secure01.teamfanshop.com

Issued by R3

About this certificate

This digital certificate with serial number 04:97:0e:84:4d:f4:15:39:ce:3d:3a:02:9c:1c:9b:f7:e6:d1 was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=secure01.teamfanshop.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:97:0e:84:4d:f4:15:39:ce:3d:3a:02:9c:1c:9b:f7:e6:d1
Serial Number (int): 399851077288312790191506797288450321540817
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 39:f6:ed:6c:84:13:d4:ba:9b:d4:76:24:fd:b7:7a:d2:b7:09:8b:f5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 80:c7:61:4c:f6:7e:39:78:db:c4:ce:36:ef:e8:9e:55:f1:ad:eb:40
Fingerprint (sha256): 3a:21:ed:04:96:48:50:f0:71:43:6a:97:e5:1d:ef:53:9b:cc:f1:94:d5:6e:f7:8c:40:c8:c9:a7:ab:68:5a:eb

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate secure01.teamfanshop.com

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure01.teamfanshop.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

beastmodeonline.com
blizzardgearstore.com
boutique.hockeycanada.ca
boutiquecfm.ca
buckyslockerroom.com
fr.shop.hockeycanada.ca
nllshop.com
secure01.teamfanshop.com
shop.big12sports.com
shop.bigtenstore.com
shop.btn.com
shop.cbssports.com
shop.clemsontigers.com
shop.csurams.com
shop.cubuffs.com
shop.ecu.edu
shop.ecupirates.com
shop.famuathletics.com
shop.friars.com
shop.georgiadogs.com
shop.gnacsports.com
shop.goarmysports.com
shop.gobearcats.com
shop.gocards.com
shop.gocrimson.com
shop.godrakebulldogs.com
shop.goducks.com
shop.goheels.com
shop.gopsusports.com
shop.goredbirds.com
shop.gostanford.com
shop.gousfbulls.com
shop.govandals.com
shop.gowyo.com
shop.gozags.com
shop.guhoyas.com
shop.hockeycanada.ca
shop.huskers.com
shop.internationalchampionscup.com
shop.ivyleaguesports.com
shop.kstatesports.com
shop.lmulions.com
shop.monumentalsportsnetwork.com
shop.msuspartans.com
shop.ohiobobcats.com
shop.okstate.com
shop.osubeavers.com
shop.overwatchleague.com
shop.pepperdinesports.com
shop.pga.com
shop.rolltide.com
shop.rutgersnewarkathletics.com
shop.samfordsports.com
shop.santaclarabroncos.com
shop.seminoles.com
shop.shupirates.com
shop.soonersports.com
shop.southernmiss.com
shop.stanford.edu
shop.texassports.com
shop.texastech.com
shop.theacc.com
shop.theamerican.org
shop.uabsports.com
shop.uicflames.com
shop.ulmwarhawks.com
shop.umterps.com
shop.und.com
shop.unhwildcats.com
shop.utahstateaggies.com
shop.wsucougars.com
shop2.mancity.com
shop3.mancity.com
shop4.mancity.com
store.fightingillini.com
store.kentuckyderby.com
store.s-pulse.co.jp
www.beastmodeonline.com
www.blizzardgearstore.com
www.boutiquecfm.ca
www.buckyslockerroom.com
www.hornetsfanshop.com
www.nllshop.com
www.oualumnistore.com
www.shockerlocker.com
www.shopmiamihurricanes.com
www.shopwvu.com
www.stanfordalumnifanshop.com
www.uhteamshop.com
www.usgashop.com

Other certificates including the domain name teamfanshop.com

(limited to 100 certificates)
secure03.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
*.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure02.teamfanshop.com
secure02.teamfanshop.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure02.fanaticsretailgroup.com
secure03.teamfanshop.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.teamfanshop.com
secure02.teamfanshop.com
secure03.teamfanshop.com
owa.fanatics.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure02.teamfanshop.com
images.teamfanshop.com
secure01.fanaticsretailgroup.com
images.teamfanshop.com
secure02.teamfanshop.com
secure02.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure03.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure03.fanaticsretailgroup.com
secure01.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
*.teamfanshop.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure03.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.teamfanshop.com
secure03.fanaticsretailgroup.com
secure01.teamfanshop.com
secure02.teamfanshop.com
secure03.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.teamfanshop.com
secure03.teamfanshop.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.teamfanshop.com
secure02.fanaticsretailgroup.com
WH-DMZ-EDGE01.footballfanatics.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure03.teamfanshop.com
secure02.teamfanshop.com

