store.universalmusic.com

- Universal Music Group, Inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 05:f6:c1:28:a9:a5:49:f3:17:bc:5e:23:0f:4d:5e:9a was issued on by DigiCert Inc.

With 208 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universal Music Group, Inc.

Organization: Universal Music Group, Inc.
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:f6:c1:28:a9:a5:49:f3:17:bc:5e:23:0f:4d:5e:9a
Serial Number (int): 7927362732806940941168998246649781914
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 8f:96:48:78:a6:92:2a:ac:43:8c:53:da:fe:72:52:9e:2c:28:d9:f2
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 47:e9:76:25:f7:40:a4:8d:04:0a:fa:db:6e:ba:73:cd:26:1f:87:0f
Fingerprint (sha256): 17:90:43:8c:b7:6f:00:96:43:f9:21:63:89:6e:d1:a6:9f:07:d5:df:39:d5:5b:db:8a:06:98:83:e1:6a:0c:65

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-2.crl

Check the revocation status for certificate store.universalmusic.com

208

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for store.universalmusic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dtrw.markknopfler.com
egyptstation.co.uk
flashsalerecords.com
getnhc.com
getvamps.com
greatofferstore.com
hiphop.com
music.bastillebastille.com
music.tomjones.com
musicstore.niallhoran.com
petshopboysshop.co.uk
shop.0207defjam.com
shop.1971theyearthatmusicchangedeverything.com
shop.abbeyroad.com
shop.annielennox.com
shop.apre.world
shop.aurora-music.com
shop.babyqueen.world
shop.bigheath.world
shop.bluenote.com
shop.bluenotereimagined.com
shop.breerunwaymusic.com
shop.britishjazzexplosion.com
shop.bulltheband.com
shop.decca.com
shop.dizzeerascal.co.uk
shop.dovesofficial.com
shop.dreamboatsandpetticoats.com
shop.dukedumont.com
shop.easylifemusic.com
shop.elbow.co.uk
shop.ellaeyre.com
shop.elliegoulding.com
shop.emi.com
shop.fictionrecords.co.uk
shop.finnaskew.world
shop.fourofdiamonds.co.uk
shop.glassanimals.com
shop.gorgoncity.com
shop.greenteapeng.net
shop.hardycaprio.co
shop.hearhervoice.co.uk
shop.hollyhumberstone.com
shop.hopetala.com
shop.housegospelchoir.com
shop.inhaler.band
shop.islandrecords.co.uk
shop.islandrecordsbeer.com
shop.issamalnajjar.com
shop.itsradioactive.com
shop.jacksavoretti.com
shop.jamesblakemusic.com
shop.jazminbean.net
shop.jessieware.com
shop.jettaplanet.com
shop.joyanon.com
shop.kasabian.co.uk
shop.kawalaofficial.com
shop.keanemusic.com
shop.kuruptfm.com
shop.lewiscapaldi.com
shop.liampayneofficial.com
shop.loylecarner.com
shop.mabelofficial.com
shop.maxrichtermusic.com
shop.mhuncho.co.uk
shop.michaelaldagmusic.com
shop.mostack.co
shop.mynameisalice.com
shop.officialamandaholden.com
shop.officialdevlin.co.uk
shop.officialsl.com
shop.oliviadeano.com
shop.paulweller.com
shop.portals-music.com
shop.potterpayper.com
shop.ravescience.co.uk
shop.rayblk.co.uk
shop.raye-music.com
shop.rebelgirlssongs.com
shop.ronankeating.com
shop.samfender.com
shop.sglewismusic.com
