www.destinationxl.com

- DESTINATION XL GROUP, INC. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 05:92:ae:dc:4c:fe:73:a6:d3:81:bc:53:b8:10:60:ac was issued on by DigiCert Inc.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

DESTINATION XL GROUP, INC.

Organization: DESTINATION XL GROUP, INC.
State / Province: Massachusetts
Locality: Canton
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:92:ae:dc:4c:fe:73:a6:d3:81:bc:53:b8:10:60:ac
Serial Number (int): 7407761913565926781242582127059427500
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: d1:7d:51:46:d3:74:3c:59:f9:81:93:27:73:31:7f:81:ce:84:41:e8
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 03:27:62:09:83:65:f9:07:71:04:f9:58:c0:0d:3b:ef:c1:df:a2:e5
Fingerprint (sha256): 38:f4:35:1d:78:c9:75:a0:e1:e1:1c:64:12:59:49:e3:32:f6:30:94:a5:79:0a:0f:90:40:03:eb:c6:c0:7d:8f

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.destinationxl.com

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.destinationxl.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.destinationxl.com
app.casualmale.com
app.rochesterclothing.com
beta-test.destinationxl.com
beta.big-and-tall-direct.destinationxl.com
beta.casual-male-big-and-tall.destinationxl.com
beta.destinationxl.com
beta.instore.destinationxl.com
beta.living-xl.destinationxl.com
beta.m.destinationxl.com
beta.rochester-big-and-tall.destinationxl.com
beta.shoes-xl.destinationxl.com
big-and-tall-direct.destinationxl.com
bigandtall.com
btdirect.com
casual-male-big-and-tall.destinationxl.com
casualmale.com
casualmalexl.com
destinationxl.com
dev-beta.destinationxl.com
dxl.com
dxlfactory.com
dxloutlet.com
failover.casualmale.com
gamma.destinationxl.com
gamma.dxl.com
help.dxl.com
image.bigandtall.com
images.destinationxl.com
images.dxl.com
instore.beta.destinationxl.com
instore.destinationxl.com
investor.destinationxl.com
investor.dxl.com
living-xl.destinationxl.com
livingxl.com
m.beta.destinationxl.com
m.destinationxl.com
preprod.cofe.dxl.com
preprod.dxl.com
preview.destinationxl.com
prodl.big-and-tall-direct.destinationxl.com
prodl.casual-male-big-and-tall.destinationxl.com
prodl.destinationxl.com
prodl.living-xl.destinationxl.com
prodl.m.destinationxl.com
prodl.rochester-big-and-tall.destinationxl.com
prodl.shoes-xl.destinationxl.com
rochester-big-and-tall.destinationxl.com
rochesterbigandtall.com
rochesterclothing.com
rochesterclothing.eu
shoes-xl.destinationxl.com
shoesxl.com
shop-bigandtall.com
shop-destinationxl.com
shop-livingxl.com
shop-rochesterclothing.com
shop.casualmale.com
t.destinationxl.com
test-beta.destinationxl.com
testl.destinationxl.com
uat.beta.destinationxl.com
uat.beta.instore.destinationxl.com
uat.beta.instore.dxl.com
uat.beta.preview.destinationxl.com
uat.beta.rochester-big-and-tall.destinationxl.com
Uat.cofe.destinationxl.com
uat.cofe.dxl.com
uat.crm.destinationxl.com
uat.gamma.destinationxl.com
uat.gamma.dxl.com
uat2.destinationxl.com
uat2.dxl.com
www.bigandtall.com
www.btdirect.com
www.casualmale.ca
www.casualmale.com
www.casualmalexl.ca
www.casualmalexl.com
www.dxl.com
www.dxlfactory.com
www.dxloutlet.com
www.livingxl.com
www.m.beta.destinationxl.com
www.m.destinationxl.com
www.rochesterbigandtall.com
www.rochesterclothing.com
www.rochesterclothing.eu
www.shoesxl.com
www.shop.casualmale.com
www.xlrewards.com
xlrewards.com

