b.ssl.shopify.com

- Shopify Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0b:cb:70:4b:04:d4:72:66:eb:ad:cd:27:53:a9:d8:5b was issued on by DigiCert Inc.

With 124 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Shopify Inc.

Organization: Shopify Inc.
State / Province: Ontario
Locality: Ottawa
Country: CA

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:cb:70:4b:04:d4:72:66:eb:ad:cd:27:53:a9:d8:5b
Serial Number (int): 15677821789399214728819449682396305499
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 92:9a:96:a5:20:45:88:0f:76:cf:8c:83:ad:10:ce:d7:d9:d7:f5:81
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 92:b1:64:1e:c7:8a:4b:b7:6e:b9:96:67:46:93:ce:ae:6c:35:de:74
Fingerprint (sha256): 03:8d:69:3d:9a:6c:3a:df:2b:b1:16:e5:a4:7d:14:46:2a:f4:88:51:60:51:a7:59:5f:2d:80:a9:7b:ab:a1:01

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g3.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g3.crl

Check the revocation status for certificate b.ssl.shopify.com

124

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for b.ssl.shopify.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

b.ssl.shopify.com
www.chrismccormack.com
www.guidedproducts.com
www.luckyscooters.com
www.dope.com
closet-dev.gwynniebee.com
shop.thedrybar.com
www.makershed.com
www.makersheds.net
store.getvsm.com
www.80stees.com
www.daniellebradberyshop.com
www.conwayshop.com
www.iammichelleshop.com
www.daraartisans.com
store.automatic.com
www.purefixcycles.com
www.odellbeckhamjr13.com
shop.lytro.com
closet-qa.gwynniebee.com
shop.tapiture.com
gear.mozilla.org
www.davidnailshop.com
www.myhumangrid.com
www.velvetcloud.com
www.vault1910.com
shop.icracked.com
www.itechs.com
www.lirumlarumleg.dk
www.sfbags.com
www.kayakfishinggear.com
store.lytro.com
www.bellacandles.com
www.bellacandles.fr
www.candl.es
www.bellacandles.nl
www.bellakerzen.de
www.bellacandles.co.uk
www.bellacandles.my
www.myenergyx.de
www.mspa-whirlpools.com
www.mantraband.com
closet.gwynniebee.com
www.soylent.me
store.uncrate.com
www.bulbamerica.com
www.kidrobot.com
www.greats.com
www.denydesigns.com
www.printallover.me
www.maisonslimani.com
www.fraushoes.com
www.frau.com.au
www.gotenna.com
www.allerject.ca
www.thehomet.com
www.alencorp.com
www.reggiebush.com
www.air-purifiers-america.com
www.jiberish.com
www.bellamihair.com
shop.localmotors.com
www.mvmtwatches.com
www.usamilitarymedals.com
ca.canadianicons.ca
us.canadianicons.ca
www.gawminers.com
www.shopmixology.com
www.electronicstix.com
www.lordeshop.com
www.rundmc20.com
www.100percentpure.com
www.chicagomusicexchange.com
www.kidcudishop.com
www.shaniatwainshop.com
www.intourmerch.com
www.shopinflames.com
www.sleeponlatex.com
www.wickedclothes.com
www.corporatedirectapparel.com
www.luxyhair.com
www.hawkersperu.com
www.johnelliott.co
www.fragrantjewels.com
www.shopkaceymusgraves.com
www.kcufcancershop.com
www.pazshop.com
store.boazofficial.com
www.itechs.co.uk
www.pinchprovisions.com
shop.americanancestors.org
uk.shop.fiftythree.com
eu.shop.fiftythree.com
www.thestylebrothers.com
www.edensgarden.com
www.leesa.com
shop.wink.com
www.purafruta.com
www.colorclub.com
www.drinkuproot.com
www.outofprintclothing.com
www.cncpts.com
www.firgelliauto.com
www.naturalstacks.com
www.earthbathrooms.co.uk
www.bajaao.com
www.rugandhome.com
shop.goop.com
america.yourtea.com
aus.yourtea.com
uk.yourtea.com
nz.yourtea.com
eu.yourtea.com
asia.yourtea.com
canada.yourtea.com
africa.yourtea.com
order.lundsandbyerlys.com
www.savvywatch.com
www.lomejordelsuper.com
shop.entertainment.com
www.dappertime.com
shop.imprintmats.com
www.bactrack.com
www.shoplaurenjames.com