shop.sheybaba.com
shop.sportsteamband.com
shop.svmi.co.uk
shop.takethat.com
shop.theacademic.net
shop.thefeelingofficial.com
shop.thejazzlabels.com
shop.thelathums.com
shop.thelongestjohns.com
shop.themysterines.com
shop.thestreetsmusic.co.uk
shop.thewantedmusic.com
shop.theworldnoisy.com
shop.thisisofficial.com
shop.walkingoncars.com
shop.wesnelsonmusic.com
shop.westlife.com
shop.whenyoungband.com
shop.zoewees.com
shopmusic.abbavoyage.com
shopuk.alessiacara.com
shopuk.ambermarkmusic.com
shopuk.arianagrande.com
shopuk.beastieboys.com
shopuk.beneemusic.com
shopuk.billieeilish.com
shopuk.blackpinkmusic.com
shopuk.bobmarley.com
shopuk.catstevens.com
shopuk.conangray.com
shopuk.duffonline.com
shopuk.elviscostello.com
shopuk.gretavanfleet.com
shopuk.halseyshop.com
shopuk.imaginedragonsmusic.com
shopuk.jamesbay.com
shopuk.jeremyzuckermusic.com
shopuk.jessiejofficial.com
shopuk.jessiereyez.com
shopuk.jheneaiko.com
shopuk.justinbiebermusic.com
shopuk.kaceymusgraves.com
shopuk.kanyewest.com
shopuk.katyperry.com
shopuk.kidcudi.com
shopuk.ladygaga.com
shopuk.loveandpower.com
shopuk.migosofficial.com
shopuk.nasirjones.com
shopuk.navmusic.com
shopuk.nct127.com
shopuk.nickiminajofficial.com
shopuk.oliviarodrigo.com
shopuk.paulmccartney.com
shopuk.postmalone.com
shopuk.realpopsmoke.com
shopuk.remiwolf.com
shopuk.tameimpala.com
shopuk.theblackcrowes.com
shopuk.thekillersmusic.com
shopuk.thespeedofnow.keithurban.net
shopuk.theweeknd.com
store.amymacdonald.co.uk
store.amywinehouse.com
store.andrewlloydwebber.com
store.benhowardmusic.co.uk
store.blessedvice.com
store.blossomsband.co.uk
store.catfishandthebottlemen.com
store.deccaclassics.com
store.dirtyhit.co.uk
store.disclosureofficial.com
store.eltonjohn.com
store.florenceandthemachine.net
store.frank-turner.com
store.helloskepta.com
store.hozier.com
store.jackgarratt.com
store.jamesbay.com
store.jamiroquai.com
store.mumfordandsons.com
store.mysteryjets.com
store.puremccartney.com
store.samsmithworld.com
store.seagirls.net
store.sexpistolsofficial.com
store.spinefarmrecords.com
store.the1975.com
store.thechemicalbrothers.com
store.thespicegirls.com
store.thewho.com
store.thisissigrid.com
store.tomchaplinmusic.com
store.udiscovermusic.com
store.universalmusic.com
storeuk.selenagomez.com
storeuk.taylorswift.com
therollingstonesshop.co.uk
thesoundofvinyl.com
uk.blameitonbaby.com
uk.gnrmerch.com
uk.lilyachtyshop.com
uk.lorde.store
uk.lordeofficialstore.com
uk.nickiminajqueen.com
uk.nopressureshop.com
uk.publicenemy.clothing
uk.shopxxxtentacion.com
uk.theavalanchesstore.com
uk.therollingstonesshop.com
uk.troyesivanstore.com
uk.twiceshop.com
uk.wegotyoucoverednow.com
uk.yungbludstore.com
ukshop.shawnmendesofficial.com
ukstore.dermotkennedy.com
www.egyptstation.co.uk
www.flashsalerecords.com
www.getnhc.com
www.getvamps.com
www.greatofferstore.com
www.hiphop.com
www.petshopboysshop.co.uk
www.thesoundofvinyl.com
store.yearsandyears.com

