domains.returnly.com
- Returnly Technologies, Inc -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 0d:d4:e2:a4:7d:26:b0:96:50:25:8d:3d:e0:32:4d:5f was issued on by DigiCert Inc.
With 38 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Returnly Technologies, Inc
Organization:
Returnly Technologies, Inc
State / Province:
CA
Locality: Larkspur
Country: US
Locality: Larkspur
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0d:d4:e2:a4:7d:26:b0:96:50:25:8d:3d:e0:32:4d:5fSerial Number (int): 18385327735934766739966397432730897759
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: f4:ba:07:59:aa:54:d2:7b:c4:e6:4c:47:e4:33:38:b2:89:c1:b9:41
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): 7b:6e:a0:92:be:b4:0e:89:0b:7d:8b:a9:4b:6d:cf:af:01:9d:24:bb
Fingerprint (sha256): 74:64:05:59:b6:c8:67:66:b7:0e:51:e3:ce:50:7f:7f:70:29:9d:60:1d:ae:99:32:d1:07:cb:fc:e5:aa:92:9e
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g5.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g5.crl
Check the revocation status for certificate domains.returnly.com
38
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for domains.returnly.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
domains.returnly.com
returns.marinelayer.com
returns.fansedge.com
returns.fanatics.com
returns-web.returnly.com
returns.kithnyc.com
returns.stagprovisions.com
returns.bollandbranch.com
returns.nobullproject.com
returns.goop.com
returns.nascar.com
returns.mlbshop.com
returns.nflshop.com
returns.unitedworldsoccer.com
returns.shopgreybox.com
returns.lighterusa.com
returns.officersonly.com
returns.amourvert.com
returns.animalsmatter.com
returns.brayola.com
returns.mlsstore.com
returns.collegebasketballstore.com
returns.shop.nhl.com
returns.goodamerican.com
returns.sonsofgotham.com
returns.buffalojackson.com
returns.american-giant.com
returns.outdoorvoices.com
returns.untuckit.com
returns.bevello.com
returns.freeflyapparel.com
returns.recklessgirls.com
returns.youngandreckless.com
returns.iconundies.com
returns.shethinx.com
returns.darntough.com
returns.lisarobertson.com
returns.ivoryella.com
returns.marinelayer.com
returns.fansedge.com
returns.fanatics.com
returns-web.returnly.com
returns.kithnyc.com
returns.stagprovisions.com
returns.bollandbranch.com
returns.nobullproject.com
returns.goop.com
returns.nascar.com
returns.mlbshop.com
returns.nflshop.com
returns.unitedworldsoccer.com
returns.shopgreybox.com
returns.lighterusa.com
returns.officersonly.com
returns.amourvert.com
returns.animalsmatter.com
returns.brayola.com
returns.mlsstore.com
returns.collegebasketballstore.com
returns.shop.nhl.com
returns.goodamerican.com
returns.sonsofgotham.com
returns.buffalojackson.com
returns.american-giant.com
returns.outdoorvoices.com
returns.untuckit.com
returns.bevello.com
returns.freeflyapparel.com
returns.recklessgirls.com
returns.youngandreckless.com
returns.iconundies.com
returns.shethinx.com
returns.darntough.com
returns.lisarobertson.com
returns.ivoryella.com
Other certificates including the domain name returnly.com
(limited to 100 certificates)
domains.returnly.com
secure0121.hubspot.com
returnly.com
returnly.com
domains.returnly.com
*.returnly.com
domains.returnly.com
secure0121.hubspot.com
sni.cloudflaressl.com
returnly.com
returnly.com
domains.returnly.com
domains.returnly.com
*.returnly.com
storefront-widget.returnly.com
storefront-widget.returnly.com
domains.returnly.com
returnly.com
secure0121.hubspot.com
blog.returnly.com
api-documentation.returnly.com
blog.returnly.com
returnly.com
returnly.com
secure0121.hubspot.com
secure0121.hubspot.com
blog.returnly.com
secure0121.hubspot.com
blog.returnly.com
info.returnly.com
returnly.com
returnly.com
