incapsula.com

- Incapsula Inc -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 07:d4:ea:45:01:06:7d:a6:f6:1b:5c:ae was issued on by GlobalSign nv-sa.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 07:d4:ea:45:01:06:7d:a6:f6:1b:5c:ae
Serial Number (int): 2423793649163934048995466414
Serial Number lenght: 91 bits, 12 octets

SubjectKeyId: e1:3d:a5:60:08:5b:87:4f:cf:d2:7c:77:85:f3:14:0d:a3:bb:d2:3a
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 30:a3:b8:ff:df:6e:c5:39:8b:e0:cc:26:66:04:98:0e:a2:4c:80:0d
Fingerprint (sha256): 06:86:08:75:ca:41:59:ec:3f:2c:07:c4:d4:b1:70:42:da:51:a0:26:68:bb:46:92:f0:eb:a3:5a:87:24:35:68

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate incapsula.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.1843magazine.com
*.a8hosting.com
*.abbott.com
*.aquaenviro.co.uk
*.aqualogy.com.au
*.arrowheaddelivery.com
*.avivainsurance.ca
*.becomeacanadian.org
*.bfessence.com.au
*.bofafa.cc
*.bofafa.net
*.crowdstrike.com
*.csgocrash.com
*.deverus.com
*.digital-coach.it
*.e-commautoparts.com.au
*.e-z.com.hk
*.empoweredautoparts.com.au
*.falconetix.com
*.fetranspor.com.br
*.fsastore.com
*.gerberlifefamily.com
*.gerberlifeguaranteed.com
*.gloucestershire.police.uk
*.homeaway.com.cn
*.idtexpress.com
*.iflr.com
*.iftae-file.com
*.imarkets360.com
*.latisscientific.co.uk
*.le989.com
*.meine-homematic.de
*.ncs-connect.io
*.nowprotected.com
*.o8o8o8o8.com
*.ok-sns.com
*.ok-vvip.com
*.patient.info
*.prymetymeentertainment.net
*.qa.one.chick-fil-adev.com
*.qtsenvironmental.com
*.recargasusacuba.com
*.remotecheck.cnb.com
*.republikakaktusa.pl
*.sentinelwater.co.uk
*.sitefinity1.hosting.nestle.com
*.sitefinity2.hosting.nestle.com
*.sitefinity3.hosting.nestle.com
*.sitefinity4.hosting.nestle.com
*.starwoodproperty.com
*.themdu.com
*.travelalberta.com
*.unitestudents.com
*.usoncology.com
*.vfacai.com
*.waf.bakerhill.com
1843magazine.com
aquaenviro.co.uk
aqualogy.com.au
bfessence.com.au
bofafa.cc
bofafa.net
crowdstrike.com
csgocrash.com
digital-coach.it
e-commautoparts.com.au
e-z.com.hk
empoweredautoparts.com.au
fsastore.com
gerberlifefamily.com
gerberlifeguaranteed.com
homeaway.com.cn
iflr.com
latisscientific.co.uk
le989.com
meine-homematic.de
nowprotected.com
o8o8o8o8.com
ok-sns.com
ok-vvip.com
prymetymeentertainment.net
qa.one.chick-fil-adev.com
qtsenvironmental.com
recargasusacuba.com
republikakaktusa.pl
sentinelwater.co.uk
sitefinity1.hosting.nestle.com
sitefinity2.hosting.nestle.com
sitefinity3.hosting.nestle.com
sitefinity4.hosting.nestle.com
unitestudents.com
usoncology.com
vfacai.com

Other certificates including the domain name incapsula.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2csc3/Q3ItHWulvIjAUh
fuUrGnvAyiRlrELdWmTfAmzXGJm8rCwAHPqgVUGoAvu+WwUlofknDrBVz8HLDbU5
VLb6nSglj+f2TCnoObsG0RrbDLK6aCxu+8rmlS69juTDL2QmB+Jnuh90kygPbQJl
N7B943m6zQ0tIRzABdp+fiG9bj2t5Rj1wc6Fd3QgEHPTXmI5FuLyD21j0EazEp+s
vVFzEQBSpp/I9R0Zp+DuLGHruNUFBnF28ApbPTaF7DVSpsCewwKrQpPULfA8hwOF
AM7dO9OMS/hM10Z2qrAPdxG9WFXZIsrUzRA2x62JPVPZfigrU+o6mWk+x7BhRVkO
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2423793649163934048995466414
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-16 19:29:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-04 12:33:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27493870828465286984666477650162848422043931292096527721831508850522947098607537771683654651271779386489910373566146043022858149638833300727657628950444594598716873764392497896497923141836153786710526741287162539488552654923510994194770226089193717456047492373361332858503306903400604612768382130639610917236186435296932305008462119701679975583856743023841620976896757471008759138485269786545927670115154423918834597913039562758929843584374819821904595004017826526542681064087800150304961871141188703086035953609477511373567391516508787250771523753361867373374200450905032961581854230778237587238364602098017002655297
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1912 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1843magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a8hosting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abbott.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aquaenviro.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aqualogy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arrowheaddelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avivainsurance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.becomeacanadian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bfessence.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bofafa.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bofafa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crowdstrike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.csgocrash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deverus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digital-coach.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-commautoparts.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-z.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.empoweredautoparts.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.falconetix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fetranspor.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fsastore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gerberlifefamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gerberlifeguaranteed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gloucestershire.police.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homeaway.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.idtexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iflr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iftae-file.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imarkets360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.latisscientific.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.le989.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meine-homematic.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ncs-connect.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nowprotected.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.o8o8o8o8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ok-sns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ok-vvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.patient.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prymetymeentertainment.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.one.chick-fil-adev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qtsenvironmental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.recargasusacuba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.remotecheck.cnb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.republikakaktusa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sentinelwater.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sitefinity1.hosting.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sitefinity2.hosting.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sitefinity3.hosting.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sitefinity4.hosting.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.starwoodproperty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themdu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.travelalberta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unitestudents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usoncology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vfacai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.waf.bakerhill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1843magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquaenviro.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqualogy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bfessence.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bofafa.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bofafa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crowdstrike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csgocrash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital-coach.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-commautoparts.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-z.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'empoweredautoparts.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsastore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gerberlifefamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gerberlifeguaranteed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeaway.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iflr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latisscientific.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'le989.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meine-homematic.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nowprotected.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'o8o8o8o8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ok-sns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ok-vvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prymetymeentertainment.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.one.chick-fil-adev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qtsenvironmental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recargasusacuba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'republikakaktusa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sentinelwater.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitefinity1.hosting.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitefinity2.hosting.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitefinity3.hosting.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitefinity4.hosting.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitestudents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usoncology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vfacai.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e13da560085b874fcfd27c7785f3140da3bbd23a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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