f.ssl.shopify.com

- Shopify Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 07:1c:bc:2a:53:0e:57:05:68:0f:d8:c5:f7:52:eb:f9 was issued on by DigiCert Inc.

With 113 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Shopify Inc.

Organization: Shopify Inc.
State / Province: Ontario
Locality: Ottawa
Country: CA

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:1c:bc:2a:53:0e:57:05:68:0f:d8:c5:f7:52:eb:f9
Serial Number (int): 9453796728826290119329810120917052409
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: c4:3b:44:c4:25:2e:2b:87:ce:01:86:e2:44:51:63:bb:b3:89:92:e7
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): c9:87:96:ee:18:68:80:9a:f4:47:bd:9e:f3:93:a7:cb:c6:4f:a7:58
Fingerprint (sha256): 30:5f:67:c6:4b:dd:78:e5:e8:95:e7:70:b9:db:76:41:1a:60:36:21:91:25:fa:74:83:37:8e:0c:e9:4d:72:05

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g4.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g4.crl

Check the revocation status for certificate f.ssl.shopify.com

113

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for f.ssl.shopify.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

f.ssl.shopify.com
www.marcobicego.com
www.imbesharam.com
www.uniquecigs.com
www.cupshe.com
www.valuezone.com
www.missbabs.com
www.cncptsintl.com
www.purecitycycles.com
www.purefixcycles.eu
au.lovingtan.com
shop.wwf.ca
www.billig-fitness.dk
www.gardentrends.co.uk
shop.jeffgordon.com
www.zyppah.com
uk.frankbody.com
ca.frankbody.com
eu.frankbody.com
www.luxurydivas.com
www.sozohome.com
www.sohodesignshop.com
www.sohocenter.co.il
shop.xjapanmusic.com
www.fjallraven.us
store.plastc.com
www.peachtreepetals.com
www.socalpetals.com
www.bloomvana.com
us.serapian.com
www.swab-its.com
store.berniesanders.com
www.spirithoods.com
www.trukfit.com
store.eero.com
www.hypershop.com
direct.matalan.co.uk
www.detailersdomain.com
www.sanitarysteel.com
www.smokecartel.com
checkout.onlineshirtorders.com
store.rainforestwater.com
www.clae.com
www.yo-sox.com
www.skystreamx.com
au.kobobooks.com
nz.kobobooks.com
uk.kobobooks.com
don.visionmondiale.ca
cadeaux.visionmondiale.ca
parrainage.visionmondiale.ca
children-zh.worldvision.ca
give-zh.worldvision.ca
checkout.bigcuplittlecup.com
store.motley.com
gratefuldead.globalmerchstores.com
www.blipshift.com
shop.scottwalker.com
shop.farminfo.com
www.werkshop.com
shop.leeo.com
www.augustalsinashop.com
www.capitolgoods.com
www.shopgunsnroses.com
www.madisonbeershop.com
www.natalielaroseshop.com
www.silentoshop.com
www.flowershopflorist.nz
www.binoculars.com
www.telescopes.com
checkout-zh.worldvision.ca
paiement.visionmondiale.ca
shop.mountainapplecompany.com
www.maxsparrow.com.au
www.boyerscoffee.com
www.thirdlove.com
www.dimebagdarrellshop.com
www.cornucopiapetfoods.com
www.kookai.com.au
www.marinelayer.com
www.faretheewellmerch.com
www.masterdynamic.co.uk
www.masterdynamic.eu
www.boombycindyjoseph.com
www.beadshop.com
www.ergostoreonline.com
www.lizziedriver.com
www.nutrition53.com
www.omegabrite.com
www.bigcuplittlecup.com
www.bebe2go.com
www.tuesdayschild.com
store.staging.myo.com
shop.brayola.com
www.repechage.com
www.butterflytrade.com
www.allproscience.com
www.peasncaratsintl.com
store.runkeeper.com
checkout.luxurylife.com.tw
www.gunsfast.com
catalogue.worldvision.ca
www.mikayogawear.com
www.muraboutique.com.au
www.usefulgifts.org
www.aromaace.com
www.ronsons.ca
www.reynspooner.com
shop.de.icracked.com
www.joanjettofficialstore.com
checkout.cuff.io
www.shophearts.com
www.dev-shopifypl.us

