incapsula.com

- Incapsula Inc -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 29:f9:88:f6:43:9a:25:e0:9c:12:43:c3 was issued on by GlobalSign nv-sa.

With 107 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 29:f9:88:f6:43:9a:25:e0:9c:12:43:c3
Serial Number (int): 12990554716371150480092578755
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 29:eb:bc:81:1d:ac:79:86:0b:07:cb:64:ea:27:43:aa:43:8c:f1:83
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): da:ff:5e:a2:30:a6:96:dd:61:7c:ea:21:16:79:aa:34:9e:a9:f6:f5
Fingerprint (sha256): 05:4c:b4:95:e4:55:60:6f:6c:21:16:7c:00:4e:54:4b:da:eb:fc:68:54:ef:d4:cf:a9:df:8b:33:88:de:3d:37

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate incapsula.com

107

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.48kopeek.ru
*.allezvipcasino.com
*.api.olo.com
*.bakersdogfood.co.uk
*.beafarmersagent.com
*.blackdiamondcasino.net
*.carbydoctor.com.au
*.carflexi.com
*.cerelac.com.ve
*.chocolatory.nestle.jp
*.cipicinke.rs
*.clubsuncity.com
*.conectorapp.com.ve
*.cumberland.co.uk
*.da-direkt.de
*.da-tarif.de
*.dadirekt-kooperationen.de
*.dallasarboretum.org
*.easy.co.il
*.friskies.co.id
*.gallaghersupport.info
*.gerberlifeagent.com
*.get-wrecked.com
*.goeco.co.il
*.grandluxevip.com
*.greatcall.com
*.gsx.com
*.hurriclear.com
*.idetan.net
*.kohnkesown.co.uk
*.lastmenandovermen.com
*.le-nest.ch
*.linq.nasdaq.com
*.makeuplifelove.com
*.modamik.com
*.monavipcasino.com
*.moveelderswithease.com
*.mygpracing.com
*.myheritageimages.com
*.navandgen.co.uk
*.nestle.com.ec
*.parasparstaging.com
*.perrier.jp
*.piraeusbank.rs
*.powerschool.com
*.prod.spotoption.com
*.purina.sk
*.redrocktribune.com
*.rics.org
*.salix.com
*.secure.monsanto.com.cn
*.semptcl.com.br
*.spartanslots.com
*.supply.com
*.thedccenter.org
*.torchyn.ua
*.toyota-europe.com
*.us.esecuritel.com
*.uxns.com.mx
*.workfirstcasualty.com
*.zogsports.com
*.zurichcommercial.co.uk
48kopeek.ru
allezvipcasino.com
beafarmersagent.com
blackdiamondcasino.net
carbydoctor.com.au
carflexi.com
cerelac.com.ve
cipicinke.rs
clubsuncity.com
conectorapp.com.ve
cumberland.co.uk
da-direkt.de
da-tarif.de
dadirekt-kooperationen.de
easy.co.il
friskies.co.id
gallaghersupport.info
geek-guy.com
gerberlifeagent.com
goeco.co.il
grandluxevip.com
greatcall.com
hurriclear.com
idetan.net
kohnkesown.co.uk
lastmenandovermen.com
le-nest.ch
linq.nasdaq.com
makeuplifelove.com
monavipcasino.com
moveelderswithease.com
mygpracing.com
nestle.com.ec
piraeusbank.rs
purina.sk
redrocktribune.com
rics.org
salix.com
semptcl.com.br
spartanslots.com
supply.com
thedccenter.org
torchyn.ua
zogsports.com

Other certificates including the domain name incapsula.com

(limited to 100 certificates)
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
statuspage.io
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gCfFxXryUzhMvkJz/Qw
1RQz1SGJSScK1UByetAC5iE79WmT8ichHCUmCdpoyAaAGSd6i1GVKCi6k/kLvsua
UndekNQqgChSwfXwA1HwM0whd8C6UBVddpfYMbsJDrinQctFXICEM3jMFNnKCRQK
eD4PJ4PyZTbOj/EwYHZlp1L/m6yFZR+9LEiS99RCWimYO7OaX21rg2EcsNHwS8sJ
xR1x9D9j1uWJ7FezouNxKUt/2M0+VKD6bleDi8lJMM5C4CDqMYJUQD6YmzA7nFTM
kTl4eBlH7kDGO+LRHhmnHG97vFZFRdb2u6AprE5y/RC+OUPB7nt8BiWEGra9clKu
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12990554716371150480092578755
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-29 04:12:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-18 17:28:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29035116588641810457298378012415764385729892909071114354921570842424932119189326094884280323154331285317362630805758496595469917899513628116334917077329135173062181361266790301921185116688450251261921205203842341811423520181189371391338913858300653109279458917929021172775878057023341705730181048150070812285155972934110061789670469212678678924529691403578656581112464333335273333144749195406020850579866951731699692493275531099200836998200489631871377333334960603187636908174707170299414716836040532476069996793371780345856407254781279654746546064248264980961802281796049238327417347438318001469028793094337016802839
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1944 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.48kopeek.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allezvipcasino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.olo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bakersdogfood.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beafarmersagent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blackdiamondcasino.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carbydoctor.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carflexi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cerelac.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chocolatory.nestle.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cipicinke.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clubsuncity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.conectorapp.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cumberland.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.da-direkt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.da-tarif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dadirekt-kooperationen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dallasarboretum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easy.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.friskies.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gallaghersupport.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gerberlifeagent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.get-wrecked.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goeco.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grandluxevip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greatcall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gsx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hurriclear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.idetan.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kohnkesown.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lastmenandovermen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.le-nest.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.linq.nasdaq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.makeuplifelove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.modamik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.monavipcasino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moveelderswithease.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mygpracing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myheritageimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.navandgen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestle.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parasparstaging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perrier.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.piraeusbank.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.spotoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purina.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redrocktribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.salix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.monsanto.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.semptcl.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spartanslots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thedccenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torchyn.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toyota-europe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us.esecuritel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uxns.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.workfirstcasualty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zogsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurichcommercial.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '48kopeek.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allezvipcasino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beafarmersagent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackdiamondcasino.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carbydoctor.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carflexi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cerelac.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cipicinke.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubsuncity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conectorapp.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cumberland.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'da-direkt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'da-tarif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dadirekt-kooperationen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easy.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friskies.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gallaghersupport.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geek-guy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gerberlifeagent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goeco.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandluxevip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatcall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hurriclear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idetan.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kohnkesown.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lastmenandovermen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'le-nest.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linq.nasdaq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makeuplifelove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monavipcasino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moveelderswithease.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygpracing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestle.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piraeusbank.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purina.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redrocktribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'semptcl.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spartanslots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thedccenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torchyn.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zogsports.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							29ebbc811dac79860b07cb64ea2743aa438cf183
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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