store.universalmusic.com

Issued by COMODO RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 99:c6:fb:a9:8e:98:4d:35:af:f8:9c:5e:30:17:7c:44 was issued on by COMODO CA Limited.

With 52 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=store.universalmusic.com,OU=Domain Control Validated+OU=Hosted by Trustsign Limited+OU=COMODO SSL Unified Communications

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 99:c6:fb:a9:8e:98:4d:35:af:f8:9c:5e:30:17:7c:44
Serial Number (int): 204405062451582998636470079507049970756
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 60:9f:fd:4d:bf:08:aa:3d:68:df:6b:71:48:26:ac:42:40:a0:b0:9b
AuthorityKeyId: 90:af:6a:3a:94:5a:0b:d8:90:ea:12:56:73:df:43:b4:3a:28:da:e7

Fingerprint (sha1): f5:6e:b8:e0:53:50:a0:4a:9b:f1:09:16:b2:d2:d4:d4:1f:c7:7a:8b
Fingerprint (sha256): 11:70:9e:35:99:6f:8c:f3:4d:03:f2:7f:ad:52:f3:3d:68:03:d0:fe:53:0b:d8:9b:93:b9:58:9b:4a:7c:44:41

Issuing Certificate URL: http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl

Check the revocation status for certificate store.universalmusic.com

52

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for store.universalmusic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

store.universalmusic.com
getvamps.com
greatofferstore.com
iplaydirty.co.uk
lunarsurf.co
music.bastillebastille.com
shop.dreamboatsandpetticoats.com
shop.itsradioactive.com
shop.keanemusic.com
shop.loylecarner.com
shop.mikasounds.com
shop.mtarecords.co.uk
shop.professorgreen.co.uk
shop.tameimpala.com
shop.thejazzlabels.com
shopuk.justinbiebermusic.com
stonesexhibitionismshop.com
store.abcmartinfry.com
store.amfrecords.com
store.amywinehouse.com
store.benhowardmusic.co.uk
store.blessedvice.com
store.blossomsband.co.uk
store.corinnebaileyrae.com
store.dirtyhit.co.uk
store.disclosureofficial.com
store.dornikmusic.com
store.florenceandthemachine.net
store.frank-turner.com
store.gabrielbruce.com
store.jakebugg.com
store.jamesbay.com
store.jessieware.com
store.johnnewman.co.uk
store.ksiofficial.com
store.leonalewismusic.com
store.mcbusted.com
store.mumfordandsons.com
store.mysteryjets.com
store.ohwondermusic.com
store.puremccartney.com
store.rizzlekicks.com
store.springkingband.com
store.thechemicalbrothers.com
store.thelibertines.com
store.thestoneroses.org
store.udiscovermusic.com
store.virgin40.com
thesoundofvinyl.com
www.getvamps.com
www.lunarsurf.co
www.progrocks.co.uk

Other certificates including the domain name universalmusic.com

(limited to 100 certificates)
acquia-sites.com
incapsula.com
acquia-sites.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
*.dev.investors.universalmusic.com
store.universalmusic.com
acquia-sites.com
incapsula.com
store.universalmusic.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
etassets.universalmusic.com
incapsula.com
uc17.janrainengage.com
incapsula.com
store.universalmusic.com
store.universalmusic.com
incapsula.com
incapsula.com
store.universalmusic.com
preview.investors.universalmusic.com
store.universalmusic.com
incapsula.com
*.qa.investors.universalmusic.com
investors.universalmusic.com
incapsula.com
uutiskirje.universalmusic.com
*.janraincapture.com
uc18.janrainengage.com
universalmusic.com
store.universalmusic.com
incapsula.com
store.universalmusic.com
*.qa.investors.universalmusic.com
universalmusic.com
preview.dev.investors.universalmusic.com
incapsula.com
incapsula.com
*.dev.investors.universalmusic.com
acquia-sites.com
privacy.umusic.com
incapsula.com
shop.btobelabo.com
store.universalmusic.com
incapsula.com
store.universalmusic.com
preview.preprod.investors.universalmusic.com
incapsula.com
acquia-sites.com
*.janraincapture.com
uutiskirje.universalmusic.com
store.universalmusic.com
uc18.janrainengage.com
acquia-sites.com
store.universalmusic.com
incapsula.com
store.universalmusic.com
uc18.janrainengage.com
incapsula.com
acquia-sites.com
store.universalmusic.com
acquia-sites.com
incapsula.com
acquia-sites.com
incapsula.com
*.dev.investors.universalmusic.com
incapsula.com
universalmusic.com
*.qa.investors.universalmusic.com
uc17.janrainengage.com
universalmusic.com
store.universalmusic.com
universalmusic.com
incapsula.com
privacy.umusic.com
incapsula.com
*.qa.investors.universalmusic.com
store.universalmusic.com
store.universalmusic.com
incapsula.com
acquia-sites.com
incapsula.com
incapsula.com
store.universalmusic.com
incapsula.com
incapsula.com
go.universalmusic.com
incapsula.com
uc11.janraincapture.com
investors.universalmusic.com
incapsula.com
store.universalmusic.com
incapsula.com
incapsula.com
store.universalmusic.com