Certificate

The complete raw certificate details for secure01.teamfanshop.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMtjCCC56gAwIBAgISBJcOhE30FTnOPToCnByb9+bRMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTAxMzEwNTA3MDNaFw0yMTA1MDEwNTA3MDNaMCMxITAfBgNVBAMT
GHNlY3VyZTAxLnRlYW1mYW5zaG9wLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMclRWlAFgLegyLr6lfeo612ApYCPS6wuHrLP6zVHmGmhsMJgZTp
l+N+a0X8Psey0LF9X22toug9ZexdF+yLgt4ndlMfymFLnr7J6B3iQJmVPRYxPyHy
JJwGcOYnXYNI+mKRmLl+4PvU+gbeGYT+lTY6IR2223GcMHpOt7DwTkJ9ABnzNio4
LnaV6r7/CJ4aTRQ5VyyWJ4n7xmpuQuBfl/1HTBw4uwYOOTS9XCoEzz3ubjeefP1W
d8/SUqlC9yzldiTF/Z0kHvlfcTUQcEjSvgnnUfuJyo6tl7MYGXsE3UL9NUy2o50A
OCTztl4Z4t0cZ9VQc66X+51S6jJY5/GPjgsCAwEAAaOCCdMwggnPMA4GA1UdDwEB
/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/
BAIwADAdBgNVHQ4EFgQUOfbtbIQT1Lqb1HYk/bd60rcJi/UwHwYDVR0jBBgwFoAU
FC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzAB
hhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5p
LmxlbmNyLm9yZy8wggehBgNVHREEggeYMIIHlIITYmVhc3Rtb2Rlb25saW5lLmNv
bYIVYmxpenphcmRnZWFyc3RvcmUuY29tghhib3V0aXF1ZS5ob2NrZXljYW5hZGEu
Y2GCDmJvdXRpcXVlY2ZtLmNhghRidWNreXNsb2NrZXJyb29tLmNvbYIXZnIuc2hv
cC5ob2NrZXljYW5hZGEuY2GCC25sbHNob3AuY29tghhzZWN1cmUwMS50ZWFtZmFu
c2hvcC5jb22CFHNob3AuYmlnMTJzcG9ydHMuY29tghRzaG9wLmJpZ3RlbnN0b3Jl
LmNvbYIMc2hvcC5idG4uY29tghJzaG9wLmNic3Nwb3J0cy5jb22CFnNob3AuY2xl
bXNvbnRpZ2Vycy5jb22CEHNob3AuY3N1cmFtcy5jb22CEHNob3AuY3VidWZmcy5j
b22CDHNob3AuZWN1LmVkdYITc2hvcC5lY3VwaXJhdGVzLmNvbYIWc2hvcC5mYW11
YXRobGV0aWNzLmNvbYIPc2hvcC5mcmlhcnMuY29tghRzaG9wLmdlb3JnaWFkb2dz
LmNvbYITc2hvcC5nbmFjc3BvcnRzLmNvbYIVc2hvcC5nb2FybXlzcG9ydHMuY29t
ghNzaG9wLmdvYmVhcmNhdHMuY29tghBzaG9wLmdvY2FyZHMuY29tghJzaG9wLmdv
Y3JpbXNvbi5jb22CGHNob3AuZ29kcmFrZWJ1bGxkb2dzLmNvbYIQc2hvcC5nb2R1
Y2tzLmNvbYIQc2hvcC5nb2hlZWxzLmNvbYIUc2hvcC5nb3BzdXNwb3J0cy5jb22C
E3Nob3AuZ29yZWRiaXJkcy5jb22CE3Nob3AuZ29zdGFuZm9yZC5jb22CE3Nob3Au
Z291c2ZidWxscy5jb22CEnNob3AuZ292YW5kYWxzLmNvbYIOc2hvcC5nb3d5by5j
b22CD3Nob3AuZ296YWdzLmNvbYIQc2hvcC5ndWhveWFzLmNvbYIUc2hvcC5ob2Nr
ZXljYW5hZGEuY2GCEHNob3AuaHVza2Vycy5jb22CInNob3AuaW50ZXJuYXRpb25h
bGNoYW1waW9uc2N1cC5jb22CGHNob3AuaXZ5bGVhZ3Vlc3BvcnRzLmNvbYIVc2hv
cC5rc3RhdGVzcG9ydHMuY29tghFzaG9wLmxtdWxpb25zLmNvbYIgc2hvcC5tb251
bWVudGFsc3BvcnRzbmV0d29yay5jb22CFHNob3AubXN1c3BhcnRhbnMuY29tghRz
aG9wLm9oaW9ib2JjYXRzLmNvbYIQc2hvcC5va3N0YXRlLmNvbYITc2hvcC5vc3Vi
ZWF2ZXJzLmNvbYIYc2hvcC5vdmVyd2F0Y2hsZWFndWUuY29tghlzaG9wLnBlcHBl
cmRpbmVzcG9ydHMuY29tggxzaG9wLnBnYS5jb22CEXNob3Aucm9sbHRpZGUuY29t
gh9zaG9wLnJ1dGdlcnNuZXdhcmthdGhsZXRpY3MuY29tghZzaG9wLnNhbWZvcmRz
cG9ydHMuY29tghpzaG9wLnNhbnRhY2xhcmFicm9uY29zLmNvbYISc2hvcC5zZW1p
bm9sZXMuY29tghNzaG9wLnNodXBpcmF0ZXMuY29tghVzaG9wLnNvb25lcnNwb3J0
cy5jb22CFXNob3Auc291dGhlcm5taXNzLmNvbYIRc2hvcC5zdGFuZm9yZC5lZHWC
FHNob3AudGV4YXNzcG9ydHMuY29tghJzaG9wLnRleGFzdGVjaC5jb22CD3Nob3Au
dGhlYWNjLmNvbYIUc2hvcC50aGVhbWVyaWNhbi5vcmeCEnNob3AudWFic3BvcnRz
LmNvbYISc2hvcC51aWNmbGFtZXMuY29tghRzaG9wLnVsbXdhcmhhd2tzLmNvbYIQ
c2hvcC51bXRlcnBzLmNvbYIMc2hvcC51bmQuY29tghRzaG9wLnVuaHdpbGRjYXRz
LmNvbYIYc2hvcC51dGFoc3RhdGVhZ2dpZXMuY29tghNzaG9wLndzdWNvdWdhcnMu
Y29tghFzaG9wMi5tYW5jaXR5LmNvbYIRc2hvcDMubWFuY2l0eS5jb22CEXNob3A0
Lm1hbmNpdHkuY29tghhzdG9yZS5maWdodGluZ2lsbGluaS5jb22CF3N0b3JlLmtl
bnR1Y2t5ZGVyYnkuY29tghNzdG9yZS5zLXB1bHNlLmNvLmpwghd3d3cuYmVhc3Rt
b2Rlb25saW5lLmNvbYIZd3d3LmJsaXp6YXJkZ2VhcnN0b3JlLmNvbYISd3d3LmJv
dXRpcXVlY2ZtLmNhghh3d3cuYnVja3lzbG9ja2Vycm9vbS5jb22CFnd3dy5ob3Ju
ZXRzZmFuc2hvcC5jb22CD3d3dy5ubGxzaG9wLmNvbYIVd3d3Lm91YWx1bW5pc3Rv
cmUuY29tghV3d3cuc2hvY2tlcmxvY2tlci5jb22CG3d3dy5zaG9wbWlhbWlodXJy
aWNhbmVzLmNvbYIPd3d3LnNob3B3dnUuY29tgh13d3cuc3RhbmZvcmRhbHVtbmlm
YW5zaG9wLmNvbYISd3d3LnVodGVhbXNob3AuY29tghB3d3cudXNnYXNob3AuY29t
MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH
AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB
9QSB8gDwAHUAXNxDkv7mq0VEsV6a1FbmEDf71fpH3KFzlLJe5vbHDsoAAAF3Vw1D
3QAABAMARjBEAiBJgULCKA/AhCxVDdlEF+Xdu+CUV+/o/zRpZKXTAXiR9AIgM0m1
GtyjeSxT4zhPmuuxh73lmfICuKYWdyAn32X0MuMAdwB9PvL4j/+IVWgkwsDKnlKJ
eSvFDngJfy5ql2iZfiLw1wAAAXdXDUQEAAAEAwBIMEYCIQCH+1G4ZDOPkadh6guV
n3djRI2ttEQGRO84y00ISpbzHgIhAO6Y5r45c4onvWi++fZwIo8cdw/bz13RDzTv
