incapsula.com

- Incapsula Inc -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 62:c0:8b:bb:70:03:f7:16:41:3e:31:8a was issued on by GlobalSign nv-sa.

With 105 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 62:c0:8b:bb:70:03:f7:16:41:3e:31:8a
Serial Number (int): 30562304586411652833076982154
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 6b:1f:84:09:ba:d4:6a:f8:6a:4d:55:dc:40:d9:79:5c:bf:15:18:71
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 20:08:54:1d:15:76:ca:30:a4:d4:3d:5e:de:db:fc:d0:a7:31:96:56
Fingerprint (sha256): 07:de:a5:05:e4:e4:c4:d7:30:d7:72:c9:0e:c1:ae:f4:5c:cb:10:ac:5c:4a:f4:cf:c7:51:b0:39:de:71:64:5e

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate incapsula.com

105

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.70trades.net
*.acquapanna.com
*.alghanim.com
*.atacadao.com.br
*.bauhaus-restaurant.com
*.bidspotter.com
*.biglegalminds.com
*.bsp2012.iata.or.kr
*.cescomarketing.com
*.cgt.it
*.chc.org.sg
*.chick-fil-a.com
*.citynews.sg
*.cityradio.sg
*.coleccion.caixaforum.com
*.corporateaffairs.tv
*.cultivatenext.org
*.electronicthecorporatecounsel.com
*.exporters.mod.gov.il
*.financikatrade.ae
*.financikatrade.net
*.girona.cat
*.greennghetto.org
*.librerosdancestudio.com
*.meaganwarren.com
*.minsterlaw.co.uk
*.mishpahot-hantzaha.mod.gov.il
*.nestrovit.ch
*.nuimagespa.com
*.online.mod.gov.il
*.pascalapp.com
*.plateprep.com
*.pozuelodealarcon.es
*.qic.com
*.radcom.com
*.sec.state.vt.us
*.shikum.mod.gov.il
*.smartdnsproxy.com
*.soc.nri-secure.com
*.spotoption.com
*.starttalking.gr
*.stg.ingrammicrocloud.com
*.techdata.com.mx
*.thebingoaffiliates.com
*.trinityglobalmedia.com
*.trinityglobalmediagroup.com
*.wyethnutrition.com.sg
*.zft.incapsula.mobi
70trade.net
70trades.net
acquapanna.com
akliz.net
api.ding.com
bank-yahav.co.il
bauhaus-restaurant.com
bidspotter.com
biglegalminds.com
cgt.it
chc.org.sg
chick-fil-a.com
citynews.sg
cityradio.sg
coach.nationalexpress.com
coleccion.caixaforum.com
corporateaffairs.tv
cultivatenext.org
dealers.supportonline.co.il
directofficesupply.co.uk
electronicthecorporatecounsel.com
financikatrade.ae
financikatrade.net
girona.cat
greennghetto.org
librerosdancestudio.com
meaganwarren.com
myhome.chc.org.sg
myhosting.com
nestrovit.ch
nuimagespa.com
online.cab.jo
pascalapp.com
paxfood.com
plateprep.com
popintel.careoregon.org
portal.cbcsales.co.il
pozuelodealarcon.es
radcom.com
reservations.cherokeerafting.com
smartdnsproxy.com
supportonline.co.il
tech.supportonline.co.il
techdata.com.mx
*.70trade.net
thebingoaffiliates.com
trinityglobalmedia.com
trinityglobalmediagroup.com
web.pop-market.com
www.akliz.net
www.bank-yahav.co.il
www.directofficesupply.co.uk
www.myhosting.com
www.paxfood.com
www.supportonline.co.il
wyethnutrition.com.sg

