secure01.teamfanshop.com

Issued by R3

About this certificate

This digital certificate with serial number 04:d0:48:34:4c:ec:05:02:4a:4e:97:0f:fc:28:a7:c4:23:54 was issued on by Let's Encrypt.

With 83 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=secure01.teamfanshop.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d0:48:34:4c:ec:05:02:4a:4e:97:0f:fc:28:a7:c4:23:54
Serial Number (int): 419323852021891871165462206862936196260692
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f4:fd:2e:3e:9e:99:4e:c2:45:4e:2b:24:5a:74:f6:85:66:a0:f9:e5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6e:61:74:77:a8:e8:58:46:58:86:40:f3:95:a8:6f:6c:87:9f:3a:ff
Fingerprint (sha256): 41:b7:93:4a:25:a5:f1:8b:1a:02:0e:59:e2:cb:ae:64:1e:8f:71:25:48:1e:1a:80:3f:f6:5f:48:28:b2:f5:70

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate secure01.teamfanshop.com

83

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure01.teamfanshop.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

beastmodeonline.com
blizzardgearstore.com
boutique.hockeycanada.ca
boutiquecfm.ca
buckyslockerroom.com
fr.shop.hockeycanada.ca
lpgaproshop.com
nllshop.com
secure01.teamfanshop.com
shop.big12sports.com
shop.bigtenstore.com
shop.cbssports.com
shop.clemsontigers.com
shop.csurams.com
shop.cubuffs.com
shop.ecu.edu
shop.ecupirates.com
shop.famuathletics.com
shop.friars.com
shop.georgiadogs.com
shop.goarmysports.com
shop.gobearcats.com
shop.gocards.com
shop.gocrimson.com
shop.godrakebulldogs.com
shop.goducks.com
shop.goheels.com
shop.gopsusports.com
shop.goredbirds.com
shop.gostanford.com
shop.gousfbulls.com
shop.govandals.com
shop.gowyo.com
shop.gozags.com
shop.guhoyas.com
shop.hockeycanada.ca
shop.huskers.com
shop.internationalchampionscup.com
shop.ivyleaguesports.com
shop.kstatesports.com
shop.lmulions.com
shop.monumentalsportsnetwork.com
shop.msuspartans.com
shop.ohiobobcats.com
shop.okstate.com
shop.osubeavers.com
shop.pepperdinesports.com
shop.pga.com
shop.rolltide.com
shop.samfordsports.com
shop.santaclarabroncos.com
shop.seminoles.com
shop.shupirates.com
shop.soonersports.com
shop.southernmiss.com
shop.stanford.edu
shop.texassports.com
shop.texastech.com
shop.theacc.com
shop.theamerican.org
shop.uabsports.com
shop.uicflames.com
shop.ulmwarhawks.com
shop.umterps.com
shop.und.com
shop.unhwildcats.com
shop.utahstateaggies.com
shop.vucommodores.com
shop.wsucougars.com
store.fightingillini.com
store.kentuckyderby.com
store.s-pulse.co.jp
www.beastmodeonline.com
www.blizzardgearstore.com
www.boutiquecfm.ca
www.buckyslockerroom.com
www.hornetsfanshop.com
www.nllshop.com
www.oualumnistore.com
www.shockerlocker.com
www.shopmiamihurricanes.com
www.stanfordalumnifanshop.com
www.usgashop.com

Other certificates including the domain name teamfanshop.com

(limited to 100 certificates)
secure03.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
*.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure02.teamfanshop.com
secure02.teamfanshop.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure02.fanaticsretailgroup.com
secure03.teamfanshop.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.teamfanshop.com
secure02.teamfanshop.com
secure03.teamfanshop.com
owa.fanatics.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure02.teamfanshop.com
images.teamfanshop.com
secure01.fanaticsretailgroup.com
images.teamfanshop.com
secure02.teamfanshop.com
secure02.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure03.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure03.fanaticsretailgroup.com
secure01.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
*.teamfanshop.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
secure03.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.teamfanshop.com
secure03.fanaticsretailgroup.com
secure01.teamfanshop.com
secure02.teamfanshop.com
secure03.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.teamfanshop.com
secure03.teamfanshop.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.teamfanshop.com
secure02.fanaticsretailgroup.com
WH-DMZ-EDGE01.footballfanatics.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure03.teamfanshop.com
secure01.fanaticsretailgroup.com
secure01.teamfanshop.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure03.teamfanshop.com
secure02.teamfanshop.com

