c.ssl.shopify.com

- Shopify Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 04:9f:76:f8:84:1f:f7:62:23:5f:b7:a6:a1:92:ef:31 was issued on by DigiCert Inc.

With 120 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Shopify Inc.

Organization: Shopify Inc.
State / Province: Ontario
Locality: Ottawa
Country: CA

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9f:76:f8:84:1f:f7:62:23:5f:b7:a6:a1:92:ef:31
Serial Number (int): 6144900197454901750894074574427844401
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 75:a8:cf:af:9c:83:2d:d4:41:be:43:1c:dc:b5:1c:a7:1b:ae:a5:55
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): a5:15:ef:d8:83:60:49:3d:84:27:71:d1:50:9f:a2:ab:f7:a3:2a:06
Fingerprint (sha256): ab:7d:47:da:f8:ab:bc:98:79:b4:7b:c1:ea:a2:c2:4e:0a:03:33:c0:0b:4e:82:36:b1:5d:63:87:3f:b6:ee:65

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g3.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g3.crl

Check the revocation status for certificate c.ssl.shopify.com

120

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for c.ssl.shopify.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

c.ssl.shopify.com
www.livingdeal.com
shop.sophos.com
www.ishine365.com
www.ishinefit.com
www.reelstyle.co
www.basketlady.com
www.gpen.com
www.skrillexmerch.com
store.owsla.com
www.saddlebackresources.com
www.cotton101.com
shop.bdgastore.com
www.imaginationinternationalincshop.com
store.eftours.com
store.eftours.ca
www.depactus.com
www.fangamer.com
www.laurenjames.com
www.shoreprojects.com
aus.shoreprojects.com
usa.shoreprojects.com
eur.shoreprojects.com
www.naturalbabyshower.co.uk
www.zumbawear-me.com
www.deadstock.ca
www.novanatural.com
www.turkish-t.com
www.rightchannelradios.com
www.merchologyinc.com
www.manoutfitters.com
www.vinoteque.co.za
www.merchology.com
shop.360fly.com
www.tritondatacomonline.com
www.vanguardmil.com
us.frankbody.com
au.frankbody.com
int.frankbody.com
www.getvape.co.uk
www.gramovox.de
www.gramovox.fr
shop.smashingmagazine.com
www.bluelizard.net
shop.magnoliahomes.net
www.earthled.com
www.countryclubprep.com
www.seedling.com
eu.rokasports.com
www.shopexida.com
www.hellonomad.com
au.hellonomad.com
int.hellonomad.com
eu.hellonomad.com
www.oipolloi.com
india.worldvision.ca
www.frankbody.ca
www.frankbody.eu
www.frankbody.co.uk
www.danandphilshop.com
www.lorettahome.com
www.slidebelts.com
nerds.seedling.com
www.recognitionsource.com
www.shopentourageclothing.com
www.hickies.com
uk.hickies.com
aus.hickies.com
europe.hickies.com
www.woodville.nl
www.heatholders.com
shop.ray.co
www.vsnmobil.com
www.buykaspersky.com.au
www.buykaspersky.co.nz
www.shopzerouv.com
shopify.smashingmagazine.com
www.mynuface.com
www.kleankanteen.com
www.lakotaherbs.com
fr.wonkabonka.com
www.beastmodeonline.com
shop.brathwait.com
www.lookbookstore.co
www.evolutivelabs.com
www.enjoyfriendsandfamily.com
www.sakaralife.com
www.deliverightlogistics.com
www.ejuices.com
www.ejuices.co
www.evelo.com
www.eliquid.com
development.enjoyfriendsandfamily.com
store.myo.com
www.firgelliauto.ca
www.crazyhotdeals.com
www.quickmobilefix.com
order.evelo.com
www.interiorshade.com
www.bhgshop.com.au
www.theparcel.com.au
www.stoneisland.co.uk
shop.snappower.com
www.danishskincare.dk
www.steigerhoutstunter.nl
www.metabunny.biz
www.spiritualgangster.com
www.shopsgwholesale.com
www.gumball.com
grab.mypakage.com
www.biolitestove.com
www.deliveright.com
www.mizzue.com.my
www.carvinamplifiers.com
www.carvinaudio.com
www.cardmachineoutlet.com
www.paranalentes.com
www.pipwholesale.com
www.unifclothing.com
www.beethinking.com

