpheC5mcmdpbWFnZXMuY29tghhob2xseXdvb2RtZW1vcmFiaWxpYS5jb22CEmht
LnRlYW1mYW5zaG9wLmNvbYISaGFpbHN0YXRlc3RvcmUuY29tghJmYW52aXouZnJn
ZGF0YS5jb22CF2ZhbnZpei5mcmdkYXRhLWJldGEuY29tghhmYW52aXouZnJnZGF0
YS1hbHBoYS5jb22CEmZhbmF0aWNzb3V0bGV0LmNvbYIVZmFuYXRpY3NhdXRoZW50
aWMuY29tgh1jeXNsb2NrZXJyb29tLnRlYW1mYW5zaG9wLmNvbYIaY2RuMi5zcG9y
dHNtZW1vcmFiaWxpYS5jb22CGWNkbi5zcG9ydHNtZW1vcmFiaWxpYS5jb22CEWNi
YXMuZmFuYXRpY3MuY29tghNiaWd0YWxsZmFuYXRpY3MuY29tghBiZWFyZG93bnNo
b3AuY29tghNhbnNlbC5mcmdpbWFnZXMuY29tghFhbHQuZnJnaW1hZ2VzLmNvbYIW
YWx0LXdlc3QuZnJnaW1hZ2VzLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMGsGA1UdHwRkMGIwL6AtoCuGKWh0dHA6Ly9j
cmwzLmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzcuY3JsMC+gLaArhilodHRwOi8v
Y3JsNC5kaWdpY2VydC5jb20vc3NjYS1zaGEyLWc3LmNybDA+BgNVHSAENzA1MDMG
BmeBDAECAjApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9D
UFMwfAYIKwYBBQUHAQEEcDBuMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdp
Y2VydC5jb20wRgYIKwYBBQUHMAKGOmh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNv
bS9EaWdpQ2VydFNIQTJTZWN1cmVTZXJ2ZXJDQS5jcnQwDAYDVR0TAQH/BAIwADAT
BgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGjSv7O/vJ34q
6hfkqJ15hMlJQeTUwgEAkY/OPdbNEdFPBGhTiEpl0Y6Ktg6VN/aYrMpfn99gMDZB
4EMwUH35DPrwKSFL1bP4ZJM7X+8gTP4LpAYkYpQVaMZskZzYY67gK+UMUH1KsJKN
/NfVC+M1sQjhMPC2GzawNtRv3na4jl4hYaGNnCJ5SIJKvjGOf2PyWp/IovVkdgRe
VorEl2Gj+YNpFUT5Bi84DHgE9n8SQ+rYzdkfCy10NTQCLlWaq5+5bwYuBgBANaq3
nKjB/Az3JMQZ/QuXLypT5mh06+cFB54eUOA3IRTngh1GhMa/FJZ2yoc2S2ABMc0P
45hvMYbvlw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pKYngM5lbaHFfwuScqB
sBV0IZwBvActE33ybwqHnCwGyOKylwIvdpt942Q4CNEZkBZ6W2u64ZVLPfDuzDYH
c2e4Yh2A4ulw8Gd/qD4hfIUy/CmI1mli5Y2544E9k8hnWS5ntk8TLUUYOm6uMBMQ
wdVm0k76TXdY3c1G+JJZenlQu+nSvt3F9COiXYAavt1InxfJ2kZt0Z9SsGSo80W/
eXcou7XVduRfAwmin0NpJHwNqMFXNOaxw73sGY+3XPAKSCOZNYt5e10b3qToe3mb
E+zYLE4zDd2UiBi6EVmcDECns7OIGg8ySzW5b9E+Kl67dyUCv0NveM5QmqlQHx3h
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6063439877251763039681386856159091625
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Florida'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jacksonville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fanatics, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure02.fanaticsretailgroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26582333304158964054584766686065146914485105522998846158109386488198085976454035451890911001635047693697987081042381773747826215074514244953716689404501484659279673179570081243540805665702332120166430151657459261357494347129719515741823707096210385239586140939838099040697298922702208235660016072298097347632298814776576458908957219418448819209659890376334887840209134658115026418436870970418733715581819368819971599211469950433254630082689232779546188018076571112201027185929512567449393364380342198281393018771546863686733511210427409433432962256698849127617716907290178585771335493008641196083170203877388593258807
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ad158a3a5bfaabba854838d231be74a36194f930
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2146 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westcoastconferenceshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wakeforestshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usaultimatestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unlvalumni-fanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ukteamshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uconnalumnifanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tournamentofrosesshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tourdefrance-fanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teamexpressfanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taxslayerbowlshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsmemorabilia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sifanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sbnationfanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rivalsfanstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rebelshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ramblinwreckstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phillylovesarmynavygear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pftfanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pac12giftshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.operationhattrickfanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northeastconferenceshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mycarolinafanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msualumnifanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marshallalumnifanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lsushop.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.louisvillealumnishop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indianauniversitystore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hollywoodmemorabilia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hockeyeastshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heismanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hailstatestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gtalumnifanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gmualumnifanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fansidedfanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fanaticsoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fanaticsauthentic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dunhamsfanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colosseum-fanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brfanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigtallfanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beardownshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.247sportsfanaticsshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wakeforestshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukteamshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsmemorabilia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soe.fanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop4.mancity.com.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop3.mancity.com.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop3.atleticodemadrid.com.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop2.mancity.com.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop2.atleticodemadrid.com.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.mancity.com.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.atleticodemadrid.com.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure02.fanaticsretailgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdk-host.frgsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rebelshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phillylovesarmynavygear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'operationhattrick.fanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycarolinafanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsushop.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locker.fanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ladyfanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'la2028.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kidsfanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jax.frgimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hollywoodmemorabilia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hm.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hailstatestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanviz.frgdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanviz.frgdata-beta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanviz.frgdata-alpha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanaticsoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanaticsauthentic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyslockerroom.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn2.sportsmemorabilia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.sportsmemorabilia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbas.fanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigtallfanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beardownshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ansel.frgimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alt.frgimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alt-west.frgimages.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g7.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g7.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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