secure1.nexternal.com

- Nexternal Solutions, Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 05:2b:f6:f7:03:41:4b:d0:d7:66:07:ea:67:87:ff:ee was issued on by DigiCert Inc.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Nexternal Solutions, Inc.

Organization: Nexternal Solutions, Inc.
Organization unit: DEVELOPMENT
State / Province: California
Locality: Carlsbad
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:2b:f6:f7:03:41:4b:d0:d7:66:07:ea:67:87:ff:ee
Serial Number (int): 6874417786967609524430593799357988846
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: a2:9a:20:b0:96:92:bf:62:e7:ab:a9:0b:72:82:00:5a:7c:19:ed:26
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 3a:e0:9e:d0:e6:77:e2:5d:6e:5d:d3:6f:fc:07:b6:50:e3:3a:fd:94
Fingerprint (sha256): 0e:1f:97:57:2b:12:0f:82:a9:3b:b2:8f:76:c5:c2:68:0f:09:3f:b2:8c:b1:6f:94:bb:1f:80:8c:05:00:83:5c

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate secure1.nexternal.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure1.nexternal.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure1.nexternal.com
store.firstfairway.com
www.txscientific.com
shop.clavey.com
shop.ctwhomecollection.com
store.dermaceutic.com
store.blendmount.com
shop.longoriawine.com
supplements.relentlessimprovement.com
shop.advantagenutrition.com
store.busybunny.com
shop.grabthegold.com
store.nealvineyards.com
shop.lmawby.com
www.store.adaptivelivingstore.com
store.denovodental.com
store.inspiredliving.com
shop.stellarapparel.com
store.myenmart.com
store.butchersupply.net
store.crayonrocks.com
store.lamplighter.net
wine.lewiscellars.com
store.districtclothing.com
onlinestore.mounteden.com
shop.paradisemeats.com
store.vocera.com
shop.pisonifamilywines.com
shop.omegabrite.com
beerstore.ballastpointbrewingandspirits.com
store.texasbeautyinstitute.com
store.maxishare.com
store.windingroad.com
store.pecanhouse.com
store.unimaxshop.com
www.dryeyeshop.com
store.skybolt.com
secure.weddingplanninginstitute.com
store.glennsarmysurplus.com
wineshop.bumpcitywineco.com
store.adl.org
store.binkybunny.com
parts.kenotractors.com
store.ohotto.com
store.parabola.org
store.graceworkz.com
store.thanksgivingcoffee.com
store.blackstarfarms.com
shop.bie.org
store.rokslide.com
store.xtraoak.com
store.theorganicwinecompany.com
store.goetzecandy.com
shop.hicountry.com
www.vet-ez-order.com
store.sierraclub.org
store.jamaicanpride.com
bakery.wetakethecake.com
shop.bestfriends.org
store.cigarcitybrewing.com
shop.dermaceutic.com
store.korbel.com
shop.panhandlepopcorn.com
store.andrewmurrayvineyards.com
wineshop.channingdaughters.com
winestore.sanantoniowinery.com
winestore.lambertestate.com
winestore.lambertestate.com.au
appmarket.nexternal.net
store.evilbunnybrewing.com
shop.pinehurst.com
shop.nobleestatewinery.com
www.stockli.biz
shop.collegeoutside.com
uat.firstfairway.com
uat.surfsidecellars.com
store.selectionsbysagemoor.com
shop.maryhillwinery.com
shop.eyrievineyards.com
store.jonescreekbeef.com
shop.designerprotein.com
shop.kingwholesale.com
shop.llanowine.com
shop.foxrunvineyards.com
shop.northcoastbrewing.com
store.linganorewines.com
store.schrammsmead.com
shop.mikkellernyc.com
shop.menasha.com
store.avdroneanalytics.com
shop.bike.nyc
shop.mocklerbeverage.com
buy.axon.com
shop.oakmountainwinery.com
shop.c5vineyard.com
store.wagnervineyards.com
Shop.TheDashPoem.com
shop.nyra.com

Other certificates including the domain name nexternal.com

(limited to 100 certificates)
secure16.nexternal.com
investecstatus.mambu.com
secure19.nexternal.com
secure14.nexternal.com
secure17.nexternal.com
secure1.nexternal.com
secure2.nexternal.com
secure1.nexternal.com
secure3.nexternal.com
secure10.nexternal.com
secure2.nexternal.com
design.nexternal.tcpsg.net
secure12.nexternal.com
basp.status.ato.gov.au
secure17.nexternal.com
basp.status.ato.gov.au
secure1.nexternal.com
design.nexternal.tcpsg.net
secure12.nexternal.com
secure3.nexternal.com
*.cachefly.net
secure2.nexternal.com
secure1.nexternal.com
secure4.nexternal.com
basp.status.ato.gov.au
secure3.nexternal.com
basp.status.ato.gov.au
secure2.nexternal.com
basp.status.ato.gov.au
*.cachefly.net
secure1.nexternal.com
*.cachefly.net
*.cachefly.net
secure11.nexternal.com
secure3.nexternal.com
investecstatus.mambu.com
secure10.nexternal.com
secure5.nexternal.com
secure14.nexternal.com
*.nexternal.com
secure1.nexternal.com
secure4.nexternal.com
*.nexternal.com
secure2.nexternal.com
*.cachefly.net
secure3.nexternal.com
ecommerce-blog.nexternal.com
*.cachefly.net
secure4.nexternal.com
basp.status.ato.gov.au
banknorth.status.mambu.com
secure5.nexternal.com
ecommerce-blog.nexternal.com
secure16.nexternal.com
*.nexternal.com
investecstatus.mambu.com
secure1.nexternal.com
basp.status.ato.gov.au
*.cachefly.net
secure2.nexternal.com
*.cachefly.net
secure19.nexternal.com
secure1.nexternal.com
secure4.nexternal.com
secure18.nexternal.com
secure2.nexternal.com
ecommerce-blog.nexternal.com
*.nexternal.com
secure14.nexternal.com
*.cachefly.net
secure5.nexternal.com
secure12.nexternal.com
secure3.nexternal.com
*.cachefly.net
*.cachefly.net
secure17.nexternal.com
secure12.nexternal.com
secure5.nexternal.com
*.cachefly.net
ecommerce-blog.nexternal.com
basp.status.ato.gov.au
secure14.nexternal.com
basp.status.ato.gov.au
secure18.nexternal.com
secure10.nexternal.com
investecstatus.mambu.com
secure10.nexternal.com
secure1.nexternal.com
secure3.nexternal.com
secure16.nexternal.com
basp.status.ato.gov.au
*.cachefly.net
*.cachefly.net
secure10.nexternal.com
*.cachefly.net
secure10.nexternal.com
secure3.nexternal.com
secure1.nexternal.com
*.cachefly.net
secure16.nexternal.com

