incapsula.com

- Incapsula Inc -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 57:3f:5e:d2:85:8e:c5:51:c1:0f:0d:5c was issued on by GlobalSign nv-sa.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 57:3f:5e:d2:85:8e:c5:51:c1:0f:0d:5c
Serial Number (int): 27001805966982234251377708380
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 44:37:b0:39:68:be:2f:27:d3:da:37:ae:19:22:e6:27:4f:88:35:e7
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 32:03:01:7e:79:fe:13:9a:70:80:22:5b:6a:cf:31:c0:54:12:55:4b
Fingerprint (sha256): 01:5e:04:0a:17:f8:73:b4:a2:c8:a5:34:13:d1:9f:ca:47:5b:58:2e:f7:d1:1d:69:ae:01:1f:99:65:7f:cc:33

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate incapsula.com

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.adventist.org
*.angelikafilmcenter.com
*.apps.sical.pt
*.awakeningthroughmindfulness.com
*.backup-van.com
*.bagsoflove.nl
*.bakersdogfood.co.uk
*.bestsmartdns.com
*.bluetooth.com
*.bynogame.com
*.c-sirt.org
*.chboston.org
*.conservatoires.apply.support.ucas.com
*.consolidatedtheatres.com
*.customerportal.mckesson.com
*.equotube.it
*.eros-usa.com
*.hoselink.com
*.improvethatprice.com
*.incarom.ch
*.instron.com
*.kitkat.co.nz
*.leerink.com
*.maggi.recipepro.nestleprofessional.com
*.marquiseclub.se
*.milo.com.my
*.mobilemattress.com.au
*.musik.dk
*.ncstage.incapsula.mobi
*.nest.lu
*.nestlecriancassaudaveis.pt
*.ngpvan.com
*.purina.nestle-family.com
*.readingcinemas.co.nz
*.recipepro.nestleprofessional.com
*.reporthq.nasdaq.com
*.ru.digicamere.it
*.simplymedical.com
*.skinny.co.nz
*.spotoption.com
*.tritondigital.net
*.uat.quicktrax.com
*.w88178.com
*.yamahapartsandaccessories.com
*.yestobuy.com.au
adventist.org
angelikafilmcenter.com
api.fortycloud.net
awakeningthroughmindfulness.com
backup-van.com
bagsoflove.nl
bakersdogfood.co.uk
bestsmartdns.com
binglee.com.au
bluetooth.com
bynogame.com
c-sirt.org
conservatoires.apply.support.ucas.com
consolidatedtheatres.com
equotube.it
eros-usa.com
events.cpdumanitoba.ca
hoselink.com
improvethatprice.com
incarom.ch
marquiseclub.se
milo.com.my
mobilemattress.com.au
myaccount.iphoneunlockservice.info
nest.lu
nestlecriancassaudaveis.pt
notfindingout.com
panel.teckcard.com
pay24.co.il
qat10.api.t-mobile.com
readingcinemas.co.nz
resellers.iphoneunlockservice.info
ro.nescafe.com
simplymedical.com
skinny.co.nz
synchronicity.org
valetparkingsoftware.com
w88178.com
www.binglee.com.au
www.notfindingout.com
www.pay24.co.il
www.synchronicity.org
yamahapartsandaccessories.com
yestobuy.com.au

Other certificates including the domain name incapsula.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvcFaNuYTSVqoBiqPK8s
Z99D8Hze8OGJiAdvM6Bf5RX5FtU7XS8Cj4HriA/5wfErD8qe3hHr2oWKI/V8V7/S
su4O7dQncqVgq7Z71vMsOwcP5KTtOOptlWdADrKwv1khS+HF9ZJLSoUx6EZRnl6F
wtq/maAM7W0oImcU5X2781gHxglqJ9tcMdDXtCi9tBOU4bcEy8/og8PLR/xmd55f
/gCShTDvgVTACpcl/k92Mrr3JbRQzPz7j+j0SF3yTtKUZpep7ABnLRi01xo4jeoO
+EUkMw5DEcaFbWD2cUmFbE2ZBuDJcuYIdLD5nXgW9GH5PspFJQWgeYzXk9w11qFk
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 27001805966982234251377708380
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-20 23:16:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-27 09:33:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22592228943724721679636773403160404463325458400927578642229230279511388191600217874607460512738178538177390807916878077617443424324910851526302681040278513636369275179982346464910752834924275457014821962049855217768866238927502159970304877014753658154798350474075445630102986493161848836784068966683246908934006583211784870104375411899396654751335621694029070699808998885548696909685227870063767284756526720264388427372184778955410142952076807603704815015890845580424382760988497362616253875059316006475409289900843108543545261435610837225331000165789855688190841470497677889598075434865735736308167777848129161880649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1854 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adventist.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.angelikafilmcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apps.sical.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.awakeningthroughmindfulness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.backup-van.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bagsoflove.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bakersdogfood.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestsmartdns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bluetooth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bynogame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.c-sirt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chboston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.conservatoires.apply.support.ucas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.consolidatedtheatres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.customerportal.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.equotube.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eros-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoselink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.improvethatprice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.incarom.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.instron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kitkat.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leerink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maggi.recipepro.nestleprofessional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marquiseclub.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.milo.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mobilemattress.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.musik.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ncstage.incapsula.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nest.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestlecriancassaudaveis.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ngpvan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purina.nestle-family.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.readingcinemas.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.recipepro.nestleprofessional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reporthq.nasdaq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ru.digicamere.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simplymedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skinny.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spotoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tritondigital.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.quicktrax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.w88178.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yamahapartsandaccessories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yestobuy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adventist.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angelikafilmcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.fortycloud.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awakeningthroughmindfulness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backup-van.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bagsoflove.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakersdogfood.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestsmartdns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'binglee.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluetooth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bynogame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c-sirt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conservatoires.apply.support.ucas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consolidatedtheatres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equotube.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eros-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.cpdumanitoba.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoselink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'improvethatprice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incarom.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marquiseclub.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milo.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilemattress.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaccount.iphoneunlockservice.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nest.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestlecriancassaudaveis.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notfindingout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panel.teckcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pay24.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qat10.api.t-mobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readingcinemas.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resellers.iphoneunlockservice.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ro.nescafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplymedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skinny.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synchronicity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valetparkingsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w88178.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.binglee.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.notfindingout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pay24.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.synchronicity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yamahapartsandaccessories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yestobuy.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4437b03968be2f27d3da37ae1922e6274f8835e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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