m.ssl.shopify.com

- Shopify Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 03:4a:0f:95:cf:2d:7d:01:6d:ff:88:cf:fb:bf:63:3e was issued on by DigiCert Inc.

With 125 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Shopify Inc.

Organization: Shopify Inc.
State / Province: Ontario
Locality: Ottawa
Country: CA

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4a:0f:95:cf:2d:7d:01:6d:ff:88:cf:fb:bf:63:3e
Serial Number (int): 4372230060144983280749733170332525374
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 37:32:d0:1f:32:e3:f2:c8:38:23:df:09:09:c4:db:76:8f:60:5e:b9
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 93:de:20:60:48:00:ea:8d:f7:2b:a1:95:79:bd:4b:b5:2f:ea:d1:dd
Fingerprint (sha256): 87:a7:59:76:4d:8a:36:07:93:37:70:6c:5b:69:74:94:21:1c:10:b1:1b:aa:0b:2b:2e:e4:0e:34:92:34:b5:f2

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g5.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g5.crl

Check the revocation status for certificate m.ssl.shopify.com

125

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for m.ssl.shopify.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

m.ssl.shopify.com
www.justdon.com
www.birksbusiness.com
www.daftpunk.com
uk.daftpunk.com
eu.daftpunk.com
store.tonyrobbins.com
www.raygunsite.com
www.thepulseboutique.com
devshop.umetrics.com
testshop.umetrics.com
shop.isolitesystems.com
www.artofmagic.com
store.munzee.com
www.culturekings.com.au
www.themanechoice.com
www.fittea.org
shop.skyroam.com
www.tbdliquids.com
shop.princessofbeverlyhills.com
www.iswegway.com
www.active8canada.com
shop.hellomerch.com
www.allbirds.com
www.allbirds.co.nz
www.curemasterreserveham.com
www.charityartworx.com
www.dipyourcar.com
store.sentaifilmworks.com
www.bluefirestore.com
www.hellomerch.com
www.dapper-agency.no
www.preparewise.com
store.fakku.net
www.zoofashions.us.com
www.ellenshop.com
exchange-store.automatic.com
www.themutmarket.com
www.maddencoinwizard.com
store.chefsteps.com
store.chocolateyshatner.com
www.soshape.com
www.piperwai.com
www.useelbowgrease.com
www.elbowgreaseathletics.com
www.bigfrogsupply.com
www.oskawellness.com
www.orchardvalleysupply.com
shop.johnnyramone.com
shop.otisredding.com
checkout.yourtea.com
www.stashtea.com
www.loveyootoo.com
usd.shop.pottermore.com
eur.shop.pottermore.com
gbp.shop.pottermore.com
qa-usd.shop.pottermore.com
qa-eur.shop.pottermore.com
qa-gbp.shop.pottermore.com
demo-usd.shop.pottermore.com
demo-eur.shop.pottermore.com
demo-gbp.shop.pottermore.com
www2.mahabis.com
www.spirit-of-drini.ch
www.maskcarabeauty.com
www.bevybar.com.ar
www.breazy.com
www.mattressmania.com
www.velvetcloudwholesale.com
www.sidewalkangelsstore.com
www.veestro.com
shop.navdy.com
www.lspace.com
www.melinbrand.com
www.mybedroomspice.com
usa.jolynclothing.com
eu.jolynclothing.com
aus.jolynclothing.com
www.jolynclothing.com
www.fitfashion.dk
wholesale.piperwai.com
www.mensidentityoutlet.com
www.dyln.co
www.hawkersco.co.uk
www.ziito.dk
www.ziito.co.uk
www.ziito.de
www.perversesunglasses.com
www.kentwool.com
www.amoretti.com
store.pastors.com
www.citygrounds.com
us.impossible-project.com
eu.impossible-project.com
uk.impossible-project.com
asia.impossible-project.com
ca.impossible-project.com
orl.yorknow.com
www.innovativeeducators.org
www.roaso.com
www.herogiveaways.com
store.stylotone.com
www.trimtuf.com
www.tushy.me
shop.didimedical.com
www.traceup.com
www.desertfarms.com
www.desertfarms.co.uk
eu.gramovox.com
www.lineapelle.com
checkout.swimwithissues.com
www.kashkha.com
www.scotchporter.co.uk
www.splits59.com
au.pearlywhitesaustralia.com
us.pearlywhitesaustralia.com
www.livifyusa.com
www.livify.ca
www.punkcase.com
www.inksdirect.org.uk
www.cultiver.com
www.yummyextensions.com
www.tantusinc.com
www.corinnebaileyraeshop.com
www.shopgavinjames.com

