c.ssl.shopify.com

- Shopify Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 04:f8:de:f3:1f:1b:09:60:91:68:08:80:38:9e:ce:56 was issued on by DigiCert Inc.

With 123 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Shopify Inc.

Organization: Shopify Inc.
State / Province: Ontario
Locality: Ottawa
Country: CA

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f8:de:f3:1f:1b:09:60:91:68:08:80:38:9e:ce:56
Serial Number (int): 6609123561058522964813645752718773846
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 86:da:0c:b6:da:56:16:b8:f2:11:2c:19:e0:19:b7:30:b7:77:3b:d0
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): f5:bd:6d:3d:64:16:16:9a:95:6b:96:89:71:bb:1a:05:38:88:2f:27
Fingerprint (sha256): d6:2f:70:c1:f7:95:08:72:0a:d3:38:32:bb:ab:a5:9c:e8:fb:ca:33:02:92:dd:e2:a6:a7:a3:eb:80:fd:d9:da

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g3.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g3.crl

Check the revocation status for certificate c.ssl.shopify.com

123

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for c.ssl.shopify.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

c.ssl.shopify.com
www.livingdeal.com
shop.sophos.com
www.ishine365.com
www.ishinefit.com
www.reelstyle.co
www.basketlady.com
www.gpen.com
www.skrillexmerch.com
store.owsla.com
www.saddlebackresources.com
www.cotton101.com
shop.bdgastore.com
www.imaginationinternationalincshop.com
store.eftours.com
store.eftours.ca
www.depactus.com
www.fangamer.com
www.laurenjames.com
www.shoreprojects.com
aus.shoreprojects.com
usa.shoreprojects.com
eur.shoreprojects.com
www.naturalbabyshower.co.uk
www.zumbawear-me.com
www.deadstock.ca
www.novanatural.com
www.turkish-t.com
www.rightchannelradios.com
www.merchologyinc.com
www.manoutfitters.com
www.vinoteque.co.za
www.merchology.com
shop.360fly.com
www.tritondatacomonline.com
www.vanguardmil.com
us.frankbody.com
au.frankbody.com
int.frankbody.com
www.getvape.co.uk
www.gramovox.de
www.gramovox.fr
shop.smashingmagazine.com
www.bluelizard.net
shop.magnoliahomes.net
www.earthled.com
www.countryclubprep.com
www.seedling.com
eu.rokasports.com
www.shopexida.com
www.hellonomad.com
au.hellonomad.com
int.hellonomad.com
eu.hellonomad.com
www.oipolloi.com
india.worldvision.ca
www.frankbody.ca
www.frankbody.eu
www.frankbody.co.uk
www.danandphilshop.com
www.lorettahome.com
www.slidebelts.com
nerds.seedling.com
www.recognitionsource.com
www.shopentourageclothing.com
www.hickies.com
uk.hickies.com
aus.hickies.com
europe.hickies.com
www.woodville.nl
www.heatholders.com
shop.ray.co
www.vsnmobil.com
www.buykaspersky.com.au
www.buykaspersky.co.nz
www.shopzerouv.com
shopify.smashingmagazine.com
www.mynuface.com
www.kleankanteen.com
www.lakotaherbs.com
fr.wonkabonka.com
www.beastmodeonline.com
shop.brathwait.com
www.lookbookstore.co
www.evolutivelabs.com
www.enjoyfriendsandfamily.com
www.sakaralife.com
www.deliverightlogistics.com
www.ejuices.com
www.ejuices.co
www.evelo.com
www.eliquid.com
development.enjoyfriendsandfamily.com
store.myo.com
www.firgelliauto.ca
www.crazyhotdeals.com
www.quickmobilefix.com
order.evelo.com
www.interiorshade.com
www.bhgshop.com.au
www.theparcel.com.au
www.stoneisland.co.uk
shop.snappower.com
www.danishskincare.dk
www.steigerhoutstunter.nl
www.metabunny.biz
www.spiritualgangster.com
www.shopsgwholesale.com
www.gumball.com
grab.mypakage.com
www.biolitestove.com
www.deliveright.com
www.mizzue.com.my
www.carvinamplifiers.com
www.carvinaudio.com
www.cardmachineoutlet.com
www.paranalentes.com
www.pipwholesale.com
www.beethinking.com
www.unifclothing.com
www.aerialclothing.com
www.zzswholesale.com
www.morphebrushes.com

