o.ssl.shopify.com
- Shopify Inc. -
Issued by DigiCert SHA2 High Assurance Server CA
About this certificate
This digital certificate with serial number 0f:8c:bc:90:bc:80:95:c3:48:f2:11:63:d7:f7:4d:f9 was issued on by DigiCert Inc.
With 77 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Shopify Inc.
Organization:
Shopify Inc.
State / Province:
Ontario
Locality: Ottawa
Country: CA
Locality: Ottawa
Country: CA
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0f:8c:bc:90:bc:80:95:c3:48:f2:11:63:d7:f7:4d:f9Serial Number (int): 20669166057168134115956561184604769785
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: b7:6a:10:60:ca:72:4d:54:a3:3a:88:33:94:47:36:41:e1:b1:1b:ca
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b
Fingerprint (sha1): a0:3f:05:f9:71:a9:b3:a7:c5:84:f6:67:82:44:67:b1:f9:bf:a7:0f
Fingerprint (sha256): 04:bd:3b:9d:e1:7e:79:86:c2:48:51:73:25:3e:9c:78:07:3e:73:b3:1b:67:d7:9a:68:46:bb:ad:51:98:0c:68
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g5.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g5.crl
Check the revocation status for certificate o.ssl.shopify.com
77
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for o.ssl.shopify.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
o.ssl.shopify.com
www.mugempire.com
www.statusanxiety.com.au
de.gdiapers.eu
www.culturegear.com
shop.oasisinet.com
www.tykables.com
www.tykables.ca
www.tykables.uk
ca.octobersveryown.com
us.octobersveryown.com
world.octobersveryown.com
www.periodpaper.com
www.flatspot.com
www.titikaactive.hk
www.prepobsessed.com
www.thebalm.com
wholesale.detourcoffee.com
www.detourcoffee.com
www.bioclarity.com
www.camerareadycosmetics.com
www.sleepyheads.com
www.theelephantpants.com
www.cemarose.com
www.paradisefibers.com
www.perfectlocks.com
www.honeybirdette.com
www.savedbythedress.com
beta.evil-bikes.com
www.evil-bikes.com
www.gameguard.net
www.lekkerhome.com
www.sundayschool.com
www.westcoastgifts.ca
us.foursigmatic.com
international.foursigmatic.com
wholesale.foursigmatic.com
www.joshnormannfl.com
www.aspiremotoring.com
www.baobella.com
www.enduraq.com
www.cleanplanetfoods.com
www.aeraforhome.com
store.printm3d.com
checkout.goto.com.pk
www.aafnation.com
checkout.stagprovisions.com
b2b.dlxsf.com
distro.dlxsf.com
www.atmosny.com
www.sydneyscloset.com
www.maazproducts.com
www.frostnyc.com
www.getinkbox.com
www.frankiesbikinis.com
www.ardyss.com
www.bodymagic.world
www.fanshophq.com
www.tomboyx.com
www.collected.co.nz
www.jnorman24.com
www.stephieandjoe.com
pro.stephieandjoe.com
www.afflictionclothing.com
shop.kinsahealth.com
www.boomboomthelabel.us
www.sydneyswholesale.com
www.inkedshop.com
www.vernonfrancois.com
checkout.cititrends.com
shop.pak.nl
www.bellerose.be
www.honeypeaches.com
www.myinnerfire.com
www.thursdayboots.com
www.spiritualgangster.com
www.perfume-empire.com
www.mugempire.com
www.statusanxiety.com.au
de.gdiapers.eu
www.culturegear.com
shop.oasisinet.com
www.tykables.com
www.tykables.ca
www.tykables.uk
ca.octobersveryown.com
us.octobersveryown.com
world.octobersveryown.com
www.periodpaper.com
www.flatspot.com
www.titikaactive.hk
www.prepobsessed.com
www.thebalm.com
wholesale.detourcoffee.com
www.detourcoffee.com
www.bioclarity.com
www.camerareadycosmetics.com
www.sleepyheads.com
www.theelephantpants.com
www.cemarose.com
www.paradisefibers.com
www.perfectlocks.com
www.honeybirdette.com
www.savedbythedress.com
