incapsula.com

- Incapsula Inc -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 2f:f9:03:18:87:7c:f6:fe:69:36:cf:1c was issued on by GlobalSign nv-sa.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 2f:f9:03:18:87:7c:f6:fe:69:36:cf:1c
Serial Number (int): 14846832610271516937311145756
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 07:77:95:77:49:f9:9f:53:ae:3e:95:c7:6f:38:84:b8:df:68:b5:ce
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 28:dc:82:ca:d2:be:3a:9a:d8:cd:7e:6e:8a:f0:39:0e:8c:87:ac:91
Fingerprint (sha256): 09:d4:d9:b9:42:b7:d2:4c:2c:a2:fd:92:c3:a3:c7:98:1d:74:53:77:88:58:e0:f5:e6:a3:69:21:23:5f:a9:d0

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate incapsula.com

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.aardstore.com
*.acorn.ltd.uk
*.aims.gov.au
*.altaineapps.com
*.brooklynpubliclibrary.org
*.canaccordgenuity.com.au
*.ciutatdelaigua.es
*.clinipace.com
*.digitalstores.co.uk
*.directv.com.ec
*.directv.com.pe
*.directvcaribbean.com
*.ebsi.com
*.emelisande.com
*.fleetcard.com.au
*.glcindex.com
*.gruffaloshop.com
*.hub.purina.bg
*.ibaoptions.com
*.just-eat.com
*.key-downloader.com
*.khmb.ru
*.langfordrussell.co.uk
*.lionpromo.com.ua
*.mapleroyals.com
*.montbleuresort.com
*.musicvaultz.com
*.mutebank.co.uk
*.mybreak.kitkat.ru
*.nowmusicstore.com
*.oifcoman.com
*.onedirectionstore.com
*.pelephonecloudit.co.il
*.peterrabbitstore.co.uk
*.petshopboysshop.co.uk
*.precor.com
*.precorconnect.com
*.puppyapp.proplan.com.ar
*.queenonlinestore.com
*.recordstore.co.uk
*.reservationarea.com
*.serenapro.com
*.showtix4u.com
*.spandauballetstore.com
*.startgrid.com
*.teeshirtstore.com
*.terracebearings.com
*.theartofmccartney.com
*.thebeatlesonline.co.uk
*.umusicdirect.com
*.universalmusic.com
*.virginemi.com
*.zoosk.com
aardstore.com
acorn.ltd.uk
ciutatdelaigua.es
clinipace.com
digitalstores.co.uk
directv.com.ec
directv.com.pe
directvcaribbean.com
ebsi.com
emelisande.com
gruffaloshop.com
ibaoptions.com
just-eat.com
khmb.ru
langfordrussell.co.uk
lionpromo.com.ua
mapleroyals.com
musicvaultz.com
mutebank.co.uk
nowmusicstore.com
oifcoman.com
onedirectionstore.com
peterrabbitstore.co.uk
petshopboysshop.co.uk
precor.com
precorconnect.com
queenonlinestore.com
recordstore.co.uk
reservationarea.com
serenapro.com
showtix4u.com
spandauballetstore.com
teeshirtstore.com
terracebearings.com
theartofmccartney.com
thebeatlesonline.co.uk
umusicdirect.com
universalmusic.com
virginemi.com

Other certificates including the domain name incapsula.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWYSwiEWcLPYluSkgOqR
hKDtXYDpr884NRHdJ1rCbkO7xBBs1u60ZW6bCdYijS+1qRiITNcIV0QacgEiBc4A
ciI0SYLX8kw3OgViToZMXwQ0zGFj1mTTNp77dvII28YLIWHA9Jd1GLjQEAdkIz39
nfSxel3fc3zgTIyDkoQy8uBggUJmqbB2PcR5t5/0qsW96jaFHvIu/TGnCpdRjsCJ
ph4pn405OL+SFSXvWkVOlpLSVkVkZnf3OE4+2Kp5s9gLEtG60ndjzQL2eFWngryX
ky4vQz0rdD2TKOk1ONwbNql5ZfrpbbY55eOmXimPDPViKIkPreb/vzC0X6ywP7Kk
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14846832610271516937311145756
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-09 01:24:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-06 08:40:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22394514186717343854509060295846804184686683148523570521262664043151784202766880599701189034968456299590839276492698291703849963187757064876934893443220777562719485811366375113028215198478908284938469149975035220192058863398526162234904337870930840417588980750320976142262180230669625851675829655064266532765360899876193604225642601068272294283676409424964055248828653818097566599359221939905950062649365038275453457796037630900806582546013994042036729575352790113845626423645812309437619281448315692582706978075372050611469371773213894779820509236245100264464027665172244333535649278306434557370527008946355818374301
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1792 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aardstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acorn.ltd.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aims.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altaineapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brooklynpubliclibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canaccordgenuity.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ciutatdelaigua.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clinipace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digitalstores.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.directv.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.directv.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.directvcaribbean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebsi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emelisande.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fleetcard.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glcindex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gruffaloshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hub.purina.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibaoptions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.just-eat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.key-downloader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.khmb.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.langfordrussell.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lionpromo.com.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mapleroyals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.montbleuresort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.musicvaultz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mutebank.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mybreak.kitkat.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nowmusicstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oifcoman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onedirectionstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pelephonecloudit.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peterrabbitstore.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.petshopboysshop.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.precor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.precorconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.puppyapp.proplan.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.queenonlinestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.recordstore.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reservationarea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.serenapro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.showtix4u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spandauballetstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.startgrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teeshirtstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.terracebearings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theartofmccartney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebeatlesonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.umusicdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.universalmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.virginemi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zoosk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aardstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acorn.ltd.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciutatdelaigua.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinipace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalstores.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directv.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directv.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directvcaribbean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebsi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emelisande.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gruffaloshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibaoptions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'just-eat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khmb.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'langfordrussell.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lionpromo.com.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapleroyals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musicvaultz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mutebank.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nowmusicstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oifcoman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onedirectionstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peterrabbitstore.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petshopboysshop.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'precor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'precorconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queenonlinestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recordstore.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservationarea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serenapro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showtix4u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spandauballetstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teeshirtstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terracebearings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theartofmccartney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebeatlesonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umusicdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virginemi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0777957749f99f53ae3e95c76f3884b8df68b5ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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