store.universalmusic.com

- Universal Music Group, Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 02:e7:6a:99:78:b6:48:a4:c9:30:26:67:51:aa:e9:61 was issued on by DigiCert Inc.

With 102 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universal Music Group, Inc.

Organization: Universal Music Group, Inc.
Organization unit: E-commerce
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:e7:6a:99:78:b6:48:a4:c9:30:26:67:51:aa:e9:61
Serial Number (int): 3860038660576797415387943878762621281
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 01:2f:20:5b:ed:1e:4a:e0:f7:49:7a:2b:57:79:4a:4e:bf:69:f9:27
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 0b:e9:5e:e9:47:05:26:b4:49:02:b9:c6:52:59:da:26:d0:aa:ac:9b
Fingerprint (sha256): 0c:c6:f8:1a:39:b2:a3:8b:42:69:fc:53:a8:6e:03:c1:1c:b0:0a:d8:b7:e5:d4:ab:21:7f:30:9a:5b:1a:a7:24

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate store.universalmusic.com

102

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for store.universalmusic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

flashsalerecords.com
thesoundofvinyl.com
getvamps.com
greatofferstore.com
getnhc.com
store.universalmusic.com
shop.jamesblakemusic.com
shop.ronniewood.com
shop.walkingoncars.com
www.flashsalerecords.com
shop.westlife.com
shop.whenyoungband.com
shop.hardycaprio.co
dtrw.markknopfler.com
shop.kawalaofficial.com
shop.gorgoncity.com
egyptstation.co.uk
store.sexpistolsofficial.com
uk.gnrmerch.com
ukshop.shawnmendesofficial.com
store.andrewlloydwebber.com
store.eltonjohn.com
shop.islandrecordsbeer.com
shop.lewiscapaldi.com
shop.mabelofficial.com
uk.shopxxxtentacion.com
uk.blacksabbathapparelshop.com
shopuk.duffonline.com
shop.glassanimals.com
shop.easylifemusic.com
shopuk.arianagrande.com
shopuk.tameimpala.com
shopuk.kanyewest.com
shop.liampayneofficial.com
shop.hrvy.com
music.twinatlantic.com
shopuk.halseyshop.com
store.frank-turner.com
www.getnhc.com
shop.sportsteamband.com
shopuk.nct127.com
shop.bigheath.world
ukstore.dermotkennedy.com
shop.decca.com
shopuk.trippieredd.com
shop.sheybaba.com
shopuk.postmalone.com
store.puremccartney.com
store.jamesbay.com
store.mumfordandsons.com
shop.thejazzlabels.com
shop.itsradioactive.com
store.amfrecords.com
store.disclosureofficial.com
store.florenceandthemachine.net
store.jakebugg.com
store.amywinehouse.com
shop.dreamboatsandpetticoats.com
music.bastillebastille.com
www.thesoundofvinyl.com
store.mysteryjets.com
store.thechemicalbrothers.com
store.samsmithworld.com
shop.paddington.com
store.thewho.com
shop.cyberalma.com
store.deccaclassics.com
musicstore.niallhoran.com
uk.lordeofficialstore.com
store.thisissigrid.com
store.jamiroquai.com
store.blessedvice.com
shop.keanemusic.com
store.tomchaplinmusic.com
store.udiscovermusic.com
shop.loylecarner.com
store.springkingband.com
shopuk.justinbiebermusic.com
www.getvamps.com
www.greatofferstore.com
store.spinefarmrecords.com
shop.abbeyroad.com
shopuk.theweeknd.com
shop.emelisande.com
store.seagirls.net
store.jackgarratt.com
store.catfishandthebottlemen.com
shop.thisisofficial.com
store.hozier.com
store.dirtyhit.co.uk
store.amymacdonald.co.uk
shop.islandrecords.co.uk
shop.mhuncho.co.uk
store.benhowardmusic.co.uk
shop.ravescience.co.uk
shop.fictionrecords.co.uk
www.egyptstation.co.uk
shop.fourofdiamonds.co.uk
store.blossomsband.co.uk
shop.ianbrown.co.uk
shopuk.diggad.co.uk
store.benkhan.co.uk