Other certificates including the domain name incapsula.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3BwUpKrLjZsluQhKQEL
QWWltQ4QYJ+KdSr2jRF3UIF+3BWY5tbrgSF4sw/Pn7M+7qyHOAi2uTV0UQ1Z4Slv
7lOB8LgEtDhaHJd1fZsUDuPfmRY2KkFnkH0VecLRapRit7FJ3VR3KZWTsH8UhXNN
Khwjeov6yyou6yeCTxgs3RV4xyld4f0UtBHzc/fpHw4PfhqdODcnpYkV5vYewVbR
UNk9mVfPn9EqJ7AGlQybtCB/iJaqABTsq/aq4oOxGsvAgbSdz5XGhxtYeSVz1ptk
AcE+KdTazF+ZvnbvLzDtVg6gWDEfQJao3OgvAjzN3xkr7ES3xG1morKnqowrQWav
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 30562304586411652833076982154
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-01 12:32:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-06 09:56:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26186774746998330596308556395142345561451877595774443912012024344045969810836416444807336667132988610131505267905092667407682857995952797488906621071915837129869433202996016950048372990347018600140923400199034931260689270670541588089291849726094755527417668921181250467342814324797787427339930094163942811342004799708569161481136547172559346112410399592578427137063846170304917218871043264173097828584401181656603128620006806914221491996771094480400144848052524714727060576365977185350846729091684439910588366220794358564080821664828962055241563277315935470846532549302474642689615837565389328522165893494228652568353
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.70trades.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acquapanna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alghanim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atacadao.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bauhaus-restaurant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bidspotter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biglegalminds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bsp2012.iata.or.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cescomarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cgt.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chc.org.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chick-fil-a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.citynews.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cityradio.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coleccion.caixaforum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.corporateaffairs.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cultivatenext.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.electronicthecorporatecounsel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exporters.mod.gov.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.financikatrade.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.financikatrade.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.girona.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greennghetto.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.librerosdancestudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meaganwarren.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minsterlaw.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mishpahot-hantzaha.mod.gov.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestrovit.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nuimagespa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.online.mod.gov.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pascalapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plateprep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pozuelodealarcon.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.radcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shikum.mod.gov.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smartdnsproxy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soc.nri-secure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spotoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.starttalking.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg.ingrammicrocloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.techdata.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebingoaffiliates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trinityglobalmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trinityglobalmediagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wyethnutrition.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zft.incapsula.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '70trade.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '70trades.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquapanna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akliz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.ding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bank-yahav.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bauhaus-restaurant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bidspotter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biglegalminds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cgt.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chc.org.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chick-fil-a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citynews.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityradio.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coach.nationalexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coleccion.caixaforum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporateaffairs.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cultivatenext.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealers.supportonline.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directofficesupply.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electronicthecorporatecounsel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financikatrade.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financikatrade.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'girona.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greennghetto.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'librerosdancestudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meaganwarren.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhome.chc.org.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhosting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestrovit.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuimagespa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.cab.jo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pascalapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paxfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plateprep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'popintel.careoregon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.cbcsales.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pozuelodealarcon.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.cherokeerafting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartdnsproxy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportonline.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tech.supportonline.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techdata.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.70trade.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebingoaffiliates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trinityglobalmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trinityglobalmediagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.pop-market.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akliz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bank-yahav.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.directofficesupply.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myhosting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paxfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supportonline.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wyethnutrition.com.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6b1f8409bad46af86a4d55dc40d9795cbf151871
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000166cf42ebdc000004030047304502204d2c890605877fcfc8476f599e940cd192c56606d8f7ed8025ec429d0d22453a022100c9d59821dc4cc8248db0ca2684cb7b5830658a30a4b30c6b82399006feacc9b0007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000166cf42ed320000040300463044022021c3215ea9649d59cfb977dd1c6966c0dc693f3421c1756d2b497e8b21353a450220236dcf013da93fe7f02913afcf6f0772c8ffa87753c205cfb17814846cdb1802
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002b7066c6b946f1a5b54158ea1734190faf4f1ae770e86545ee6867fc2d4b90163d94c505a107570fc01db06d318f45e9601c478960c367e13f83a06c5e44e75a894d533fe40cc0f68233104e69b5c970df7e8ea2b9f94bd45002dcc67c78e4b33c6034ebc508f1ded8847e8830491c82970ea6782a432aceafd1d521247cd2db61c6da695f7e5fe686e810b741f6abbd107c7c1f01110a8865dfc95e8c5782f3469aacd2f02b5edf843b9de8f0a303c1400f6ef63c976d56ec33c4e2a6021e4f0093b921b756c25d0a8caf962c78b8800701e86d9237f35621bc8ed53e9d9048d026378852628ced90469039368f2a48bf913b77d9cd38f284653dfc932d7b22