store.universalmusic.com

- Universal Music Group, Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0d:e5:aa:b1:4d:50:4e:98:67:67:e2:7b:95:21:46:f2 was issued on by DigiCert Inc.

With 102 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universal Music Group, Inc.

Organization: Universal Music Group, Inc.
Organization unit: E-commerce
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:e5:aa:b1:4d:50:4e:98:67:67:e2:7b:95:21:46:f2
Serial Number (int): 18472461982753198661197477323915478770
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 01:2f:20:5b:ed:1e:4a:e0:f7:49:7a:2b:57:79:4a:4e:bf:69:f9:27
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 40:6e:76:08:08:74:8b:f3:45:d9:c4:a8:7d:6c:a7:5a:a6:f4:de:e4
Fingerprint (sha256): 01:7b:ca:ce:be:27:2b:e2:13:28:f6:ee:07:2f:00:c8:e7:c4:4e:c0:ce:55:9d:aa:46:3b:f8:13:d3:8e:56:f1

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate store.universalmusic.com

102

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for store.universalmusic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

getnhc.com
thesoundofvinyl.com
getvamps.com
greatofferstore.com
flashsalerecords.com
store.universalmusic.com
uk.shopxxxtentacion.com
shop.kawalaofficial.com
shop.lewiscapaldi.com
shop.jamesblakemusic.com
shop.ronniewood.com
shop.walkingoncars.com
www.flashsalerecords.com
shop.westlife.com
shopuk.postmalone.com
shop.whenyoungband.com
dtrw.markknopfler.com
shop.hardycaprio.co
shop.gorgoncity.com
egyptstation.co.uk
store.sexpistolsofficial.com
uk.gnrmerch.com
ukshop.shawnmendesofficial.com
shop.mabelofficial.com
shopuk.trippieredd.com
shop.sheybaba.com
shop.liampayneofficial.com
shopuk.conangray.com
store.helloskepta.com
store.seagirls.net
shopuk.duffonline.com
shop.glassanimals.com
shop.easylifemusic.com
shopuk.arianagrande.com
shopuk.tameimpala.com
shopuk.kanyewest.com
shop.hrvy.com
shop.islandrecordsbeer.com
music.twinatlantic.com
uk.blacksabbathapparelshop.com
shopuk.halseyshop.com
www.getnhc.com
shop.sportsteamband.com
shopuk.nct127.com
shop.bigheath.world
ukstore.dermotkennedy.com
shop.decca.com
store.andrewlloydwebber.com
store.eltonjohn.com
store.jamesbay.com
www.thesoundofvinyl.com
shop.keanemusic.com
shop.itsradioactive.com
store.amfrecords.com
store.disclosureofficial.com
store.florenceandthemachine.net
store.amywinehouse.com
shop.dreamboatsandpetticoats.com
music.bastillebastille.com
shop.thejazzlabels.com
shop.emelisande.com
store.mysteryjets.com
store.samsmithworld.com
shop.paddington.com
store.thewho.com
store.deccaclassics.com
musicstore.niallhoran.com
uk.lordeofficialstore.com
store.thisissigrid.com
store.jamiroquai.com
store.thechemicalbrothers.com
store.tomchaplinmusic.com
store.hozier.com
shop.abbeyroad.com
store.puremccartney.com
store.frank-turner.com
store.mumfordandsons.com
store.blessedvice.com
shop.loylecarner.com
store.springkingband.com
shopuk.justinbiebermusic.com
www.getvamps.com
www.greatofferstore.com
store.spinefarmrecords.com
shopuk.theweeknd.com
store.jackgarratt.com
store.catfishandthebottlemen.com
shop.thisisofficial.com
shop.ellaeyre.com
store.udiscovermusic.com
store.blossomsband.co.uk
shopuk.diggad.co.uk
store.benhowardmusic.co.uk
shop.fourofdiamonds.co.uk
shop.mhuncho.co.uk
shop.fictionrecords.co.uk
store.dirtyhit.co.uk
shop.islandrecords.co.uk
shop.ravescience.co.uk
store.amymacdonald.co.uk
shop.ianbrown.co.uk
www.egyptstation.co.uk