Other certificates including the domain name shopify.com

(limited to 100 certificates)
f4.shared.global.fastly.net
zh.shopify.com
ingress-imagery-us-central1-2.shopifycloud.com
statuspage.io
themes.shopify.com
l.ssl.shopify.com
merchandise.shopify.com
events.shopify.com
press.shopify.com
statuspage.io
dns-vetting1-jeffg-noah.map.fastly.net
statuspage.io
shopify-app-store.shopifycloud.com
o.ssl.shopify.com
statuspage.io
brochure2-staging12.shopifycloud.com
plusinfo.shopify.com
status.3dcart.com
savage-sign-on.shopifycloud.com
accounts.shopify.com
investor.shopify.com
meetups.shopify.com
projectruru.shopify.com
shopify.com
linkpop.com
chat.shopify.com
commerceplus.shopify.com
marketplace.shopify.com
next.shopify.com
shopify-classifieds.shopifycloud.com
ir.shopify.com
ssl.shopify.com
marketplace.shopify.com
store.shopify.com
secure03.lithium.com
dev.shopify.com
somethingorother.shopify.com
commerceplus.shopify.com
pins.shopify.com
statuspage.io
ssl.cdngc.net
sourcing-admin.shopify.com
cardreader.shopify.com
www.shopify.com
www.shopify.com
secure03.stage.lithium.com
p.ssl.shopify.com
pointofsale.shopify.com
bourgeois.shopifycloud.com
unicorn.shopify.com
upcoming12.shopify.com
sl.shopify.com
tashboard.shopify.com
growthcenter.shopify.com
secure03.stage.lithium.com
statuspage.io
*.b.ssl.fastly.net
gtm.shopify.com
secure03.lithium.com
statuspage.io
analytics.shopify.com
state-of-engage.shopify.com
collabs.shopify.com
unite-registration.shopify.com
photos.shopify.com
data-portal.shopifycloud.com
merch.shopify.com
plusacademy.shopify.com
www.shopify.com
burst.shopify.com
shopify-plus-meet-up.shopify.com
collabs.shopify.com
statuspage.io
privacy.shopify.com
r.ssl.fastly.net
counter.shopify.com
shopify-app-store.shopifycloud.com
statuspage.io
statuspage.io
collabs-merchant-staging.shopify.com
b.ssl.shopify.com
statuspage.io
shopify-app-store-staging.shopifycloud.com
sfn.shopify.com
growthcenter.shopify.com
bcs.shopify.com
statuspage.io
smiley-staging.shopify.com
secure03.lithium.com
statuspage.io
hardware.shopify.com
upcoming-pizx.shopify.com
shopify-classifieds.shopifycloud.com
ny.shopify.com
pursuit.shopify.com
cardreader-giveaway.shopifycloud.com
auth.data.shopify.com
hardware.shopify.com
statuspage.io
ssl.shopify.com

Certificate

The complete raw certificate details for f.ssl.shopify.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg8el/kNpgnUolu0JIuM
ryMMW28Ewlv1YSasnWdpugM7SqmK8thSoXyU8yM5KZJk7u8zAVuLzxex5OhNM+pk
6zL1zTVaLSmik3qO1tilBz+dWS6Wyvefj99zqMg3tCd4N2RdfEYdKnq3l+VPXxOG
chVGMot6ynQU6UIeK1nTeENQdjP4Ny4hcwcW9kMoFTKB45V0fCOhJLfRPhIicvxT
n12YvlPqOWe4JkqLAk+vQoRpyNbiSsJW5WrHY63m/0fTWJ47QpUQrl14Bme2cGRB
9xHqABiSXkubDaNxjfuhgSTsRIvTndHUzOilGXGGAEvtWZ9RPRHlXdPhZdP28FGN
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9453796728826290119329810120917052409
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-06-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-07 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ottawa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shopify Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'f.ssl.shopify.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20963014330860348180132692243817742038855249248912770536937065492873851786844867560042736178209956401815303977015099020577033686967857105654752067414388044982197324573647569157145673592432427126007153868516187052924642404289539820878134708373206713671877073472157473824079071016360931139633971083964200353211058545212210465701563271107756574949777010007400762848590070110024444778115256702019739816844668154514619072611367324733911218262697769038824010782488953278642452074456725609689522143108948722286883251070989520581074723943243410024417240438732715283290410579935681952626273161003263506267850976289061745036663
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c43b44c4252e2b87ce0186e2445163bbb38992e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2468 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.ssl.shopify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marcobicego.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imbesharam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uniquecigs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cupshe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valuezone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.missbabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cncptsintl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.purecitycycles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.purefixcycles.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'au.lovingtan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.wwf.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.billig-fitness.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gardentrends.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.jeffgordon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zyppah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.frankbody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca.frankbody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.frankbody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luxurydivas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sozohome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sohodesignshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sohocenter.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.xjapanmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fjallraven.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.plastc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peachtreepetals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.socalpetals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bloomvana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.serapian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swab-its.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.berniesanders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spirithoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trukfit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.eero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hypershop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'direct.matalan.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.detailersdomain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanitarysteel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smokecartel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.onlineshirtorders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.rainforestwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yo-sox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skystreamx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'au.kobobooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nz.kobobooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.kobobooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'don.visionmondiale.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cadeaux.visionmondiale.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parrainage.visionmondiale.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'children-zh.worldvision.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give-zh.worldvision.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.bigcuplittlecup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.motley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gratefuldead.globalmerchstores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blipshift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.scottwalker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.farminfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.werkshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.leeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.augustalsinashop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capitolgoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopgunsnroses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madisonbeershop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.natalielaroseshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.silentoshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flowershopflorist.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.binoculars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.telescopes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout-zh.worldvision.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paiement.visionmondiale.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.mountainapplecompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maxsparrow.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boyerscoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thirdlove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dimebagdarrellshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornucopiapetfoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kookai.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marinelayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.faretheewellmerch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.masterdynamic.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.masterdynamic.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boombycindyjoseph.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beadshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ergostoreonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lizziedriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nutrition53.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omegabrite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigcuplittlecup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bebe2go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuesdayschild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.staging.myo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.brayola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.repechage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.butterflytrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allproscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peasncaratsintl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.runkeeper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.luxurylife.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gunsfast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalogue.worldvision.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mikayogawear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.muraboutique.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usefulgifts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aromaace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ronsons.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reynspooner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.de.icracked.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joanjettofficialstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.cuff.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shophearts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev-shopifypl.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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