secure03.teamfanshop.com
Issued by R11
About this certificate
This digital certificate with serial number 04:60:5e:53:8e:ef:a8:f7:d8:5c:ae:e9:09:0c:f6:57:bd:a7 was issued on by Let's Encrypt.
With 34 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=secure03.teamfanshop.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:60:5e:53:8e:ef:a8:f7:d8:5c:ae:e9:09:0c:f6:57:bd:a7Serial Number (int): 381241632242784107229240358258368772029863
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 53:99:b6:e3:d5:79:94:ab:af:e8:f7:ea:a3:b7:f0:16:8c:71:a0:52
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9
Fingerprint (sha1): d4:7e:04:2c:5a:34:23:66:1a:07:36:f0:d2:24:c5:d0:0a:90:b1:f1
Fingerprint (sha256): 39:55:8b:02:d6:c8:03:cb:a6:b9:1f:19:31:94:f4:80:6f:bd:4f:f5:58:72:09:68:a8:09:90:bc:ae:ea:e2:e7
Issuing Certificate URL: http://r11.i.lencr.org/
Revocation information
OCSP Server: http://r11.o.lencr.orgCheck the revocation status for certificate secure03.teamfanshop.com
34
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for secure03.teamfanshop.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
allinchallenge.com
assets.frgportal.com
evertondirect2.evertonfc.com
evertondirect3.evertonfc.com
global.nbastore.com
majesticathletic.com
opt.sportsmemorabilia.com
pelesoccer.com
proshop.patriots.com
secure03.teamfanshop.com
shop.warriors.com
shop2.avfc.co.uk
sportsfanshop.jcpenney.com
sportsfanshopqc.jcpenney.com
store.psg.fr
store.washingtonfootball.com
store2.psg.fr
store4.manutd.com
usshop.fcbayern.com
warriorsteamstore.com
www.allinchallenge.com
www.majesticathletic.com
www.mlbshop.ca
www.pelesoccer.com
www.warriorsteamstore.com
www2.chelseamegastore.com
www2.englandstore.com
www2.kitbag.com
www2.nbastore.eu
www3.chelseamegastore.com
www3.englandstore.com
www3.kitbag.com
www4.chelseamegastore.com
www4.kitbag.com
assets.frgportal.com
evertondirect2.evertonfc.com
evertondirect3.evertonfc.com
global.nbastore.com
majesticathletic.com
opt.sportsmemorabilia.com
pelesoccer.com
proshop.patriots.com
secure03.teamfanshop.com
shop.warriors.com
shop2.avfc.co.uk
sportsfanshop.jcpenney.com
sportsfanshopqc.jcpenney.com
store.psg.fr
store.washingtonfootball.com
store2.psg.fr
store4.manutd.com
usshop.fcbayern.com
warriorsteamstore.com
www.allinchallenge.com
www.majesticathletic.com
www.mlbshop.ca
www.pelesoccer.com
www.warriorsteamstore.com
www2.chelseamegastore.com
www2.englandstore.com
www2.kitbag.com
www2.nbastore.eu
www3.chelseamegastore.com
www3.englandstore.com
www3.kitbag.com
www4.chelseamegastore.com
www4.kitbag.com
Other certificates including the domain name teamfanshop.com
(limited to 100 certificates)
secure03.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
*.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure02.teamfanshop.com
secure02.teamfanshop.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure02.fanaticsretailgroup.com
secure03.teamfanshop.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.teamfanshop.com
secure02.teamfanshop.com
secure03.teamfanshop.com
owa.fanatics.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure02.teamfanshop.com
images.teamfanshop.com
secure01.fanaticsretailgroup.com
images.teamfanshop.com
secure02.teamfanshop.com
secure02.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure03.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure03.fanaticsretailgroup.com
secure01.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
*.teamfanshop.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure03.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.teamfanshop.com
secure03.fanaticsretailgroup.com
secure01.teamfanshop.com
secure02.teamfanshop.com
secure03.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.teamfanshop.com
secure03.teamfanshop.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.teamfanshop.com
secure02.fanaticsretailgroup.com
WH-DMZ-EDGE01.footballfanatics.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure03.teamfanshop.com
secure02.teamfanshop.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
*.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure02.teamfanshop.com
secure02.teamfanshop.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure02.fanaticsretailgroup.com
