incapsula.com

- Incapsula Inc -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 11:21:42:ba:86:fb:41:42:37:14:1d:50:24:93:ce:60:10:be was issued on by GlobalSign nv-sa.

With 83 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:42:ba:86:fb:41:42:37:14:1d:50:24:93:ce:60:10:be
Serial Number (int): 1492226876501002006467696082734250345894078
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 49:4f:24:b4:2d:b9:f7:de:6a:5a:39:ad:8c:f9:4c:85:25:3d:8c:5e
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): b7:c7:f5:c6:47:1a:d6:99:0d:ad:d4:35:ad:5a:9b:f3:58:b9:3a:b6
Fingerprint (sha256): 06:02:54:33:05:d5:11:02:f6:1c:4b:b3:9b:f0:dd:79:10:36:5f:43:70:e4:f9:e9:7e:81:6b:6b:4f:b2:14:a4

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate incapsula.com

83

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.acrolinx-hosted.com
*.allegiancewines.com.au
*.armstronginnercircle.com
*.belrewards.com
*.biggamehunt.net
*.binaryqa09.com
*.boatersdirect.com
*.chboston.org
*.cnhsa.com
*.coastalanglermag.com
*.completelegal.com
*.cookwithlove.co.za
*.dias.com.gr
*.enteroption.com
*.enterprise.ehiaws.com
*.friskies7.ca
*.gamestop.de
*.giffgaff.com
*.goldentouchofny.com
*.griffithrewardingexcellence.com
*.gympart.com
*.harpermoto.com
*.izzi.mx
*.lfdevelopment.com
*.liquid-option.com
*.marketing-up.com
*.missionalimentationdesanimauxfamiliers.ca
*.morganheritagemusic.com
*.myexoticescape.com
*.nescafe-atwork.be
*.nntfi.pl
*.nycairporter.com
*.o365.umusic.skyfencenet.com
*.oncoursesystems.com
*.orbisaccess.co.uk
*.pepperi.com
*.premierclub2015.com
*.prime-binary.com
*.primesource-select.com
*.prod.nestlehealthscience.se
*.prospectandvine.com
*.purelythoughtful.com
*.purina.lv
*.quality-health-care.com
*.sareb.skyfencenet.com
*.spotoption.com
*.stedfast.io
*.umusic.skyfencenet.com
*.wyzowl.com
abcsecurity.ca
allegiancewines.com.au
armstronginnercircle.com
belrewards.com
biggamehunt.net
boatersdirect.com
coastalanglermag.com
completelegal.com
cookwithlove.co.za
friskies7.ca
gamestop.de
giffgaff.com
griffithrewardingexcellence.com
gympart.com
harpermoto.com
izzi.mx
lfdevelopment.com
marketing-up.com
missionalimentationdesanimauxfamiliers.ca
morganheritagemusic.com
myexoticescape.com
nescafe-atwork.be
nntfi.pl
orbisaccess.co.uk
premierclub2015.com
prime-binary.com
primesource-select.com
prospectandvine.com
purelythoughtful.com
purina.lv
quality-health-care.com
stedfast.io
wyzowl.com

Other certificates including the domain name incapsula.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6phtM5Cl3ZNPbPUsVvx9
3uPZ7mLTbVakG5UwGmqsD2l5oyV/V7PY/SAXvb+ezHgXMx7fqlJAYbJtoB8X5yqa
BSAEZolEkllxQnuho/1HVMdLrl+7oH3KH3kiA/IRllo9QnwOWOGnm7nL246cMACt
ABpTSlKRbbP5ojdXXLPnQg0BIV8kXc2GsXyHe5r0ixDEz7bOQJPCkht3cn8tJBln
41boz95y6y2rdcLUJk1kSIG9sn9xC1tGO43yv/poBVCInleo1/hYObRvv4xiDtzJ
nYX5W6ZWBVNHwiZ6Oo6PwbxtAjBRQnDr5LeTLpRuTnNHcGceUfdko4PM9wivnQ0h
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492226876501002006467696082734250345894078
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-22 13:03:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-01 08:59:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29614927704186395220560506845698355413363370463214600605241426874053629641400593803050573063299491563930079980797606035840343785139311339404466981409975320042157955261448720159150441786770280246052140507761720569279751487005370982756867347272709883148998174599556207501871341349289003438052806799902001954111204076037093843272224092278841294292407411643982522694840530696573313246071347029305038366256845914116988164243645375301362096267164188908244934790872208415791154582379145938408525143814808948750170410232101153242352530220977690595283757919894383703302485441565582641859988141102317204787073956428101173715361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1691 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acrolinx-hosted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allegiancewines.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.armstronginnercircle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.belrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biggamehunt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.binaryqa09.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boatersdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chboston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cnhsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coastalanglermag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.completelegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cookwithlove.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dias.com.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enteroption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enterprise.ehiaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.friskies7.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gamestop.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.giffgaff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goldentouchofny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.griffithrewardingexcellence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gympart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harpermoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.izzi.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lfdevelopment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liquid-option.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marketing-up.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.missionalimentationdesanimauxfamiliers.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.morganheritagemusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myexoticescape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nescafe-atwork.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nntfi.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nycairporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.o365.umusic.skyfencenet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oncoursesystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orbisaccess.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pepperi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.premierclub2015.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prime-binary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.primesource-select.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.nestlehealthscience.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prospectandvine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purelythoughtful.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purina.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quality-health-care.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sareb.skyfencenet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spotoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stedfast.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.umusic.skyfencenet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wyzowl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abcsecurity.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allegiancewines.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'armstronginnercircle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biggamehunt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boatersdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coastalanglermag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'completelegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cookwithlove.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friskies7.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamestop.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giffgaff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'griffithrewardingexcellence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gympart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harpermoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'izzi.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lfdevelopment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing-up.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missionalimentationdesanimauxfamiliers.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morganheritagemusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myexoticescape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nescafe-atwork.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nntfi.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orbisaccess.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premierclub2015.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prime-binary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primesource-select.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prospectandvine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purelythoughtful.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purina.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quality-health-care.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stedfast.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wyzowl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							494f24b42db9f7de6a5a39ad8cf94c85253d8c5e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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