Shopify Inc.

- Shopify Inc. -

Issued by Entrust Verified Mark CA - VMC2

About this certificate

This digital certificate with serial number 74:f1:e6:a5:c1:32:19:21:77:56:02:c1:7d:d9:e5:5c was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

Shopify Inc.

Company registration number: 426160-7
Organization: Shopify Inc.
Address: 151 Oconnor St.
State / Province: Ontario
Locality: Ottawa
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 74:f1:e6:a5:c1:32:19:21:77:56:02:c1:7d:d9:e5:5c
Serial Number (int): 155446469140603961316134698875147117916
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 83:ed:16:b7:b4:5f:b4:78:6e:b5:eb:01:30:1d:ee:10:81:e7:5f:06
AuthorityKeyId: ef:bc:3c:b4:af:3a:d0:45:5e:76:54:df:c7:64:78:e9:2d:1d:74:3f

Fingerprint (sha1): 65:15:f7:9e:40:ca:94:75:8a:8f:53:33:a6:bc:c3:bd:12:f0:46:f5
Fingerprint (sha256): 50:e6:53:99:90:27:6b:14:67:96:d5:b2:d0:bf:b7:bd:3b:c5:45:c0:85:40:e1:82:31:d9:aa:a6:c5:71:e3:c0

Issuing Certificate URL: http://aia.entrust.net/vmc2-chain.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/vmc2.crl

Check the revocation status for certificate Shopify Inc.

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Shopify Inc.

