secure02.teamfanshop.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:70:6d:da:d0:36:6f:ae:af:f2:ee:f2:c5:55:05:77:ac:e3 was issued on by Let's Encrypt.

With 63 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=secure02.teamfanshop.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:70:6d:da:d0:36:6f:ae:af:f2:ee:f2:c5:55:05:77:ac:e3
Serial Number (int): 386706790817495893272359057928763475471587
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3b:b4:f6:b4:a5:ab:6f:88:74:9f:ce:fe:a0:7a:32:c7:fd:0e:f1:75
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c9:e0:6a:11:8e:8b:6e:b5:b7:62:85:6f:8f:8a:c0:70:1a:d7:2b:97
Fingerprint (sha256): 3e:3f:cc:b7:59:b6:48:b6:9a:39:35:94:2c:f5:0f:72:ed:fc:c7:3b:9c:44:58:75:50:7e:4b:43:ea:4a:84:ac

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate secure02.teamfanshop.com

63

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure02.teamfanshop.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cdn.sportsmemorabilia.com
clemsonalumni.teamfanshop.com
fanshop.scheels.com
fi.blizzardgearstore.com
fr.lids.ca
m.blizzardgearstore.com
payments.blizzardgearstore.com
secure02.teamfanshop.com
shop.arnoldpalmer.com
shop.calbears.com
shop.cctigers.com
shop.collegefootballplayoff.com
shop.collegevault.com
shop.cuse.com
shop.floridagators.com
shop.gamecocksonline.com
shop.goairforcefalcons.com
shop.gocreighton.com
shop.goseawolves.com
shop.handshigh.com
shop.hokiesports.com
shop.navysports.com
shop.nflpa.com
shop.pac-12.com
shop.sportingnews.com
shop.themw.com
shop.thesundevils.com
shop.uconnhuskies.com
shop.usab.com
shop.uscho.com
shop.usctrojans.com
shop.utsports.com
shop.villanova.com
store.miseleccion.us
uhteamshop.com
us.shop.realmadrid.com
us.store.manutd.com
www-open.teamfanshop.com
www.bigskyshop.com
www.bigtallfanatics.com
www.fanaticsauthentic.com
www.fanaticsoutlet.com
www.grizzliesstore.com
www.hokiegear.com
www.hollywoodmemorabilia.com
www.hornetsfanshop.com
www.kitbag-us.com
www.kustore.com
www.lids.ca
www.lids.com
www.lpgaproshop.com
www.pgatourfanshop.com
www.rivalsfanstore.com
www.rutgersalumnishop.com
www.secstore.com
www.shopcaa.com
www.shopncaasports.com
www.shoptpc.com
www.sportsmemorabilia.com
www.teamusashop.com
www.theplayerschampionshipstore.com
www.ukteamshop.com
www.us.store.manutd.com

Other certificates including the domain name teamfanshop.com

(limited to 100 certificates)
secure03.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
*.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure02.teamfanshop.com
secure02.teamfanshop.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure02.fanaticsretailgroup.com
secure03.teamfanshop.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.teamfanshop.com
secure02.teamfanshop.com
secure03.teamfanshop.com
owa.fanatics.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure02.teamfanshop.com
images.teamfanshop.com
secure01.fanaticsretailgroup.com
images.teamfanshop.com
secure02.teamfanshop.com
secure02.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure03.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure03.fanaticsretailgroup.com
secure01.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
*.teamfanshop.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure03.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.teamfanshop.com
secure03.fanaticsretailgroup.com
secure01.teamfanshop.com
secure02.teamfanshop.com
secure03.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.teamfanshop.com
secure03.teamfanshop.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.teamfanshop.com
secure02.fanaticsretailgroup.com
WH-DMZ-EDGE01.footballfanatics.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure03.teamfanshop.com
secure02.teamfanshop.com
secure02.teamfanshop.com

