incapsula.com

- Incapsula Inc -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 11:21:2c:69:78:2f:d0:88:b6:68:a4:24:26:90:59:bb:33:ba was issued on by GlobalSign nv-sa.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:2c:69:78:2f:d0:88:b6:68:a4:24:26:90:59:bb:33:ba
Serial Number (int): 1492197212608977258975932587792363771605946
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 61:97:35:03:6f:42:fa:2d:77:8f:e8:ff:b7:51:c9:43:f3:20:aa:0f
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): d7:b9:14:2a:26:c0:dd:12:22:f0:c9:75:c1:9c:d9:98:c3:b1:0e:22
Fingerprint (sha256): 01:7d:82:b0:93:48:b8:92:e6:5f:db:8f:40:a3:9b:5e:d2:98:bb:ad:27:b4:d9:1b:61:31:9c:93:2a:1f:6b:2b

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate incapsula.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.bienlinea.bi.com.gt
*.elitetrendhq.com
elitetrendhq.com
*.aipac.org
*.cdiscount.sn
*.copartimages.com
*.crosslandstudios.com
*.dolce-gusto.ca
*.dynamo-media.com
*.fr.chef-professional.com
*.ge-app.skyfencenet.com
*.infrastructureontario.ca
*.instants-gagnants.maggi.fr
*.kitkat.by
*.laviewater.com
*.melco-stickmaschine.com
*.natlib.govt.nz
*.spotoption.com
*.nestle-cereals.cz
*.nestle-cereals.ro
*.nestleprofessional.pk
*.nl.chef-professional.com
*.nwoprodstage1.com
*.nwoprodstage2.com
*.nwoprodstage3.com
*.nwoprodstage4.com
*.nwoprodstage5.com
takashimaya.com.sg
*.nwoprodstage8.com
*.passports.govt.nz
*.preprod-cdiscount-sn.net
*.purina.se
*.purinashelterchampions.com
*.purinaveterinarydiets.purina.co.uk
*.qa.trmms.net
*.redkings.co.uk
*.saintfelix.purina-felix.fr
*.securedesign.co.uk
*.smbsecurityguide.org
*.takashimaya.com.sg
*.teckcard.com
*.thevinylrevolution.com.au
*.toyota-europe.com
*.tritondigital.com
123soccerbrokers.com
beehive.govt.nz
bicsa.com
cdiscount.sn
crosslandstudios.com
helpoffer.net
instants-gagnants.maggi.fr
kitkat.by
laviewater.com
lms.wizlearn.com
melco-stickmaschine.com
natlib.govt.nz
nestle-cereals.cz
nestle-cereals.ro
*.123soccerbrokers.com
*.americansystems.com
*.beehive.govt.nz
*.bicsa.com
*.brightstar-2020.dk
*.purina.co.nz
nwoprodstage2.com
nwoprodstage3.com
nwoprodstage4.com
nwoprodstage5.com
nwoprodstage8.com
passports.govt.nz
preprod-cdiscount-sn.net
qa.trmms.net
redkings.co.uk
smbsecurityguide.org
teckcard.com
thevinylrevolution.com.au
www.getflix.com.au
nestleprofessional.pk
nwoprodstage1.com
purina.co.nz
*.abuelita.com.mx
abuelita.com.mx
*.at.emea.boservices.dolce-gusto.com
*.twintowns.com.au
*.transaero.ru
*.apps.nestle-cereals.pt
purinashelterchampions.com
*.helpoffer.net
*.sodastream.co.uk
sodastream.co.uk
getflix.com.au

Other certificates including the domain name incapsula.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWkCWU7vrr7wHNlJanoa
aULVxb7JUlzIDjcOmsVp/KWnFwqsXJ1DqYjMIy/FbxCseuO4uNKDiFfO7OH39axa
z41JbWbyJ0NcTMSJSIuVPQPUexEYGXYPpWFxjImAUG6FHEy3Gr8H9N76fYKMeF67
wblk42zAFdRWb6P04X80MtKBvNjaHaTCI9T+gtoB7KaNQB2pUSS02wCSd1ECspoz
58sfIMwPxGBLmNSTG2wfMJkJY0OgO+1qGtmgJ413biZfB0AM0CkyRIurzgXaJY2N
s4GMXnEG2gLcS59wPo+6amnFYKvK2Ntc7Cyf3fnpUEK7siVM6C3C2lPysRXSqCIV
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492197212608977258975932587792363771605946
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-27 04:21:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-16 10:57:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23910821592834404712137373793244801970006997182808843142045448615146743717119415223926206038053081363414817516392504771615048948833130216782797278733533514507639015325944683787546629469357985571795087944651994682339049637414445489724894337286479163110842876284569108651918998425647107734885636640758293227873572035424455289149545391083063040634593696116538917020292771559230098085474462163033004227520340851547000363601802396423278782959374455872631464615382659793680162462021130225268283099192144060816503035626068448235292825076038499980455860117913630471929065091499106908215217363754722985189695622448636047267231
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1901 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bienlinea.bi.com.gt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elitetrendhq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elitetrendhq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aipac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdiscount.sn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.copartimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crosslandstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dolce-gusto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dynamo-media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fr.chef-professional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ge-app.skyfencenet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infrastructureontario.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.instants-gagnants.maggi.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kitkat.by'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laviewater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.melco-stickmaschine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.natlib.govt.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spotoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestle-cereals.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestle-cereals.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestleprofessional.pk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nl.chef-professional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nwoprodstage1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nwoprodstage2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nwoprodstage3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nwoprodstage4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nwoprodstage5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takashimaya.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nwoprodstage8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.passports.govt.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preprod-cdiscount-sn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purina.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purinashelterchampions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purinaveterinarydiets.purina.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.trmms.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redkings.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saintfelix.purina-felix.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.securedesign.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smbsecurityguide.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.takashimaya.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teckcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thevinylrevolution.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toyota-europe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tritondigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '123soccerbrokers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beehive.govt.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdiscount.sn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crosslandstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpoffer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instants-gagnants.maggi.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitkat.by'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laviewater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lms.wizlearn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melco-stickmaschine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natlib.govt.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestle-cereals.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestle-cereals.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.123soccerbrokers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.americansystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beehive.govt.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bicsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brightstar-2020.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purina.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwoprodstage2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwoprodstage3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwoprodstage4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwoprodstage5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwoprodstage8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passports.govt.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-cdiscount-sn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.trmms.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redkings.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smbsecurityguide.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teckcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thevinylrevolution.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getflix.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestleprofessional.pk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwoprodstage1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purina.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abuelita.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abuelita.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.at.emea.boservices.dolce-gusto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twintowns.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.transaero.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apps.nestle-cereals.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purinashelterchampions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.helpoffer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sodastream.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sodastream.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getflix.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							619735036f42fa2d778fe8ffb751c943f320aa0f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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