ssl.shopify.com

- Shopify Inc. -

Issued by DigiCert High Assurance CA-3

About this certificate

This digital certificate with serial number 08:3e:32:0b:05:17:e5:c9:52:ba:1d:83:ec:57:a9:14 was issued on by DigiCert Inc.

With 124 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Shopify Inc.

Organization: Shopify Inc.
State / Province: Ontario
Locality: Ottawa
Country: CA

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:3e:32:0b:05:17:e5:c9:52:ba:1d:83:ec:57:a9:14
Serial Number (int): 10956761365074772015267365434439477524
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e0:f2:cf:15:13:96:02:84:1f:fa:4d:05:bf:4f:41:27:46:ce:9b:e4
AuthorityKeyId: 50:ea:73:89:db:29:fb:10:8f:9e:e5:01:20:d4:de:79:99:48:83:f7

Fingerprint (sha1): ed:c8:18:79:c2:24:b5:bd:d2:18:6b:af:f0:8a:d7:d3:82:d9:1d:11
Fingerprint (sha256): 04:3a:85:84:35:02:bd:5c:08:c5:cf:1f:08:49:ad:fd:9c:ae:94:96:dd:70:d2:2a:e7:32:6c:38:07:6c:5c:97

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ca3-g29.crl
CRL Distribution Point: http://crl4.digicert.com/ca3-g29.crl

Check the revocation status for certificate ssl.shopify.com

124

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl.shopify.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ssl.shopify.com
www.snowdevil.ca
www.toptvmounts.com
shop.wikimedia.org
www.thechivery.com
www.shoeme.ca
www.bnyu.com
www.zclip.com
www.readyproject.com
shop.strava.com
www.inetvideo.com
www.chicagomerch.us
www.pcrxplus.com
www.blackmilkclothing.com
store.theory11.com
www.zclipglobal.com
blackmilkclothing.com
store.jdpower.com
store.roosterteeth.com
www.florists.com
www.isaora.com
www.rippedcanadians.com
shop.aetherapparel.com
shop.thechivery.com
shop.gifts.com
www.homage.com
www.ripndipclothing.com
shop.vfiles.com
www.patagoniaprovisions.com
www.dropdead.co
www.2modern.com
shop.beaucoo.com
shop.naja.co
www.lollywollydoodle.com
www.yesimo.com
store.adonit.net
www.bandofoutsiders.com
shop.fiftythree.com
shop.herschelsupply.com
www.tailgateclothing.com
www.dodocase.com
shop.ellaskitchen.co.uk
www.youngandreckless.com
www.bassboatseats.com
www.toddsnyder.com
www.menincities.com
shop.kithnyc.com
www.buymebrunch.com
www.rokasports.com
*.merchline.com
www.definebottle.com
shop.herschelsupply.ca
www.holstee.com
www.mgkofficialmerch.com
www.cherofficialshop.com
www.aliceinchainsshop.com
www.rhcpshop.com
www.fivefingerdeathpunchshop.com
www.greendaystore.com
www.ladygaga-shop.com
www.boysclubshop.com
www.bluenoteshop.com
www.a7xshop.com
www.cherlloydshop.com
www.harrisfarm.com.au
www.geysir.com
www.uk.geysir.com
www.is.geysir.com
www.eu.geysir.com
www.dmcollectibles.com
shop.nabitablet.com
www.arcangelsurfwareshop.com
www.cheapundies.com
www.dangerkidsshop.com
www.shopallamericanrejects.com
www.shoprostrumrecords.com
www.valimerch.com
www.shopbobmarley.com
www.stonesourshop.com
www.last-size.com
www.gosoundcast.com
shop.gopole.com
www.chubbiesshorts.com
www.nailvn.com
www.boatcarpetbuys.com
www.boatseatstore.com
www.richardsherman25.com
www.barrysanders.com
www.pontoonstuff.com
www.mylightbulbs.com
shop.bulbamerica.com
store.officialvali.com
store.rostrumrecords.com
www.bigseanshop.com
store.teammateband.com
www.masterdynamic.com
www.shopifypl.us
www.streetmoda.com
www.headphone.com
www.rowdygentleman.com
www.whiteplum.com
www.goodgroomsmen.com
store.drperlmutter.com
www.turtleboxmarket.com
www.pilstore.com
shop.arcangelsurfware.biz
www.getdoorbot.com
www.teeturtle.com
www.jackerwin.com
www.nybrands.com.br
www.annsfabulousfinds.com
www.lightroompresets.com
www.bbolder.com
www.ammofast.com
www.skinnyfoxdetox.com
www.themountain.com
wholesale.themountain.com
www.veneffect.com
store.manitobah.ca
store.manitobah.com
www.skateamerica.com
www.actionvillage.com
shop.mikoh.com
www.getdubs.com