beta.evil-bikes.com
www.evil-bikes.com
www.gameguard.net
www.lekkerhome.com
www.sundayschool.com
www.westcoastgifts.ca
us.foursigmatic.com
international.foursigmatic.com
wholesale.foursigmatic.com
www.joshnormannfl.com
www.aspiremotoring.com
www.baobella.com
www.enduraq.com
www.cleanplanetfoods.com
www.aeraforhome.com
store.printm3d.com
checkout.goto.com.pk
www.aafnation.com
checkout.stagprovisions.com
b2b.dlxsf.com
distro.dlxsf.com
www.atmosny.com
www.sydneyscloset.com
www.maazproducts.com
www.frostnyc.com
www.getinkbox.com
www.frankiesbikinis.com
www.ardyss.com
www.bodymagic.world
www.fanshophq.com
www.tomboyx.com
www.collected.co.nz
www.jnorman24.com
www.stephieandjoe.com
pro.stephieandjoe.com
www.afflictionclothing.com
shop.kinsahealth.com
www.boomboomthelabel.us
www.sydneyswholesale.com
www.inkedshop.com
www.vernonfrancois.com
checkout.cititrends.com
shop.pak.nl
www.bellerose.be
www.honeypeaches.com
www.myinnerfire.com
www.thursdayboots.com
www.spiritualgangster.com
www.perfume-empire.com
Other certificates including the domain name shopify.com
(limited to 100 certificates)
f4.shared.global.fastly.net
zh.shopify.com
ingress-imagery-us-central1-2.shopifycloud.com
statuspage.io
themes.shopify.com
l.ssl.shopify.com
merchandise.shopify.com
events.shopify.com
press.shopify.com
statuspage.io
dns-vetting1-jeffg-noah.map.fastly.net
statuspage.io
shopify-app-store.shopifycloud.com
o.ssl.shopify.com
statuspage.io
brochure2-staging12.shopifycloud.com
plusinfo.shopify.com
status.3dcart.com
savage-sign-on.shopifycloud.com
accounts.shopify.com
investor.shopify.com
meetups.shopify.com
projectruru.shopify.com
shopify.com
linkpop.com
chat.shopify.com
commerceplus.shopify.com
marketplace.shopify.com
next.shopify.com
shopify-classifieds.shopifycloud.com
ir.shopify.com
ssl.shopify.com
marketplace.shopify.com
store.shopify.com
secure03.lithium.com
dev.shopify.com
somethingorother.shopify.com
commerceplus.shopify.com
pins.shopify.com
statuspage.io
ssl.cdngc.net
sourcing-admin.shopify.com
cardreader.shopify.com
www.shopify.com
www.shopify.com
secure03.stage.lithium.com
p.ssl.shopify.com
pointofsale.shopify.com
bourgeois.shopifycloud.com
unicorn.shopify.com
upcoming12.shopify.com
sl.shopify.com
tashboard.shopify.com
growthcenter.shopify.com
secure03.stage.lithium.com
statuspage.io
*.b.ssl.fastly.net
gtm.shopify.com
secure03.lithium.com
statuspage.io
analytics.shopify.com
state-of-engage.shopify.com
collabs.shopify.com
unite-registration.shopify.com
photos.shopify.com
data-portal.shopifycloud.com
merch.shopify.com
plusacademy.shopify.com
www.shopify.com
burst.shopify.com
shopify-plus-meet-up.shopify.com
collabs.shopify.com
statuspage.io
privacy.shopify.com
r.ssl.fastly.net
counter.shopify.com
shopify-app-store.shopifycloud.com
statuspage.io
statuspage.io
collabs-merchant-staging.shopify.com
b.ssl.shopify.com
statuspage.io
shopify-app-store-staging.shopifycloud.com
sfn.shopify.com
growthcenter.shopify.com
bcs.shopify.com
statuspage.io
smiley-staging.shopify.com
secure03.lithium.com
statuspage.io
hardware.shopify.com
upcoming-pizx.shopify.com
shopify-classifieds.shopifycloud.com
ny.shopify.com
pursuit.shopify.com
cardreader-giveaway.shopifycloud.com
auth.data.shopify.com
hardware.shopify.com
statuspage.io
ssl.shopify.com
zh.shopify.com
ingress-imagery-us-central1-2.shopifycloud.com
statuspage.io
themes.shopify.com
l.ssl.shopify.com
merchandise.shopify.com