J7rjnxXCMA0GCSqGSIb3DQEBCwUAA4IBAQBD06zxX7LWJ6Q3SBGZUGAvHAUvRxJN
rYSh4euUfWxSaWCOLyAkdlVRTFY3ZTO0ck2XWkp07yvmJIo8E3p+VXjcam6XGEpF
4+BXsva4bySKXq0b3eT6Ay321MAUEpIsLUUjpR+Cz2GOWVwXAB7iTb4LSqPBt/GU
l25hg0WoPRXsAiwxe8A/tdCeFpkc7XaCi9vER+SXYJPM9jejXVkFT96sAIFtGFK7
lmAC6ck0YdNyFIqXHATuKOnCWewLaAwPjSxrRKlwOS1EXDRssks/nrA8cVcqHmmu
X2KHOs319QJfZ6uhGpGUaEyb/AfkbaPekR9ruM8Fgq0a5Z/lDYkSc5AY
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyVFaUAWAt6DIuvqV96j
rXYClgI9LrC4ess/rNUeYaaGwwmBlOmX435rRfw+x7LQsX1fba2i6D1l7F0X7IuC
3id2Ux/KYUuevsnoHeJAmZU9FjE/IfIknAZw5iddg0j6YpGYuX7g+9T6Bt4ZhP6V
NjohHbbbcZwwek63sPBOQn0AGfM2KjgudpXqvv8InhpNFDlXLJYnifvGam5C4F+X
/UdMHDi7Bg45NL1cKgTPPe5uN558/VZ3z9JSqUL3LOV2JMX9nSQe+V9xNRBwSNK+
CedR+4nKjq2XsxgZewTdQv01TLajnQA4JPO2Xhni3Rxn1VBzrpf7nVLqMljn8Y+O
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 399851077288312790191506797288450321540817
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-31 05:07:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-01 05:07:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure01.teamfanshop.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25139801771017823914609166886280549475505324057014298159043922069692747607018630858655816691418573452376367124706682127064971432741697693721193670742147237883291804640530934348578686619227153844977197198180296813283778095099627038852053522254663922733461374901347924300370738482468816748371166789361053464907561551565353860258038444585637659720856745755874493773438929647391260676401333972553755429197327669051289649322949181895950733685127355294296327619624516894670435488342911320651923130207651033129641968604898366236908242106906545556091839147711669573359332799115620348205026260475622368198831460478980918840843
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							39f6ed6c8413d4ba9bd47624fdb77ad2b7098bf5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1944 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beastmodeonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blizzardgearstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boutique.hockeycanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boutiquecfm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buckyslockerroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.shop.hockeycanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nllshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure01.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.big12sports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.bigtenstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.btn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.cbssports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.clemsontigers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.csurams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.cubuffs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ecu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ecupirates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.famuathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.friars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.georgiadogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gnacsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.goarmysports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gobearcats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gocards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gocrimson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.godrakebulldogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.goducks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.goheels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gopsusports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.goredbirds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gostanford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gousfbulls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.govandals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gowyo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gozags.