Certificate

The complete raw certificate details for secure02.teamfanshop.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKxTCCCa2gAwIBAgISBHBt2tA2b66v8u7yxVUFd6zjMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDA1MjcxOTAxMThaFw0y
MDA4MjUxOTAxMThaMCMxITAfBgNVBAMTGHNlY3VyZTAyLnRlYW1mYW5zaG9wLmNv
bTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALmXteQpy9tOpwHqemAy
OStRxfDxZhKoms2RpL7mAYMvIFOgaB8P4ZB/s1cnDQiNNa16zVMRWUY4yr8Adk3d
2Q3bkjTzhMJxbxEFDsrIfzF3ndTR6eILb7o8n4XaZT56voqGDn1NTGkrKom/SBYX
2ZneY7NVf/uZVvA239wpGZhaAQcUuRQJNd/mWum4b7MItoxTxPoNpwF31Z4VaJff
RUS0MulNVd0Eg8Y3/llMXKwPJsiW5VBQ6GGPNVH6GLPYcloP3lQ1GDq1Q6Xn9J9F
Cmo0EIbZU7AcGcBER3jU0uqfjL8PuGFZ/+lQuYIjL+xvBIPkPH8mUxVcekCPXT/t
k8sCAwEAAaOCB8owggfGMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUO7T2tKWrb4h0
n87+oHoyx/0O8XUwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYI
KwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0
c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0
c2VuY3J5cHQub3JnLzCCBX4GA1UdEQSCBXUwggVxghljZG4uc3BvcnRzbWVtb3Jh
YmlsaWEuY29tgh1jbGVtc29uYWx1bW5pLnRlYW1mYW5zaG9wLmNvbYITZmFuc2hv
cC5zY2hlZWxzLmNvbYIYZmkuYmxpenphcmRnZWFyc3RvcmUuY29tggpmci5saWRz
LmNhghdtLmJsaXp6YXJkZ2VhcnN0b3JlLmNvbYIecGF5bWVudHMuYmxpenphcmRn
ZWFyc3RvcmUuY29tghhzZWN1cmUwMi50ZWFtZmFuc2hvcC5jb22CFXNob3AuYXJu
b2xkcGFsbWVyLmNvbYIRc2hvcC5jYWxiZWFycy5jb22CEXNob3AuY2N0aWdlcnMu
Y29tgh9zaG9wLmNvbGxlZ2Vmb290YmFsbHBsYXlvZmYuY29tghVzaG9wLmNvbGxl
Z2V2YXVsdC5jb22CDXNob3AuY3VzZS5jb22CFnNob3AuZmxvcmlkYWdhdG9ycy5j
b22CGHNob3AuZ2FtZWNvY2tzb25saW5lLmNvbYIac2hvcC5nb2FpcmZvcmNlZmFs
Y29ucy5jb22CFHNob3AuZ29jcmVpZ2h0b24uY29tghRzaG9wLmdvc2Vhd29sdmVz
LmNvbYISc2hvcC5oYW5kc2hpZ2guY29tghRzaG9wLmhva2llc3BvcnRzLmNvbYIT
c2hvcC5uYXZ5c3BvcnRzLmNvbYIOc2hvcC5uZmxwYS5jb22CD3Nob3AucGFjLTEy
LmNvbYIVc2hvcC5zcG9ydGluZ25ld3MuY29tgg5zaG9wLnRoZW13LmNvbYIVc2hv
cC50aGVzdW5kZXZpbHMuY29tghVzaG9wLnVjb25uaHVza2llcy5jb22CDXNob3Au
dXNhYi5jb22CDnNob3AudXNjaG8uY29tghNzaG9wLnVzY3Ryb2phbnMuY29tghFz
aG9wLnV0c3BvcnRzLmNvbYISc2hvcC52aWxsYW5vdmEuY29tghRzdG9yZS5taXNl
bGVjY2lvbi51c4IOdWh0ZWFtc2hvcC5jb22CFnVzLnNob3AucmVhbG1hZHJpZC5j
b22CE3VzLnN0b3JlLm1hbnV0ZC5jb22CGHd3dy1vcGVuLnRlYW1mYW5zaG9wLmNv
bYISd3d3LmJpZ3NreXNob3AuY29tghd3d3cuYmlndGFsbGZhbmF0aWNzLmNvbYIZ
d3d3LmZhbmF0aWNzYXV0aGVudGljLmNvbYIWd3d3LmZhbmF0aWNzb3V0bGV0LmNv
bYIWd3d3LmdyaXp6bGllc3N0b3JlLmNvbYIRd3d3Lmhva2llZ2Vhci5jb22CHHd3
dy5ob2xseXdvb2RtZW1vcmFiaWxpYS5jb22CFnd3dy5ob3JuZXRzZmFuc2hvcC5j
b22CEXd3dy5raXRiYWctdXMuY29tgg93d3cua3VzdG9yZS5jb22CC3d3dy5saWRz
LmNhggx3d3cubGlkcy5jb22CE3d3dy5scGdhcHJvc2hvcC5jb22CFnd3dy5wZ2F0
b3VyZmFuc2hvcC5jb22CFnd3dy5yaXZhbHNmYW5zdG9yZS5jb22CGXd3dy5ydXRn
ZXJzYWx1bW5pc2hvcC5jb22CEHd3dy5zZWNzdG9yZS5jb22CD3d3dy5zaG9wY2Fh
LmNvbYIWd3d3LnNob3BuY2Fhc3BvcnRzLmNvbYIPd3d3LnNob3B0cGMuY29tghl3
d3cuc3BvcnRzbWVtb3JhYmlsaWEuY29tghN3d3cudGVhbXVzYXNob3AuY29tgiN3
d3cudGhlcGxheWVyc2NoYW1waW9uc2hpcHN0b3JlLmNvbYISd3d3LnVrdGVhbXNo
b3AuY29tghd3d3cudXMuc3RvcmUubWFudXRkLmNvbTBMBgNVHSAERTBDMAgGBmeB
DAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxl
dHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB1AOcS8rA3fhpi
+47JDGGE8ep7N8tWHREmW/Pg80vyQVRuAAABcle5kacAAAQDAEYwRAIgTpw4OeiL
mVubGGgEvRomSCcsuH1d+SHAl7lgUSByWCECICksC4byGlMUTViWYCmd7rnyofKl
9LhwiqZY1Tass9pkAHcAB7dcG+V9aP/xsMYdIxXHuuZXfFeUt2ruvGE6GmnTohwA
AAFyV7mR6wAABAMASDBGAiEA7c4ARr2eqzTNP8WCoFTbms78H87P5Cfga1amcjOz
PAoCIQD5115XzuDeht34BTcM8JqpC3qB8umhS0UQd4VBr0kzcDANBgkqhkiG9w0B