events.shopify.com
press.shopify.com
statuspage.io
dns-vetting1-jeffg-noah.map.fastly.net
statuspage.io
shopify-app-store.shopifycloud.com
o.ssl.shopify.com
statuspage.io
brochure2-staging12.shopifycloud.com
plusinfo.shopify.com
status.3dcart.com
savage-sign-on.shopifycloud.com
accounts.shopify.com
investor.shopify.com
meetups.shopify.com
projectruru.shopify.com
shopify.com
linkpop.com
chat.shopify.com
commerceplus.shopify.com
marketplace.shopify.com
next.shopify.com
shopify-classifieds.shopifycloud.com
ir.shopify.com
ssl.shopify.com
marketplace.shopify.com
store.shopify.com
secure03.lithium.com
dev.shopify.com
somethingorother.shopify.com
commerceplus.shopify.com
pins.shopify.com
statuspage.io
ssl.cdngc.net
sourcing-admin.shopify.com
cardreader.shopify.com
www.shopify.com
www.shopify.com
secure03.stage.lithium.com
p.ssl.shopify.com
pointofsale.shopify.com
bourgeois.shopifycloud.com
unicorn.shopify.com
upcoming12.shopify.com
sl.shopify.com
tashboard.shopify.com
growthcenter.shopify.com
secure03.stage.lithium.com
statuspage.io
*.b.ssl.fastly.net
gtm.shopify.com
secure03.lithium.com
statuspage.io
analytics.shopify.com
state-of-engage.shopify.com
collabs.shopify.com
unite-registration.shopify.com
photos.shopify.com
data-portal.shopifycloud.com
merch.shopify.com
plusacademy.shopify.com
www.shopify.com
burst.shopify.com
shopify-plus-meet-up.shopify.com
collabs.shopify.com
statuspage.io
privacy.shopify.com
r.ssl.fastly.net
counter.shopify.com
shopify-app-store.shopifycloud.com
statuspage.io
statuspage.io
collabs-merchant-staging.shopify.com
b.ssl.shopify.com
statuspage.io
shopify-app-store-staging.shopifycloud.com
sfn.shopify.com
growthcenter.shopify.com
bcs.shopify.com
statuspage.io
smiley-staging.shopify.com
secure03.lithium.com
statuspage.io
hardware.shopify.com
upcoming-pizx.shopify.com
shopify-classifieds.shopifycloud.com
ny.shopify.com
pursuit.shopify.com
cardreader-giveaway.shopifycloud.com
auth.data.shopify.com
hardware.shopify.com
statuspage.io
ssl.shopify.com
Certificate
The complete raw certificate details for o.ssl.shopify.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIILvDCCCqSgAwIBAgIQD4y8kLyAlcNI8hFj1/dN+TANBgkqhkiG9w0BAQsFADBw MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz dXJhbmNlIFNlcnZlciBDQTAeFw0xNjA0MjEwMDAwMDBaFw0xNzA0MjYxMjAwMDBa MGMxCzAJBgNVBAYTAkNBMRAwDgYDVQQIEwdPbnRhcmlvMQ8wDQYDVQQHEwZPdHRh d2ExFTATBgNVBAoTDFNob3BpZnkgSW5jLjEaMBgGA1UEAxMRby5zc2wuc2hvcGlm eS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+n9DJ6cLwzWvp l1lgjKk43KRk294F3cawzPB9aGyV9UyidrfxZMaYyyupt3sHumdSkNSsp9SKNuA5 ZG/8p1Cqh4DjjW1wkdJ7xnaLTS6fn6LMVmVhuc7RoNVWLggUo9Q206xvqI7C7mSG 7tHJ9wn5aHz9wudVy0ZvpaFmtBwvNOFRapSvTsacH7+cD+CkR0jG9Sw8k17Dk9tG FEaxBAl4VHQwwspdJ0L+nEL4nlXESFjv+Aw270RuopfG9E6vhSaQt63kE46WTf6A R+quDXL3A0/rJp+Q2KWWBEa1XEtBEc5WL+PcDtPo5R9h1VReP5Gnqri3JodnMtac AifGwcR1AgMBAAGjgghdMIIIWTAfBgNVHSMEGDAWgBRRaP+QrwIHdTzM2WVkYqIS uFlyOzAdBgNVHQ4EFgQUt2oQYMpyTVSjOogzlEc2QeGxG8owggaNBgNVHREEggaE MIIGgIIRby5zc2wuc2hvcGlmeS5jb22CEXd3dy5tdWdlbXBpcmUuY29tghh3d3cu c3RhdHVzYW54aWV0eS5jb20uYXWCDmRlLmdkaWFwZXJzLmV1ghN3d3cuY3VsdHVy ZWdlYXIuY29tghJzaG9wLm9hc2lzaW5ldC5jb22CEHd3dy50eWthYmxlcy5jb22C D3d3dy50eWthYmxlcy5jYYIPd3d3LnR5a2FibGVzLnVrghZjYS5vY3RvYmVyc3Zl cnlvd24uY29tghZ1cy5vY3RvYmVyc3Zlcnlvd24uY29tghl3b3JsZC5vY3RvYmVy c3Zlcnlvd24uY29tghN3d3cucGVyaW9kcGFwZXIuY29tghB3d3cuZmxhdHNwb3Qu Y29tghN3d3cudGl0aWthYWN0aXZlLmhrghR3d3cucHJlcG9ic2Vzc2VkLmNvbYIP