q.ssl.shopify.com

- Shopify Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 09:9a:9b:7e:a0:5f:fe:09:20:45:99:ac:ad:80:a5:65 was issued on by DigiCert Inc.

With 126 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Shopify Inc.

Organization: Shopify Inc.
State / Province: Ontario
Locality: Ottawa
Country: CA

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:9a:9b:7e:a0:5f:fe:09:20:45:99:ac:ad:80:a5:65
Serial Number (int): 12765819484149298290861588658073412965
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 6b:aa:b5:f0:04:07:98:07:7f:43:b1:a1:ce:d4:cd:c2:d0:a1:32:22
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 66:9e:83:60:ed:61:e9:73:f1:89:7c:23:1a:dd:d3:fc:4a:4a:55:25
Fingerprint (sha256): 17:56:18:5e:af:89:1b:ba:b2:fc:2b:35:b0:38:7d:b2:4e:ea:80:b5:7f:02:7b:8f:be:7b:02:22:23:39:67:92

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g5.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g5.crl

Check the revocation status for certificate q.ssl.shopify.com

126

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for q.ssl.shopify.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

q.ssl.shopify.com
www.siobeauty.com
www.bushofficialmerch.com
us.light.co
checkout.fanprint.com
www.cobbler-union.eu
www.truegloryhair.net
store.shopbottools.com
store.handibot.com
www.artizara.com
www.bonjoviofficialmerch.com
www.janesaddictionofficialmerch.com
www.nolanacarroll.com
checkout.nzxt.com
www.maria-black.dk
www.maria-black.com
www.maria-black.uk
www.luggageguy.com
www.trafalgarstore.com
www.paolocostagli.com
www.melimelo.com
us.melimelo.com
store.halftheanimal.com
ukstore.thehivesbroadcastingservice.com
store.thehivesbroadcastingservice.com
store.awolnationmusic.com
www.excisionmerch.com
www.getoutdoorsstore.com
usa.miista.com
www.electricfamily.com
www.thehealthfoodstore.com
www.oseamalibu.com
www.ecinewyork.com
www.minbie.com.au
www.minbie.com
www.minbie.co.uk
www.ryu.com
ca.ryu.com
www.jncojeans.com
shop.trump2016.com
new.fanprint.com
www.firsttactical.co.uk
us.gymshark.com
uk.gymshark.com
eu.gymshark.com
row.gymshark.com
no.gymshark.com
se.gymshark.com
fi.gymshark.com
dk.gymshark.com
www.asmarequestrian.com
www.noelasmar.com
www.dudegadgets.com
running-tings-shop.palaceskateboards.com
www.shopzenger.com
shop.pinchapenny.com
www.hellotix.com
www.miraclenoodle.de
store.minipakr.com
store.fpintl.com
www.hellofrontrow.co.uk
seattlefire.firsttactical.com
www.wildernessfamilynaturals.com
www.hickies.de
staging.harrisfarm.com.au
www.nicelaundry.com
www.reynspooner.com
www.ronniecoleman.net
store.esc13.net
www.elyxboutique.com
www.accessoryconcierge.com
www.pikeplacefish.com
www.cnc1971.com
pro.cnc1971.com
www.cnc1971.ca
www.lemyn.com
www.lemyn.ca
www.gadgetgear.fr
www.mobicity.co.uk
www.mobi-city.es
www.onedigitals.nl
www.mobicity.it
www.venturedirect.co.uk
www.onedigitals.at
www.onedigitals.com
www.onedigitals.de
www.onedigitals.ru
www.shoparchipelago.com
www.kvgsupply.com
shop.onpurple.com
www.thesurvivalistdepot.com
www.proteinmilkshakebar.com
www.the-citizenry.com
www.sleefs.com
www.chive.com
www.groundzeroprecision.com
www.ginseng.life
www.sentaifilmworks.com
www.localvape.com
www.fanauthentics.com
www.catalystlifestyle.com
checkout.tonicliving.com
www.mariashireen.com
get.whoop.com
www.ecoflower.com
www.stevenbrownart.co.uk
www.fitjoynutrition.com
www.bodyfab.com
www.bulova.com
checkout.cruisersup.com
www.evermarker.com
www.sommerswim.com
www.paiskincare.us
www.paiskincare.ie
www.paiskincare.fr
www.paiskincare.de
www.paiskincare.hk
www.barbellapparel.com
store.getqardio.com
shop.varsity.com
www.birdwell.com
checkout.fitjoynutrition.com
www.scotchporter.com
www.shopcatimini.com
www.arda-wigs.com
www.paiskincare.dk

