incapsula.com

- Incapsula Inc -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 37:89:69:8c:21:1b:34:ba:4b:f9:a2:3b was issued on by GlobalSign nv-sa.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 37:89:69:8c:21:1b:34:ba:4b:f9:a2:3b
Serial Number (int): 17187796810871613011248390715
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 34:13:ae:a1:94:65:39:88:39:11:22:af:36:c1:6e:b0:44:d5:78:16
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 32:0d:c9:ee:a8:6a:61:e2:bc:e0:fa:8a:b4:85:8b:e5:ea:83:d7:ca
Fingerprint (sha256): 02:6b:d0:bf:18:b8:6d:10:ee:57:9b:ed:cf:0a:f9:17:e7:56:e3:b1:86:c0:28:93:97:90:9c:d8:6e:00:43:14

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate incapsula.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.acces.y-cap.net
*.anam.cl
*.aqualogybs.net
*.capita-sims.co.uk
*.cls-group.com
*.cts-cubic.com
*.davigel.pt
*.ecoriles.cl
*.feim.com
*.gestionyservicios.cl
*.iseek.com
*.nextworth.com
*.one.chick-fil-a.com
*.professionalplastics.com
*.reillyswines.com.au
*.ucasenvironments.com
DigitalVault.cls-group.com
IOSwaps.cls-group.com
TestVaultAdmin.cls-group.com
VaultAdmin.cls-group.com
acces.y-cap.net
afiliados.colsubsidio.com
agora.corteconti.it
altima.co.jp
altima.jp
anam.cl
api.myupward.org
at.special-t.com
avioaerocloud.com
avs.imperva.com
be.special-t.com
billing.purevpn.com
birdseyeview.feim.com
capita-sims.co.uk
cft.4thebank.com
ch.special-t.com
client.hoteltravelagent.net
cls-group.com
css.4thebank.com
davigel.pt
de.special-t.com
dolce-gusto.co.nz
domos.corteconti.it
dtu.levelupgames.ph
eduserv.org.uk
elsena.co.jp
eoi.elections.nsw.gov.au
fabricguru.com
feim.com
fsaqa.tams.com
gestionyservicios.cl
iosdownloadtest.cls-group.com
iseek.com
lrs.4thebank.com
lu.special-t.com
myemail.tams.com
nl.special-t.com
paperworks.icfwarranty.com
preprod.babynes.com
preprod.boservices.babynes.com
puntroma.com
purevpn.com
reillyswines.com.au
reporting.cls-group.com
reportingtest.cls-group.com
rnttestreports.nationaltheatre.org.uk
scm.cls-group.com
social.olympic.org
stars.tams.com
store-test74.soa.org
store.firsttuesday.us
stuartweitzman.com
support.locked.com
tc.t-mobile.com
testsite.e-paycapita.com
ucasenvironments.com
usiauto.cls-group.com
usiautotest.cls-group.com
usimanual.cls-group.com
usimanualtest.cls-group.com
waypoint.imperva.com
www.altima.co.jp
www.altima.jp
www.avioaerocloud.com
www.bebe.nestle.fr
www.dolce-gusto.co.nz
www.eduserv.org.uk
www.elsena.co.jp
www.fabricguru.com
www.iseek.com
www.puntroma.com
www.purevpn.com
www.stuartweitzman.com
www1.macnica.net

Other certificates including the domain name incapsula.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMGjCCCwKgAwIBAgIMN4lpjCEbNLpL+aI7MA0GCSqGSIb3DQEBCwUAMFcxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS0wKwYDVQQDEyRH
bG9iYWxTaWduIENsb3VkU1NMIENBIC0gU0hBMjU2IC0gRzMwHhcNMTYwNDAzMTEz
OTQzWhcNMTcwNDA0MTEzOTQzWjBgMQswCQYDVQQGEwJVUzERMA8GA1UECBMIRGVs
YXdhcmUxDjAMBgNVBAcTBURvdmVyMRYwFAYDVQQKEw1JbmNhcHN1bGEgSW5jMRYw
FAYDVQQDEw1pbmNhcHN1bGEuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA21Ch055tbXeCQum6K3Bz5dGLGm/tSVoI+uGK7rjXGDOFGGWK70lXi3i5
JyEzQQr5/NdjR9Yr5k6x0iIUYMneAbtLZg5OuQrtSbJ2aqMmjs5afvBqCp2LEKIN
phe04HHaCGHxT4XPekYummUwfI6MqqZveVB9VPSuaEoo9QOJm1Q9yoLxVq54BoQL
HDIDbAoBEpsoG0n8HVTIGpPM67KhytRIz58rS3GVj38Z1QJfzpvtDMvgy3CaatMa
dJV9a/S/NFRoqLenvrQLVaPkmz9Vxk1Vj9Vah9+USA8GbBab9FngNkG56L2LJC05
X+aEyWGrlhfT1bK6LGi1KPq46JeVpwIDAQABo4II2zCCCNcwDgYDVR0PAQH/BAQD
AgWgMIGKBggrBgEFBQcBAQR+MHwwQgYIKwYBBQUHMAKGNmh0dHA6Ly9zZWN1cmUu
Z2xvYmFsc2lnbi5jb20vY2FjZXJ0L2Nsb3Vkc3Nsc2hhMmczLmNydDA2BggrBgEF
BQcwAYYqaHR0cDovL29jc3AyLmdsb2JhbHNpZ24uY29tL2Nsb3Vkc3Nsc2hhMmcz