Certificate

The complete raw certificate details for secure1.nexternal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXSdzg+f6obyJf75N8Lb
GlKmr3lyqDLx86n+EG1t8YEq9SovnB+PIcDMCYyNaYWNRgdVDOjlZqL8yYHFw81Y
PSGuJP2JnbDgxix0dsCGEldOPECVRWmTKaXPBovxANAmLKvSS/sYaCG/XzwVX5zP
7KtCozXb0ry/i8U1IgRDR4FMYRldAJwwdWZsQBUVqRbyr4QmyNjyuLwYChcp2uxZ
hk9kBP/QrwY73nr3p79pXJpOasXT9H4Y3Pc88oTf2TqiHa07CmYOhHJJ4Maj8Cgf
wr7pSuBPnetigwKacENIxQyhJPLPUkPYZm/Fm7HXJWWfshxJeZap1dFrxnXmvFLC
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6874417786967609524430593799357988846
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-30 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Carlsbad'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nexternal Solutions, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DEVELOPMENT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure1.nexternal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24926451780990469692689076024154351424446290697054630595258946301548120309928869920332184457220676766559848680491602663447360359846282689349929358829016526586895852269574171776694308795259537773128503781436732186582613324749740452067566976229772506896139387985695307225253560550440955683293845874958351600473655940378872516394069833488770684869800242719885299449945038917102318851122432954581493084551322015162738708565625873585493974943610255471139097562958592147638992454062175705563404874295539689321875801668259283480319597371399361572345188821664810257650901546652626231211201497607467507223511447426800106521181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a29a20b09692bf62e7aba90b7282005a7c19ed26
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2393 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure1.nexternal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.firstfairway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.txscientific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.clavey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ctwhomecollection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.dermaceutic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.blendmount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.longoriawine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supplements.relentlessimprovement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.advantagenutrition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.busybunny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.grabthegold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.nealvineyards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.lmawby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.store.adaptivelivingstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.denovodental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.inspiredliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.stellarapparel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.myenmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.butchersupply.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.crayonrocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.lamplighter.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wine.lewiscellars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.districtclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinestore.mounteden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.paradisemeats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.vocera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.pisonifamilywines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.omegabrite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beerstore.ballastpointbrewingandspirits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.texasbeautyinstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.maxishare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.windingroad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.pecanhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.unimaxshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dryeyeshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.skybolt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.weddingplanninginstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.glennsarmysurplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wineshop.bumpcitywineco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.adl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.binkybunny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parts.kenotractors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.ohotto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.parabola.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.graceworkz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.thanksgivingcoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.blackstarfarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.bie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.rokslide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.xtraoak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.theorganicwinecompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.goetzecandy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.hicountry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vet-ez-order.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.sierraclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.jamaicanpride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakery.wetakethecake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.bestfriends.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.cigarcitybrewing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.dermaceutic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.korbel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.panhandlepopcorn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.andrewmurrayvineyards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wineshop.channingdaughters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winestore.sanantoniowinery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winestore.lambertestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winestore.lambertestate.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appmarket.nexternal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.evilbunnybrewing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.pinehurst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.nobleestatewinery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stockli.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.collegeoutside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.firstfairway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.surfsidecellars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.selectionsbysagemoor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.maryhillwinery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.eyrievineyards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.jonescreekbeef.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.designerprotein.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.kingwholesale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.llanowine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.foxrunvineyards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.northcoastbrewing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.linganorewines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.schrammsmead.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.mikkellernyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.menasha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.avdroneanalytics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.bike.nyc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.mocklerbeverage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.axon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.oakmountainwinery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.c5vineyard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.wagnervineyards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Shop.TheDashPoem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.nyra.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000163b20e0fa20000040300463044022055825b41b5f75c01bb941cb2bde48eeb5e89f823fd0fffe0c92cdf01c6361946022007a3df4a5445fe8be04131d066fc39747a9b2d34b673e8daa06c65fd4e56f9ed0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000163b20e10240000040300473045022025aa0fce7d7d0ab25ad4471ab3774c3bdef515747a6e1d472f7168aefbbf0029022100e75a67c9499b769aeef3b911d7902cd1a7ebebfc7e85984dcc2911562b0ebcbe
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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