Other certificates including the domain name shopify.com

(limited to 100 certificates)
f4.shared.global.fastly.net
zh.shopify.com
ingress-imagery-us-central1-2.shopifycloud.com
statuspage.io
themes.shopify.com
l.ssl.shopify.com
merchandise.shopify.com
events.shopify.com
press.shopify.com
statuspage.io
dns-vetting1-jeffg-noah.map.fastly.net
statuspage.io
shopify-app-store.shopifycloud.com
o.ssl.shopify.com
statuspage.io
brochure2-staging12.shopifycloud.com
plusinfo.shopify.com
status.3dcart.com
savage-sign-on.shopifycloud.com
accounts.shopify.com
investor.shopify.com
meetups.shopify.com
shopify.com
linkpop.com
chat.shopify.com
commerceplus.shopify.com
marketplace.shopify.com
next.shopify.com
shopify-classifieds.shopifycloud.com
ir.shopify.com
ssl.shopify.com
marketplace.shopify.com
store.shopify.com
secure03.lithium.com
dev.shopify.com
somethingorother.shopify.com
commerceplus.shopify.com
pins.shopify.com
statuspage.io
ssl.cdngc.net
sourcing-admin.shopify.com
cardreader.shopify.com
www.shopify.com
www.shopify.com
secure03.stage.lithium.com
p.ssl.shopify.com
pointofsale.shopify.com
bourgeois.shopifycloud.com
unicorn.shopify.com
upcoming12.shopify.com
sl.shopify.com
tashboard.shopify.com
growthcenter.shopify.com
secure03.stage.lithium.com
statuspage.io
*.b.ssl.fastly.net
gtm.shopify.com
secure03.lithium.com
statuspage.io
analytics.shopify.com
collabs.shopify.com
unite-registration.shopify.com
photos.shopify.com
data-portal.shopifycloud.com
merch.shopify.com
plusacademy.shopify.com
www.shopify.com
shopify-plus-meet-up.shopify.com
collabs.shopify.com
statuspage.io
privacy.shopify.com
r.ssl.fastly.net
counter.shopify.com
shopify-app-store.shopifycloud.com
statuspage.io
statuspage.io
b.ssl.shopify.com
statuspage.io
shopify-app-store-staging.shopifycloud.com
sfn.shopify.com
growthcenter.shopify.com
bcs.shopify.com
statuspage.io
smiley-staging.shopify.com
secure03.lithium.com
statuspage.io
hardware.shopify.com
upcoming-pizx.shopify.com
shopify-classifieds.shopifycloud.com
ny.shopify.com
pursuit.shopify.com
cardreader-giveaway.shopifycloud.com
auth.data.shopify.com
hardware.shopify.com
statuspage.io
ssl.shopify.com
events.shopify.com
unite.shopify.com
linkpop.shopify.com
upcoming9.shopify.com

Certificate

The complete raw certificate details for c.ssl.shopify.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MWy7AGAoECyMo3sLIv8
Fl5AAnTcAPUlyDbWiOL1wFZXI085JFGRQoiI8LxQ22dZsMGE3h3OmBB3L9Ez3LQb
GeYDSX63NDx2lgcQhMEevRSDEKHeXl23zuxngNGEs6HNfwsA89kYEbm/YQtsE8EC
i8ERoE35PCuKHvnzjfzUE27078V35dgeyEvaEMfUXmlqX5YGDHafTr6XV0xkcOHz
ouYn8gcj+ahNNZqf/9zYOIKRoPQP4nU9xc+WyUhyCtBM4gm3SG4E7rvLodnYuDZC
dyolqWNEQjg0u+x/WXZjIxHlhvm+UemDoxFvTuxfglyw8G1QE+cFlDb+n2qLbunu
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6609123561058522964813645752718773846
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-12-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-19 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ottawa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shopify Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'c.ssl.shopify.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28879822500052559925206508019265160766912428449412052515732457329123476843891856225197859380214373020194661711108328131734665127461819731995906464583865890722286031565850080243125993420531289650335746728708038682871641973760116173764826672869950478814281711349647503494434676570745334891582966956560520959212500236039814075447295888489613963758010979919826407254647778058004349237238837802275527214886746541448342146700378129635443760257780536497131963299140992934473376469561161033273470715433425612113851188764898130997196480211321956908754484359175167685864185373196696277667737866189579646610365298947518087425567
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							86da0cb6da5616b8f2112c19e019b730b7773bd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2623 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.ssl.shopify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingdeal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.sophos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ishine365.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ishinefit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reelstyle.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basketlady.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gpen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skrillexmerch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.owsla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saddlebackresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cotton101.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.bdgastore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imaginationinternationalincshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.eftours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.eftours.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.depactus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fangamer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laurenjames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shoreprojects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aus.shoreprojects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usa.shoreprojects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eur.shoreprojects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naturalbabyshower.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zumbawear-me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deadstock.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novanatural.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.turkish-t.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rightchannelradios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.merchologyinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manoutfitters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vinoteque.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.merchology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.360fly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tritondatacomonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vanguardmil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.frankbody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'au.frankbody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int.frankbody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getvape.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gramovox.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gramovox.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.smashingmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluelizard.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.magnoliahomes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.earthled.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.countryclubprep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seedling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.rokasports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopexida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hellonomad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'au.hellonomad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int.hellonomad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.hellonomad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oipolloi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'india.worldvision.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frankbody.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frankbody.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frankbody.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.danandphilshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lorettahome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slidebelts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nerds.seedling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recognitionsource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopentourageclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hickies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.hickies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aus.hickies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'europe.hickies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woodville.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heatholders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ray.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vsnmobil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buykaspersky.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buykaspersky.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopzerouv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopify.smashingmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mynuface.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kleankanteen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lakotaherbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.wonkabonka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beastmodeonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.brathwait.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lookbookstore.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.evolutivelabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enjoyfriendsandfamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sakaralife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deliverightlogistics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ejuices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ejuices.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.evelo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eliquid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'development.enjoyfriendsandfamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.myo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firgelliauto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crazyhotdeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quickmobilefix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order.evelo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.interiorshade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bhgshop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theparcel.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stoneisland.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.snappower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.danishskincare.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steigerhoutstunter.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metabunny.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiritualgangster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopsgwholesale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gumball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grab.mypakage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biolitestove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deliveright.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mizzue.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carvinamplifiers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carvinaudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardmachineoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paranalentes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pipwholesale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beethinking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unifclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aerialclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zzswholesale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.morphebrushes.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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