incapsula.com

- Incapsula Inc -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 11:21:12:8c:c1:e1:14:15:a8:d9:e2:e6:d5:1b:43:69:46:37 was issued on by GlobalSign nv-sa.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:12:8c:c1:e1:14:15:a8:d9:e2:e6:d5:1b:43:69:46:37
Serial Number (int): 1492162835906137091603975285549734451299895
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 77:bd:0f:a5:90:92:d4:5b:48:43:9f:db:f9:34:97:76:30:27:8c:dd
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 95:ed:d1:62:ea:ea:07:2c:de:12:46:e0:47:6f:2d:5f:d1:50:6f:0e
Fingerprint (sha256): 00:da:e6:fa:3e:b1:49:02:29:c9:16:80:f2:d1:31:c6:4a:b0:17:37:79:f9:73:83:88:4a:ad:ab:4b:82:07:e9

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate incapsula.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.altaineapps.com
*.autoeurope.de
*.bioreliance.com
*.blog.dolce-gusto.ua
*.brothsserveddaily.com
*.bzoptions.com
*.cailler.com
*.caldrea.com
*.carecatalog.purina.eu
*.caresharing.com
*.carswithheart.com
*.cebddostesting.co.uk
*.ceragon.com
*.cityofny.org
*.clearcreekrental.com
*.crazywinner.co
*.ddd003.net
*.deepeddymerch.com
*.dolce-gusto.hu
*.dolce-gusto.ua
*.domesticbin.com
*.gemeinsam-fuer-gesuendere-kinder.ch
*.getpregnantandshine.com
*.glamour.de
*.gq-magazin.de
*.insieme-per-bambini-sani.ch
*.internap.com
*.jojo.pl
*.kpmg.ie
*.lalechera.com.co
*.linksnappy.com
*.military1.com
*.mrsmeyers.com
*.murata.com.hk
*.nankidoptipro.com.ph
*.nestle-family.com
*.nestleprofessional.fr
*.optiprogram.pl
*.realremit.com
*.sites.silverstripe.com
*.techdata.com
*.thetrueoption.com
*.toyota.ee
*.travelleaders.com
*.unis-pour-la-sante-des-enfants.ch
*.vcccd.edu
*.vtechda.com
*.xn--aino-jtel-02aa3t.fi
*.xn--classic-jtel-ocba7y.fi
autoeurope.de
brothsserveddaily.com
bzoptions.com
cailler.com
caldrea.com
caresharing.com
carswithheart.com
cebddostesting.co.uk
ceragon.com
clearcreekrental.com
crazywinner.co
ddd003.net
deepeddymerch.com
dolce-gusto.hu
dolce-gusto.ua
domesticbin.com
gemeinsam-fuer-gesuendere-kinder.ch
getpregnantandshine.com
glamour.de
gq-magazin.de
insieme-per-bambini-sani.ch
internap.com
jojo.pl
kpmg.ie
military1.com
mrsmeyers.com
nankidoptipro.com.ph
nestle-family.com
nestleprofessional.fr
optiprogram.pl
recruiting.msnhealth.com
recruitingtrain.msnhealth.com
rss.maximtest.com
rss1.maxhealth.com
staffing.msnhealth.com
staffingtrain.msnhealth.com
techdata.com
thetrueoption.com
toyota.ee
tss.maxhealth.com
tss.maximtest.com
unis-pour-la-sante-des-enfants.ch
vtechda.com
xn--aino-jtel-02aa3t.fi
xn--classic-jtel-ocba7y.fi

Other certificates including the domain name incapsula.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJcYcS8YPtZRh2m1aeVg
tlHx2HXbtz/4IgWDGNaam2nxMewrbFDeIP9cKGFW5VDj5eea5F5N3JvIBHmzh+ZU
zGfezuTx+cUcWxAaN1Sp4XGMoO5vj4igN859+ph4+OnnvpQyVSvSk+1KQCtndZcg
ibpo43IpTD2gzFvzEgAbxth0ht1IzjnP24thAH0oGh3Hy52VRzs/FKaC9MJhhhw/
RCEIXlYrb6tJU/ysIp/kFHcYMmBNaB7N+LBx300wGg8dSw01UYaVGiE6gF/+P3xi
NEE3xhG/AWhhgSWOR+D+7xtBMXi98YbtskS7zaqo6TIphNyfnssNjcot8LiCzFUa
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492162835906137091603975285549734451299895
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-19 05:12:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-10 09:42:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24817215730030531858378509766165125165689811900493760959561685236229438600484581950016969990323592802488208272632504152253406390636364155780673621672936273295970565874526822231258975804025625589231370326995121019811988750260467897776693163510939250363179459700464155158199987249180373097897171110296446450953123147884932158789522097786439855506763966761130318236582567562414397427155517955495581586089422097326422298670656424031783270561167349064276299579937773701156243404504490366765129540801405649743322689768140326101657365364830944922998334575011513509171250292226279803638774313119205192150790835633988989950469
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1860 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altaineapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autoeurope.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bioreliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blog.dolce-gusto.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brothsserveddaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bzoptions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cailler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caldrea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carecatalog.purina.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caresharing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carswithheart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cebddostesting.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ceragon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cityofny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clearcreekrental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crazywinner.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ddd003.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deepeddymerch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dolce-gusto.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dolce-gusto.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.domesticbin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gemeinsam-fuer-gesuendere-kinder.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getpregnantandshine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glamour.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gq-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insieme-per-bambini-sani.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jojo.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kpmg.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lalechera.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.linksnappy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.military1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mrsmeyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.murata.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nankidoptipro.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestle-family.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestleprofessional.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.optiprogram.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realremit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sites.silverstripe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.techdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thetrueoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toyota.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.travelleaders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unis-pour-la-sante-des-enfants.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vcccd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vtechda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--aino-jtel-02aa3t.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--classic-jtel-ocba7y.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoeurope.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brothsserveddaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bzoptions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cailler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caldrea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caresharing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carswithheart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cebddostesting.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceragon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clearcreekrental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crazywinner.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ddd003.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deepeddymerch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dolce-gusto.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dolce-gusto.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domesticbin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gemeinsam-fuer-gesuendere-kinder.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getpregnantandshine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glamour.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gq-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insieme-per-bambini-sani.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jojo.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpmg.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'military1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrsmeyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nankidoptipro.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestle-family.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestleprofessional.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optiprogram.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recruiting.msnhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recruitingtrain.msnhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rss.maximtest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rss1.maxhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staffing.msnhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staffingtrain.msnhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetrueoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toyota.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tss.maxhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tss.maximtest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unis-pour-la-sante-des-enfants.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vtechda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--aino-jtel-02aa3t.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--classic-jtel-ocba7y.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							77bd0fa59092d45b48439fdbf934977630278cdd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a9df4f26dc935e255b6ccbcbfb2d2f66dc41364360900b7101e324a2fd33deef73040e00ddf764a19259d0d1cb5e80a8b9620746ff0a202a11605e8da2c40fe79ecf32b7885158d721b3a526e4fab916d6ea483fa4259834941690c775b19ba829edd6a1b22297e12306551a540678f9e5f2d6a56463beb6305386b16ae9791abf0ba055e827cf424bc975b3ffc97d7748619aeaf6ae53263165a607491a9115f015f23606f4ebdfaa660f09af297b1f6f499e9d4d0dfb433ac7428ef0d560106792ca5ee2ddb8dbfb8c92514b986fa8ae536c9a5697ff793005d1f950d406f0a38657c1c809b8678c759e058eb5412f25302f667013e04cda7a9558a5368689