Other certificates including the domain name universalmusic.com

(limited to 100 certificates)
acquia-sites.com
incapsula.com
acquia-sites.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
*.dev.investors.universalmusic.com
store.universalmusic.com
acquia-sites.com
incapsula.com
store.universalmusic.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
etassets.universalmusic.com
incapsula.com
uc17.janrainengage.com
incapsula.com
store.universalmusic.com
store.universalmusic.com
incapsula.com
incapsula.com
store.universalmusic.com
preview.investors.universalmusic.com
store.universalmusic.com
incapsula.com
*.qa.investors.universalmusic.com
investors.universalmusic.com
incapsula.com
uutiskirje.universalmusic.com
*.janraincapture.com
uc18.janrainengage.com
universalmusic.com
store.universalmusic.com
incapsula.com
store.universalmusic.com
*.qa.investors.universalmusic.com
universalmusic.com
preview.dev.investors.universalmusic.com
incapsula.com
incapsula.com
*.dev.investors.universalmusic.com
acquia-sites.com
privacy.umusic.com
incapsula.com
shop.btobelabo.com
store.universalmusic.com
incapsula.com
store.universalmusic.com
preview.preprod.investors.universalmusic.com
incapsula.com
acquia-sites.com
*.janraincapture.com
uutiskirje.universalmusic.com
store.universalmusic.com
uc18.janrainengage.com
acquia-sites.com
store.universalmusic.com
incapsula.com
store.universalmusic.com
uc18.janrainengage.com
incapsula.com
acquia-sites.com
store.universalmusic.com
acquia-sites.com
incapsula.com
acquia-sites.com
incapsula.com
*.dev.investors.universalmusic.com
incapsula.com
universalmusic.com
*.qa.investors.universalmusic.com
uc17.janrainengage.com
universalmusic.com
store.universalmusic.com
universalmusic.com
incapsula.com
privacy.umusic.com
incapsula.com
*.qa.investors.universalmusic.com
store.universalmusic.com
store.universalmusic.com
incapsula.com
acquia-sites.com
incapsula.com
incapsula.com
store.universalmusic.com
incapsula.com
incapsula.com
go.universalmusic.com
incapsula.com
uc11.janraincapture.com
investors.universalmusic.com
incapsula.com
store.universalmusic.com
incapsula.com
incapsula.com
store.universalmusic.com

