incapsula.com

- Incapsula Inc -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 11:21:c6:de:de:b1:fa:19:53:ec:a2:4e:14:7a:0d:17:04:26 was issued on by GlobalSign nv-sa.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:c6:de:de:b1:fa:19:53:ec:a2:4e:14:7a:0d:17:04:26
Serial Number (int): 1492402523298178889009084134647054602798118
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 07:77:95:77:49:f9:9f:53:ae:3e:95:c7:6f:38:84:b8:df:68:b5:ce
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): db:4b:5c:68:e8:e5:07:fa:75:74:6d:b0:f8:43:71:30:5b:80:e8:b5
Fingerprint (sha256): 00:95:27:4f:9f:d0:0f:a8:29:89:95:82:68:22:71:ef:b6:89:7e:d1:41:58:9b:9e:70:ba:93:5b:5c:89:29:d2

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate incapsula.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.aardstore.com
*.acorn.ltd.uk
*.aims.gov.au
*.altaineapps.com
*.brooklynpubliclibrary.org
*.bstr.emea.brightstarcorp.com
*.bvmalls.com
*.ciutatdelaigua.es
*.colorfulimages.com
*.currentcatalog.com
*.digitalstores.co.uk
*.directv.com.ec
*.directv.com.pe
*.directvcaribbean.com
*.ebsi.com
*.emelisande.com
*.greatofferstore.com
*.gruffaloshop.com
*.just-eat.com
*.langfordrussell.co.uk
*.leonalewismusic.com
*.lillianvernon.com
*.lovoo.net
*.musicvaultz.com
*.mutebank.co.uk
*.mybreak.kitkat.ru
*.nowmusicstore.com
*.ohwondermusic.com
*.onedirectionstore.com
*.peterrabbitstore.co.uk
*.petshopboysshop.co.uk
*.planningcenteronline.com
*.precor.com
*.precorconnect.com
*.puppyapp.proplan.com.ar
*.queenonlinestore.com
*.recordstore.co.uk
*.sentormss.com
*.showtix4u.com
*.sinfinimusic.com
*.spandauballetstore.com
*.spotoption.com
*.teeshirtstore.com
*.theartofmccartney.com
*.thebeatlesonline.ca
*.thebeatlesonline.co.uk
*.umusicdirect.com
*.universalmusic.com
*.us.spotoption.com
*.virginemi.com
*.ymcmbstore.co.uk
*.zoosk.com
aardstore.com
acorn.ltd.uk
bvmalls.com
ciutatdelaigua.es
colorfulimages.com
currentcatalog.com
digitalstores.co.uk
directv.com.ec
directv.com.pe
directvcaribbean.com
ebsi.com
emelisande.com
greatofferstore.com
gruffaloshop.com
just-eat.com
langfordrussell.co.uk
leonalewismusic.com
lillianvernon.com
musicvaultz.com
mutebank.co.uk
nowmusicstore.com
ohwondermusic.com
onedirectionstore.com
peterrabbitstore.co.uk
petshopboysshop.co.uk
precor.com
precorconnect.com
queenonlinestore.com
recordstore.co.uk
sentormss.com
showtix4u.com
sinfinimusic.com
spandauballetstore.com
teeshirtstore.com
theartofmccartney.com
thebeatlesonline.ca
thebeatlesonline.co.uk
umusicdirect.com
universalmusic.com
virginemi.com
ymcmbstore.co.uk

Other certificates including the domain name incapsula.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWYSwiEWcLPYluSkgOqR
hKDtXYDpr884NRHdJ1rCbkO7xBBs1u60ZW6bCdYijS+1qRiITNcIV0QacgEiBc4A
ciI0SYLX8kw3OgViToZMXwQ0zGFj1mTTNp77dvII28YLIWHA9Jd1GLjQEAdkIz39
nfSxel3fc3zgTIyDkoQy8uBggUJmqbB2PcR5t5/0qsW96jaFHvIu/TGnCpdRjsCJ
ph4pn405OL+SFSXvWkVOlpLSVkVkZnf3OE4+2Kp5s9gLEtG60ndjzQL2eFWngryX
ky4vQz0rdD2TKOk1ONwbNql5ZfrpbbY55eOmXimPDPViKIkPreb/vzC0X6ywP7Kk
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492402523298178889009084134647054602798118
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-16 13:48:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-25 14:09:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22394514186717343854509060295846804184686683148523570521262664043151784202766880599701189034968456299590839276492698291703849963187757064876934893443220777562719485811366375113028215198478908284938469149975035220192058863398526162234904337870930840417588980750320976142262180230669625851675829655064266532765360899876193604225642601068272294283676409424964055248828653818097566599359221939905950062649365038275453457796037630900806582546013994042036729575352790113845626423645812309437619281448315692582706978075372050611469371773213894779820509236245100264464027665172244333535649278306434557370527008946355818374301
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1859 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aardstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acorn.ltd.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aims.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altaineapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brooklynpubliclibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bstr.emea.brightstarcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bvmalls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ciutatdelaigua.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.colorfulimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.currentcatalog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digitalstores.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.directv.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.directv.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.directvcaribbean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebsi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emelisande.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greatofferstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gruffaloshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.just-eat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.langfordrussell.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leonalewismusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lillianvernon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lovoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.musicvaultz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mutebank.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mybreak.kitkat.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nowmusicstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ohwondermusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onedirectionstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peterrabbitstore.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.petshopboysshop.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.planningcenteronline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.precor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.precorconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.puppyapp.proplan.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.queenonlinestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.recordstore.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sentormss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.showtix4u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sinfinimusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spandauballetstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spotoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teeshirtstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theartofmccartney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebeatlesonline.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebeatlesonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.umusicdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.universalmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us.spotoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.virginemi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ymcmbstore.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zoosk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aardstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acorn.ltd.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bvmalls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciutatdelaigua.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colorfulimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'currentcatalog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalstores.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directv.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directv.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directvcaribbean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebsi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emelisande.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatofferstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gruffaloshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'just-eat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'langfordrussell.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leonalewismusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lillianvernon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musicvaultz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mutebank.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nowmusicstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohwondermusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onedirectionstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peterrabbitstore.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petshopboysshop.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'precor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'precorconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queenonlinestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recordstore.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sentormss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showtix4u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sinfinimusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spandauballetstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teeshirtstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theartofmccartney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebeatlesonline.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebeatlesonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umusicdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virginemi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ymcmbstore.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0777957749f99f53ae3e95c76f3884b8df68b5ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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