www.destinationxl.com

- DESTINATION XL GROUP, INC. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 01:d4:f8:47:3a:a8:fc:d8:eb:1b:8c:08:02:3b:d2:70 was issued on by DigiCert Inc.

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

DESTINATION XL GROUP, INC.

Organization: DESTINATION XL GROUP, INC.
State / Province: Massachusetts
Locality: Canton
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:d4:f8:47:3a:a8:fc:d8:eb:1b:8c:08:02:3b:d2:70
Serial Number (int): 2435030610729967602310343490568704624
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: ed:d6:fe:a6:04:54:26:85:7b:fe:79:cb:5f:72:ce:00:ee:b1:db:29
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 07:3f:c3:95:bc:11:29:48:9e:fe:9f:51:8f:96:29:6c:7b:c1:1b:a7
Fingerprint (sha256): 39:a3:9d:94:82:76:fa:50:c0:3a:f3:97:46:35:6f:5e:8d:41:74:bd:0c:76:e6:ee:8d:d5:ee:18:3d:4a:0b:33

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.destinationxl.com

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.destinationxl.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.destinationxl.com
xlrewards.com
www.xlrewards.com
www.shop.casualmale.com
www.shoesxl.com
www.rochesterclothing.eu
www.rochesterclothing.com
www.rochesterbigandtall.com
www.m.destinationxl.com
www.m.beta.destinationxl.com
www.livingxl.com
www.dxloutlet.com
www.dxlfactory.com
www.dxl.com
www.casualmalexl.com
www.casualmalexl.ca
www.casualmale.com
www.casualmale.ca
www.btdirect.com
www.bigandtall.com
uat2.dxl.com
uat2.destinationxl.com
uat.gamma.destinationxl.com
uat.crm.destinationxl.com
uat.beta.rochester-big-and-tall.destinationxl.com
uat.beta.preview.destinationxl.com
uat.beta.instore.dxl.com
uat.beta.instore.destinationxl.com
uat.beta.destinationxl.com
testl.destinationxl.com
test-beta.destinationxl.com
t.destinationxl.com
shop.casualmale.com
shoesxl.com
shoes-xl.destinationxl.com
rochesterclothing.eu
rochesterclothing.com
rochesterbigandtall.com
rochester-big-and-tall.destinationxl.com
prodl.shoes-xl.destinationxl.com
prodl.rochester-big-and-tall.destinationxl.com
prodl.m.destinationxl.com
prodl.living-xl.destinationxl.com
prodl.destinationxl.com
prodl.casual-male-big-and-tall.destinationxl.com
prodl.big-and-tall-direct.destinationxl.com
preview.destinationxl.com
m.destinationxl.com
m.beta.destinationxl.com
livingxl.com
living-xl.destinationxl.com
investor.dxl.com
investor.destinationxl.com
instore.destinationxl.com
instore.beta.destinationxl.com
images.dxl.com
images.destinationxl.com
image.bigandtall.com
help.dxl.com
gamma.dxl.com
gamma.destinationxl.com
failover.casualmale.com
dxloutlet.com
dxlfactory.com
dxl.com
dev-beta.destinationxl.com
destinationxl.com
casualmalexl.com
casualmale.com
casual-male-big-and-tall.destinationxl.com
btdirect.com
bigandtall.com
big-and-tall-direct.destinationxl.com
beta.shoes-xl.destinationxl.com
beta.rochester-big-and-tall.destinationxl.com
beta.m.destinationxl.com
beta.living-xl.destinationxl.com
beta.instore.destinationxl.com
beta.destinationxl.com
beta.casual-male-big-and-tall.destinationxl.com
beta.big-and-tall-direct.destinationxl.com
beta-test.destinationxl.com
app.rochesterclothing.com
app.casualmale.com