d3d3LnRoZWJhbG0uY29tghp3aG9sZXNhbGUuZGV0b3VyY29mZmVlLmNvbYIUd3d3 LmRldG91cmNvZmZlZS5jb22CEnd3dy5iaW9jbGFyaXR5LmNvbYIcd3d3LmNhbWVy YXJlYWR5Y29zbWV0aWNzLmNvbYITd3d3LnNsZWVweWhlYWRzLmNvbYIYd3d3LnRo ZWVsZXBoYW50cGFudHMuY29tghB3d3cuY2VtYXJvc2UuY29tghZ3d3cucGFyYWRp c2VmaWJlcnMuY29tghR3d3cucGVyZmVjdGxvY2tzLmNvbYIVd3d3LmhvbmV5Ymly ZGV0dGUuY29tghd3d3cuc2F2ZWRieXRoZWRyZXNzLmNvbYITYmV0YS5ldmlsLWJp a2VzLmNvbYISd3d3LmV2aWwtYmlrZXMuY29tghF3d3cuZ2FtZWd1YXJkLm5ldIIS d3d3Lmxla2tlcmhvbWUuY29tghR3d3cuc3VuZGF5c2Nob29sLmNvbYIVd3d3Lndl c3Rjb2FzdGdpZnRzLmNhghN1cy5mb3Vyc2lnbWF0aWMuY29tgh5pbnRlcm5hdGlv bmFsLmZvdXJzaWdtYXRpYy5jb22CGndob2xlc2FsZS5mb3Vyc2lnbWF0aWMuY29t ghV3d3cuam9zaG5vcm1hbm5mbC5jb22CFnd3dy5hc3BpcmVtb3RvcmluZy5jb22C EHd3dy5iYW9iZWxsYS5jb22CD3d3dy5lbmR1cmFxLmNvbYIYd3d3LmNsZWFucGxh bmV0Zm9vZHMuY29tghN3d3cuYWVyYWZvcmhvbWUuY29tghJzdG9yZS5wcmludG0z ZC5jb22CFGNoZWNrb3V0LmdvdG8uY29tLnBrghF3d3cuYWFmbmF0aW9uLmNvbYIb Y2hlY2tvdXQuc3RhZ3Byb3Zpc2lvbnMuY29tgg1iMmIuZGx4c2YuY29tghBkaXN0 cm8uZGx4c2YuY29tgg93d3cuYXRtb3NueS5jb22CFXd3dy5zeWRuZXlzY2xvc2V0 LmNvbYIUd3d3Lm1hYXpwcm9kdWN0cy5jb22CEHd3dy5mcm9zdG55Yy5jb22CEXd3 dy5nZXRpbmtib3guY29tghd3d3cuZnJhbmtpZXNiaWtpbmlzLmNvbYIOd3d3LmFy ZHlzcy5jb22CE3d3dy5ib2R5bWFnaWMud29ybGSCEXd3dy5mYW5zaG9waHEuY29t gg93d3cudG9tYm95eC5jb22CE3d3dy5jb2xsZWN0ZWQuY28ubnqCEXd3dy5qbm9y bWFuMjQuY29tghV3d3cuc3RlcGhpZWFuZGpvZS5jb22CFXByby5zdGVwaGllYW5k am9lLmNvbYIad3d3LmFmZmxpY3Rpb25jbG90aGluZy5jb22CFHNob3Aua2luc2Fo ZWFsdGguY29tghd3d3cuYm9vbWJvb210aGVsYWJlbC51c4IYd3d3LnN5ZG5leXN3 aG9sZXNhbGUuY29tghF3d3cuaW5rZWRzaG9wLmNvbYIWd3d3LnZlcm5vbmZyYW5j b2lzLmNvbYIXY2hlY2tvdXQuY2l0aXRyZW5kcy5jb22CC3Nob3AucGFrLm5sghB3 d3cuYmVsbGVyb3NlLmJlghR3d3cuaG9uZXlwZWFjaGVzLmNvbYITd3d3Lm15aW5u ZXJmaXJlLmNvbYIVd3d3LnRodXJzZGF5Ym9vdHMuY29tghl3d3cuc3Bpcml0dWFs Z2FuZ3N0ZXIuY29tghZ3d3cucGVyZnVtZS1lbXBpcmUuY29tMA4GA1UdDwEB/wQE AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwdQYDVR0fBG4wbDA0 oDKgMIYuaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL3NoYTItaGEtc2VydmVyLWc1 LmNybDA0oDKgMIYuaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL3NoYTItaGEtc2Vy dmVyLWc1LmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIB FhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjCBgwYIKwYB BQUHAQEEdzB1MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20w TQYIKwYBBQUHMAKGQWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2Vy dFNIQTJIaWdoQXNzdXJhbmNlU2VydmVyQ0EuY3J0MAwGA1UdEwEB/wQCMAAwDQYJ KoZIhvcNAQELBQADggEBAKBL4g6SvD64zsGutiEnf2vo80KWg4WRZ6QPvq54dc8A Qr2X8Yz9IJ4vsiGJqWTOZCPOA5vUlyQqJffHJtt22AAWLqd/E2GEig9drYwMoS30 YhHBvHe6t09mTs8Vr8IZt0DC6E/w0wO5QnrTjMtimdxL7s3rcupaY9F09GNTzld7 i4wZbarPb1qxUgRCMPruaHC6JaHH8lYVQwtr6sGiR/n0jBcFZxW/zh6+p1ShqJhk 5VlibNP3yrUkc0xYGFhqj9GXRNTSweNF07rIjyQdFFrBB0SgZu+1khDHg8dNFoOM SSFzixyvK9/29c1wibVBAwtTbJtw/8I/EnylwKq0wsA= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvp/QyenC8M1r6ZdZYIyp ONykZNveBd3GsMzwfWhslfVMona38WTGmMsrqbd7B7pnUpDUrKfUijbgOWRv/KdQ qoeA441tcJHSe8Z2i00un5+izFZlYbnO0aDVVi4IFKPUNtOsb6iOwu5khu7RyfcJ +Wh8/cLnVctGb6WhZrQcLzThUWqUr07GnB+/nA/gpEdIxvUsPJNew5PbRhRGsQQJ eFR0MMLKXSdC/pxC+J5VxEhY7/gMNu9EbqKXxvROr4UmkLet5BOOlk3+gEfqrg1y 9wNP6yafkNillgRGtVxLQRHOVi/j3A7T6OUfYdVUXj+Rp6q4tyaHZzLWnAInxsHE dQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 20669166057168134115956561184604769785 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-21 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-26 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ottawa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shopify Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'o.ssl.shopify.