Other certificates including the domain name shopify.com

(limited to 100 certificates)
f4.shared.global.fastly.net
zh.shopify.com
ingress-imagery-us-central1-2.shopifycloud.com
statuspage.io
themes.shopify.com
l.ssl.shopify.com
merchandise.shopify.com
events.shopify.com
press.shopify.com
statuspage.io
dns-vetting1-jeffg-noah.map.fastly.net
statuspage.io
shopify-app-store.shopifycloud.com
o.ssl.shopify.com
statuspage.io
brochure2-staging12.shopifycloud.com
plusinfo.shopify.com
status.3dcart.com
savage-sign-on.shopifycloud.com
accounts.shopify.com
investor.shopify.com
meetups.shopify.com
shopify.com
linkpop.com
chat.shopify.com
commerceplus.shopify.com
marketplace.shopify.com
next.shopify.com
shopify-classifieds.shopifycloud.com
ir.shopify.com
ssl.shopify.com
marketplace.shopify.com
store.shopify.com
secure03.lithium.com
dev.shopify.com
somethingorother.shopify.com
commerceplus.shopify.com
pins.shopify.com
statuspage.io
ssl.cdngc.net
sourcing-admin.shopify.com
cardreader.shopify.com
www.shopify.com
www.shopify.com
secure03.stage.lithium.com
p.ssl.shopify.com
pointofsale.shopify.com
bourgeois.shopifycloud.com
unicorn.shopify.com
upcoming12.shopify.com
sl.shopify.com
tashboard.shopify.com
growthcenter.shopify.com
secure03.stage.lithium.com
statuspage.io
*.b.ssl.fastly.net
gtm.shopify.com
secure03.lithium.com
statuspage.io
analytics.shopify.com
collabs.shopify.com
unite-registration.shopify.com
photos.shopify.com
data-portal.shopifycloud.com
merch.shopify.com
plusacademy.shopify.com
www.shopify.com
shopify-plus-meet-up.shopify.com
collabs.shopify.com
statuspage.io
privacy.shopify.com
r.ssl.fastly.net
counter.shopify.com
shopify-app-store.shopifycloud.com
statuspage.io
statuspage.io
b.ssl.shopify.com
statuspage.io
shopify-app-store-staging.shopifycloud.com
sfn.shopify.com
growthcenter.shopify.com
bcs.shopify.com
statuspage.io
smiley-staging.shopify.com
secure03.lithium.com
statuspage.io
hardware.shopify.com
upcoming-pizx.shopify.com
shopify-classifieds.shopifycloud.com
ny.shopify.com
pursuit.shopify.com
cardreader-giveaway.shopifycloud.com
auth.data.shopify.com
hardware.shopify.com
statuspage.io
ssl.shopify.com
events.shopify.com
unite.shopify.com
linkpop.shopify.com
upcoming9.shopify.com