Other certificates including the domain name universalmusic.com

(limited to 100 certificates)
acquia-sites.com
incapsula.com
acquia-sites.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
*.dev.investors.universalmusic.com
store.universalmusic.com
acquia-sites.com
incapsula.com
store.universalmusic.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
etassets.universalmusic.com
incapsula.com
uc17.janrainengage.com
incapsula.com
store.universalmusic.com
store.universalmusic.com
incapsula.com
incapsula.com
store.universalmusic.com
preview.investors.universalmusic.com
store.universalmusic.com
incapsula.com
*.qa.investors.universalmusic.com
investors.universalmusic.com
incapsula.com
uutiskirje.universalmusic.com
*.janraincapture.com
uc18.janrainengage.com
universalmusic.com
store.universalmusic.com
incapsula.com
store.universalmusic.com
*.qa.investors.universalmusic.com
universalmusic.com
preview.dev.investors.universalmusic.com
incapsula.com
incapsula.com
*.dev.investors.universalmusic.com
acquia-sites.com
privacy.umusic.com
incapsula.com
shop.btobelabo.com
store.universalmusic.com
incapsula.com
store.universalmusic.com
preview.preprod.investors.universalmusic.com
incapsula.com
acquia-sites.com
*.janraincapture.com
uutiskirje.universalmusic.com
store.universalmusic.com
uc18.janrainengage.com
acquia-sites.com
store.universalmusic.com
incapsula.com
store.universalmusic.com
uc18.janrainengage.com
incapsula.com
acquia-sites.com
store.universalmusic.com
acquia-sites.com
incapsula.com
acquia-sites.com
incapsula.com
*.dev.investors.universalmusic.com
incapsula.com
universalmusic.com
*.qa.investors.universalmusic.com
uc17.janrainengage.com
universalmusic.com
store.universalmusic.com
universalmusic.com
incapsula.com
privacy.umusic.com
incapsula.com
*.qa.investors.universalmusic.com
store.universalmusic.com
store.universalmusic.com
incapsula.com
acquia-sites.com
incapsula.com
incapsula.com
store.universalmusic.com
incapsula.com
incapsula.com
go.universalmusic.com
incapsula.com
uc11.janraincapture.com
investors.universalmusic.com
incapsula.com
store.universalmusic.com
incapsula.com
incapsula.com
store.universalmusic.com

Certificate

The complete raw certificate details for store.universalmusic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UePKCZE9Bshe7BSx27e
qFfiXIu5L35VFCSkvNSKSVlLilOmVIf1frXZG9AGzzLU7NzXyUkbq3jXkW3q8Nnj
aXTnc96k5Bf8pNKtt0r0mcsvHwLDqwHl+cT/rko/WAzA3ucj1uKvTvZUMAe7AXAN
xT2GCVkUNEBctHY18eCinMoNkiSQjx6SL45nsfjdRvyWgAEyERPzdX8KZ+zj1asE
YDXUX43IG8y9sjh1HjFHfP9pJZu7/gtyhc7pc7I3vVSOP2IHgZOnfvG1kamXjLcf
1Ll7tyKmS8gVXUCHMr1yxoCb8msFhvk2FD6bixJ+DtnYQ31enDrB7v3IFLLl8/ua
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18472461982753198661197477323915478770
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universal Music Group, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'E-commerce'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'store.universalmusic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26924046117608201256762783716276012649967337665012193730709563782260070815635096048768153212403317670752152881781251460763104273352995363214467479100878559449676117794697299808320383507287699823208256057341603713924169495329927918767176482523676842875995874042975738369527626545658772484138463190024982064144594671368877902431999759655614493299278698570353393611270537156274905759255134558102924437427108651443324166371219688344287633334168139547243232563101245077404559877294163581411520578749823660682645707006510103495578253022218316628770734135049534350172276172680551063377401054042788357264045077857852033047087
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							012f205bed1e4ae0f7497a2b57794a4ebf69f927
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2419 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getnhc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesoundofvinyl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getvamps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatofferstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flashsalerecords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.universalmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.shopxxxtentacion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.kawalaofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.lewiscapaldi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.jamesblakemusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ronniewood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.walkingoncars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flashsalerecords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.westlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.postmalone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.whenyoungband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dtrw.markknopfler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.hardycaprio.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gorgoncity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egyptstation.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.sexpistolsofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.gnrmerch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukshop.shawnmendesofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.mabelofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.trippieredd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.sheybaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.liampayneofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.conangray.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.helloskepta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.seagirls.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.duffonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.glassanimals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.easylifemusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.arianagrande.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.tameimpala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.kanyewest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.hrvy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.islandrecordsbeer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'music.twinatlantic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.blacksabbathapparelshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.halseyshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getnhc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.sportsteamband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.nct127.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.bigheath.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukstore.dermotkennedy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.decca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.andrewlloydwebber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.eltonjohn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.jamesbay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesoundofvinyl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.keanemusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.itsradioactive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.amfrecords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.disclosureofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.florenceandthemachine.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.amywinehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.dreamboatsandpetticoats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'music.bastillebastille.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.thejazzlabels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.emelisande.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.mysteryjets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.samsmithworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.paddington.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.thewho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.deccaclassics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musicstore.niallhoran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.lordeofficialstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.thisissigrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.jamiroquai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.thechemicalbrothers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.tomchaplinmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.hozier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.abbeyroad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.puremccartney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.frank-turner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.mumfordandsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.blessedvice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.loylecarner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.springkingband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.justinbiebermusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getvamps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greatofferstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.spinefarmrecords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.theweeknd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.jackgarratt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.catfishandthebottlemen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.thisisofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ellaeyre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.udiscovermusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.blossomsband.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.diggad.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.benhowardmusic.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.fourofdiamonds.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.mhuncho.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.fictionrecords.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.dirtyhit.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.islandrecords.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ravescience.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.amymacdonald.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ianbrown.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egyptstation.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016faeb768950000040300473045022044ea77f2c07a507b5f53bdf3b62cd5813a01c17b3dad69f3d65e1c398fc32774022100f3ba6dfd5ca9710c823a5a0797a4c72e1c8aa093f6ba2f815e315ba608bf663a0076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000016faeb768440000040300473045022000de1c8e3d9fb5640cdb079d0a1c832c635ce996f5d232b4df5ec4ef0d59e855022100f674f5b205c89e23f334cbb587bbb35e7f54e424d28f261a653dd83a6b2e029e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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