incapsula.com

- Incapsula Inc -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 67:8b:e0:94:dc:b3:43:66:8c:1e:fb:36 was issued on by GlobalSign nv-sa.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 67:8b:e0:94:dc:b3:43:66:8c:1e:fb:36
Serial Number (int): 32046057256638390060370033462
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 04:f1:0e:9a:c0:0f:be:a3:3c:2e:02:6a:c0:43:4a:37:fd:6c:08:56
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 07:18:28:46:50:93:5d:65:24:6a:f0:0f:b5:fd:5c:59:e4:1b:19:2c
Fingerprint (sha256): 01:70:5e:12:64:c0:9a:94:ed:ee:02:23:30:0c:fc:cc:26:ac:eb:d4:30:b2:5b:d7:12:c7:ce:e2:94:a2:44:7f

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate incapsula.com

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.10bet.ie
*.amecfw.com
*.atlantisbahamasappcms.com
*.burckhardtcompression.com
*.bwproducers.com
*.channelnewsasia.com
*.checedmissions.org
*.cic.es
*.dennys.com
*.divorcepartners.com
*.earthsbest.com
*.egi-next.co.uk
*.euromoneyapi.com
*.filmplatform.net
*.foremoststar.com
*.frontiersusa.org
*.glennbedingfield.com
*.greenwichpantry.com
*.halbertwealth.com
*.kahoot-qa.it
*.kariskits.com
*.laundromathoustontx.com
*.mainvan.us
*.mol-innov.com
*.myshuup.com
*.opss7.com
*.outdoorlook.co.uk
*.oxyhealthcanada.com
*.prod.nestlehealthscience.com.tr
*.purinacentroamerica.com
*.rentcentric.com
*.riocard.com
*.rootlabcatfood.com
*.rootlabdogfood.com
*.rootlabpetfood.com
*.secure-backend.com
*.sentinelintelgroup.com
*.sial.com
*.sphere.hacienda.gob.mx
*.sst.soitasia.com
*.termfinder.com
*.thetri.org
*.toyota.astra.co.id
*.tripseats.com
*.tw.apac.boservices.dolce-gusto.com
*.umusic.skyfencenet.com
*.vivo.casino
*.wellingtonfl.gov
10bet.ie
atlantisbahamasappcms.com
bwproducers.com
checedmissions.org
cic.es
dennys.com
divorcepartners.com
earthsbest.com
egi-next.co.uk
filmplatform.net
frontiersusa.org
glennbedingfield.com
greenwichpantry.com
halbertwealth.com
kariskits.com
laundromathoustontx.com
linelink.t-mobile.com
mainvan.us
mol-innov.com
myshuup.com
opss7.com
outdoorlook.co.uk
oxyhealthcanada.com
purinacentroamerica.com
rentcentric.com
rootlabcatfood.com
rootlabdogfood.com
rootlabpetfood.com
sentinelintelgroup.com
sphere.hacienda.gob.mx
sst.soitasia.com
st-my.gepower.com
st-powerplayinsights.gepower.com
st-prev-my.gepower.com
st-prev-powerplayinsights.gepower.com
termfinder.com
thetri.org
tripseats.com
vivo.casino

Other certificates including the domain name incapsula.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZzZnczq8qeNIqohNOms
JQeuwQ1JK1h5f7SZpKE7nAuAVgtPp2EJGIYR39b2R38HE5LsWJy1N44dTpwuWk+Z
euiy406TpAz6hZtuLfEGrh5u6mlH36ONClP42AOi4ChTPmD/DZtpbbMHmsBDlQxT
27GPTiSiX7fdTFD4tDkMeWoIFpG1Z8ow3oBvuHqfTaY87c9VYEONXDXpwcEm66VH
rfPlwpGYKE70bbfhZfE68KiEBXOQzj4pzmQ5uvGHTn6I3QIXzLw5KxMBubFpGNLs
6X0OB7tTa+b0vqYPi4e2fYgAvptRXEMhuDObnCvQ8tgAxgJtjDk4X/sdIdUhE2co
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 32046057256638390060370033462
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-10 09:13:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-08 11:07:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25451244947494329197917808918527203674739206486510218674214951953890953790822879602646619202721335816267295099199795668399617043368863912740321530248305714975553545472016309377674988478016949580158471532617449143834560423291620706301161836989748838164099762625178025939716356032215929148068241522415133053766236284036642153122973060829060918538251477969624201935693328837620332593744760609990433720108491743210700067767880828541771462364473450217556651394702430989977541453002548294909746940515055073853937482480013920065691044852520578629577782673075027853247350585494804045216107813376655440450298078746389604935793
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1738 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.10bet.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amecfw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atlantisbahamasappcms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.burckhardtcompression.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bwproducers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.channelnewsasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.checedmissions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cic.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dennys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.divorcepartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.earthsbest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.egi-next.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.euromoneyapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filmplatform.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foremoststar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frontiersusa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glennbedingfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenwichpantry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.halbertwealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kahoot-qa.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kariskits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laundromathoustontx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mainvan.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mol-innov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myshuup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.opss7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outdoorlook.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oxyhealthcanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.nestlehealthscience.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purinacentroamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rentcentric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.riocard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rootlabcatfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rootlabdogfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rootlabpetfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure-backend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sentinelintelgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sphere.hacienda.gob.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sst.soitasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.termfinder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thetri.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toyota.astra.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tripseats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tw.apac.boservices.dolce-gusto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.umusic.skyfencenet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vivo.casino'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wellingtonfl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '10bet.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlantisbahamasappcms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bwproducers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checedmissions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cic.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dennys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divorcepartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earthsbest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egi-next.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmplatform.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frontiersusa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glennbedingfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenwichpantry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halbertwealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kariskits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laundromathoustontx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linelink.t-mobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainvan.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mol-innov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myshuup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opss7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outdoorlook.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oxyhealthcanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purinacentroamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rentcentric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rootlabcatfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rootlabdogfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rootlabpetfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sentinelintelgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sphere.hacienda.gob.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sst.soitasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-my.gepower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-powerplayinsights.gepower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-prev-my.gepower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-prev-powerplayinsights.gepower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'termfinder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetri.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tripseats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivo.casino'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							04f10e9ac00fbea33c2e026ac0434a37fd6c0856
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004fed70895173ededcef19f9fdd2975e2c52c8cb13b33f0f49a8ac1a06d89f80b94197ce222c84bc03e189b0ee3fa5396494ba4fa3b1318ed9fa1770a6b018a98dc3e7b94f1d4e20962b79270edc121fc2960e717a299e085d5b69489c2f3083d67702bb20843ba4f137ebbb697378f9d0db786f75355068f74d3b945cbbe5e2c7ff86b63e95203b707eeeedbd2b56ca94937fa3036f7a2a272a37a591eb8dd6b924c9768a2c6d5c11ab6b66db36508c969dbbe3541a9b25602ae039d5f60c2d3a7cef1be8a3f046d6243700a602bb0f81bbef7a24cb3c91f2dab9a967d5886369aacc924a538a33216470283859fcab320de8f8907081435ae9b5dcf67be6c27