Other certificates including the domain name universalmusic.com

(limited to 100 certificates)
acquia-sites.com
incapsula.com
acquia-sites.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
*.dev.investors.universalmusic.com
store.universalmusic.com
acquia-sites.com
incapsula.com
store.universalmusic.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
etassets.universalmusic.com
incapsula.com
uc17.janrainengage.com
incapsula.com
store.universalmusic.com
store.universalmusic.com
incapsula.com
incapsula.com
store.universalmusic.com
preview.investors.universalmusic.com
store.universalmusic.com
incapsula.com
*.qa.investors.universalmusic.com
investors.universalmusic.com
incapsula.com
uutiskirje.universalmusic.com
*.janraincapture.com
uc18.janrainengage.com
universalmusic.com
store.universalmusic.com
incapsula.com
store.universalmusic.com
*.qa.investors.universalmusic.com
universalmusic.com
preview.dev.investors.universalmusic.com
incapsula.com
incapsula.com
*.dev.investors.universalmusic.com
acquia-sites.com
privacy.umusic.com
incapsula.com
shop.btobelabo.com
store.universalmusic.com
incapsula.com
store.universalmusic.com
preview.preprod.investors.universalmusic.com
incapsula.com
acquia-sites.com
*.janraincapture.com
uutiskirje.universalmusic.com
store.universalmusic.com
uc18.janrainengage.com
acquia-sites.com
store.universalmusic.com
incapsula.com
store.universalmusic.com
uc18.janrainengage.com
incapsula.com
acquia-sites.com
store.universalmusic.com
acquia-sites.com
incapsula.com
acquia-sites.com
incapsula.com
*.dev.investors.universalmusic.com
incapsula.com
universalmusic.com
*.qa.investors.universalmusic.com
uc17.janrainengage.com
universalmusic.com
store.universalmusic.com
universalmusic.com
incapsula.com
privacy.umusic.com
incapsula.com
*.qa.investors.universalmusic.com
store.universalmusic.com
store.universalmusic.com
incapsula.com
acquia-sites.com
incapsula.com
incapsula.com
store.universalmusic.com
incapsula.com
incapsula.com
go.universalmusic.com
incapsula.com
uc11.janraincapture.com
investors.universalmusic.com
incapsula.com
store.universalmusic.com
incapsula.com
incapsula.com
store.universalmusic.com

Certificate

The complete raw certificate details for store.universalmusic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UePKCZE9Bshe7BSx27e
qFfiXIu5L35VFCSkvNSKSVlLilOmVIf1frXZG9AGzzLU7NzXyUkbq3jXkW3q8Nnj
aXTnc96k5Bf8pNKtt0r0mcsvHwLDqwHl+cT/rko/WAzA3ucj1uKvTvZUMAe7AXAN
xT2GCVkUNEBctHY18eCinMoNkiSQjx6SL45nsfjdRvyWgAEyERPzdX8KZ+zj1asE
YDXUX43IG8y9sjh1HjFHfP9pJZu7/gtyhc7pc7I3vVSOP2IHgZOnfvG1kamXjLcf
1Ll7tyKmS8gVXUCHMr1yxoCb8msFhvk2FD6bixJ+DtnYQ31enDrB7v3IFLLl8/ua
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3860038660576797415387943878762621281
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universal Music Group, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'E-commerce'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'store.universalmusic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26924046117608201256762783716276012649967337665012193730709563782260070815635096048768153212403317670752152881781251460763104273352995363214467479100878559449676117794697299808320383507287699823208256057341603713924169495329927918767176482523676842875995874042975738369527626545658772484138463190024982064144594671368877902431999759655614493299278698570353393611270537156274905759255134558102924437427108651443324166371219688344287633334168139547243232563101245077404559877294163581411520578749823660682645707006510103495578253022218316628770734135049534350172276172680551063377401054042788357264045077857852033047087
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							012f205bed1e4ae0f7497a2b57794a4ebf69f927
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2416 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flashsalerecords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesoundofvinyl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getvamps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatofferstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getnhc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.universalmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.jamesblakemusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ronniewood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.walkingoncars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flashsalerecords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.westlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.whenyoungband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.hardycaprio.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dtrw.markknopfler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.kawalaofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gorgoncity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egyptstation.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.sexpistolsofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.gnrmerch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukshop.shawnmendesofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.andrewlloydwebber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.eltonjohn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.islandrecordsbeer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.lewiscapaldi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.mabelofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.shopxxxtentacion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.blacksabbathapparelshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.duffonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.glassanimals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.easylifemusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.arianagrande.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.tameimpala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.kanyewest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.liampayneofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.hrvy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'music.twinatlantic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.halseyshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.frank-turner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getnhc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.sportsteamband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.nct127.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.bigheath.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukstore.dermotkennedy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.decca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.trippieredd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.sheybaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.postmalone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.puremccartney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.jamesbay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.mumfordandsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.thejazzlabels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.itsradioactive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.amfrecords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.disclosureofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.florenceandthemachine.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.jakebugg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.amywinehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.dreamboatsandpetticoats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'music.bastillebastille.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesoundofvinyl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.mysteryjets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.thechemicalbrothers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.samsmithworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.paddington.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.thewho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.cyberalma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.deccaclassics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musicstore.niallhoran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.lordeofficialstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.thisissigrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.jamiroquai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.blessedvice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.keanemusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.tomchaplinmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.udiscovermusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.loylecarner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.springkingband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.justinbiebermusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getvamps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greatofferstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.spinefarmrecords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.abbeyroad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.theweeknd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.emelisande.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.seagirls.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.jackgarratt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.catfishandthebottlemen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.thisisofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.hozier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.dirtyhit.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.amymacdonald.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.islandrecords.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.mhuncho.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.benhowardmusic.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ravescience.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.fictionrecords.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egyptstation.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.fourofdiamonds.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.blossomsband.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ianbrown.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.diggad.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.benkhan.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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