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24064085943731910745662433341971613915837077222669047929158104839101262924728511967724419384258860231873206061157774826658119932086428970129538464656313214861820321494029566547465433319436855550188885298114777628372366916420581133551129456764944660481294372711090840724840967712955448953809735708495166040897488971991689363801550358624023991762910385922899493857157074421881649190618284470607087068513273956381272103892922890090957696018959747663708365918664797091831554268562749563174561092364822565277007733303933997890142448974756228065847876534726438583592237912003425823347042420974404586352652735994044816147573 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b76a1060ca724d54a33a883394473641e1b11bca . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1668 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'o.ssl.shopify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mugempire.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.statusanxiety.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de.gdiapers.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.culturegear.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.oasisinet.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tykables.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tykables.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tykables.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca.octobersveryown.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.octobersveryown.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'world.octobersveryown.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.periodpaper.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flatspot.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.titikaactive.hk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prepobsessed.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebalm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wholesale.detourcoffee.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.detourcoffee.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bioclarity.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.camerareadycosmetics.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sleepyheads.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theelephantpants.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cemarose.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paradisefibers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.perfectlocks.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.honeybirdette.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.savedbythedress.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.evil-bikes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.evil-bikes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gameguard.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lekkerhome.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sundayschool.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westcoastgifts.