secure0121.hubspot.com
returnly.com
*.returnly.com
*.returnly.com
domains.returnly.com
secure0121.hubspot.com
domains.returnly.com
storefront-widget.returnly.com
domains.returnly.com
*.returnly.com
www.returnly.com
domains.returnly.com
domains.returnly.com
secure0121.hubspot.com
*.returnly.com
domains.returnly.com
changelog.returnly.com
*.returnly.com
*.returnly.com
blog.returnly.com
*.returnly.com
info.returnly.com
domains.returnly.com
cf-ingress.returnly.com
blog.returnly.com
secure0121.hubspot.com
*.returnly.com
domains.returnly.com
domains.returnly.com
domains.returnly.com
domains.returnly.com
secure0121.hubspot.com
blog.returnly.com
returnly.com
*.returnly.com
info.returnly.com
domains.returnly.com
secure0121.hubspot.com
*.returnly.com
domains.returnly.com
sni.cloudflaressl.com
blog.returnly.com
domains.returnly.com
*.returnly.com
domains.returnly.com
info.returnly.com
blog.returnly.com
info.returnly.com
*.returnly.com
domains.returnly.com
info.returnly.com
domains.returnly.com
*.returnly.com
domains.returnly.com
*.returnly.com
domains.returnly.com
changelog.returnly.com
returnly.com
returnly.com
returnly.com
secure0121.hubspot.com
*.returnly.com
domains.returnly.com
secure0121.hubspot.com
*.returnly.com
*.returnly.com
*.returnly.com
blog.returnly.com
secure0121.hubspot.com
returnly.com
returnly.com
domains.returnly.com
*.returnly.com
domains.returnly.com
secure0121.hubspot.com
sni.cloudflaressl.com
returnly.com
returnly.com
domains.returnly.com
domains.returnly.com
*.returnly.com
storefront-widget.returnly.com
storefront-widget.returnly.com
domains.returnly.com
returnly.com
secure0121.hubspot.com
blog.returnly.com
api-documentation.returnly.com
blog.returnly.com
returnly.com
returnly.com
secure0121.hubspot.com
secure0121.hubspot.com
blog.returnly.com
secure0121.hubspot.com
blog.returnly.com
info.returnly.com
returnly.com
returnly.com
secure0121.hubspot.com
returnly.com
*.returnly.com
*.returnly.com
domains.returnly.com
secure0121.hubspot.com
domains.returnly.com
storefront-widget.returnly.com
domains.returnly.com
*.returnly.com
www.returnly.com
domains.returnly.com
domains.returnly.com
secure0121.hubspot.com
*.returnly.com
domains.returnly.com
changelog.returnly.com
*.returnly.com
*.returnly.com
blog.returnly.com
*.returnly.com
info.returnly.com
domains.returnly.com
cf-ingress.returnly.com
blog.returnly.com
secure0121.hubspot.com
*.returnly.com
domains.returnly.com
domains.returnly.com
domains.returnly.com
domains.returnly.com
secure0121.hubspot.com
blog.returnly.com
returnly.com
*.returnly.com
info.returnly.com
domains.returnly.com
secure0121.hubspot.com
*.returnly.com
domains.returnly.com
sni.cloudflaressl.com
blog.returnly.com
domains.returnly.com
*.returnly.com
domains.returnly.com
info.returnly.com
blog.returnly.com
info.returnly.com
*.returnly.com
domains.returnly.com
info.returnly.com
domains.returnly.com
*.returnly.com
domains.returnly.com
*.returnly.com
domains.returnly.com
changelog.returnly.com
returnly.com
returnly.com
returnly.com
secure0121.hubspot.com
*.returnly.com
domains.returnly.com
secure0121.hubspot.com
*.returnly.com
*.returnly.com
*.returnly.com
blog.returnly.com
Certificate