secure03.teamfanshop.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.teamfanshop.com
secure02.teamfanshop.com
secure03.teamfanshop.com
owa.fanatics.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure02.teamfanshop.com
images.teamfanshop.com
secure01.fanaticsretailgroup.com
images.teamfanshop.com
secure02.teamfanshop.com
secure02.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure03.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure03.fanaticsretailgroup.com
secure01.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
*.teamfanshop.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure03.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.teamfanshop.com
secure03.fanaticsretailgroup.com
secure01.teamfanshop.com
secure02.teamfanshop.com
secure03.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.teamfanshop.com
secure03.teamfanshop.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.teamfanshop.com
secure02.fanaticsretailgroup.com
WH-DMZ-EDGE01.footballfanatics.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure03.teamfanshop.com
secure02.teamfanshop.com
Certificate
The complete raw certificate details for secure03.teamfanshop.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIH5jCCBs6gAwIBAgISBGBeU47vqPfYXK7pCQz2V72nMA0GCSqGSIb3DQEBCwUA MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD EwNSMTEwHhcNMjQwNjEzMDYzODI3WhcNMjQwOTExMDYzODI2WjAjMSEwHwYDVQQD ExhzZWN1cmUwMy50ZWFtZmFuc2hvcC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDeqZAgdbPBYKq03nIEDjT8pjnnfklh+5qG0f8pz+lPTwz9OSIX uO01rq80k+pwGcYdy21EgpIxQ7VGfYIR5335xdgV5I9zN7bBPMj/Uz9y2MbdEje9 /oT8f/IqM3xyMlKSFAvBg0vy/atBPU/OM7L1HqwNVCxtPv87hZb2TWTFsoj/IpqJ bIEJdy9GdyQb5ZraBGE7UwMbc/zr9WxFHomtwT4RtLklBZh3NCCT7sCmEzLZ3Z85 uUXzJKSR/Xpcw/LiEl9vxxi6aiq/F9elbY+yEnYw+pyYqUimgUVv0pJKyi+eWzFP I1VGvopU1CFlm1/yNJ9gxJnnLqJ1ctuPUFJFAgMBAAGjggUCMIIE/jAOBgNVHQ8B Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB /wQCMAAwHQYDVR0OBBYEFFOZtuPVeZSrr+j36qO38BaMcaBSMB8GA1UdIwQYMBaA FMXPRqTq9MPAemyVxC2wXpIvJuO5MFcGCCsGAQUFBwEBBEswSTAiBggrBgEFBQcw AYYWaHR0cDovL3IxMS5vLmxlbmNyLm9yZzAjBggrBgEFBQcwAoYXaHR0cDovL3Ix MS5pLmxlbmNyLm9yZy8wggMHBgNVHREEggL+MIIC+oISYWxsaW5jaGFsbGVuZ2Uu Y29tghRhc3NldHMuZnJncG9ydGFsLmNvbYIcZXZlcnRvbmRpcmVjdDIuZXZlcnRv bmZjLmNvbYIcZXZlcnRvbmRpcmVjdDMuZXZlcnRvbmZjLmNvbYITZ2xvYmFsLm5i YXN0b3JlLmNvbYIUbWFqZXN0aWNhdGhsZXRpYy5jb22CGW9wdC5zcG9ydHNtZW1v cmFiaWxpYS5jb22CDnBlbGVzb2NjZXIuY29tghRwcm9zaG9wLnBhdHJpb3RzLmNv bYIYc2VjdXJlMDMudGVhbWZhbnNob3AuY29tghFzaG9wLndhcnJpb3JzLmNvbYIQ c2hvcDIuYXZmYy5jby51a4Iac3BvcnRzZmFuc2hvcC5qY3Blbm5leS5jb22CHHNw b3J0c2ZhbnNob3BxYy5qY3Blbm5leS5jb22CDHN0b3JlLnBzZy5mcoIcc3RvcmUu d2FzaGluZ3RvbmZvb3RiYWxsLmNvbYINc3RvcmUyLnBzZy5mcoIRc3RvcmU0Lm1h bnV0ZC5jb22CE3Vzc2hvcC5mY2JheWVybi5jb22CFXdhcnJpb3JzdGVhbXN0b3Jl LmNvbYIWd3d3LmFsbGluY2hhbGxlbmdlLmNvbYIYd3d3Lm1hamVzdGljYXRobGV0 aWMuY29tgg53d3cubWxic2hvcC5jYYISd3d3LnBlbGVzb2NjZXIuY29tghl3d3cu d2FycmlvcnN0ZWFtc3RvcmUuY29tghl3d3cyLmNoZWxzZWFtZWdhc3RvcmUuY29t ghV3d3cyLmVuZ2xhbmRzdG9yZS5jb22CD3d3dzIua2l0YmFnLmNvbYIQd3d3Mi5u YmFzdG9yZS5ldYIZd3d3My5jaGVsc2VhbWVnYXN0b3JlLmNvbYIVd3d3My5lbmds YW5kc3RvcmUuY29tgg93d3czLmtpdGJhZy5jb22CGXd3dzQuY2hlbHNlYW1lZ2Fz dG9yZS5jb22CD3d3dzQua2l0YmFnLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCC AQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0s gdm7v6s52IRzAAABkBCIoCoAAAQDAEcwRQIhAJZP58RP7Fp6SXXqXx/mZRbJrQTD RgwjOWQANSdQ5Q7vAiAQ/tMpzuCaRjCCnBByj/WEZOzGUgojB/2yUf2L3It3xQB2 AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABkBCIoC8AAAQDAEcw RQIgdQ5qlN/ebUC8uIXpXQvdMWEr6h7hiueRas74UY6XaowCIQDuAmsM/1FoFB+z Qtajl0HsHVmd+uhtJ7QbZiiKyb4NVDANBgkqhkiG9w0BAQsFAAOCAQEAmTHGaHvO V6Tkg9/PngKxti6Yuo0CGrI3FH8rCh3RnqivkPN92KXxfN/pJ4ciu2I99AeG5Ebp HxZ1ANHn0/kgmSDEfRWhiYYktm1zOjRMuRUukQLukhxRg7Nylqo3R+fJkWnXr4gt 0hy3T0tmeDm9apVnUk7yeByhFuQjDo8VcfOefh87bM+Vcn9R6Bt4JRIOpLrPlSjV m5+jSJ6YHqG70enFqz/wiyuTs7hFyf4ZkRhkX6DlgLksUZOccUakXjIRukiq1BzY 8pUkxAHbcCS0WGpxumYgmCc6B8pGG7psCCxGXkkbQqai4yU020btV71r/yaibQ9Q G9ze+jOghK33Ww== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qmQIHWzwWCqtN5yBA40 /KY5535JYfuahtH/Kc/pT08M/TkiF7jtNa6vNJPqcBnGHcttRIKSMUO1Rn2CEed9 +cXYFeSPcze2wTzI/1M/ctjG3RI3vf6E/H/yKjN8cjJSkhQLwYNL8v2rQT1PzjOy 9R6sDVQsbT7/O4WW9k1kxbKI/yKaiWyBCXcvRnckG+Wa2gRhO1MDG3P86/VsRR6J rcE+EbS5JQWYdzQgk+7AphMy2d2fOblF8ySkkf16XMPy4hJfb8cYumoqvxfXpW2P shJ2MPqcmKlIpoFFb9KSSsovnlsxTyNVRr6KVNQhZZtf8jSfYMSZ5y6idXLbj1BS RQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 381241632242784107229240358258368772029863 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-13 06:38:27 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-11 06:38:26 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure03.teamfanshop.