MFYGA1UdIARPME0wQQYJKwYBBAGgMgEUMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8v
d3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMAgGBmeBDAECAjAJBgNVHRME
AjAAMIIHdAYDVR0RBIIHazCCB2eCDWluY2Fwc3VsYS5jb22CESouYWNjZXMueS1j
YXAubmV0ggkqLmFuYW0uY2yCECouYXF1YWxvZ3licy5uZXSCEyouY2FwaXRhLXNp
bXMuY28udWuCDyouY2xzLWdyb3VwLmNvbYIPKi5jdHMtY3ViaWMuY29tggwqLmRh
dmlnZWwucHSCDSouZWNvcmlsZXMuY2yCCiouZmVpbS5jb22CFiouZ2VzdGlvbnlz
ZXJ2aWNpb3MuY2yCCyouaXNlZWsuY29tgg8qLm5leHR3b3J0aC5jb22CFSoub25l
LmNoaWNrLWZpbC1hLmNvbYIaKi5wcm9mZXNzaW9uYWxwbGFzdGljcy5jb22CFSou
cmVpbGx5c3dpbmVzLmNvbS5hdYIWKi51Y2FzZW52aXJvbm1lbnRzLmNvbYIaRGln
aXRhbFZhdWx0LmNscy1ncm91cC5jb22CFUlPU3dhcHMuY2xzLWdyb3VwLmNvbYIc
VGVzdFZhdWx0QWRtaW4uY2xzLWdyb3VwLmNvbYIYVmF1bHRBZG1pbi5jbHMtZ3Jv
dXAuY29tgg9hY2Nlcy55LWNhcC5uZXSCGWFmaWxpYWRvcy5jb2xzdWJzaWRpby5j
b22CE2Fnb3JhLmNvcnRlY29udGkuaXSCDGFsdGltYS5jby5qcIIJYWx0aW1hLmpw
ggdhbmFtLmNsghBhcGkubXl1cHdhcmQub3JnghBhdC5zcGVjaWFsLXQuY29tghFh
dmlvYWVyb2Nsb3VkLmNvbYIPYXZzLmltcGVydmEuY29tghBiZS5zcGVjaWFsLXQu
Y29tghNiaWxsaW5nLnB1cmV2cG4uY29tghViaXJkc2V5ZXZpZXcuZmVpbS5jb22C
EWNhcGl0YS1zaW1zLmNvLnVrghBjZnQuNHRoZWJhbmsuY29tghBjaC5zcGVjaWFs
LXQuY29tghtjbGllbnQuaG90ZWx0cmF2ZWxhZ2VudC5uZXSCDWNscy1ncm91cC5j
b22CEGNzcy40dGhlYmFuay5jb22CCmRhdmlnZWwucHSCEGRlLnNwZWNpYWwtdC5j
b22CEWRvbGNlLWd1c3RvLmNvLm56ghNkb21vcy5jb3J0ZWNvbnRpLml0ghNkdHUu
bGV2ZWx1cGdhbWVzLnBogg5lZHVzZXJ2Lm9yZy51a4IMZWxzZW5hLmNvLmpwghhl
b2kuZWxlY3Rpb25zLm5zdy5nb3YuYXWCDmZhYnJpY2d1cnUuY29tgghmZWltLmNv
bYIOZnNhcWEudGFtcy5jb22CFGdlc3Rpb255c2VydmljaW9zLmNsgh1pb3Nkb3du
bG9hZHRlc3QuY2xzLWdyb3VwLmNvbYIJaXNlZWsuY29tghBscnMuNHRoZWJhbmsu
Y29tghBsdS5zcGVjaWFsLXQuY29tghBteWVtYWlsLnRhbXMuY29tghBubC5zcGVj
aWFsLXQuY29tghpwYXBlcndvcmtzLmljZndhcnJhbnR5LmNvbYITcHJlcHJvZC5i
YWJ5bmVzLmNvbYIecHJlcHJvZC5ib3NlcnZpY2VzLmJhYnluZXMuY29tggxwdW50
cm9tYS5jb22CC3B1cmV2cG4uY29tghNyZWlsbHlzd2luZXMuY29tLmF1ghdyZXBv
cnRpbmcuY2xzLWdyb3VwLmNvbYIbcmVwb3J0aW5ndGVzdC5jbHMtZ3JvdXAuY29t
giVybnR0ZXN0cmVwb3J0cy5uYXRpb25hbHRoZWF0cmUub3JnLnVrghFzY20uY2xz
LWdyb3VwLmNvbYISc29jaWFsLm9seW1waWMub3Jngg5zdGFycy50YW1zLmNvbYIU
c3RvcmUtdGVzdDc0LnNvYS5vcmeCFXN0b3JlLmZpcnN0dHVlc2RheS51c4ISc3R1
YXJ0d2VpdHptYW4uY29tghJzdXBwb3J0LmxvY2tlZC5jb22CD3RjLnQtbW9iaWxl
LmNvbYIYdGVzdHNpdGUuZS1wYXljYXBpdGEuY29tghR1Y2FzZW52aXJvbm1lbnRz
LmNvbYIVdXNpYXV0by5jbHMtZ3JvdXAuY29tghl1c2lhdXRvdGVzdC5jbHMtZ3Jv
dXAuY29tghd1c2ltYW51YWwuY2xzLWdyb3VwLmNvbYIbdXNpbWFudWFsdGVzdC5j
bHMtZ3JvdXAuY29tghR3YXlwb2ludC5pbXBlcnZhLmNvbYIQd3d3LmFsdGltYS5j
by5qcIINd3d3LmFsdGltYS5qcIIVd3d3LmF2aW9hZXJvY2xvdWQuY29tghJ3d3cu
YmViZS5uZXN0bGUuZnKCFXd3dy5kb2xjZS1ndXN0by5jby5ueoISd3d3LmVkdXNl
cnYub3JnLnVrghB3d3cuZWxzZW5hLmNvLmpwghJ3d3cuZmFicmljZ3VydS5jb22C
DXd3dy5pc2Vlay5jb22CEHd3dy5wdW50cm9tYS5jb22CD3d3dy5wdXJldnBuLmNv
bYIWd3d3LnN0dWFydHdlaXR6bWFuLmNvbYIQd3d3MS5tYWNuaWNhLm5ldDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHQYDVR0OBBYEFDQTrqGUZTmIOREi
rzbBbrBE1XgWMB8GA1UdIwQYMBaAFKkrh+HOJEc7G7/PhTcCVZ0NlFjmMA0GCSqG
SIb3DQEBCwUAA4IBAQBmTJHKAD3YgzkxdjTvyBXda771zx9mgbbrA4swt87QIgrN
M/FaYrYyEAdnfbRHjWJ83OuCGWTOPyOCr49s528ZMS2ZfzJmtD40sTybCLCA5g3+
XwNBlWf46VDvr5qr5nh9EdrCzoHanozavvHj9IjO021jM2Azr0HF7rrqh2NrhgB0
X9Z1zYnMvntoafYnCiV5wB8TaSuvOVRUG1gKwGrumwN7siHEW2mLUeHMoE3ChVad
BVlFJFlFFygr2+Ko0WZAVh82GQq/+tSu/NcUpMOdJYuAyymPZdT5VvXap8+2ulqd
MoJ2MPP9SxQmAAMSkoWhChFMOuIhAW+m2SstVjDb
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21Ch055tbXeCQum6K3Bz
5dGLGm/tSVoI+uGK7rjXGDOFGGWK70lXi3i5JyEzQQr5/NdjR9Yr5k6x0iIUYMne
AbtLZg5OuQrtSbJ2aqMmjs5afvBqCp2LEKINphe04HHaCGHxT4XPekYummUwfI6M
qqZveVB9VPSuaEoo9QOJm1Q9yoLxVq54BoQLHDIDbAoBEpsoG0n8HVTIGpPM67Kh
ytRIz58rS3GVj38Z1QJfzpvtDMvgy3CaatMadJV9a/S/NFRoqLenvrQLVaPkmz9V
