Shopify Inc.

- Shopify Inc. -

Issued by Entrust Verified Mark CA - VMC2

About this X.509 Certificate

This digital certificate with serial number 2c:8a:59:c3:a7:48:c9:90:7b:a3:61:ee:a0:d6:6b:da was issued on by Entrust, Inc..

This certificate is currently valid. We haven't checked the revocation status of this certificate, but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate, they will be shown below. We hope this certificate review provides you with the detailed information you were looking for.

Shopify Inc.

Company registration number: 426160-7
Organization: Shopify Inc.
Address: 151 Oconnor St.
State / Province: Ontario
Locality: Ottawa
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 2c:8a:59:c3:a7:48:c9:90:7b:a3:61:ee:a0:d6:6b:da
Serial Number (int): 59204389416732511060798436548080462810
Serial Number Length: 126 bits, 16 octets

Subject Key Identifier: 7f:ec:67:69:67:33:48:90:45:71:40:85:62:72:54:2f:49:31:47:90
Authority Key Identifier: ef:bc:3c:b4:af:3a:d0:45:5e:76:54:df:c7:64:78:e9:2d:1d:74:3f

Fingerprint (SHA-1): df:04:72:4b:37:c6:40:f4:5d:67:98:15:49:09:a7:0c:fd:b9:8c:ba
Fingerprint (SHA-256): 83:87:e5:a4:90:64:7e:04:a6:ed:e3:b2:45:01:43:e4:32:d2:72:b3:78:b4:20:ca:b2:5e:a9:64:59:ef:2f:ca

Issuing Certificate URL: http://aia.entrust.net/vmc2-chain.cer

Revocation Information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/vmc2.crl

Check the revocation status for certificate Shopify Inc.
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for Shopify Inc.

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA512 with RSA
Key Usage
Digital Signature
Extended Key Usages
Extensions
11
CA Certificate
This is not a CA certificate

Subject Alternative Names

shopify.com

X.509 Certificate

The complete raw X.509 certificate details for Shopify Inc. in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aUqmFqA0gDmntcfCU7R
Z/z/fHFuZO+lQf+77qq8wawJEJq7VZekMaO1tJW67LVQJFbRIvcch8YfTa2o99Px
0zy5L4zkTNyKI+ke/xmsIzeoCM9b6oMJJNMbStbeslffI4nAyyX9iivrvR67eJJ5
SxSHhL4Ff5lavqLr6xLzZzu0faEcYi+bxFN3G6m6zmyTJyDWIv50lF+4FIyv/C7N
Q1Z3STw7/Bwwkex3Zws7ushV9r1HB0YHQD+KY1x07mZpsRK5bqNvj2c8ISalTPFF
BrefcSZSPQ6SbLDPuWlLra/76Q7CRHBcvXf8mFzJ69hMNDn3bokIyW2EoT1/dSLs
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 59204389416732511060798436548080462810
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Verified Mark CA - VMC2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-15 13:33:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-15 13:33:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ottawa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '151 Oconnor St.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shopify Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '426160-7'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TMA963086'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Canadian Intellectual Property Office'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shopify Inc.'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27475158758733654268777174514792114298291822863664605411367604137146476958300690483789260824377194100981563378244203168622922546219682159590026806008799982395725715540494936063333105401648420396219554716537572172903289312032561646543926536491394115003963124121999480605711915833035624983060503273474531828241764457615848744666767941752412246943283632135621723469637231665246112719369783275782244898782296665411303802134923457908966945920076641826687583117115411580763326379071998187664644870082038278068065919106186442314522705515756633425580509533214976065201982430834722638512957800989847140985677034448314821700641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7fec676967334890457140856272542f49314790
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName efbc3cb4af3ad0455e7654dfc76478e92d1d743f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/vmc2-chain.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/vmc2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.2.1 (sha-256)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
															bed3dc60e7eb2ba5ea9c02a34d18ef6a97efab1b8ae304fefde39b8752612f32
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,H4sIAAAAAAAA/3VVUW+bMBB+3qT9B8t7NQ62IcCUdFKjVtrDtGmT9loxhyZIBDJCm3W/ft+dTRppWhK4A5/v++67c7v6+PvQiedmPLVDv5ZGp1I0vR+2bb9by6fpMSnlx5t3b1en5911mJXiZ31qvo7DY9s1azm1/UtyPEmBdP1pLffTdPywWJzPZ312ehh3C5um6QJZpHhum/Pt8HstU5GKzOIngSDEamqnrrn5vh+O7eOL+NT71SK8Av62OfnrJS3ak6jFpu7rbVv34vDUgUM9gV/diSbxw+HQjL4RcI51/yL2Tb399VSPUzM2W9H24ss01edaiS/9VI/toFcLxgDWTrTbtbwf60PzYIjbm9XY+InffoNT97uOVgRqSFJdSvECh0WBGt1avr839JXi3G6n/VpmmQR+u9tPwV9wzgBDNR2h9sNtvXuwqXUM+GZ1rKc9B/wA4jBeUlf57X1WSIGVzy7VVhnjU7Aw8bLzdUqsSun6bpfaqUobBceoyl9F5XHXkqzAx6eKsjkV3pew1scgFzdRcJYYz67BkqFHXSQ2WI7nNOEODt3M0PNeAqbHgrfBMjQeHFHWS2USpwsFj+ILBW150TJgrpwuPTuUiOLBdLZ+ph0tsa6UiaQ43iiT84bgEHhnlgxYdQV2GF1unANxR3ujzIiO3h/x2TosVDrjeq7EcqEILKRcX8ryBMUgD0FtLGUuwNZSkSX2zdkosaF6o1JVzEiZl9hfcoH8LpSsDOctfGypCt0hYapZ1w1SLgED+Sg3YNQFBICmAswSSnPXKYEKSl16n0U1C5bPXItccRcskyzQlmVo5NwBw8lIctKk2BgeQGpHwaAgEdH/xFPxz+A/vJ6q/K68c3fz6BP/y6j9Z9Q3lgqv1Gxy3OA8Q+9ybvRl6vFUQVOX2HQTGk1lOAIgKBUh/8/UvZ5//gSm0Br1ZjrrWBaHzoYzVsWh4KPlo1Y8LcpcLOaI8NEDUFYkcqbyQBkMw3nIVIZSID5s7mkcWPwsnsxouzBCGaEr6hoNNMWCD7WLQfmw0Zn2cXKhB9sC1iFVMTfYIhflyJMceXI859rRqFkq1qhL2a/erNxqsaM/s/GO/wk3fwGkDy9UhwYAAA=='
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopify.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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