secure1.nexternal.com

- Nexternal Solutions, Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 01:98:6a:9f:5a:8d:99:e1:75:21:44:a1:e4:80:cc:8f was issued on by DigiCert Inc.

With 80 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Nexternal Solutions, Inc.

Organization: Nexternal Solutions, Inc.
State / Province: California
Locality: Carlsbad
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:98:6a:9f:5a:8d:99:e1:75:21:44:a1:e4:80:cc:8f
Serial Number (int): 2120619679002872623051175462459985039
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: a2:9a:20:b0:96:92:bf:62:e7:ab:a9:0b:72:82:00:5a:7c:19:ed:26
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 16:50:ba:67:a4:c0:11:9d:5a:88:a4:27:c3:79:77:94:16:ad:0e:a8
Fingerprint (sha256): 0f:61:ce:66:fa:97:f0:e1:b1:b1:e1:2c:17:7b:12:26:e7:4e:e2:e4:fa:41:bf:cf:64:51:24:bd:3a:8b:4d:53

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g4.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g4.crl

Check the revocation status for certificate secure1.nexternal.com

80

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure1.nexternal.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure1.nexternal.com
store.firstfairway.com
www.txscientific.com
shop.clavey.com
store.miranapa.com
shop.ctwhomecollection.com
shop.vtarmynavy.com
store.dermaceutic.com
store.blendmount.com
store.refinityskinscience.com
shop.longoriawine.com
supplements.relentlessimprovement.com
group-piano-method.mcpiano.com
shop.advantagenutrition.com
store.busybunny.com
shop.grabthegold.com
store.nealvineyards.com
shop.lmawby.com
jp.store.mitsuwa.com
store.mitsuwa.com
www.store.adaptivelivingstore.com
store.saratogasupplements.com
store.denovodental.com
store.inspiredliving.com
store.roughlinen.com
shop.stellarapparel.com
store.myenmart.com
store.butchersupply.net
store.crayonrocks.com
store.bobsbirdhouse.com
store.lamplighter.net
wine.lewiscellars.com
store.districtclothing.com
onlinestore.mounteden.com
shop.paradisemeats.com
store.vocera.com
shop.pisonifamilywines.com
shop.omegabrite.com
beerstore.ballastpointbrewingandspirits.com
store.bellasante.com
store.lesmadeleines.com
store.texasbeautyinstitute.com
store.maxishare.com
store.windingroad.com
store.pecanhouse.com
store.unimaxshop.com
www.dryeyeshop.com
store.skybolt.com
secure.weddingplanninginstitute.com
store.glennsarmysurplus.com
store.atheasupplements.com
wineshop.bumpcitywineco.com
store.adl.org
access.avalere.com
store.binkybunny.com
store.kenwoodvineyards.com
gearcloset.collegeoutside.com
parts.kenotractors.com
store.ohotto.com
store.parabola.org
store.graceworkz.com
mystore.honeycombs.com
store.thanksgivingcoffee.com
store.blackstarfarms.com
shop.bie.org
shop.perlavitallc.com
store.rokslide.com
store.xtraoak.com
store.theorganicwinecompany.com
store.goetzecandy.com
shop.hicountry.com
store.stonebrookwinery.com
www.vet-ez-order.com
shop.maggallerystore.com
kingwholesale.com
store.budgetap.com
store.sierraclub.org
store.jamaicanpride.com
bakery.wetakethecake.com
shop.bestfriends.org