Certificate

The complete raw certificate details for secure01.teamfanshop.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMIDCCCwigAwIBAgISBNBINEzsBQJKTpcP/CinxCNUMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTEyMjIxNjMwNDNaFw0yMjAzMjIxNjMwNDJaMCMxITAfBgNVBAMT
GHNlY3VyZTAxLnRlYW1mYW5zaG9wLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANEkJtt4Rn5mKtHUb5aZJiyZ0L1VfNRrduxggTt0jTLiZ2GqxRTh
36HQ6ox5jDK76FwnECkGJZi38QRhyLkDG/ldKKO+klfKMFhyVgcW2jdnMsNWo13L
AdiQJfzs67qkqFN9KH8/OkWtXWBmy2pwhyctg7s2weMNeT0Qo1QREBuF1wqFtGn+
7kXP5eGak087qdDDGJP4f2O/RuCe1OKzmV70uLlgGlg5U9W2jLZO1LeTGlfSoZwU
RszD46H0D80CRmIgCESjOCPEhamq0vlwCYfym+NH8iEynryPQYS9/aBnlrpwEQ88
njx8p9qTWiGt08cyYmJXCW/TLRZ4ao/vYfECAwEAAaOCCT0wggk5MA4GA1UdDwEB
/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/
BAIwADAdBgNVHQ4EFgQU9P0uPp6ZTsJFTiskWnT2hWag+eUwHwYDVR0jBBgwFoAU
FC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzAB
hhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5p
LmxlbmNyLm9yZy8wggcNBgNVHREEggcEMIIHAIITYmVhc3Rtb2Rlb25saW5lLmNv
bYIVYmxpenphcmRnZWFyc3RvcmUuY29tghhib3V0aXF1ZS5ob2NrZXljYW5hZGEu
Y2GCDmJvdXRpcXVlY2ZtLmNhghRidWNreXNsb2NrZXJyb29tLmNvbYIXZnIuc2hv
cC5ob2NrZXljYW5hZGEuY2GCD2xwZ2Fwcm9zaG9wLmNvbYILbmxsc2hvcC5jb22C
GHNlY3VyZTAxLnRlYW1mYW5zaG9wLmNvbYIUc2hvcC5iaWcxMnNwb3J0cy5jb22C
FHNob3AuYmlndGVuc3RvcmUuY29tghJzaG9wLmNic3Nwb3J0cy5jb22CFnNob3Au
Y2xlbXNvbnRpZ2Vycy5jb22CEHNob3AuY3N1cmFtcy5jb22CEHNob3AuY3VidWZm
cy5jb22CDHNob3AuZWN1LmVkdYITc2hvcC5lY3VwaXJhdGVzLmNvbYIWc2hvcC5m
YW11YXRobGV0aWNzLmNvbYIPc2hvcC5mcmlhcnMuY29tghRzaG9wLmdlb3JnaWFk
b2dzLmNvbYIVc2hvcC5nb2FybXlzcG9ydHMuY29tghNzaG9wLmdvYmVhcmNhdHMu
Y29tghBzaG9wLmdvY2FyZHMuY29tghJzaG9wLmdvY3JpbXNvbi5jb22CGHNob3Au
Z29kcmFrZWJ1bGxkb2dzLmNvbYIQc2hvcC5nb2R1Y2tzLmNvbYIQc2hvcC5nb2hl
ZWxzLmNvbYIUc2hvcC5nb3BzdXNwb3J0cy5jb22CE3Nob3AuZ29yZWRiaXJkcy5j
b22CE3Nob3AuZ29zdGFuZm9yZC5jb22CE3Nob3AuZ291c2ZidWxscy5jb22CEnNo
b3AuZ292YW5kYWxzLmNvbYIOc2hvcC5nb3d5by5jb22CD3Nob3AuZ296YWdzLmNv
bYIQc2hvcC5ndWhveWFzLmNvbYIUc2hvcC5ob2NrZXljYW5hZGEuY2GCEHNob3Au
aHVza2Vycy5jb22CInNob3AuaW50ZXJuYXRpb25hbGNoYW1waW9uc2N1cC5jb22C
GHNob3AuaXZ5bGVhZ3Vlc3BvcnRzLmNvbYIVc2hvcC5rc3RhdGVzcG9ydHMuY29t
ghFzaG9wLmxtdWxpb25zLmNvbYIgc2hvcC5tb251bWVudGFsc3BvcnRzbmV0d29y
ay5jb22CFHNob3AubXN1c3BhcnRhbnMuY29tghRzaG9wLm9oaW9ib2JjYXRzLmNv
bYIQc2hvcC5va3N0YXRlLmNvbYITc2hvcC5vc3ViZWF2ZXJzLmNvbYIZc2hvcC5w
ZXBwZXJkaW5lc3BvcnRzLmNvbYIMc2hvcC5wZ2EuY29tghFzaG9wLnJvbGx0aWRl
LmNvbYIWc2hvcC5zYW1mb3Jkc3BvcnRzLmNvbYIac2hvcC5zYW50YWNsYXJhYnJv
bmNvcy5jb22CEnNob3Auc2VtaW5vbGVzLmNvbYITc2hvcC5zaHVwaXJhdGVzLmNv
bYIVc2hvcC5zb29uZXJzcG9ydHMuY29tghVzaG9wLnNvdXRoZXJubWlzcy5jb22C
EXNob3Auc3RhbmZvcmQuZWR1ghRzaG9wLnRleGFzc3BvcnRzLmNvbYISc2hvcC50
ZXhhc3RlY2guY29tgg9zaG9wLnRoZWFjYy5jb22CFHNob3AudGhlYW1lcmljYW4u
b3JnghJzaG9wLnVhYnNwb3J0cy5jb22CEnNob3AudWljZmxhbWVzLmNvbYIUc2hv
cC51bG13YXJoYXdrcy5jb22CEHNob3AudW10ZXJwcy5jb22CDHNob3AudW5kLmNv
bYIUc2hvcC51bmh3aWxkY2F0cy5jb22CGHNob3AudXRhaHN0YXRlYWdnaWVzLmNv
bYIVc2hvcC52dWNvbW1vZG9yZXMuY29tghNzaG9wLndzdWNvdWdhcnMuY29tghhz
dG9yZS5maWdodGluZ2lsbGluaS5jb22CF3N0b3JlLmtlbnR1Y2t5ZGVyYnkuY29t
ghNzdG9yZS5zLXB1bHNlLmNvLmpwghd3d3cuYmVhc3Rtb2Rlb25saW5lLmNvbYIZ
d3d3LmJsaXp6YXJkZ2VhcnN0b3JlLmNvbYISd3d3LmJvdXRpcXVlY2ZtLmNhghh3
d3cuYnVja3lzbG9ja2Vycm9vbS5jb22CFnd3dy5ob3JuZXRzZmFuc2hvcC5jb22C
D3d3dy5ubGxzaG9wLmNvbYIVd3d3Lm91YWx1bW5pc3RvcmUuY29tghV3d3cuc2hv
Y2tlcmxvY2tlci5jb22CG3d3dy5zaG9wbWlhbWlodXJyaWNhbmVzLmNvbYIdd3d3
LnN0YW5mb3JkYWx1bW5pZmFuc2hvcC5jb22CEHd3dy51c2dhc2hvcC5jb20wTAYD
VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa
aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggECBgorBgEEAdZ5AgQCBIHzBIHw
AO4AdQDfpV6raIJPH2yt7rhfTj5a6s2iEqRqXo47EsAgRFwqcwAAAX3jMfrIAAAE
AwBGMEQCIFDUgTOm58iv6k3dpP7v8fv7COk0HN+6NQ0NNOKhCp3FAiAMjS08asHX
8Oq3Ni6KPfkJdVI7a/SExmXkiVj4secFcwB1ACl5vvCeOTkh8FZzn2Old+W+V32c
YAr4+U1dJlwlXceEAAABfeMx+rgAAAQDAEYwRAIgfANDfSkNPUgmqnwE8XDpny77