Other certificates including the domain name destinationxl.com

(limited to 100 certificates)
preview-testl.destinationxl.com
leapfrog-ssl-15.gcs-web.com
landing.destinationxl.com
UAT.BETA.DESTINATIONXL.COM
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-15.gcs-web.com
careers.destinationxl.com
leapfrog-ssl-15.gcs-web.com
landing.destinationxl.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-15.gcs-web.com
careers.destinationxl.com
destinationxl.com
landing.destinationxl.com
leapfrog-ssl-15.gcs-web.com
careers.destinationxl.com
prodl.destinationxl.com
leapfrog-ssl-15.gcs-web.com
www.destinationxl.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-15.gcs-web.com
www.destinationxl.com
www.destinationxl.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-15.gcs-web.com
landing.destinationxl.com
preview-testl.destinationxl.com
vlgstb.destinationxl.com
landing.destinationxl.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-15.gcs-web.com
instore.destinationxl.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-15.gcs-web.com
instore.destinationxl.com
www.destinationxl.com
leapfrog-ssl-15.gcs-web.com
uat.crm.destinationxl.com
careers.destinationxl.com
destinationxl.com
mail.cmal.com
preview.destinationxl.com
leapfrog-ssl-15.gcs-web.com
careers.destinationxl.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-15.gcs-web.com
gifts.destinationxl.com
qa-gifts.dxl.com
instore.destinationxl.com
www.destinationxl.com
www.destinationxl.com
leapfrog-ssl-15.gcs-web.com
careers.destinationxl.com
careers.destinationxl.com
careers.destinationxl.com
landing.destinationxl.com
beta.destinationxl.com
leapfrog-ssl-15.gcs-web.com
destinationxl.com
careers.destinationxl.com
leapfrog-ssl-15.gcs-web.com
UAT.BETA.DESTINATIONXL.COM
landing.destinationxl.com
landing.destinationxl.com
leapfrog-ssl-15.gcs-web.com
www.destinationxl.com
leapfrog-ssl-15.gcs-web.com
*.destinationxl.com
www.destinationxl.com
landing.destinationxl.com
prodl.destinationxl.com
leapfrog-ssl-15.gcs-web.com
www.destinationxl.com
landing.destinationxl.com
UAT.BETA.DESTINATIONXL.COM
landing.destinationxl.com
www.destinationxl.com
instore.mtm.uat.gamma.destinationxl.com
leapfrog-ssl-15.gcs-web.com
careers.destinationxl.com
leapfrog-ssl-15.gcs-web.com
www.destinationxl.com
www.destinationxl.com
devl.beta.destinationxl.com
leapfrog-ssl-15.gcs-web.com
landing.destinationxl.com
careers.destinationxl.com
careers.destinationxl.com
landing.destinationxl.com
landing.destinationxl.com
vlgstb.destinationxl.com
help.dxl.com
leapfrog-ssl-15.gcs-web.com
careers.destinationxl.com
www.destinationxl.com
mail.cmal.com
www.destinationxl.com
destinationxl.com
leapfrog-ssl-15.gcs-web.com

Certificate

The complete raw certificate details for www.destinationxl.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApONd0h4mZ8LLkzOZM6hi
ElvtqMsjYknAU1RxsIpl47oM52idbeLiCAmaUysLB/7wpf1i+YcEYMDYh4spl3Kp
77dKnu2ZezTNLHzz142NMhXHsL2DpjQ46+iG8MUnieVULZQKceM4gG09iyokqcJW
horRBGLUtz7mtJQix6cgBxQ39JSVw0E5/zcIz54iCEbuVKg4K3y1M/kZCH1nnkgU
+oQb2D0ijR9y9XlUHGBzfCF9EzkzRwMPOqxlnqKl/aW3cUf/kUVsPO7JmhUV2pHG
0zHOuiHAa3pssA124x6an02shn2G7Nb7JL/QAQRCcOB+yOLxzAFhKn/0sNWLnd9k
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2435030610729967602310343490568704624
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Canton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DESTINATION XL GROUP, INC.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.destinationxl.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20815200608084207178577208973456540331760501508761230899133974684567418917742693578147636876577805202196297806037208937277883487685288221181843697958732659599452026899724479965511603558916608699774507596221427633238844343360515889582630638385489093542273666064584991451806014960139748671347816024960377971758094632452381028977003285573539259199525284952480205623228943625402589542214235305542433885222088698490427748138298266672359352811530736558992599567861178045890503208699068792474681126050942138170453396299123219599853279297126224144685249142549502586727838000942525904406789115354779292378009087059278730060921
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							edd6fea6045426857bfe79cb5f72ce00eeb1db29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2178 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xlrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xlrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shop.casualmale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shoesxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochesterclothing.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochesterclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochesterbigandtall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m.beta.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dxloutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dxlfactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casualmalexl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casualmalexl.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casualmale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casualmale.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.btdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigandtall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat2.dxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat2.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.gamma.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.crm.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.beta.rochester-big-and-tall.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.beta.preview.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.beta.instore.dxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.beta.instore.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.beta.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testl.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-beta.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.casualmale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoesxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoes-xl.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochesterclothing.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochesterclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochesterbigandtall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochester-big-and-tall.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodl.shoes-xl.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodl.rochester-big-and-tall.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodl.m.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodl.living-xl.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodl.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodl.casual-male-big-and-tall.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodl.big-and-tall-direct.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.beta.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'living-xl.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.dxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instore.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instore.beta.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.dxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.bigandtall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.dxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamma.dxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamma.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'failover.casualmale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dxloutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dxlfactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-beta.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casualmalexl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casualmale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casual-male-big-and-tall.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigandtall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'big-and-tall-direct.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.shoes-xl.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.rochester-big-and-tall.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.m.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.living-xl.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.instore.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.casual-male-big-and-tall.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.big-and-tall-direct.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-test.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.rochesterclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.casualmale.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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