Other certificates including the domain name nexternal.com

(limited to 100 certificates)
secure16.nexternal.com
investecstatus.mambu.com
secure19.nexternal.com
secure14.nexternal.com
secure17.nexternal.com
secure1.nexternal.com
secure2.nexternal.com
secure1.nexternal.com
secure3.nexternal.com
secure10.nexternal.com
secure2.nexternal.com
design.nexternal.tcpsg.net
secure12.nexternal.com
basp.status.ato.gov.au
secure17.nexternal.com
basp.status.ato.gov.au
secure1.nexternal.com
design.nexternal.tcpsg.net
secure12.nexternal.com
secure3.nexternal.com
*.cachefly.net
secure2.nexternal.com
secure1.nexternal.com
secure4.nexternal.com
basp.status.ato.gov.au
secure3.nexternal.com
basp.status.ato.gov.au
secure2.nexternal.com
basp.status.ato.gov.au
*.cachefly.net
secure1.nexternal.com
*.cachefly.net
*.cachefly.net
secure11.nexternal.com
secure3.nexternal.com
investecstatus.mambu.com
secure10.nexternal.com
secure5.nexternal.com
secure14.nexternal.com
*.nexternal.com
secure1.nexternal.com
secure4.nexternal.com
*.nexternal.com
secure2.nexternal.com
*.cachefly.net
secure3.nexternal.com
ecommerce-blog.nexternal.com
*.cachefly.net
secure4.nexternal.com
basp.status.ato.gov.au
banknorth.status.mambu.com
secure5.nexternal.com
ecommerce-blog.nexternal.com
secure16.nexternal.com
*.nexternal.com
investecstatus.mambu.com
secure1.nexternal.com
basp.status.ato.gov.au
*.cachefly.net
secure2.nexternal.com
*.cachefly.net
secure19.nexternal.com
secure1.nexternal.com
secure4.nexternal.com
secure18.nexternal.com
secure2.nexternal.com
ecommerce-blog.nexternal.com
*.nexternal.com
secure14.nexternal.com
*.cachefly.net
secure5.nexternal.com
secure12.nexternal.com
secure3.nexternal.com
*.cachefly.net
*.cachefly.net
secure17.nexternal.com
secure12.nexternal.com
secure5.nexternal.com
*.cachefly.net
ecommerce-blog.nexternal.com
basp.status.ato.gov.au
secure14.nexternal.com
basp.status.ato.gov.au
secure18.nexternal.com
secure10.nexternal.com
investecstatus.mambu.com
secure10.nexternal.com
secure1.nexternal.com
secure3.nexternal.com
secure16.nexternal.com
basp.status.ato.gov.au
*.cachefly.net
*.cachefly.net
secure10.nexternal.com
*.cachefly.net
secure10.nexternal.com
secure3.nexternal.com
secure1.nexternal.com
*.cachefly.net
secure16.nexternal.com

Certificate

The complete raw certificate details for secure1.nexternal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXSdzg+f6obyJf75N8Lb
GlKmr3lyqDLx86n+EG1t8YEq9SovnB+PIcDMCYyNaYWNRgdVDOjlZqL8yYHFw81Y
PSGuJP2JnbDgxix0dsCGEldOPECVRWmTKaXPBovxANAmLKvSS/sYaCG/XzwVX5zP
7KtCozXb0ry/i8U1IgRDR4FMYRldAJwwdWZsQBUVqRbyr4QmyNjyuLwYChcp2uxZ
hk9kBP/QrwY73nr3p79pXJpOasXT9H4Y3Pc88oTf2TqiHa07CmYOhHJJ4Maj8Cgf
wr7pSuBPnetigwKacENIxQyhJPLPUkPYZm/Fm7HXJWWfshxJeZap1dFrxnXmvFLC
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2120619679002872623051175462459985039
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-03 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Carlsbad'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nexternal Solutions, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure1.nexternal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24926451780990469692689076024154351424446290697054630595258946301548120309928869920332184457220676766559848680491602663447360359846282689349929358829016526586895852269574171776694308795259537773128503781436732186582613324749740452067566976229772506896139387985695307225253560550440955683293845874958351600473655940378872516394069833488770684869800242719885299449945038917102318851122432954581493084551322015162738708565625873585493974943610255471139097562958592147638992454062175705563404874295539689321875801668259283480319597371399361572345188821664810257650901546652626231211201497607467507223511447426800106521181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a29a20b09692bf62e7aba90b7282005a7c19ed26
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1948 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure1.nexternal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.firstfairway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.txscientific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.clavey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.miranapa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ctwhomecollection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.vtarmynavy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.dermaceutic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.blendmount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.refinityskinscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.longoriawine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supplements.relentlessimprovement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'group-piano-method.mcpiano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.advantagenutrition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.busybunny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.grabthegold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.nealvineyards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.lmawby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jp.store.mitsuwa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.mitsuwa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.store.adaptivelivingstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.saratogasupplements.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.denovodental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.inspiredliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.roughlinen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.stellarapparel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.myenmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.butchersupply.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.crayonrocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.bobsbirdhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.lamplighter.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wine.lewiscellars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.districtclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinestore.mounteden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.paradisemeats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.vocera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.pisonifamilywines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.omegabrite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beerstore.ballastpointbrewingandspirits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.bellasante.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.lesmadeleines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.texasbeautyinstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.maxishare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.windingroad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.pecanhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.unimaxshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dryeyeshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.skybolt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.weddingplanninginstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.glennsarmysurplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.atheasupplements.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wineshop.bumpcitywineco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.adl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'access.avalere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.binkybunny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.kenwoodvineyards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gearcloset.collegeoutside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parts.kenotractors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.ohotto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.parabola.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.graceworkz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mystore.honeycombs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.thanksgivingcoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.blackstarfarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.bie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.perlavitallc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.rokslide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.xtraoak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.theorganicwinecompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.goetzecandy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.hicountry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.stonebrookwinery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vet-ez-order.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.maggallerystore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingwholesale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.budgetap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.sierraclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.jamaicanpride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakery.wetakethecake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.bestfriends.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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