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.guhoyas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.hockeycanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.huskers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.internationalchampionscup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ivyleaguesports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.kstatesports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.lmulions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.monumentalsportsnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.msuspartans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ohiobobcats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.okstate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.osubeavers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.overwatchleague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.pepperdinesports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.pga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.rolltide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.rutgersnewarkathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.samfordsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.santaclarabroncos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.seminoles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.shupirates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.soonersports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.southernmiss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.texassports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.texastech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.theacc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.theamerican.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.uabsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.uicflames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ulmwarhawks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.umterps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.und.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.unhwildcats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.utahstateaggies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.wsucougars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop2.mancity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop3.mancity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop4.mancity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.fightingillini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.kentuckyderby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.s-pulse.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beastmodeonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blizzardgearstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boutiquecfm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buckyslockerroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hornetsfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nllshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oualumnistore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shockerlocker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopmiamihurricanes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopwvu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanfordalumnifanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhteamshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usgashop.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca00000177570d43dd00000403004630440220498142c2280fc0842c550dd94417e5ddbbe09457efe8ff346964a5d3017891f402203349b51adca3792c53e3384f9aebb187bde599f202b8a616772027df65f432e30077007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d700000177570d4404000004030048304602210087fb51b864338f91a761ea0b959f7763448dadb4440644ef38cb4d084a96f31e022100ee98e6be39738a27bd68bef9f670228f1c770fdbcf5dd10f34ef27bae39f15c2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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