Certificate

The complete raw certificate details for store.universalmusic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztzqNewtQZcsP/dBM1Mo
MDVw+GG6//LNdDMYEW7eHg3fvwITnmU+qMOrd60rk/CKySVe7TuZIGYyIYPIFoDZ
pq8JdMMb1YHnqvYCKyJfXB26HYXy5VJe9KPNwUI0xlev/HpghCbd+kIdL5L3ZePK
GRgijmK8G7k2QllgYT9eSDFN7oP7V8U04jiJLsDWa9dnItdp+ZkexdzuGaSmUENI
hPBakFkhLXQx7BbffyHGO2nls3ouKMIDOtPQi8aJyqUr/mvTZj/eu8CBxqHH3f75
BArERMSRiSKizOsoNFCqcvoUQh41ssoJvrhDPM6gl9qab5DAasUbLzsiawt4Ftgu
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 204405062451582998636470079507049970756
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by Trustsign Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO SSL Unified Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'store.universalmusic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26114028013090757234745277010255405055659012704830547358283775579934897627969166428248354464109315795540459027365609753086349555263198046060862113599425561682951324137223891727564827854346513160517477249028153747595828730978951279476783847279790013891807902016013462122337093821840339319729629640768416970704366848155515330295363641921058187820580489322475338529699450806265028046170246248407801308916466945192815621873237376763471265641112370784734128660507423360426893851096464368213188032539863491151169293665106759691716878761004313813229824712761941839154391107731024577522337827195536039055064021767604577775179
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 90af6a3a945a0bd890ea125673df43b43a28dae7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							609ffd4dbf08aa3d68df6b714826ac4240a0b09b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1242 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.universalmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getvamps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatofferstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iplaydirty.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lunarsurf.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'music.bastillebastille.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.dreamboatsandpetticoats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.itsradioactive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.keanemusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.loylecarner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.mikasounds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.mtarecords.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.professorgreen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.tameimpala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.thejazzlabels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.justinbiebermusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stonesexhibitionismshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.abcmartinfry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.amfrecords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.amywinehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.benhowardmusic.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.blessedvice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.blossomsband.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.corinnebaileyrae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.dirtyhit.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.disclosureofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.dornikmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.florenceandthemachine.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.frank-turner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.gabrielbruce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.jakebugg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.jamesbay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.jessieware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.johnnewman.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.ksiofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.leonalewismusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.mcbusted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.mumfordandsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.mysteryjets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.ohwondermusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.puremccartney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.rizzlekicks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.springkingband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.thechemicalbrothers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.thelibertines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.thestoneroses.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.udiscovermusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.virgin40.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesoundofvinyl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getvamps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lunarsurf.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.progrocks.co.uk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008ca4054c77de05c10ba5a71631826fde590ea4c300f72b38a2f348ab424c3cf9cf3b2285ef4c02d6d90118aefd9a924c2e75ffd449d947b6d44fd5003eea1b723e335e90630048090d991b6280880c27d82774cd6632e0186d3af2b7f07543f306305df8abe62d017fb426badce12dd40f855e04fd1e56dc124c0188cbd93f02f57f15fd039a4522322c25e4bf81a17e736ea1a5f82c88e59aff60192f86712ae901d23d517c35f120f0096a4f61bffbae88ec7012b6f44a5e5e32eff5f8727ff683b0923b4f81907126cb2afaf87d18384f3aaa33cf071e61cbb9df0eb889377a0304ce7aa6f31794dfcb7ca14a2b7cd7bc1575a55471c3a3d211ca8b66b99d