AQsFAAOCAQEAGc9B0tPhpoju5pLwinIOM1sukunC0jXMWVUsxeEO53l9m/OQL0Yk
1F4eLiUcxxrNrmIlpZbomM+wI48Kzqu4gcLBtyCl9BktCmdXF0zE+nLcxf9eycQr
xKH1WQD2Pgvgrd+iw2/iM926OMV4iWsTqT8vEJNSk7xSd/9o8aAJ9wEN0gacS1/C
E5ukKZAzGXB3y6Mwe4bM/mP638wqMByyIN5atNiPHNEVGjYf0NTrAI2agYrzc+R0
aS9b6Zlt/bRqrEStQRnRwtYZP4BmC5c2/isJ4ZItgJQYX7MZ7oWlRuFK9APzzIJ6
5G/7BbydolsT9yPMZqJqteNpGjTiVJot7w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZe15CnL206nAep6YDI5
K1HF8PFmEqiazZGkvuYBgy8gU6BoHw/hkH+zVycNCI01rXrNUxFZRjjKvwB2Td3Z
DduSNPOEwnFvEQUOysh/MXed1NHp4gtvujyfhdplPnq+ioYOfU1MaSsqib9IFhfZ
md5js1V/+5lW8Dbf3CkZmFoBBxS5FAk13+Za6bhvswi2jFPE+g2nAXfVnhVol99F
RLQy6U1V3QSDxjf+WUxcrA8myJblUFDoYY81UfoYs9hyWg/eVDUYOrVDpef0n0UK
ajQQhtlTsBwZwERHeNTS6p+Mvw+4YVn/6VC5giMv7G8Eg+Q8fyZTFVx6QI9dP+2T
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 386706790817495893272359057928763475471587
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-27 19:01:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-25 19:01:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure02.teamfanshop.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23428897660808660463935233224004874588440296550519080840753624393587581000573234276556723152546844111911866748367547748002478352626083255889547037274778973046785487913585513801717904430528800170697731402063581387568451212143222451911559126305559774160343210712343327371383278971025300734532859700901856584504829026892659871523504792985462221690471679580879957779181728579257252920720387978305533850745491587961132690770711528917072298185010373617993831757818330881298427322755123649482820761344429961081469446663376326536602758706515140573544219870522778445843886151969633750868644234931041431943046378470697687946187
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3bb4f6b4a5ab6f88749fcefea07a32c7fd0ef175
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1397 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.sportsmemorabilia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clemsonalumni.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanshop.scheels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fi.blizzardgearstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.lids.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.blizzardgearstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.blizzardgearstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure02.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.arnoldpalmer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.calbears.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.cctigers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.collegefootballplayoff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.collegevault.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.cuse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.floridagators.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gamecocksonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.goairforcefalcons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gocreighton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.goseawolves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.handshigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.hokiesports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.navysports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.nflpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.pac-12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.themw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.thesundevils.