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature

Extended Key Usages

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shopify.com

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for Shopify Inc. in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EhBBkP/FzFVft8MCPLY
X6Q7X3W3ptxAU+ErRV8HPZN/A8xXtd/PoaF4zHJGOIkjoeoD506RtjGGy1KrqTH3
+27ivIOtk3d+Lrw+BlO9ZtTTxI6M6HSuyFUjVQCupjnVijbma2+lS3+IuyVYpvsx
9iBjx09jfEDbe+MRcVQIsJl9DFxzeCqdy2E938xLga1MCjw/ys5/J9YLN8+Hrvaf
MV/mBViwJdmH8TNhfwKIjk0kbVYsQ3Dltve3sW/6zYhK67vHDr2/Q3jwmpUw7DBA
Td8eepp0AkQpOQaPxAUWQnJ5FRAQDI/uZNsQEaxtTuo3dbeEgHJRxzAZx6t/zJwm
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 155446469140603961316134698875147117916
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Verified Mark CA - VMC2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-21 15:47:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-21 15:47:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ottawa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '151 Oconnor St.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shopify Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '426160-7'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TMA963086'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Canadian Intellectual Property Office'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shopify Inc.'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27303103648923624348974546663460712833258666231243971453203046320137777352516588350052224441670780006207737367397863982413312037264237434827882943698986453103696557802055887776088452430044756493996596747547693636342764697007755714614909831727888032986744790224439369107232437666584675160271344593794209489942765493462637785687384122533895253482709534717217703209411486808663998697935738716034407246363237172284112244391867940987929157481456304205900507205963322985858992662639385936153258673100572877612654287735677296665302491687667386652213110652072720900333107087133431935841460431226031428881008409657569823172339
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							83ed16b7b45fb4786eb5eb01301dee1081e75f06
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName efbc3cb4af3ad0455e7654dfc76478e92d1d743f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/vmc2-chain.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/vmc2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1542 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.2.1 (sha-256)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
															580f492f6ae9dfb8a8b8aaea510d5a2f39aea2ef0d90937d9bf9c066979463b4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,H4sIAAAAAAAAAJVVy27jRhA8b4D8w4Q5BZgZcV58GJIXsWEvfFjsIgZ8FbgULRGhSYWiLNtfv1Uj2U6wySECyBk2e7qqq7up+cenh048NuOuHfpFYnSaiKavh1XbrxfJfrpXRfLx/Oef5r8oJT41fTNW0zCeid9Xw7dG3HTdfjdFk7BBW+2kuL37JK6etsM4ia/dfq1ueqGj8e4IciYynabiYt92K5H+JoRSjL97XP+dhk3Et2rXfB2H+7ZrFsnU9s9qu0sE6Pa7s6eu7f9cJJtp2p7NZofDQR+cHsb1zJRlOYtvE/HYNoeL4WmRpCIVLo3XKcC/HbVpms5AIwEdIeZTO3XN+e1m2Lb3z+Kmr/V8drSB7arZ1f94J9qdqMRl1VerturFw74D42pCNlUnGlUPDw/NWDcCm23VP4tNU63+2lfj1IzNSrS9+DJN1aGS4ks/VWM7ACxiAGst2tUiuR6rh2ZpSO7DfGzqKVr/wKbq1x3fCCjVLZJfr+MvEYd2NW0WSUx607TrzXR6mMUYx7DMYYtaLy+q9fLJXi+v9123rIduGCPUh/m2mjbR9Q5YsL7ClOHi2ueJwJvPlsWXudNZrVJtldEGF9dCxTvNBS6YcyzutNya0upchkJ7aUqDe8gFfjXOuHg5XcKxVD6uWZ3KVFkdJMNlupBWG8bOYXQRLgDDARqQHo8lWdBuvLIR2HeIwTMZQoGkjKwQCusRm27HK9DtRL2sETdXXoEsUEpEwsGgc5A1kv7W6FIWAHQpmYFRDY5WlnQ2NHhlOCPOEuiyQDxZFFQO6cnScM2x8piXFvcMCVqV4wlulxkNJnWIHlJpHYV43XTGlXi0INVlZG5CBLF08IaRUCRHiEK+1+tFfDY5a4AzOTO00gC3pLDKMA+nfR0rF6IUuTIu1gX5ppcmo68P5JUbGaC+fI9HAgQIHu/hCT1yUIilIhfPujmS0ramtaAfuefkEbvHonmgK+pror+HFjmegy4uEVgGlvCEkL5vAfZCeKBDl0w6AAOCGcQ4KFiQUc6YNpbAkMi2AIv4CmSBFI4lMyX1IDiKG+uaHSVyMR42cJBoiyi6SUFRZp4HLdUAfCHfmbychvCH6Vrat/kKV8WVu3qdLxYm/3+DVJ8aOMRR5DFzHKZHfOm0J9HXTjmOFeVlQQtu4Z0hiVtrPYHREG8c/pu9++EjRPYmsGutLjsoatkGhIMi6KKMtcbE1lQSE8lRYX+XnBVa0AVZHEv0U2wJ6Qx31NahN6U3sUMwL4b8UUjp2EMupdSoIgqAtkA855ksvd52XWzBlIRkrHPJ/uSB4ti+NSYRmnH+ck4A1oCPCvnGHlbI59gYyuaMXBLSHL8GljEz5Vkaz4nx6E10bSpLfBPkmy7vu1dp57M1P/2nO/6Uzr8DG55Vi6kHAAA='
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopify.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00940e7bcf8c771fbe7dca3b2c7a285339907576c91006c5b524f30e13cd1eee05565562f4be033d5d5c89afd40ec7b1cb2b46a96a8c528ea6d9a1483e50d00a89405a609ee854d5f8402f05c37cce827c5365a46af970c1e81e281bc4b717d323ef33c9e2b4caa3cd64064885db582f26350786edd6b23460e698536ede8cd9d7247ba8bff56542a3d396a1b530eaf4d21fe823054bdd10f27ec0f27c7c4d3080a1c656973e3dd94946192cf9fa6cc5a30c3326ed4b7e80aa61555e03b6934dcb4b11326e6303a40ee8866d6d5a27c0fb752c0ede9a7062151b76edc37b0398fe7ffb65b4bfcc951dc83d3d6b20bef6afce9cc556e65663d3c9598595d629250fb2c7c6b639d25daf5eaf18c96df432dd95b19c5bf5ab2fb713ab1bf4e3de6211dba5f5f80508523a063d0e759a5da867a2a86551805245269a81a86800d033d5cb972d0d4a0a8445603db2c8aec870b73c2cb1864fa325c8148ba26ca26920028498a01e88ff6af621583f88785bddcebd7709b2026c3167f70ada448f69ea6ebdf6275ecc59594dc94923385e916fb003e8a5ab194f36c82f3c18027cfd481ce7e08bd45d7c1e08b2c4466898310cfc73776e136dbdffaba913112bd6796634aa2c7f3048f86ae1e37145e66d9ebe944402e6347470c4a2a4a791251f5581516a785e828a0dea7ba9da2c7f4d92f52cb51c2cf09332aa5bc3efe2d00e47c5c4