incapsula.com

- Incapsula Inc -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 11:21:56:80:45:9e:a5:a3:78:f3:30:a7:df:b5:2e:88:b4:f5 was issued on by GlobalSign nv-sa.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:56:80:45:9e:a5:a3:78:f3:30:a7:df:b5:2e:88:b4:f5
Serial Number (int): 1492253158582006132491822019383126246601973
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 61:97:35:03:6f:42:fa:2d:77:8f:e8:ff:b7:51:c9:43:f3:20:aa:0f
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 15:33:be:86:e2:67:5b:33:b0:4c:a8:89:a4:89:49:02:2f:a7:6a:07
Fingerprint (sha256): 01:1c:76:4e:fc:29:4b:9c:ae:d0:26:a2:cf:dc:b2:45:cc:49:15:1e:4b:1a:a3:07:e7:96:62:a4:07:2f:a6:e5

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate incapsula.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.123soccerbrokers.com
*.abertistelecom.com
*.aipac.org
*.anyquestions.co.nz
*.apps.nestle-cereals.pt
*.at.emea.boservices.dolce-gusto.com
*.beehive.govt.nz
*.bicsa.com
*.bienlinea.bi.com.gt
*.brightstar-2020.dk
*.cdiscount.sn
*.copartimages.com
*.crosslandstudios.com
*.djmarks.com
*.dolce-gusto.ca
*.dolce-gusto.com.co
*.dolce-gusto.com.hn
*.dynamo-media.com
*.fr.chef-professional.com
*.ge-app.skyfencenet.com
*.getflix.com.au
*.h2omopx5.ca
*.helpoffer.net
*.independentbank.com
*.infrastructureontario.ca
*.instants-gagnants.maggi.fr
*.kitkat.by
*.laviewater.com
*.manhattanslots.com
*.melco-stickmaschine.com
*.natlib.govt.nz
*.nestle-cereals.ro
*.nestlelagisihat.com.my
*.nestleprofessional.pk
*.nl.chef-professional.com
*.nwoprodstage1.com
*.nwoprodstage2.com
*.nwoprodstage3.com
*.nwoprodstage4.com
*.nwoprodstage5.com
*.nwoprodstage8.com
*.passports.govt.nz
*.preprod-cdiscount-sn.net
*.purina.co.nz
*.purinashelterchampions.com
*.purinaveterinarydiets.purina.co.uk
*.qa.trmms.net
*.redkings.co.uk
*.smbsecurityguide.org
*.sodastream.co.uk
*.spotoption.com
*.takashimaya.com.sg
*.toyota-europe.com
*.transaero.ru
*.tritondigital.com
*.twintowns.com.au
*.twtsoftware.net
123soccerbrokers.com
anyquestions.co.nz
beehive.govt.nz
bicsa.com
cdiscount.sn
crosslandstudios.com
djmarks.com
dolce-gusto.com.co
getflix.com.au
h2omopx5.ca
helpoffer.net
instants-gagnants.maggi.fr
kitkat.by
laviewater.com
lms.wizlearn.com
melco-stickmaschine.com
natlib.govt.nz
nestle-cereals.ro
nestlelagisihat.com.my
nestleprofessional.pk
nwoprodstage1.com
nwoprodstage2.com
nwoprodstage3.com
nwoprodstage4.com
nwoprodstage5.com
nwoprodstage8.com
passports.govt.nz
preprod-cdiscount-sn.net
purina.co.nz
purinashelterchampions.com
qa.trmms.net
redkings.co.uk
smbsecurityguide.org
sodastream.co.uk
takashimaya.com.sg
twtsoftware.net

Other certificates including the domain name incapsula.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWkCWU7vrr7wHNlJanoa
aULVxb7JUlzIDjcOmsVp/KWnFwqsXJ1DqYjMIy/FbxCseuO4uNKDiFfO7OH39axa
z41JbWbyJ0NcTMSJSIuVPQPUexEYGXYPpWFxjImAUG6FHEy3Gr8H9N76fYKMeF67
wblk42zAFdRWb6P04X80MtKBvNjaHaTCI9T+gtoB7KaNQB2pUSS02wCSd1ECspoz
58sfIMwPxGBLmNSTG2wfMJkJY0OgO+1qGtmgJ413biZfB0AM0CkyRIurzgXaJY2N
s4GMXnEG2gLcS59wPo+6amnFYKvK2Ntc7Cyf3fnpUEK7siVM6C3C2lPysRXSqCIV
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492253158582006132491822019383126246601973
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-08-29 02:17:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-16 10:57:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23910821592834404712137373793244801970006997182808843142045448615146743717119415223926206038053081363414817516392504771615048948833130216782797278733533514507639015325944683787546629469357985571795087944651994682339049637414445489724894337286479163110842876284569108651918998425647107734885636640758293227873572035424455289149545391083063040634593696116538917020292771559230098085474462163033004227520340851547000363601802396423278782959374455872631464615382659793680162462021130225268283099192144060816503035626068448235292825076038499980455860117913630471929065091499106908215217363754722985189695622448636047267231
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1926 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.123soccerbrokers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abertistelecom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aipac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anyquestions.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apps.nestle-cereals.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.at.emea.boservices.dolce-gusto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beehive.govt.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bicsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bienlinea.bi.com.gt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brightstar-2020.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdiscount.sn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.copartimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crosslandstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.djmarks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dolce-gusto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dolce-gusto.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dolce-gusto.com.hn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dynamo-media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fr.chef-professional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ge-app.skyfencenet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getflix.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.h2omopx5.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.helpoffer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.independentbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infrastructureontario.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.instants-gagnants.maggi.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kitkat.by'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laviewater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manhattanslots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.melco-stickmaschine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.natlib.govt.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestle-cereals.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestlelagisihat.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestleprofessional.pk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nl.chef-professional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nwoprodstage1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nwoprodstage2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nwoprodstage3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nwoprodstage4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nwoprodstage5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nwoprodstage8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.passports.govt.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preprod-cdiscount-sn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purina.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purinashelterchampions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purinaveterinarydiets.purina.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.trmms.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redkings.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smbsecurityguide.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sodastream.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spotoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.takashimaya.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toyota-europe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.transaero.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tritondigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twintowns.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twtsoftware.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '123soccerbrokers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anyquestions.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beehive.govt.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdiscount.sn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crosslandstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'djmarks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dolce-gusto.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getflix.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'h2omopx5.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpoffer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instants-gagnants.maggi.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitkat.by'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laviewater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lms.wizlearn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melco-stickmaschine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natlib.govt.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestle-cereals.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestlelagisihat.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestleprofessional.pk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwoprodstage1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwoprodstage2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwoprodstage3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwoprodstage4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwoprodstage5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwoprodstage8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passports.govt.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-cdiscount-sn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purina.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purinashelterchampions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.trmms.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redkings.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smbsecurityguide.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sodastream.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takashimaya.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twtsoftware.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							619735036f42fa2d778fe8ffb751c943f320aa0f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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