xk1Vj9Vah9+USA8GbBab9FngNkG56L2LJC05X+aEyWGrlhfT1bK6LGi1KPq46JeV
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17187796810871613011248390715
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-03 11:39:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-04 11:39:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27685949975401802457793695031821176086867665196631691940239375193140956029097681256493075318370230724317048875330834128568539980693429098256629411888805637059363380120477956797914348829731958091674810321974013006911746115505258869326655260500206587022407468818640311128278426262136423185177759333630046960061450326053346052782266497264816495413046149535511536060116612873024832236503437462582872713478221547200881133997430370744624400004728802639713552446114097422838287708378916610045476335054547964885748401584385857115421995775080513351730110014693162744857969099499430568945792260896727024297612399418934138738087
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1899 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acces.y-cap.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anam.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aqualogybs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capita-sims.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cls-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cts-cubic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.davigel.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecoriles.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.feim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gestionyservicios.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iseek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nextworth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.one.chick-fil-a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.professionalplastics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reillyswines.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ucasenvironments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DigitalVault.cls-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'IOSwaps.cls-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'TestVaultAdmin.cls-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'VaultAdmin.cls-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acces.y-cap.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afiliados.colsubsidio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agora.corteconti.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altima.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altima.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anam.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.myupward.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'at.special-t.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avioaerocloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avs.imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be.special-t.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billing.purevpn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birdseyeview.feim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capita-sims.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cft.4thebank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ch.special-t.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.hoteltravelagent.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cls-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'css.4thebank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davigel.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de.special-t.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dolce-gusto.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domos.corteconti.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dtu.levelupgames.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eduserv.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elsena.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eoi.elections.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabricguru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsaqa.tams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gestionyservicios.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iosdownloadtest.cls-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iseek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lrs.4thebank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lu.special-t.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myemail.tams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nl.special-t.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paperworks.icfwarranty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.babynes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.boservices.babynes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puntroma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purevpn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reillyswines.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reporting.cls-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reportingtest.cls-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rnttestreports.nationaltheatre.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scm.cls-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'social.olympic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stars.tams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store-test74.soa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.firsttuesday.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stuartweitzman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.locked.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tc.t-mobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testsite.e-paycapita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucasenvironments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usiauto.cls-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usiautotest.cls-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usimanual.cls-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usimanualtest.cls-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waypoint.imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altima.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altima.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avioaerocloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bebe.nestle.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eduserv.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elsena.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fabricguru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iseek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.puntroma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.purevpn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stuartweitzman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.macnica.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3413aea194653988391122af36c16eb044d57816
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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