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28108518331805801679500328463467934584161602721826906843474184645777027144183427392284476455536826268316789887995508396877291350492497571662450301901049014889778276866274950703216732714662102011138826096596264122305596151573460139893314352367335946596449011352987718807742351971329448186443025306130133330645572359299628474230555694923490185146218945526911381496342083255339604990971175523901411648817522007983179649408683567176632730683406644247859839502157190132913182509116147201764904196075334205491096613304427875056804749097670696954807544102807249231549469613071925103824708461233909654136162860461590808908357 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5399b6e3d57994abafe8f7eaa3b7f0168c71a052 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (766 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allinchallenge.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.frgportal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evertondirect2.evertonfc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evertondirect3.evertonfc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'global.nbastore.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'majesticathletic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opt.sportsmemorabilia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pelesoccer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proshop.patriots.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure03.teamfanshop.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.warriors.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop2.avfc.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsfanshop.jcpenney.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsfanshopqc.jcpenney.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.psg.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.washingtonfootball.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store2.psg.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store4.manutd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usshop.fcbayern.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warriorsteamstore.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allinchallenge.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.majesticathletic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mlbshop.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pelesoccer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.warriorsteamstore.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.chelseamegastore.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.englandstore.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.kitbag.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.nbastore.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3.chelseamegastore.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3.englandstore.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3.kitbag.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www4.chelseamegastore.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www4.kitbag.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001901088a02a0000040300473045022100964fe7c44fec5a7a4975ea5f1fe66516c9ad04c3460c23396400352750e50eef022010fed329cee09a4630829c10728ff58464ecc6520a2307fdb251fd8bdc8b77c5007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001901088a02f00000403004730450220750e6a94dfde6d40bcb885e95d0bdd31612bea1ee18ae7916acef8518e976a8c022100ee026b0cff5168141fb342d6a39741ec1d599dfae86d27b41b66288ac9be0d54 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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