incapsula.com

- Incapsula Inc -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 31:fa:17:6c:71:72:5d:ce:1e:36:62:5f was issued on by GlobalSign nv-sa.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 31:fa:17:6c:71:72:5d:ce:1e:36:62:5f
Serial Number (int): 15467107551001731037144703583
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 50:31:1b:f7:fa:d0:f2:f7:08:59:a6:9d:6f:d4:93:d8:01:b4:38:42
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 7d:66:c4:0d:19:4a:02:5c:ac:27:61:ce:3a:47:6f:35:33:b0:f2:d5
Fingerprint (sha256): 00:2c:7d:3d:51:16:de:3c:80:4a:4b:3d:b7:af:e4:2d:47:fe:e1:86:35:44:b8:c4:05:9f:6a:0d:cf:ac:35:6c

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate incapsula.com

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.acceptatie-engie-energie.nl
*.amwalak.com
*.apply.gomastercard.com.au
*.aviva.com
*.avivacanada.com
*.bingomania.com
*.branchetvous.fr
*.clearsky-data.net
*.conectys.com
*.contentful.com
*.corefour.com
*.corsair.ci
*.corsair.gp
*.corsair.mq
*.corsair.sn
*.creditoycaucion.es
*.dc4.pageuppeople.com
*.deviceprotection.com
*.diajugoso123.com
*.directmobiles.co.uk
*.eddieandco.com.au
*.ekeepergroup.co.uk
*.epiduo.com
*.epiduoforte.com
*.evoqua.com
*.evoquaadvantage.com
*.flipsies.com
*.hedgestonegroup.com
*.incapsula-demo.biz
*.ivrapp.net
*.kp-mypg.com
*.lb.nestle-watersna.com
*.lulucrm.com
*.madewithnestle.ca
*.maricopa.edu
*.mattelpartners.com
*.mxp.zamsh.incapsula.mobi
*.myer.com.au
*.mynvapp.com
*.net2phone.com
*.pin1111.com
*.prod.iloan.com
*.scanner.spotoption.com
*.searchflowstaging.co.uk
*.simplybettertin.co.uk
*.sofn.com
*.stratton.com
*.test-engie-energie.nl
*.travelport.com
*.tremblant.ca
*.vittel.jp
*.vtech.co.uk
*.werally.com
*.whitehousehistory.org
*.wrps.on.ca
*.wte.net
*.youfi.com
acceptatie-engie-energie.nl
amwalak.com
aviva.com
bingomania.com
branchetvous.fr
conectys.com
corsair.ci
corsair.gp
corsair.mq
corsair.sn
deviceprotection.com
diajugoso123.com
directmobiles.co.uk
eddieandco.com.au
epiduo.com
epiduoforte.com
evoquaadvantage.com
flipsies.com
hedgestonegroup.com
kp-mypg.com
madewithnestle.ca
net2phone.com
pin1111.com
searchflowstaging.co.uk
simplybettertin.co.uk
test-engie-energie.nl
travelport.com
vtech.co.uk
werally.com
wrps.on.ca
wte.net

Other certificates including the domain name incapsula.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sgLKGR+l4KI2c5rjhwT
QcuXu32CXy2BuUqZkco4pDsHzvBWKNAzxqSeUOt4LmhBzLETdHqvsXVPnNW4mbru
VbreTZoJ6//Jy4WfBAtvVq/uL9krmv19opt10Ll4+LLpeI+VBnkCNBPrALk/7aoV
HeZcTmRmq2QPbRIBSaa+ZQhL+swQc+ATmcxdz9ew1gZPo9kWC4lZ63FIRu97wa3y
KWi1qD8alv1EKFgInZOLtp359BOJlLvTt4zCnAzvMZog8YXJ9Mit5mSWTBGfKp0Z
4QF5GIQNcM2rPFZC3nWjwjp7DwgsCvpJDzHRkpULclhrBX7LvbvMdMzT2KgvvrwZ
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15467107551001731037144703583
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-06 03:45:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-03 11:22:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28123548870829407332310835763102796314685516335099324232149298607628573723871782786211088916438398699298295238025963374258724007825225131794832009443532841225990730547033055482315665358021885307507897624690897229495421936055096443558698379377463511824469747434101595066460957945821600692276670816421354276459444354875574470313003115687888068643079697229051751984239907897328752620208079497677992970872154217868452593236713353770845259494422227008782774708240193325843707091073097695317873873610663810979341816541769183698611638639487989691990783186305540133646793289232656857921012868528784738150704137813158268770743
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1592 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acceptatie-engie-energie.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amwalak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apply.gomastercard.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avivacanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bingomania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.branchetvous.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clearsky-data.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.conectys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.contentful.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.corefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.corsair.ci'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.corsair.gp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.corsair.mq'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.corsair.sn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.creditoycaucion.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dc4.pageuppeople.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deviceprotection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diajugoso123.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.directmobiles.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eddieandco.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ekeepergroup.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.epiduo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.epiduoforte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.evoqua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.evoquaadvantage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flipsies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hedgestonegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.incapsula-demo.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ivrapp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kp-mypg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lb.nestle-watersna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lulucrm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.madewithnestle.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maricopa.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mattelpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mxp.zamsh.incapsula.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mynvapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.net2phone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pin1111.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.iloan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scanner.spotoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.searchflowstaging.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simplybettertin.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sofn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stratton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test-engie-energie.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.travelport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tremblant.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vittel.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vtech.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.werally.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whitehousehistory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wrps.on.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wte.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youfi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acceptatie-engie-energie.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amwalak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bingomania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'branchetvous.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conectys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corsair.ci'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corsair.gp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corsair.mq'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corsair.sn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deviceprotection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diajugoso123.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directmobiles.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eddieandco.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epiduo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epiduoforte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evoquaadvantage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flipsies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hedgestonegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kp-mypg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madewithnestle.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'net2phone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pin1111.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'searchflowstaging.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplybettertin.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-engie-energie.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vtech.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'werally.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrps.on.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wte.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							50311bf7fad0f2f70859a69d6fd493d801b43842
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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