Other certificates including the domain name shopify.com

(limited to 100 certificates)
f4.shared.global.fastly.net
zh.shopify.com
ingress-imagery-us-central1-2.shopifycloud.com
statuspage.io
themes.shopify.com
l.ssl.shopify.com
merchandise.shopify.com
events.shopify.com
press.shopify.com
statuspage.io
dns-vetting1-jeffg-noah.map.fastly.net
statuspage.io
shopify-app-store.shopifycloud.com
o.ssl.shopify.com
statuspage.io
brochure2-staging12.shopifycloud.com
plusinfo.shopify.com
status.3dcart.com
savage-sign-on.shopifycloud.com
accounts.shopify.com
investor.shopify.com
meetups.shopify.com
projectruru.shopify.com
shopify.com
linkpop.com
chat.shopify.com
commerceplus.shopify.com
marketplace.shopify.com
next.shopify.com
shopify-classifieds.shopifycloud.com
ir.shopify.com
ssl.shopify.com
marketplace.shopify.com
store.shopify.com
secure03.lithium.com
dev.shopify.com
somethingorother.shopify.com
commerceplus.shopify.com
pins.shopify.com
statuspage.io
ssl.cdngc.net
sourcing-admin.shopify.com
cardreader.shopify.com
www.shopify.com
www.shopify.com
secure03.stage.lithium.com
p.ssl.shopify.com
pointofsale.shopify.com
bourgeois.shopifycloud.com
unicorn.shopify.com
upcoming12.shopify.com
sl.shopify.com
tashboard.shopify.com
growthcenter.shopify.com
secure03.stage.lithium.com
statuspage.io
*.b.ssl.fastly.net
gtm.shopify.com
secure03.lithium.com
statuspage.io
analytics.shopify.com
state-of-engage.shopify.com
collabs.shopify.com
unite-registration.shopify.com
photos.shopify.com
data-portal.shopifycloud.com
merch.shopify.com
plusacademy.shopify.com
www.shopify.com
burst.shopify.com
shopify-plus-meet-up.shopify.com
collabs.shopify.com
statuspage.io
privacy.shopify.com
r.ssl.fastly.net
counter.shopify.com
shopify-app-store.shopifycloud.com
statuspage.io
statuspage.io
collabs-merchant-staging.shopify.com
b.ssl.shopify.com
statuspage.io
shopify-app-store-staging.shopifycloud.com
sfn.shopify.com
growthcenter.shopify.com
bcs.shopify.com
statuspage.io
smiley-staging.shopify.com
secure03.lithium.com
statuspage.io
hardware.shopify.com
upcoming-pizx.shopify.com
shopify-classifieds.shopifycloud.com
ny.shopify.com
pursuit.shopify.com
cardreader-giveaway.shopifycloud.com
auth.data.shopify.com
hardware.shopify.com
statuspage.io
ssl.shopify.com

Certificate

The complete raw certificate details for ssl.shopify.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMU2sLlJzb24U3S0NCjJ
RBUSD1BGzGaiNlLarr7lKVY7yHs6LroIOuxk5luNHNmZGzFx9nevMeno+YtEgeDe
mV50HBaxouclZnpOqh5U8HKIg8IZ2AVPUtOEh+1OdLAQhLPLTzNY0iQKMXHqBjF3
fd5k8/WmF4jWy0pLpUheXG8bhpLacFKh5QgbZ/RRHQ6yDn9ZcIflx7zDoCK3uZf1
2AW14+6/qPFTE0NIai8TzdDS5QRIX3j40Vn+R9qwXrTcW1DlRMGPOeq6xrL+Ej9b
GpOxqWi4RxO2s5JdZOOFEznQxuwUuUKOdbiK+RSh7msExj/4E2MCBjidwZ9rzLQF
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10956761365074772015267365434439477524
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert High Assurance CA-3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-10-22 12:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-22 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ottawa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shopify Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl.shopify.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24839957440862466554159429289090205317030212399871068540934586427990967811503628845778966946404172127741935352746845652920170258079450296851049191898294745095189807913476572580514674124347373510119923884040679126744590274982017701006628310116625076807452869735478941431546305408104859625566615703687251890210495694048572988417261923842521276128935225680492534375678529166395316900654192182221100138585639736280800351327961179716339133632382295107602054408701287872764239728513864273941452124616549259899918115023068000459046526245039347129605396709528589369036488055694356728989514238704867869583176170858907841070371
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 50ea7389db29fb108f9ee50120d4de79994883f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e0f2cf15139602841ffa4d05bf4f412746ce9be4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2649 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.shopify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snowdevil.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.toptvmounts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.wikimedia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thechivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shoeme.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnyu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zclip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.readyproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.strava.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inetvideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chicagomerch.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pcrxplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blackmilkclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.theory11.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zclipglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackmilkclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.jdpower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.roosterteeth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.florists.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.isaora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rippedcanadians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.aetherapparel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.thechivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gifts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ripndipclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.vfiles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.patagoniaprovisions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dropdead.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2modern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.beaucoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.naja.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lollywollydoodle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yesimo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.adonit.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bandofoutsiders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.fiftythree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.herschelsupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tailgateclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dodocase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ellaskitchen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.youngandreckless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bassboatseats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.toddsnyder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.menincities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.kithnyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buymebrunch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rokasports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.merchline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.definebottle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.herschelsupply.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holstee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mgkofficialmerch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cherofficialshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aliceinchainsshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rhcpshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fivefingerdeathpunchshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greendaystore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ladygaga-shop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boysclubshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluenoteshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.a7xshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cherlloydshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harrisfarm.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geysir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uk.geysir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.is.geysir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eu.geysir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dmcollectibles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.nabitablet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arcangelsurfwareshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapundies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dangerkidsshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopallamericanrejects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shoprostrumrecords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valimerch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopbobmarley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stonesourshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.last-size.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gosoundcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gopole.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chubbiesshorts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nailvn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boatcarpetbuys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boatseatstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richardsherman25.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barrysanders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pontoonstuff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mylightbulbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.bulbamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.officialvali.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.rostrumrecords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigseanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.teammateband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.masterdynamic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopifypl.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.streetmoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.headphone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rowdygentleman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whiteplum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodgroomsmen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.drperlmutter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.turtleboxmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pilstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.arcangelsurfware.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getdoorbot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teeturtle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jackerwin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nybrands.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.annsfabulousfinds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lightroompresets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbolder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ammofast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skinnyfoxdetox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.themountain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wholesale.themountain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.veneffect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.manitobah.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.manitobah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skateamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.actionvillage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.mikoh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getdubs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ca3-g29.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ca3-g29.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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