Certificate

The complete raw certificate details for store.universalmusic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3ozCGNtgXECM6nKbS+p
fjvwgbL6vII89rQs3FBfenF+G/vR4OvAFMRPf3Fj2urXpRLsDpauTC2sjHiaqeaf
E40Ix5qrSCRfrjSiYjmzQ9q2xXPIprB9HmuFBXe2vNXM8tXesF12jTYSpBsKryJX
r/qeRbhPv4LyIyEp2rKnDPxtt6WTLmUmxjn/XzJgk1zGClk6mR8jJCgBE8g418Qz
UVQ8b8s9+m0QeP8+acWO/+NHqOI6Qn3X2qCiVVBVCztyTdi4m6FNb8d7qRJ1C25g
Qx8aYTs1TGbSV2qFsmjaWg6ZFe/Tg8L4mpsYEq32ZGmJaVU2fOlyhdsdFJtluZFy
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7927362732806940941168998246649781914
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universal Music Group, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'store.universalmusic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24171774992272115189894662417566091931448334799494804981404773072282058483794253294853995682441272837975561814573497623317211897706673960138708247928638038538100479101266757217745610669051764505885263794072283035181396534001960453484567269223534941283765730951768263085249821417424780450707126959422591346786400979678891582081745587146591202391310466531236117231713658553318913716996898515349020894191624266053880293991708043085951656570018897338438133649266952814911666013400416484645319567330945292582054680601823621987451061095698224209337674977736111204441390919951482270262320818579068783956472531675985522815567
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8f964878a6922aac438c53dafe72529e2c28d9f2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4943 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dtrw.markknopfler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egyptstation.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flashsalerecords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getnhc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getvamps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatofferstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiphop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'music.bastillebastille.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'music.tomjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musicstore.niallhoran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petshopboysshop.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.0207defjam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.1971theyearthatmusicchangedeverything.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.abbeyroad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.annielennox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.apre.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.aurora-music.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.babyqueen.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.bigheath.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.bluenote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.bluenotereimagined.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.breerunwaymusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.britishjazzexplosion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.bulltheband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.decca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.dizzeerascal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.dovesofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.dreamboatsandpetticoats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.dukedumont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.easylifemusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.elbow.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ellaeyre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.elliegoulding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.emi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.fictionrecords.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.finnaskew.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.fourofdiamonds.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.glassanimals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gorgoncity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.greenteapeng.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.hardycaprio.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.hearhervoice.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.hollyhumberstone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.hopetala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.housegospelchoir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.inhaler.band'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.islandrecords.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.islandrecordsbeer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.issamalnajjar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.itsradioactive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.jacksavoretti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.jamesblakemusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.jazminbean.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.jessieware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.jettaplanet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.joyanon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.kasabian.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.kawalaofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.keanemusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.kuruptfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.lewiscapaldi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.liampayneofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.loylecarner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.mabelofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.maxrichtermusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.mhuncho.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.michaelaldagmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.mostack.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.mynameisalice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.officialamandaholden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.officialdevlin.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.officialsl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.oliviadeano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.paulweller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.portals-music.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.potterpayper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ravescience.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.rayblk.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.raye-music.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.rebelgirlssongs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ronankeating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.samfender.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.sglewismusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.sheybaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.sportsteamband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.svmi.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.takethat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.theacademic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.thefeelingofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.thejazzlabels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.thelathums.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.thelongestjohns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.themysterines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.thestreetsmusic.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.thewantedmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.theworldnoisy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.thisisofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.walkingoncars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.wesnelsonmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.westlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.whenyoungband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.zoewees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopmusic.abbavoyage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.alessiacara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.ambermarkmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.arianagrande.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.beastieboys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.beneemusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.billieeilish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.blackpinkmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.bobmarley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.catstevens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.conangray.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.duffonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.elviscostello.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.gretavanfleet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.halseyshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.imaginedragonsmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.jamesbay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.jeremyzuckermusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.jessiejofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.jessiereyez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.jheneaiko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.justinbiebermusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.kaceymusgraves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.kanyewest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.katyperry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.kidcudi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.ladygaga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.loveandpower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.migosofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.nasirjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.navmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.nct127.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.nickiminajofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.oliviarodrigo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.paulmccartney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.postmalone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.realpopsmoke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.remiwolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.tameimpala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.theblackcrowes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.thekillersmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.thespeedofnow.keithurban.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.theweeknd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.amymacdonald.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.amywinehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.andrewlloydwebber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.benhowardmusic.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.blessedvice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.blossomsband.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.catfishandthebottlemen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.deccaclassics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.dirtyhit.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.disclosureofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.eltonjohn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.florenceandthemachine.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.frank-turner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.helloskepta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.hozier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.jackgarratt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.jamesbay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.jamiroquai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.mumfordandsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.mysteryjets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.puremccartney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.samsmithworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.seagirls.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.sexpistolsofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.spinefarmrecords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.the1975.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.thechemicalbrothers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.thespicegirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.thewho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.thisissigrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.tomchaplinmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.udiscovermusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.universalmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storeuk.selenagomez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storeuk.taylorswift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'therollingstonesshop.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesoundofvinyl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.blameitonbaby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.gnrmerch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.lilyachtyshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.lorde.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.lordeofficialstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.nickiminajqueen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.nopressureshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.publicenemy.clothing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.shopxxxtentacion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.theavalanchesstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.therollingstonesshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.troyesivanstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.twiceshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.wegotyoucoverednow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.yungbludstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukshop.shawnmendesofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukstore.dermotkennedy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egyptstation.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flashsalerecords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getnhc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getvamps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greatofferstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hiphop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.petshopboysshop.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesoundofvinyl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.yearsandyears.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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