8Dm+s9AxcGR+njdqCmcCIETxiegtu8nOmzl3o4cPeeLoFdAFFJyh4HsNiVos6WDK
MA0GCSqGSIb3DQEBCwUAA4IBAQCcBBbeYayZ4Juw9orYYNxwaR3VSrhv8aaqaMQ8
JWHb/mv0RXvHyS5bPZndcmxLjWWnQu1FGrR8q5NXtBEOKoWd2/ORdhfP2R3ceSLy
QJYIPCaRA3ck2No1/9NYuxyFZ0WQKacNiC94HjTcMrU8xex1AfhwuuQG8bmUacuS
zc0KFcLu4sEAI1MClg8ZJHSxCij3CaC6a5kpL0/vfRk+Qx6PthHkgt86V/9iXxfv
yJ8FHrLc88/GW7ZHcjo349VXUZmCN5yvkQi7lxnyOYZ8+VYXhmDS0qOrmDOfTqou
gfBRp2SuIqLyebnDuXGl96E7JFwrbmUl6xsvC9LKF//p8PMs
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SQm23hGfmYq0dRvlpkm
LJnQvVV81Gt27GCBO3SNMuJnYarFFOHfodDqjHmMMrvoXCcQKQYlmLfxBGHIuQMb
+V0oo76SV8owWHJWBxbaN2cyw1ajXcsB2JAl/OzruqSoU30ofz86Ra1dYGbLanCH
Jy2DuzbB4w15PRCjVBEQG4XXCoW0af7uRc/l4ZqTTzup0MMYk/h/Y79G4J7U4rOZ
XvS4uWAaWDlT1baMtk7Ut5MaV9KhnBRGzMPjofQPzQJGYiAIRKM4I8SFqarS+XAJ
h/Kb40fyITKevI9BhL39oGeWunARDzyePHyn2pNaIa3TxzJiYlcJb9MtFnhqj+9h
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 419323852021891871165462206862936196260692
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-22 16:30:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-22 16:30:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure01.teamfanshop.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26401632848177866439579242405226195243640212882365020445961944877417465222317851568287752805496414005120102154785727864374892197549389754660351992851008421842268209268167464931758406933263430882117997066229937671161469722785520432011368266684630330797083115719054624818846011960807880976396549431341182217817296088894133488571332172049759590969732373968616005024615372897817584837325313230175140378988906418804860292036165784138660463130355368637059040662095601569312641783716095838903364076469132413771630251658715975807348468738981577015829063262838034957595199308775760308149474791253212272260680315576112477331953
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f4fd2e3e9e994ec2454e2b245a74f68566a0f9e5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1796 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beastmodeonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blizzardgearstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boutique.hockeycanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boutiquecfm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buckyslockerroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.shop.hockeycanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lpgaproshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nllshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure01.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.big12sports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.bigtenstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.cbssports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.clemsontigers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.csurams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.cubuffs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ecu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ecupirates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.famuathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.friars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.georgiadogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.goarmysports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gobearcats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gocards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gocrimson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.godrakebulldogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.goducks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.goheels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gopsusports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.goredbirds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gostanford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gousfbulls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.govandals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gowyo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gozags.