Other certificates including the domain name destinationxl.com

(limited to 100 certificates)
preview-testl.destinationxl.com
leapfrog-ssl-15.gcs-web.com
landing.destinationxl.com
UAT.BETA.DESTINATIONXL.COM
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-15.gcs-web.com
careers.destinationxl.com
leapfrog-ssl-15.gcs-web.com
landing.destinationxl.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-15.gcs-web.com
careers.destinationxl.com
destinationxl.com
landing.destinationxl.com
leapfrog-ssl-15.gcs-web.com
careers.destinationxl.com
prodl.destinationxl.com
leapfrog-ssl-15.gcs-web.com
www.destinationxl.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-15.gcs-web.com
www.destinationxl.com
www.destinationxl.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-15.gcs-web.com
landing.destinationxl.com
preview-testl.destinationxl.com
vlgstb.destinationxl.com
landing.destinationxl.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-15.gcs-web.com
instore.destinationxl.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-15.gcs-web.com
instore.destinationxl.com
www.destinationxl.com
leapfrog-ssl-15.gcs-web.com
uat.crm.destinationxl.com
careers.destinationxl.com
destinationxl.com
mail.cmal.com
preview.destinationxl.com
leapfrog-ssl-15.gcs-web.com
careers.destinationxl.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-15.gcs-web.com
gifts.destinationxl.com
qa-gifts.dxl.com
instore.destinationxl.com
www.destinationxl.com
www.destinationxl.com
leapfrog-ssl-15.gcs-web.com
careers.destinationxl.com
careers.destinationxl.com
careers.destinationxl.com
landing.destinationxl.com
beta.destinationxl.com
leapfrog-ssl-15.gcs-web.com
destinationxl.com
careers.destinationxl.com
leapfrog-ssl-15.gcs-web.com
UAT.BETA.DESTINATIONXL.COM
landing.destinationxl.com
landing.destinationxl.com
leapfrog-ssl-15.gcs-web.com
www.destinationxl.com
leapfrog-ssl-15.gcs-web.com
*.destinationxl.com
www.destinationxl.com
landing.destinationxl.com
prodl.destinationxl.com
leapfrog-ssl-15.gcs-web.com
www.destinationxl.com
landing.destinationxl.com
UAT.BETA.DESTINATIONXL.COM
landing.destinationxl.com
www.destinationxl.com
instore.mtm.uat.gamma.destinationxl.com
leapfrog-ssl-15.gcs-web.com
careers.destinationxl.com
leapfrog-ssl-15.gcs-web.com
www.destinationxl.com
www.destinationxl.com
devl.beta.destinationxl.com
leapfrog-ssl-15.gcs-web.com
landing.destinationxl.com
careers.destinationxl.com
careers.destinationxl.com
landing.destinationxl.com
landing.destinationxl.com
vlgstb.destinationxl.com
help.dxl.com
leapfrog-ssl-15.gcs-web.com
careers.destinationxl.com
www.destinationxl.com
mail.cmal.com
www.destinationxl.com
destinationxl.com
leapfrog-ssl-15.gcs-web.com

Certificate

The complete raw certificate details for www.destinationxl.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0JJI/d5tU9qxN9dVRvH
N/wFasoHRTTu0URFj3B2fjIZNJflklU9vpY7JMI/4uaGURB0uH39m6436KA0h9Jn
ge1z+LTiThqzbjUz7wmAhmJ+JAex9Evzdi2nlybfzwCTjJeQunsgnvMpz/dCanlL
9jBEndWRvyWlFdClu1/xqLZ2ZpRBIRzErdSLwMLRK1LWRVJks2cPIaeWoSijOBxA
o6DdNoLUfWugV7byaolV+JWNlHM1tg7e641Iucp5yLLU8SubLQY5DwBy+/rHyYvy
bstA15odG1PxmlgWBkrNG/6Y+qX8FNVwDumRkr9qKoH15e6KihPldbNTPpi2YoNo
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7407761913565926781242582127059427500
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Canton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DESTINATION XL GROUP, INC.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.destinationxl.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21619436848610243643346809977208382607628015036461749488730943832762267533036001642544404680743259301229480549648119117439328243043081047064819393813211941566976143900900305714575627939516953621553564649045235874263521838644024636515096654458843816897445965420341954110794192949472328503775653651437877797225993987481701091950507682765850198144895666490759044702161619079679698368322152271804706155045933281801580394894253659559781374604752754748176354117757711356418445064051659561086963446588564524117769034577458971832545431694257251383385907020794719953581254568818573999383169203836243432769909229658998176966797
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d17d5146d3743c59f981932773317f81ce8441e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2374 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.casualmale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.rochesterclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-test.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.big-and-tall-direct.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.casual-male-big-and-tall.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.instore.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.living-xl.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.m.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.rochester-big-and-tall.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.shoes-xl.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'big-and-tall-direct.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigandtall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casual-male-big-and-tall.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casualmale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casualmalexl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-beta.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dxlfactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dxloutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'failover.casualmale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamma.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamma.dxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.dxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.bigandtall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.dxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instore.beta.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instore.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.dxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'living-xl.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.beta.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.cofe.dxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.dxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodl.big-and-tall-direct.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodl.casual-male-big-and-tall.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodl.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodl.living-xl.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodl.m.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodl.rochester-big-and-tall.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodl.shoes-xl.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochester-big-and-tall.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochesterbigandtall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochesterclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochesterclothing.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoes-xl.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoesxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-bigandtall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-livingxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-rochesterclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.casualmale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-beta.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testl.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.beta.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.beta.instore.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.beta.instore.dxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.beta.preview.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.beta.rochester-big-and-tall.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Uat.cofe.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.cofe.dxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.crm.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.gamma.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.gamma.dxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat2.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat2.dxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigandtall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.btdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casualmale.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casualmale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casualmalexl.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casualmalexl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dxlfactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dxloutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m.beta.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochesterbigandtall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochesterclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochesterclothing.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shoesxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shop.casualmale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xlrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xlrewards.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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