The complete raw certificate details for domains.returnly.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIwDCCB6igAwIBAgIQDdTipH0msJZQJY094DJNXzANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTYxMDEzMDAwMDAwWhcN MTcxMjEzMTIwMDAwWjBxMQswCQYDVQQGEwJVUzELMAkGA1UECBMCQ0ExETAPBgNV BAcTCExhcmtzcHVyMSMwIQYDVQQKExpSZXR1cm5seSBUZWNobm9sb2dpZXMsIElu YzEdMBsGA1UEAxMUZG9tYWlucy5yZXR1cm5seS5jb20wggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQDJbTg0bAYd0TF30yx8yygs/+bBom8ora9vNfJx/eCD axqmnTn6aP94KV4T4pOaVAPVhp5WHf+EkLnjNi75MYgdYEroJMeQHlrwmH78IRDv oMibr1Dj4sUM/nOdUSaZ1qY0QBRT8AFko6O5t867GrxEJzozE0OF1pEsgMlOJC6h A39YV+sfKBdvIkFc4cFSFHMstQg4WnN4SaB7dmQUU52Mki7KvRAml8LVXeoKWdyr jGLJCwOom4GIUdvk6hPpoh3JdMZ8RJ7y0/7wgX4A6DjRNh75cqjIv/OEA216woSh SEuOi+GOYGHYoZxfdEQx1l6mT/kw+m3io0VeY4Wkh7lFAgMBAAGjggV2MIIFcjAf BgNVHSMEGDAWgBQPgGEcgjFh1S8o541GOLQs4cbZ4jAdBgNVHQ4EFgQU9LoHWapU 0nvE5kxH5DM4sonBuUEwggO4BgNVHREEggOvMIIDq4IUZG9tYWlucy5yZXR1cm5s eS5jb22CF3JldHVybnMubWFyaW5lbGF5ZXIuY29tghRyZXR1cm5zLmZhbnNlZGdl LmNvbYIUcmV0dXJucy5mYW5hdGljcy5jb22CGHJldHVybnMtd2ViLnJldHVybmx5 LmNvbYITcmV0dXJucy5raXRobnljLmNvbYIacmV0dXJucy5zdGFncHJvdmlzaW9u cy5jb22CGXJldHVybnMuYm9sbGFuZGJyYW5jaC5jb22CGXJldHVybnMubm9idWxs cHJvamVjdC5jb22CEHJldHVybnMuZ29vcC5jb22CEnJldHVybnMubmFzY2FyLmNv bYITcmV0dXJucy5tbGJzaG9wLmNvbYITcmV0dXJucy5uZmxzaG9wLmNvbYIdcmV0 dXJucy51bml0ZWR3b3JsZHNvY2Nlci5jb22CF3JldHVybnMuc2hvcGdyZXlib3gu Y29tghZyZXR1cm5zLmxpZ2h0ZXJ1c2EuY29tghhyZXR1cm5zLm9mZmljZXJzb25s eS5jb22CFXJldHVybnMuYW1vdXJ2ZXJ0LmNvbYIZcmV0dXJucy5hbmltYWxzbWF0 dGVyLmNvbYITcmV0dXJucy5icmF5b2xhLmNvbYIUcmV0dXJucy5tbHNzdG9yZS5j b22CInJldHVybnMuY29sbGVnZWJhc2tldGJhbGxzdG9yZS5jb22CFHJldHVybnMu c2hvcC5uaGwuY29tghhyZXR1cm5zLmdvb2RhbWVyaWNhbi5jb22CGHJldHVybnMu c29uc29mZ290aGFtLmNvbYIacmV0dXJucy5idWZmYWxvamFja3Nvbi5jb22CGnJl dHVybnMuYW1lcmljYW4tZ2lhbnQuY29tghlyZXR1cm5zLm91dGRvb3J2b2ljZXMu Y29tghRyZXR1cm5zLnVudHVja2l0LmNvbYITcmV0dXJucy5iZXZlbGxvLmNvbYIa cmV0dXJucy5mcmVlZmx5YXBwYXJlbC5jb22CGXJldHVybnMucmVja2xlc3NnaXJs cy5jb22CHHJldHVybnMueW91bmdhbmRyZWNrbGVzcy5jb22CFnJldHVybnMuaWNv bnVuZGllcy5jb22CFHJldHVybnMuc2hldGhpbnguY29tghVyZXR1cm5zLmRhcm50 b3VnaC5jb22CGXJldHVybnMubGlzYXJvYmVydHNvbi5jb22CFXJldHVybnMuaXZv cnllbGxhLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMGsGA1UdHwRkMGIwL6AtoCuGKWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0 LmNvbS9zc2NhLXNoYTItZzUuY3JsMC+gLaArhilodHRwOi8vY3JsNC5kaWdpY2Vy dC5jb20vc3NjYS1zaGEyLWc1LmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBATAq MCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeB DAECAjB8BggrBgEFBQcBAQRwMG4wJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRp Z2ljZXJ0LmNvbTBGBggrBgEFBQcwAoY6aHR0cDovL2NhY2VydHMuZGlnaWNlcnQu Y29tL0RpZ2lDZXJ0U0hBMlNlY3VyZVNlcnZlckNBLmNydDAMBgNVHRMBAf8EAjAA MA0GCSqGSIb3DQEBCwUAA4IBAQCPelHCI0BqfIsMJRdHZjjQmTb2yTlKxuEeD8YN kBe+YlMYFPoCzBL4ABkroFIJoJX6bTvzyVFQlI8mEDtlEhklILezVwCtDqYVOvbf xeUvulO7xsp/QeJHy+Waj0RE5EqtkXEWPs2yzugVIA4YyDeIgZyZMLWnQw5T6A0y rrM+/UUA3MNgFp5tzN6GYt3LUiWVbTWKW+ldzHe/tAz2gzvgnntn6d5enRxb8ei9 XVE6nnEtXoAWuDW6puqPg4H0rnxdxhoNbZhcnaglLMtK4iseLcFi7/RaoSRiL7f4 ed88ipRU6LHKx/wvFoYfq9y4QZRRYSkbSbzYgHHSwFUIN0eV -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyW04NGwGHdExd9MsfMso LP/mwaJvKK2vbzXycf3gg2sapp05+mj/eCleE+KTmlQD1YaeVh3/hJC54zYu+TGI HWBK6CTHkB5a8Jh+/CEQ76DIm69Q4+LFDP5znVEmmdamNEAUU/ABZKOjubfOuxq8 RCc6MxNDhdaRLIDJTiQuoQN/WFfrHygXbyJBXOHBUhRzLLUIOFpzeEmge3ZkFFOd jJIuyr0QJpfC1V3qClncq4xiyQsDqJuBiFHb5OoT6aIdyXTGfESe8tP+8IF+AOg4 0TYe+XKoyL/zhANtesKEoUhLjovhjmBh2KGcX3REMdZepk/5MPpt4qNFXmOFpIe5 RQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 18385327735934766739966397432730897759 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-13 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-13 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Larkspur' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Returnly Technologies, Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'domains.returnly.