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.guhoyas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.hockeycanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.huskers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.internationalchampionscup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ivyleaguesports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.kstatesports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.lmulions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.monumentalsportsnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.msuspartans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ohiobobcats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.okstate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.osubeavers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.pepperdinesports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.pga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.rolltide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.samfordsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.santaclarabroncos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.seminoles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.shupirates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.soonersports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.southernmiss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.texassports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.texastech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.theacc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.theamerican.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.uabsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.uicflames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ulmwarhawks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.umterps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.und.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.unhwildcats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.utahstateaggies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.vucommodores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.wsucougars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.fightingillini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.kentuckyderby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.s-pulse.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beastmodeonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blizzardgearstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boutiquecfm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buckyslockerroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hornetsfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nllshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oualumnistore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shockerlocker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopmiamihurricanes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanfordalumnifanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usgashop.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000017de331fac80000040300463044022050d48133a6e7c8afea4ddda4feeff1fbfb08e9341cdfba350d0d34e2a10a9dc502200c8d2d3c6ac1d7f0eab7362e8a3df90975523b6bf484c665e48958f8b1e705730075002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017de331fab8000004030046304402207c03437d290d3d4826aa7c04f170e99f2efbf039beb3d03170647e9e376a0a67022044f189e82dbbc9ce9b3977a3870f79e2e815d005149ca1e07b0d895a2ce960ca
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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