k.ssl.shopify.com

- Shopify Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0f:51:94:ed:dd:d4:be:f9:6e:32:8a:a1:8f:d3:76:1e was issued on by DigiCert Inc.

With 126 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Shopify Inc.

Organization: Shopify Inc.
State / Province: Ontario
Locality: Ottawa
Country: CA

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:51:94:ed:dd:d4:be:f9:6e:32:8a:a1:8f:d3:76:1e
Serial Number (int): 20362016624664296754425972648976807454
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 4f:d1:e9:24:eb:4d:99:9b:93:59:11:7b:31:36:9b:1e:85:8b:13:17
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 0a:37:b0:f6:ff:de:c7:cc:a3:23:2c:43:41:b8:67:0c:57:e0:7a:cf
Fingerprint (sha256): 14:7a:87:55:64:45:0d:b4:04:d5:5f:43:e4:ec:cb:44:82:4d:b4:d5:07:31:3c:3b:3a:cc:6c:5f:25:15:d3:2e

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g5.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g5.crl

Check the revocation status for certificate k.ssl.shopify.com

126

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for k.ssl.shopify.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

k.ssl.shopify.com
www.vietsbay.com
www.shopbxb.com
www.breathalyzer.ca
www.rcoverstock.com
www.slsnackshack.com
www.simplipleasure.com
www.batwarehouse.com
aaa-store.automatic.com
www.yeezusmerch.com
jp.swell.com
shop.heys.ca
handbags.heys.ca
eu.heys.com
www.heysamerica.com
www.sitstay.com
www.planetofthevapes.com
store.atreyuofficial.com
www.perfectcellar.com
www.orthofeet.com
ca.endysleep.com
us.endysleep.com
shop.screeningnow.com
www.myorustore.com
kr.heys.com
www.freddiesflowers.com
alpha-store.makewonder.com
www.tonicliving.ca
store.weboost.ca
www.waisttrainerzco.com
shop.soloshot.com
www.zoofashions.com
www.funko-shop.com
store.ilovem83.com
store-eu.ilovem83.com
store-us.ilovem83.com
www.lizzia.com
www.joybynature.com
www.naturewise.com
www.eleyhosereels.com
www.chargecords.com
www.fmwfasteners.com
www.worldwidecyclery.com
store.nodalninja.com
www.goldieblox.com
shop.heartagram.com
www.myspacover.com
www.vaporauthority.com
www.threejerksjerky.com
ca.light.co
au.light.co
www.soleheaven.com
stagingshop.screeningnow.com
www.transparentlabs.com
www.rmsbeauty.com
www.peace-collective.com
www.shelfies.com
www.bhane.com
us.bhane.com
www.retrospecbicycles.com
www.tentoesboards.com
shop.milkmakeup.com
www.coastalscents.com
www.paulevansny.com
www.sammywatkinsnfl.com
www.commonculture.co
checkout.hismileteeth.com
www.herringbone.com
www.theriderstore.ca
www.zoofashions.eu.com
international.creationstands.com
shop.zwift.com
shop.deeppurple.com
shop.down-nola.com
shop.moodybluestoday.com
shop.justinhayward.com
store.steelpantherrocks.com
store.verucasalt.com
store.skully.com
www.ifandco.com
www.ashleybridget.fr
intl.soleheaven.com
shop.kinoma.com
www.churchmouseyarns.com
www.theshinsofficialmerch.com
www.julievos.com
www.quadlockcase.jp
www.buyemergencyfoods.com
www.hellotwist.com
www.topcarestore.com
www.lemor.ca
shop.consciousdiscipline.com
www.hiddenfashion.com
www.addictedtoaudio.com.au
www.busisoft.com.au
abccocodirect.com
www.trailcampro.com
www.cycologygear.co.uk
www.woodzee.com
www.dollarhobbyz.com
www.tweed.com
www.bedrocan.ca
www.americanloco.com
us.skinnydiplondon.com
www.bore-tips.com
www.survivalfrog.com
shop.dixiechicks.com
www.getmovi.com
www.peepers.com
wholesale.peepers.com
wholesale.junkbrands.com
www.iheartraves.com
www.eliquids.com
www.xacto.com
shop.bullpowertrain.com
www.aquatell.com.au
www.frankiemusicstore.com
www.holstedjewelers.com
www.trendlee.com
www.namebrandwigs.com
www.swakdesigns.com
dealer.nodalninja.com
www.trytheworld.com
www.smallwoodshome.com
www.rydale.com
www.catalogue.worldvision.ca