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25427757465552768337193309146681663352836475006141391183061008550724942561236423137054932823786976546164055277873675058627097301282147428575123587823786408707506948928676652098318260700409029947531104936680822109834367365762445958271405076398542864479480623270379359185326163051493959981107940462742059087244187809929170159498502546614206020513118319795260432902945064312210518250022969418664508642271603381504807222263311667865442068622916399366015960815071304936307344057737922005769453833805875111672301979727649802000102050048072756774458391918292016759613209669026492675359306526129237488191338220705096166521157 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f4ba0759aa54d27bc4e64c47e43338b289c1b941 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (943 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domains.returnly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.marinelayer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.fansedge.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.fanatics.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns-web.returnly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.kithnyc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.stagprovisions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.bollandbranch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.nobullproject.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.goop.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.nascar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.mlbshop.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.nflshop.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.unitedworldsoccer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.shopgreybox.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.lighterusa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.officersonly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.amourvert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.animalsmatter.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.brayola.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.mlsstore.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.collegebasketballstore.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.shop.nhl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.goodamerican.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.sonsofgotham.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.buffalojackson.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.american-giant.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.outdoorvoices.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.untuckit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.bevello.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.freeflyapparel.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.recklessgirls.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.youngandreckless.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.iconundies.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.shethinx.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.darntough.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.lisarobertson.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.ivoryella.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g5.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g5.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 008f7a51c223406a7c8b0c2517476638d09936f6c9394ac6e11e0fc60d9017be62531814fa02cc12f800192ba05209a095fa6d3bf3c95150948f26103b6512192520b7b35700ad0ea6153af6dfc5e52fba53bbc6ca7f41e247cbe59a8f4444e44aad9171163ecdb2cee815200e18c83788819c9930b5a7430e53e80d32aeb33efd4500dcc360169e6dccde8662ddcb5225956d358a5be95dcc77bfb40cf6833be09e7b67e9de5e9d1c5bf1e8bd5d513a9e712d5e8016b835baa6ea8f8381f4ae7c5dc61a0d6d985c9da8252ccb4ae22b1e2dc162eff45aa124622fb7f879df3c8a9454e8b1cac7fc2f16861fabdcb841945161291b49bcd88071d2c05508374795