Certificate

The complete raw certificate details for c.ssl.shopify.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPKDCCDhCgAwIBAgIQBJ92+IQf92IjX7emoZLvMTANBgkqhkiG9w0BAQsFADBw
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz
dXJhbmNlIFNlcnZlciBDQTAeFw0xNDEyMTUwMDAwMDBaFw0xNzEyMTkxMjAwMDBa
MGMxCzAJBgNVBAYTAkNBMRAwDgYDVQQIEwdPbnRhcmlvMQ8wDQYDVQQHEwZPdHRh
d2ExFTATBgNVBAoTDFNob3BpZnkgSW5jLjEaMBgGA1UEAxMRYy5zc2wuc2hvcGlm
eS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeZ/gInP67YNd5
ViDGVI+cpqDA/KYFAYl7NVTciabGw2QpTqZAMdIWus86rYo207rb+Xw3lVdmSQMF
n3JZwPzNH1rPbkV5EmSOpHmwiV6cbxxPCV4U8eh75wt03FJaRqy9nsvOT7pR1JWs
TD598YuEajvQjSvUhoTMgwoMpdEezrFtA1oJO6u4A4TsOMTx42PN1DFfwT7wpZvg
DGpY8mFvVFVVmKuXdAJLrd4g/46wS2Zm4LtXBeBZDbUFWSc4WQuzzLhfd45U5j7H
kk09t7bGHd/Gt3Qk10TpxxelEvDHW2aX+7ADN8r2SouWXObSsJAokVkdzBeSxTun
N1jG8UvbAgMBAAGjggvJMIILxTAfBgNVHSMEGDAWgBRRaP+QrwIHdTzM2WVkYqIS
uFlyOzAdBgNVHQ4EFgQUdajPr5yDLdRBvkMc3LUcpxuupVUwggoDBgNVHREEggn6
MIIJ9oIRYy5zc2wuc2hvcGlmeS5jb22CEnd3dy5saXZpbmdkZWFsLmNvbYIPc2hv
cC5zb3Bob3MuY29tghF3d3cuaXNoaW5lMzY1LmNvbYIRd3d3LmlzaGluZWZpdC5j
b22CEHd3dy5yZWVsc3R5bGUuY2+CEnd3dy5iYXNrZXRsYWR5LmNvbYIMd3d3Lmdw
ZW4uY29tghV3d3cuc2tyaWxsZXhtZXJjaC5jb22CD3N0b3JlLm93c2xhLmNvbYIb
d3d3LnNhZGRsZWJhY2tyZXNvdXJjZXMuY29tghF3d3cuY290dG9uMTAxLmNvbYIS
c2hvcC5iZGdhc3RvcmUuY29tgid3d3cuaW1hZ2luYXRpb25pbnRlcm5hdGlvbmFs
aW5jc2hvcC5jb22CEXN0b3JlLmVmdG91cnMuY29tghBzdG9yZS5lZnRvdXJzLmNh
ghB3d3cuZGVwYWN0dXMuY29tghB3d3cuZmFuZ2FtZXIuY29tghN3d3cubGF1cmVu
amFtZXMuY29tghV3d3cuc2hvcmVwcm9qZWN0cy5jb22CFWF1cy5zaG9yZXByb2pl
Y3RzLmNvbYIVdXNhLnNob3JlcHJvamVjdHMuY29tghVldXIuc2hvcmVwcm9qZWN0
cy5jb22CG3d3dy5uYXR1cmFsYmFieXNob3dlci5jby51a4IUd3d3Lnp1bWJhd2Vh
ci1tZS5jb22CEHd3dy5kZWFkc3RvY2suY2GCE3d3dy5ub3ZhbmF0dXJhbC5jb22C
EXd3dy50dXJraXNoLXQuY29tghp3d3cucmlnaHRjaGFubmVscmFkaW9zLmNvbYIV
d3d3Lm1lcmNob2xvZ3lpbmMuY29tghV3d3cubWFub3V0Zml0dGVycy5jb22CE3d3
dy52aW5vdGVxdWUuY28uemGCEnd3dy5tZXJjaG9sb2d5LmNvbYIPc2hvcC4zNjBm
bHkuY29tght3d3cudHJpdG9uZGF0YWNvbW9ubGluZS5jb22CE3d3dy52YW5ndWFy
ZG1pbC5jb22CEHVzLmZyYW5rYm9keS5jb22CEGF1LmZyYW5rYm9keS5jb22CEWlu
dC5mcmFua2JvZHkuY29tghF3d3cuZ2V0dmFwZS5jby51a4IPd3d3LmdyYW1vdm94
LmRlgg93d3cuZ3JhbW92b3guZnKCGXNob3Auc21hc2hpbmdtYWdhemluZS5jb22C
End3dy5ibHVlbGl6YXJkLm5ldIIWc2hvcC5tYWdub2xpYWhvbWVzLm5ldIIQd3d3
LmVhcnRobGVkLmNvbYIXd3d3LmNvdW50cnljbHVicHJlcC5jb22CEHd3dy5zZWVk
bGluZy5jb22CEWV1LnJva2FzcG9ydHMuY29tghF3d3cuc2hvcGV4aWRhLmNvbYIS
d3d3LmhlbGxvbm9tYWQuY29tghFhdS5oZWxsb25vbWFkLmNvbYISaW50LmhlbGxv
bm9tYWQuY29tghFldS5oZWxsb25vbWFkLmNvbYIQd3d3Lm9pcG9sbG9pLmNvbYIU
aW5kaWEud29ybGR2aXNpb24uY2GCEHd3dy5mcmFua2JvZHkuY2GCEHd3dy5mcmFu
a2JvZHkuZXWCE3d3dy5mcmFua2JvZHkuY28udWuCFnd3dy5kYW5hbmRwaGlsc2hv
cC5jb22CE3d3dy5sb3JldHRhaG9tZS5jb22CEnd3dy5zbGlkZWJlbHRzLmNvbYIS
bmVyZHMuc2VlZGxpbmcuY29tghl3d3cucmVjb2duaXRpb25zb3VyY2UuY29tgh13
d3cuc2hvcGVudG91cmFnZWNsb3RoaW5nLmNvbYIPd3d3LmhpY2tpZXMuY29tgg51
ay5oaWNraWVzLmNvbYIPYXVzLmhpY2tpZXMuY29tghJldXJvcGUuaGlja2llcy5j
b22CEHd3dy53b29kdmlsbGUubmyCE3d3dy5oZWF0aG9sZGVycy5jb22CC3Nob3Au
cmF5LmNvghB3d3cudnNubW9iaWwuY29tghd3d3cuYnV5a2FzcGVyc2t5LmNvbS5h
dYIWd3d3LmJ1eWthc3BlcnNreS5jby5ueoISd3d3LnNob3B6ZXJvdXYuY29tghxz
aG9waWZ5LnNtYXNoaW5nbWFnYXppbmUuY29tghB3d3cubXludWZhY2UuY29tghR3
d3cua2xlYW5rYW50ZWVuLmNvbYITd3d3Lmxha290YWhlcmJzLmNvbYIRZnIud29u
a2Fib25rYS5jb22CF3d3dy5iZWFzdG1vZGVvbmxpbmUuY29tghJzaG9wLmJyYXRo
d2FpdC5jb22CFHd3dy5sb29rYm9va3N0b3JlLmNvghV3d3cuZXZvbHV0aXZlbGFi
cy5jb22CHXd3dy5lbmpveWZyaWVuZHNhbmRmYW1pbHkuY29tghJ3d3cuc2FrYXJh
bGlmZS5jb22CHHd3dy5kZWxpdmVyaWdodGxvZ2lzdGljcy5jb22CD3d3dy5lanVp
Y2VzLmNvbYIOd3d3LmVqdWljZXMuY2+CDXd3dy5ldmVsby5jb22CD3d3dy5lbGlx
dWlkLmNvbYIlZGV2ZWxvcG1lbnQuZW5qb3lmcmllbmRzYW5kZmFtaWx5LmNvbYIN
c3RvcmUubXlvLmNvbYITd3d3LmZpcmdlbGxpYXV0by5jYYIVd3d3LmNyYXp5aG90
ZGVhbHMuY29tghZ3d3cucXVpY2ttb2JpbGVmaXguY29tgg9vcmRlci5ldmVsby5j
b22CFXd3dy5pbnRlcmlvcnNoYWRlLmNvbYISd3d3LmJoZ3Nob3AuY29tLmF1ghR3
d3cudGhlcGFyY2VsLmNvbS5hdYIVd3d3LnN0b25laXNsYW5kLmNvLnVrghJzaG9w
LnNuYXBwb3dlci5jb22CFXd3dy5kYW5pc2hza2luY2FyZS5ka4IZd3d3LnN0ZWln
ZXJob3V0c3R1bnRlci5ubIIRd3d3Lm1ldGFidW5ueS5iaXqCGXd3dy5zcGlyaXR1
YWxnYW5nc3Rlci5jb22CF3d3dy5zaG9wc2d3aG9sZXNhbGUuY29tgg93d3cuZ3Vt
YmFsbC5jb22CEWdyYWIubXlwYWthZ2UuY29tghR3d3cuYmlvbGl0ZXN0b3ZlLmNv
bYITd3d3LmRlbGl2ZXJpZ2h0LmNvbYIRd3d3Lm1penp1ZS5jb20ubXmCGHd3dy5j
YXJ2aW5hbXBsaWZpZXJzLmNvbYITd3d3LmNhcnZpbmF1ZGlvLmNvbYIZd3d3LmNh
cmRtYWNoaW5lb3V0bGV0LmNvbYIUd3d3LnBhcmFuYWxlbnRlcy5jb22CFHd3dy5w
aXB3aG9sZXNhbGUuY29tghR3d3cudW5pZmNsb3RoaW5nLmNvbYITd3d3LmJlZXRo
aW5raW5nLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMHUGA1UdHwRuMGwwNKAyoDCGLmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0
LmNvbS9zaGEyLWhhLXNlcnZlci1nMy5jcmwwNKAyoDCGLmh0dHA6Ly9jcmw0LmRp
Z2ljZXJ0LmNvbS9zaGEyLWhhLXNlcnZlci1nMy5jcmwwQgYDVR0gBDswOTA3Bglg
hkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29t
L0NQUzCBgwYIKwYBBQUHAQEEdzB1MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5k
aWdpY2VydC5jb20wTQYIKwYBBQUHMAKGQWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0
LmNvbS9EaWdpQ2VydFNIQTJIaWdoQXNzdXJhbmNlU2VydmVyQ0EuY3J0MAwGA1Ud
EwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggEBACE8FqUTbI4QMl3bdlmimMqX7Sqo
5fqlWhiCEQ9IIzegJehfQQQWsVtkCh0aftmVuNkVDO0DXileRsE8N+RNdOyEga/E
j69sE/MdLk87QnSDuF3UBHU5VTxdt4GBWbQohP9PMOp6vIzrwFNPSz0bcdjga4CR
Jgl7aa2Kda/61JowBDai37lxm0oxyZD0kjP+ZybMOCeVhSFcZCLNWfBO6pQOG6pd
rUQw7l4eDt3KaE1jKjmt6cDdQsMMZJKLYIyYMqBlJFZcGP7aSIqpidzcPLUapu9s
dJRlSgU+zUiyzjcGno6i38ubbPt2wZpvUs3k5XAeVzeX7NqMMGFQ9Ahw3Mw=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmf4CJz+u2DXeVYgxlSP
nKagwPymBQGJezVU3ImmxsNkKU6mQDHSFrrPOq2KNtO62/l8N5VXZkkDBZ9yWcD8
zR9az25FeRJkjqR5sIlenG8cTwleFPHoe+cLdNxSWkasvZ7Lzk+6UdSVrEw+ffGL
hGo70I0r1IaEzIMKDKXRHs6xbQNaCTuruAOE7DjE8eNjzdQxX8E+8KWb4AxqWPJh
b1RVVZirl3QCS63eIP+OsEtmZuC7VwXgWQ21BVknOFkLs8y4X3eOVOY+x5JNPbe2
xh3fxrd0JNdE6ccXpRLwx1tml/uwAzfK9kqLllzm0rCQKJFZHcwXksU7pzdYxvFL
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6144900197454901750894074574427844401
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-12-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-19 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ottawa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shopify Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'c.ssl.shopify.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19996921150889922854347820039421584145364860066629900874918962970816425742757298908546069260930667537560258829428169826621606530772512416604398404660308227227551493233288303156303371497594051419248927517814486684331801058318565612166799014510940780879154875176062532816184395221729143802062277041861797549194840234421170277939719452660606769786284290942369357081481773425689419081386838236678027405339503399974722675447807142460934779457976936255348821078274567214539138834678845895008627651632879778707887248286683170487198225078613650570268507409323454352933074682197634009892147772641990034297748787394230868855771
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							75a8cfaf9c832dd441be431cdcb51ca71baea555
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2554 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.ssl.shopify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingdeal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.sophos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ishine365.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ishinefit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reelstyle.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basketlady.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gpen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skrillexmerch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.owsla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saddlebackresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cotton101.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.bdgastore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imaginationinternationalincshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.eftours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.eftours.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.depactus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fangamer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laurenjames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shoreprojects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aus.shoreprojects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usa.shoreprojects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eur.shoreprojects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naturalbabyshower.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zumbawear-me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deadstock.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novanatural.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.turkish-t.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rightchannelradios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.merchologyinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manoutfitters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vinoteque.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.merchology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.360fly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tritondatacomonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vanguardmil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.frankbody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'au.frankbody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int.frankbody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getvape.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gramovox.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gramovox.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.smashingmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluelizard.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.magnoliahomes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.earthled.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.countryclubprep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seedling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.rokasports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopexida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hellonomad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'au.hellonomad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int.hellonomad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.hellonomad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oipolloi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'india.worldvision.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frankbody.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frankbody.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frankbody.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.danandphilshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lorettahome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slidebelts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nerds.seedling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recognitionsource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopentourageclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hickies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.hickies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aus.hickies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'europe.hickies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woodville.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heatholders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ray.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vsnmobil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buykaspersky.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buykaspersky.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopzerouv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopify.smashingmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mynuface.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kleankanteen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lakotaherbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.wonkabonka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beastmodeonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.brathwait.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lookbookstore.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.evolutivelabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enjoyfriendsandfamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sakaralife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deliverightlogistics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ejuices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ejuices.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.evelo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eliquid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'development.enjoyfriendsandfamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.myo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firgelliauto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crazyhotdeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quickmobilefix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order.evelo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.interiorshade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bhgshop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theparcel.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stoneisland.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.snappower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.danishskincare.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steigerhoutstunter.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metabunny.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiritualgangster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopsgwholesale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gumball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grab.mypakage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biolitestove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deliveright.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mizzue.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carvinamplifiers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carvinaudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardmachineoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paranalentes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pipwholesale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unifclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beethinking.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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