Other certificates including the domain name shopify.com

(limited to 100 certificates)
f4.shared.global.fastly.net
zh.shopify.com
ingress-imagery-us-central1-2.shopifycloud.com
statuspage.io
themes.shopify.com
l.ssl.shopify.com
merchandise.shopify.com
events.shopify.com
press.shopify.com
statuspage.io
dns-vetting1-jeffg-noah.map.fastly.net
statuspage.io
shopify-app-store.shopifycloud.com
o.ssl.shopify.com
statuspage.io
brochure2-staging12.shopifycloud.com
plusinfo.shopify.com
status.3dcart.com
savage-sign-on.shopifycloud.com
accounts.shopify.com
investor.shopify.com
meetups.shopify.com
shopify.com
linkpop.com
chat.shopify.com
commerceplus.shopify.com
marketplace.shopify.com
next.shopify.com
shopify-classifieds.shopifycloud.com
ir.shopify.com
ssl.shopify.com
marketplace.shopify.com
store.shopify.com
secure03.lithium.com
dev.shopify.com
somethingorother.shopify.com
commerceplus.shopify.com
pins.shopify.com
statuspage.io
ssl.cdngc.net
sourcing-admin.shopify.com
cardreader.shopify.com
www.shopify.com
www.shopify.com
secure03.stage.lithium.com
p.ssl.shopify.com
pointofsale.shopify.com
bourgeois.shopifycloud.com
unicorn.shopify.com
upcoming12.shopify.com
sl.shopify.com
tashboard.shopify.com
growthcenter.shopify.com
secure03.stage.lithium.com
statuspage.io
*.b.ssl.fastly.net
gtm.shopify.com
secure03.lithium.com
statuspage.io
analytics.shopify.com
collabs.shopify.com
unite-registration.shopify.com
photos.shopify.com
data-portal.shopifycloud.com
merch.shopify.com
plusacademy.shopify.com
www.shopify.com
shopify-plus-meet-up.shopify.com
collabs.shopify.com
statuspage.io
privacy.shopify.com
r.ssl.fastly.net
counter.shopify.com
shopify-app-store.shopifycloud.com
statuspage.io
statuspage.io
b.ssl.shopify.com
statuspage.io
shopify-app-store-staging.shopifycloud.com
sfn.shopify.com
growthcenter.shopify.com
bcs.shopify.com
statuspage.io
smiley-staging.shopify.com
secure03.lithium.com
statuspage.io
hardware.shopify.com
upcoming-pizx.shopify.com
shopify-classifieds.shopifycloud.com
ny.shopify.com
pursuit.shopify.com
cardreader-giveaway.shopifycloud.com
auth.data.shopify.com
hardware.shopify.com
statuspage.io
ssl.shopify.com
events.shopify.com
unite.shopify.com
linkpop.shopify.com
upcoming9.shopify.com

Certificate

The complete raw certificate details for b.ssl.shopify.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Hi783et+gGvVePVAoKY
mRLMIoqfEPrG7H0jZ7zt6E+6K6FpK7ll/MXO/mjgGA1v8OQO9zGhVfsM9+bH1fr/
o5fD0t3H2ADhWRBFHaFvo1Z8lYRvf28+PgoPv9OlpslBvPqiopKvyFXyHsJh4Rro
lCE+XsjxgRE5oKnvxC5T1hZlmwaLWP7syoAiu29608+BDU8lbayfPTeuBy37sNFB
lwp2hyqCjj8GbdDrGY9etSTntY9cs3V8+bfM4cOOpYLNtNDJJirXFCyM7t/bDaqp
eHIs34g3VszosxDEGS3d/nSrmd5BWwIt7y8y1YKzqvsXC7Cj6D0//l27Hg9IuGLE
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15677821789399214728819449682396305499
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-05-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-26 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ottawa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shopify Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'b.ssl.shopify.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28841869777224196684778612111421441514346966180133418065086332421153391868406001303669247036722059930521429575650503864605337966707270292969025269372703064091117259238848942863255496560441435925328682222176755104526123266563123539747932024908542687317460292478968453530730596799999014686100311046327500719101929353278656049126914063906718555074632091399876366341641856267788034967435268274046325412003049337498379558353676323280492493804434651000286739497295095712609045516099232837158920382059689141251242314777026951823928166237840699480457861452916488639022324373677792773730850466715692979168306369532363154834449
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							929a96a52045880f76cf8c83ad10ced7d9d7f581
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2612 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b.ssl.shopify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chrismccormack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guidedproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luckyscooters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'closet-dev.gwynniebee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.thedrybar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.makershed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.makersheds.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.getvsm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.80stees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daniellebradberyshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.conwayshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iammichelleshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daraartisans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.automatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.purefixcycles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.odellbeckhamjr13.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.lytro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'closet-qa.gwynniebee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.tapiture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gear.mozilla.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.davidnailshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myhumangrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.velvetcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vault1910.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.icracked.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itechs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lirumlarumleg.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfbags.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kayakfishinggear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.lytro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bellacandles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bellacandles.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.candl.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bellacandles.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bellakerzen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bellacandles.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bellacandles.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myenergyx.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mspa-whirlpools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mantraband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'closet.gwynniebee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soylent.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.uncrate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bulbamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kidrobot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.denydesigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.printallover.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maisonslimani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fraushoes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frau.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gotenna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allerject.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thehomet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alencorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reggiebush.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.air-purifiers-america.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jiberish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bellamihair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.localmotors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mvmtwatches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usamilitarymedals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca.canadianicons.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.canadianicons.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gawminers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopmixology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.electronicstix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lordeshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rundmc20.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.100percentpure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chicagomusicexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kidcudishop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shaniatwainshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intourmerch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopinflames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sleeponlatex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wickedclothes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corporatedirectapparel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luxyhair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkersperu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnelliott.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fragrantjewels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopkaceymusgraves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kcufcancershop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pazshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.boazofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itechs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pinchprovisions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.americanancestors.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.shop.fiftythree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.shop.fiftythree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thestylebrothers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edensgarden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leesa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.wink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.purafruta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colorclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drinkuproot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.outofprintclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cncpts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firgelliauto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naturalstacks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.earthbathrooms.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bajaao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rugandhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.goop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'america.yourtea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aus.yourtea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.yourtea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nz.yourtea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.yourtea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asia.yourtea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canada.yourtea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'africa.yourtea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order.lundsandbyerlys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.savvywatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lomejordelsuper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.entertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dappertime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.imprintmats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bactrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shoplaurenjames.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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