Other certificates including the domain name shopify.com

(limited to 100 certificates)
f4.shared.global.fastly.net
zh.shopify.com
ingress-imagery-us-central1-2.shopifycloud.com
statuspage.io
themes.shopify.com
l.ssl.shopify.com
merchandise.shopify.com
events.shopify.com
press.shopify.com
statuspage.io
dns-vetting1-jeffg-noah.map.fastly.net
statuspage.io
shopify-app-store.shopifycloud.com
o.ssl.shopify.com
statuspage.io
brochure2-staging12.shopifycloud.com
plusinfo.shopify.com
status.3dcart.com
savage-sign-on.shopifycloud.com
accounts.shopify.com
investor.shopify.com
meetups.shopify.com
shopify.com
linkpop.com
chat.shopify.com
commerceplus.shopify.com
marketplace.shopify.com
next.shopify.com
shopify-classifieds.shopifycloud.com
ir.shopify.com
ssl.shopify.com
marketplace.shopify.com
store.shopify.com
secure03.lithium.com
dev.shopify.com
somethingorother.shopify.com
commerceplus.shopify.com
pins.shopify.com
statuspage.io
ssl.cdngc.net
sourcing-admin.shopify.com
cardreader.shopify.com
www.shopify.com
www.shopify.com
secure03.stage.lithium.com
p.ssl.shopify.com
pointofsale.shopify.com
bourgeois.shopifycloud.com
unicorn.shopify.com
upcoming12.shopify.com
sl.shopify.com
tashboard.shopify.com
growthcenter.shopify.com
secure03.stage.lithium.com
statuspage.io
*.b.ssl.fastly.net
gtm.shopify.com
secure03.lithium.com
statuspage.io
analytics.shopify.com
collabs.shopify.com
unite-registration.shopify.com
photos.shopify.com
data-portal.shopifycloud.com
merch.shopify.com
plusacademy.shopify.com
www.shopify.com
shopify-plus-meet-up.shopify.com
collabs.shopify.com
statuspage.io
privacy.shopify.com
r.ssl.fastly.net
counter.shopify.com
shopify-app-store.shopifycloud.com
statuspage.io
statuspage.io
b.ssl.shopify.com
statuspage.io
shopify-app-store-staging.shopifycloud.com
sfn.shopify.com
growthcenter.shopify.com
bcs.shopify.com
statuspage.io
smiley-staging.shopify.com
secure03.lithium.com
statuspage.io
hardware.shopify.com
upcoming-pizx.shopify.com
shopify-classifieds.shopifycloud.com
ny.shopify.com
pursuit.shopify.com
cardreader-giveaway.shopifycloud.com
auth.data.shopify.com
hardware.shopify.com
statuspage.io
ssl.shopify.com
events.shopify.com
unite.shopify.com
linkpop.shopify.com
upcoming9.shopify.com

Certificate

The complete raw certificate details for q.ssl.shopify.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6B+514QcK8TqaNc3D3h
rstWElf04z2+mNv6DGFgKnQafNytEJbWXfS5w7g7fNSITAa/S9nBovb3PzXCecPJ
WuCslCGZ4dTq1XA7DiIUtpz58J+8lSihJfVEjktcxC3wh+ybabWI5BKImo9Areon
WHrKxDKBHB4arzfNyixoOL0O1conIQ0MApeUO/5JCqAb0lrGqJjw/Wm9ZP32GL9w
QmJxcTFzU4/Jcid9irP8kZBmVI6b2um0gwdBG9/AmebeMheX61FFBlYrRaQapG1C
nE1j3iMWah3GWWRKK9oQbuDmRvD7px0Js3EBiXbdAcDys2rbTd/wOc++IAqQpn6L
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12765819484149298290861588658073412965
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-26 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ottawa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shopify Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'q.ssl.shopify.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25705519296314422845941382384132333251370642931932588735216912854211683797122431610219417830251661986972005916058382964108975038662127988805171888802574834502238693092404015210614668048041411112690494806657309424717188029007995659600813059659582286059307709050077366763487039164052769039302473885114080984028448054285320632479573333044216333287808037343421477798816440398083454273527376190391731327966087694565515980237950675011800512681625529317875245755255741819566253545407689206623541616855788980567306328878009623008492056235024029772443776636713609681318191523146957682140545003694452631588283666503067909393237
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6baab5f0040798077f43b1a1ced4cdc2d0a13222
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2705 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'q.ssl.shopify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.siobeauty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bushofficialmerch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.light.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.fanprint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cobbler-union.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.truegloryhair.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.shopbottools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.handibot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artizara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bonjoviofficialmerch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.janesaddictionofficialmerch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nolanacarroll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.nzxt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maria-black.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maria-black.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maria-black.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luggageguy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trafalgarstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paolocostagli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melimelo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.melimelo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.halftheanimal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukstore.thehivesbroadcastingservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.thehivesbroadcastingservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.awolnationmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.excisionmerch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getoutdoorsstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usa.miista.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.electricfamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thehealthfoodstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oseamalibu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecinewyork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minbie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minbie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minbie.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ryu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca.ryu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jncojeans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.trump2016.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.fanprint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttactical.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.gymshark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.gymshark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.gymshark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'row.gymshark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'no.gymshark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'se.gymshark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fi.gymshark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dk.gymshark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asmarequestrian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.noelasmar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dudegadgets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'running-tings-shop.palaceskateboards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopzenger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.pinchapenny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hellotix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.miraclenoodle.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.minipakr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.fpintl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hellofrontrow.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seattlefire.firsttactical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wildernessfamilynaturals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hickies.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.harrisfarm.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nicelaundry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reynspooner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ronniecoleman.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.esc13.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elyxboutique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.accessoryconcierge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pikeplacefish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cnc1971.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro.cnc1971.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cnc1971.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lemyn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lemyn.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gadgetgear.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mobicity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mobi-city.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onedigitals.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mobicity.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.venturedirect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onedigitals.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onedigitals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onedigitals.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onedigitals.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shoparchipelago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kvgsupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.onpurple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesurvivalistdepot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.proteinmilkshakebar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.the-citizenry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sleefs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.groundzeroprecision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ginseng.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sentaifilmworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.localvape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fanauthentics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catalystlifestyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.tonicliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mariashireen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.whoop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecoflower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stevenbrownart.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fitjoynutrition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bodyfab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bulova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.cruisersup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.evermarker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sommerswim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paiskincare.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paiskincare.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paiskincare.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paiskincare.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paiskincare.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbellapparel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.getqardio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.varsity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.birdwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.fitjoynutrition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scotchporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopcatimini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arda-wigs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paiskincare.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g5.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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