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.foursigmatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'international.foursigmatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wholesale.foursigmatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joshnormannfl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aspiremotoring.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baobella.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enduraq.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cleanplanetfoods.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aeraforhome.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.printm3d.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.goto.com.pk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aafnation.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.stagprovisions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b.dlxsf.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'distro.dlxsf.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atmosny.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sydneyscloset.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maazproducts.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frostnyc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getinkbox.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frankiesbikinis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ardyss.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bodymagic.world' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fanshophq.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tomboyx.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collected.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jnorman24.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stephieandjoe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro.stephieandjoe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afflictionclothing.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.kinsahealth.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boomboomthelabel.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sydneyswholesale.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inkedshop.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vernonfrancois.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.cititrends.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.pak.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bellerose.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.honeypeaches.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myinnerfire.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thursdayboots.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiritualgangster.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.perfume-empire.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g5.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g5.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00a04be20e92bc3eb8cec1aeb621277f6be8f3429683859167a40fbeae7875cf0042bd97f18cfd209e2fb22189a964ce6423ce039bd497242a25f7c726db76d800162ea77f1361848a0f5dad8c0ca12df46211c1bc77bab74f664ecf15afc219b740c2e84ff0d303b9427ad38ccb6299dc4beecdeb72ea5a63d174f46353ce577b8b8c196daacf6f5ab152044230faee6870ba25a1c7f25615430b6beac1a247f9f48c17056715bfce1ebea754a1a89864e559626cd3f7cab524734c5818586a8fd19744d4d2c1e345d3bac88f241d145ac10744a066efb59210c783c74d16838c4921738b1caf2bdff6f5cd7089b541030b536c9b70ffc23f127ca5c0aab4c2c0