Other certificates including the domain name shopify.com

(limited to 100 certificates)
f4.shared.global.fastly.net
zh.shopify.com
ingress-imagery-us-central1-2.shopifycloud.com
statuspage.io
themes.shopify.com
l.ssl.shopify.com
merchandise.shopify.com
events.shopify.com
press.shopify.com
statuspage.io
dns-vetting1-jeffg-noah.map.fastly.net
statuspage.io
shopify-app-store.shopifycloud.com
o.ssl.shopify.com
statuspage.io
brochure2-staging12.shopifycloud.com
plusinfo.shopify.com
status.3dcart.com
savage-sign-on.shopifycloud.com
accounts.shopify.com
investor.shopify.com
meetups.shopify.com
projectruru.shopify.com
shopify.com
linkpop.com
chat.shopify.com
commerceplus.shopify.com
marketplace.shopify.com
next.shopify.com
shopify-classifieds.shopifycloud.com
ir.shopify.com
ssl.shopify.com
marketplace.shopify.com
store.shopify.com
secure03.lithium.com
dev.shopify.com
somethingorother.shopify.com
commerceplus.shopify.com
pins.shopify.com
statuspage.io
ssl.cdngc.net
sourcing-admin.shopify.com
cardreader.shopify.com
www.shopify.com
www.shopify.com
secure03.stage.lithium.com
p.ssl.shopify.com
pointofsale.shopify.com
bourgeois.shopifycloud.com
unicorn.shopify.com
upcoming12.shopify.com
sl.shopify.com
tashboard.shopify.com
growthcenter.shopify.com
secure03.stage.lithium.com
statuspage.io
*.b.ssl.fastly.net
gtm.shopify.com
secure03.lithium.com
statuspage.io
analytics.shopify.com
state-of-engage.shopify.com
collabs.shopify.com
unite-registration.shopify.com
photos.shopify.com
data-portal.shopifycloud.com
merch.shopify.com
plusacademy.shopify.com
www.shopify.com
burst.shopify.com
shopify-plus-meet-up.shopify.com
collabs.shopify.com
statuspage.io
privacy.shopify.com
r.ssl.fastly.net
counter.shopify.com
shopify-app-store.shopifycloud.com
statuspage.io
statuspage.io
collabs-merchant-staging.shopify.com
b.ssl.shopify.com
statuspage.io
shopify-app-store-staging.shopifycloud.com
sfn.shopify.com
growthcenter.shopify.com
bcs.shopify.com
statuspage.io
smiley-staging.shopify.com
secure03.lithium.com
statuspage.io
hardware.shopify.com
upcoming-pizx.shopify.com
shopify-classifieds.shopifycloud.com
ny.shopify.com
pursuit.shopify.com
cardreader-giveaway.shopifycloud.com
auth.data.shopify.com
hardware.shopify.com
statuspage.io
ssl.shopify.com

Certificate

The complete raw certificate details for k.ssl.shopify.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqo43tTUYwC7CV654lv0
4HPwAUf1ICgmeK/aRNn64C8KwuHM1v1iWgMhz56yEtjQSnZ3Az7wmA4K8W1+oY0x
4DEeUpbhjV9chzUk598RtnMv5raqru/o3MN0dQJTgfAw6WxDIOup21efOdF6p7sM
JBGt4qruUGI36CZcg16RLntwdp/g6QtTDoWMcXA8sDv+jc3qKAo7LMQ1LzZCQfJC
szKKUwk3fhks7UPvfwDkV2ypn/j1EerJtWIADwOEegIT5JMIFLybojwUk8oE1ks1
SiN75G3L72TOxyBc5YoyaXm66xyKQDsf7i4+DtKlYR8jhKrMov6SKPY+LKuUoqdf
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20362016624664296754425972648976807454
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-28 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ottawa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shopify Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'k.ssl.shopify.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20534545075208326582614781655460647904662347635826317600248214185542408041227789787785294817166631798101674938358978967939054399273184909215745089822426066641314090034913208115218084272870050108815619055832051993585992882579640191380469602047083567918636491865421947847360580868576621042973163232596347025897248483902678101405627489263784575783456928596288724200933346627180154402978056957606294412542897933362470150750825140115994793949791829427206357138454008735794652835868757046331738058934059981809077771288915850648123747805371784965840130572531314981236634892166570906368065766377359349345133680521021976174383
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4fd1e924eb4d999b9359117b31369b1e858b1317
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2692 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'k.ssl.shopify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vietsbay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopbxb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.breathalyzer.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rcoverstock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slsnackshack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simplipleasure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.batwarehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aaa-store.automatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yeezusmerch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jp.swell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.heys.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handbags.heys.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.heys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heysamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitstay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.planetofthevapes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.atreyuofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.perfectcellar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orthofeet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca.endysleep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.endysleep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.screeningnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myorustore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kr.heys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freddiesflowers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpha-store.makewonder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tonicliving.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.weboost.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waisttrainerzco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.soloshot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zoofashions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.funko-shop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.ilovem83.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store-eu.ilovem83.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store-us.ilovem83.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lizzia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joybynature.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naturewise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eleyhosereels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chargecords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fmwfasteners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldwidecyclery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.nodalninja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldieblox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.heartagram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myspacover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaporauthority.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.threejerksjerky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca.light.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'au.light.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soleheaven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagingshop.screeningnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.transparentlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rmsbeauty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peace-collective.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shelfies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bhane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.bhane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.retrospecbicycles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tentoesboards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.milkmakeup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coastalscents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paulevansny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sammywatkinsnfl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commonculture.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.hismileteeth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.herringbone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theriderstore.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zoofashions.eu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'international.creationstands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.zwift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.deeppurple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.down-nola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.moodybluestoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.justinhayward.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.steelpantherrocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.verucasalt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.skully.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ifandco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ashleybridget.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intl.soleheaven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.kinoma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.churchmouseyarns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theshinsofficialmerch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.julievos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quadlockcase.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buyemergencyfoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hellotwist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.topcarestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lemor.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.consciousdiscipline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hiddenfashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.addictedtoaudio.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.busisoft.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abccocodirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trailcampro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cycologygear.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woodzee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dollarhobbyz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tweed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bedrocan.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.americanloco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.skinnydiplondon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bore-tips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.survivalfrog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.dixiechicks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getmovi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peepers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wholesale.peepers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wholesale.junkbrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iheartraves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eliquids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xacto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.bullpowertrain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aquatell.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frankiemusicstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holstedjewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trendlee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.namebrandwigs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swakdesigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealer.nodalninja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trytheworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smallwoodshome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rydale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catalogue.worldvision.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g5.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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