Other certificates including the domain name shopify.com

(limited to 100 certificates)
f4.shared.global.fastly.net
zh.shopify.com
ingress-imagery-us-central1-2.shopifycloud.com
statuspage.io
themes.shopify.com
l.ssl.shopify.com
merchandise.shopify.com
events.shopify.com
press.shopify.com
statuspage.io
dns-vetting1-jeffg-noah.map.fastly.net
statuspage.io
shopify-app-store.shopifycloud.com
o.ssl.shopify.com
statuspage.io
brochure2-staging12.shopifycloud.com
plusinfo.shopify.com
status.3dcart.com
savage-sign-on.shopifycloud.com
accounts.shopify.com
investor.shopify.com
meetups.shopify.com
projectruru.shopify.com
shopify.com
linkpop.com
chat.shopify.com
commerceplus.shopify.com
marketplace.shopify.com
next.shopify.com
shopify-classifieds.shopifycloud.com
ir.shopify.com
ssl.shopify.com
marketplace.shopify.com
store.shopify.com
secure03.lithium.com
dev.shopify.com
somethingorother.shopify.com
commerceplus.shopify.com
pins.shopify.com
statuspage.io
ssl.cdngc.net
sourcing-admin.shopify.com
cardreader.shopify.com
www.shopify.com
www.shopify.com
secure03.stage.lithium.com
p.ssl.shopify.com
pointofsale.shopify.com
bourgeois.shopifycloud.com
unicorn.shopify.com
upcoming12.shopify.com
sl.shopify.com
tashboard.shopify.com
growthcenter.shopify.com
secure03.stage.lithium.com
statuspage.io
*.b.ssl.fastly.net
gtm.shopify.com
secure03.lithium.com
statuspage.io
analytics.shopify.com
state-of-engage.shopify.com
collabs.shopify.com
unite-registration.shopify.com
photos.shopify.com
data-portal.shopifycloud.com
merch.shopify.com
plusacademy.shopify.com
www.shopify.com
burst.shopify.com
shopify-plus-meet-up.shopify.com
collabs.shopify.com
statuspage.io
privacy.shopify.com
r.ssl.fastly.net
counter.shopify.com
shopify-app-store.shopifycloud.com
statuspage.io
statuspage.io
collabs-merchant-staging.shopify.com
b.ssl.shopify.com
statuspage.io
shopify-app-store-staging.shopifycloud.com
sfn.shopify.com
growthcenter.shopify.com
bcs.shopify.com
statuspage.io
smiley-staging.shopify.com
secure03.lithium.com
statuspage.io
hardware.shopify.com
upcoming-pizx.shopify.com
shopify-classifieds.shopifycloud.com
ny.shopify.com
pursuit.shopify.com
cardreader-giveaway.shopifycloud.com
auth.data.shopify.com
hardware.shopify.com
statuspage.io
ssl.shopify.com

Certificate

The complete raw certificate details for m.ssl.shopify.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppA0KZtDxVrH9sKQpbAO
p1stgOL8CTXhk1b/O2HXQipKyiAYEz/YSEjx2hwvkdgGjl7EEbwu+jMeeAQzC/z1
KwhQNcsTVbIvWQ8X/J4HiXVHG4IFc796a7MwpqBskjFgJcI8nO6dUPKqWHb8Hsku
9YZkt9m+0isQeFpuISzMjVXxTeCnqI+Ya3kZEnTqSnlZfiWUBzAGN7Mc5/2/RnbX
74ZNy2ppcv8k5rclA5RDAVISM/eeRyX8hoKUfjtcPYw3snf/74XlDntVsVwgMFC+
ocF6WPHhnrLJkMKwy63N96KR0uNwR8l6x0OnV35CMNtH4M4wC3hWC4yXVth9MUqW
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4372230060144983280749733170332525374
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ottawa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shopify Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'm.ssl.shopify.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21026668148643353564904936237683185744607379402689530776530211216367460661333836137393596218046844054750004427488609717018998672338809878396442074889465561166737528897845097996482915654793647467622563963084978264421176322649588439886735915277455056456502379825225784482133690526868439164530815794651592000943307119301743695629587475329711137371404625306570515767623458202005552109765657415552312418004962912271315750871864442464988454066870643660652985962827935613568744838535687121694108136920811099848919471768835548831023425961910299674108275767869939201728382804726818040536951123643400386940015230389832213239499
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3732d01f32e3f2c83823df0909c4db768f605eb9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2773 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ssl.shopify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.justdon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.birksbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daftpunk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.daftpunk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.daftpunk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.tonyrobbins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raygunsite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thepulseboutique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devshop.umetrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testshop.umetrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.isolitesystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artofmagic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.munzee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.culturekings.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.themanechoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fittea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.skyroam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tbdliquids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.princessofbeverlyhills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iswegway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.active8canada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.hellomerch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allbirds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allbirds.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.curemasterreserveham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charityartworx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dipyourcar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.sentaifilmworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluefirestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hellomerch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dapper-agency.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preparewise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.fakku.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zoofashions.us.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ellenshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange-store.automatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.themutmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maddencoinwizard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.chefsteps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.chocolateyshatner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soshape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.piperwai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.useelbowgrease.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elbowgreaseathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigfrogsupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oskawellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orchardvalleysupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.johnnyramone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.otisredding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.yourtea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stashtea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loveyootoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usd.shop.pottermore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eur.shop.pottermore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gbp.shop.pottermore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-usd.shop.pottermore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-eur.shop.pottermore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-gbp.shop.pottermore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-usd.shop.pottermore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-eur.shop.pottermore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-gbp.shop.pottermore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.mahabis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spirit-of-drini.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maskcarabeauty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bevybar.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.breazy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mattressmania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.velvetcloudwholesale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sidewalkangelsstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.veestro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.navdy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melinbrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mybedroomspice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usa.jolynclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.jolynclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aus.jolynclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jolynclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fitfashion.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wholesale.piperwai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mensidentityoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dyln.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkersco.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ziito.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ziito.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ziito.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.perversesunglasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kentwool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amoretti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.pastors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citygrounds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.impossible-project.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.impossible-project.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.impossible-project.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asia.impossible-project.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca.impossible-project.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orl.yorknow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innovativeeducators.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roaso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.herogiveaways.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.stylotone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trimtuf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tushy.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.didimedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.traceup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.desertfarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.desertfarms.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.gramovox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lineapelle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.swimwithissues.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kashkha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scotchporter.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splits59.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'au.pearlywhitesaustralia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.pearlywhitesaustralia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livifyusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livify.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.punkcase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inksdirect.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cultiver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yummyextensions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tantusinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corinnebaileyraeshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopgavinjames.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g5.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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