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.uconnhuskies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.usab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.uscho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.usctrojans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.utsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.villanova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.miseleccion.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhteamshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.shop.realmadrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.store.manutd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-open.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigskyshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigtallfanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fanaticsauthentic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fanaticsoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grizzliesstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hokiegear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hollywoodmemorabilia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hornetsfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kitbag-us.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kustore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lids.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lpgaproshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pgatourfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rivalsfanstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rutgersalumnishop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopcaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopncaasports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shoptpc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsmemorabilia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teamusashop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theplayerschampionshipstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ukteamshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.us.store.manutd.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e0000017257b991a7000004030046304402204e9c3839e88b995b9b186804bd1a2648272cb87d5df921c097b96051207258210220292c0b86f21a53144d589660299deeb9f2a1f2a5f4b8708aa658d536acb3da6400770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017257b991eb0000040300483046022100edce0046bd9eab34cd3fc582a054db9acefc1fcecfe427e06b56a67233b33c0a022100f9d75e57cee0de86ddf805370cf09aa90b7a81f2e9a14b4510778541af493370
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0019cf41d2d3e1a688eee692f08a720e335b2e92e9c2d235cc59552cc5e10ee7797d9bf3902f4624d45e1e2e251cc71acdae6225a596e898cfb0238f0aceabb881c2c1b720a5f4192d0a6757174cc4fa72dcc5ff5ec9c42bc4a1f55900f63e0be0addfa2c36fe233ddba38c578896b13a93f2f10935293bc5277ff68f1a009f7010dd2069c4b5fc2139ba4299033197077cba3307b86ccfe63fadfcc2a301cb220de5ab4d88f1cd1151a361fd0d4eb008d9a818af373e474692f5be9996dfdb46aac44ad4119d1c2d6193f80660b9736fe2b09e1922d8094185fb319ee85a546e14af403f3cc827ae46ffb05bc9da25b13f723cc66a26ab5e3691a34e2549a2def