incapsula.com

- Incapsula Inc -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 6d:ba:d6:9b:4e:89:cf:b4:52:5b:31:48 was issued on by GlobalSign nv-sa.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 6d:ba:d6:9b:4e:89:cf:b4:52:5b:31:48
Serial Number (int): 33959739724306881826703225160
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 0c:65:87:ff:45:4e:11:2f:02:49:f0:38:e3:43:04:26:39:e9:99:d0
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): db:b5:10:2b:5a:59:67:ff:19:77:e2:6e:2c:73:2b:57:33:5b:39:a9
Fingerprint (sha256): 0a:eb:22:4e:aa:e8:f3:76:6d:22:dc:12:53:68:dc:1c:eb:31:6b:e9:47:c9:54:21:13:58:81:02:a9:c4:95:13

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate incapsula.com

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.aec-energy.net
*.akl.zamsh.incapsula.mobi
*.alwaysfreeit.com
*.baugarantie.zurich.ch
*.benelux.zurich.com
*.black-whole.org
*.bonitohollow.com
*.bonnfinanz-vertrieb.de
*.chpc.care
*.clekstaffing.com
*.cocoatrait.com
*.coffee.nescafe-cwa.com
*.datechpoweredestore.com
*.digilite.ca
*.dolce-gusto.com.vn
*.ecoservice24.de
*.esophaccess.com
*.fortrade.com
*.greenscribble.com.au
*.groupo.com
*.gruppohera.it
*.hentai-paradise.fr
*.hndigital.cloud
*.jpf.go.jp
*.lgbt.travimp.com
*.lifeanddisabilityplans.com
*.lindberghinsurance.com
*.loumidis.gr
*.maklernetz.at
*.maklerweb.de
*.mygerberlife.com
*.myzurich.com
*.nacatexas.com
*.nationalexpress.com
*.nestlehealthscience.sk
*.newstart.com
*.nordic.zurich.com
*.northernbcmining.com
*.optiv.com
*.paddlelogic.com
*.skeeterboats.com
*.tritondigital.net
*.yamahaboats.com
*.yamahagolfcar.com
*.yamahaprecisionagriculture.com
*.yamahawaverunners.com
*.zioinfosite.com
*.zurich-esp.es
*.zurich.lu
*.zurichinternational.com
*.zurichspain.com
aec-energy.net
alwaysfreeit.com
black-whole.org
bonitohollow.com
bonnfinanz-vertrieb.de
chpc.care
clekstaffing.com
cocoatrait.com
datechpoweredestore.com
digilite.ca
dolce-gusto.com.vn
esophaccess.com
greenscribble.com.au
hentai-paradise.fr
jpf.go.jp
lindberghinsurance.com
loumidis.gr
lrsbookings.tfl.gov.uk
maklernetz.at
maklerweb.de
mobility.gruppohera.it
mygerberlife.com
myzurich.com
nacatexas.com
nestlehealthscience.sk
newstart.com
northernbcmining.com
optiv.com
paddlelogic.com
skeeterboats.com
yamahaboats.com
yamahagolfcar.com
yamahaprecisionagriculture.com
yamahawaverunners.com
zioinfosite.com
zurich.lu
zurichinternational.com

Other certificates including the domain name incapsula.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBZy1Fpx1utvxI/XSdXn
c9e8+6ginhu8zkJwAiCTL7bAFekTdbNJvsZkShmBws6pHPFtYmQwaMnN8ktMInNY
xVyQV3Mu7eY0l+9OyxmjWd8JvsyAA6EAc6K6rH7TrRObZMihQHMheWP/tUlBontu
R6obhCQEkOKNK/y5aTt02KieCK0BJ9GrIW0yDFnbShBlwvrBCJkdRTlmmidcmNCG
cHNgkO7M8iP7L903ef/RbL8BBhfEuPYnZdOZCp6KTAs3ukfHLelPSRSJKp82rYcy
hh6d2+eP2sN0tdh6VyImWN8I3NjJVpEgHIn8MNUyVeXYcErpXVuFnQHsXq7uMUrE
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 33959739724306881826703225160
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-09 13:21:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-16 16:10:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22229011467966286022698219265359151247858307365865202619432793566246921435837561462191145711598825234513960138400335781568393197198712494638545081842331143102616582061842700992770840919498988169411969146585600773576058113890258958030544358428724346091987962925756343847597887187285887294131020881374540091107430587399929255369950336527744313703009629294747719098825425984252633265077666134078170674292869371865015275805482969680955129418028623331419535067430111787460916708879030870689582015990586878649813070719546721783955730443729382981467069191659326153930753582464278645791016076246178405641787125108298411066369
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1732 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aec-energy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.akl.zamsh.incapsula.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alwaysfreeit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baugarantie.zurich.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.benelux.zurich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.black-whole.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bonitohollow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bonnfinanz-vertrieb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chpc.care'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clekstaffing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cocoatrait.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coffee.nescafe-cwa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.datechpoweredestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digilite.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dolce-gusto.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecoservice24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.esophaccess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fortrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenscribble.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.groupo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hentai-paradise.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hndigital.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jpf.go.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lgbt.travimp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lifeanddisabilityplans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lindberghinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loumidis.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maklernetz.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maklerweb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mygerberlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myzurich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nacatexas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nationalexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestlehealthscience.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newstart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nordic.zurich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.northernbcmining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.optiv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paddlelogic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skeeterboats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tritondigital.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yamahaboats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yamahagolfcar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yamahaprecisionagriculture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yamahawaverunners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zioinfosite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurich-esp.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurich.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurichinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurichspain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aec-energy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alwaysfreeit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'black-whole.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonitohollow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonnfinanz-vertrieb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chpc.care'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clekstaffing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cocoatrait.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datechpoweredestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digilite.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dolce-gusto.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esophaccess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenscribble.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hentai-paradise.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jpf.go.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lindberghinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loumidis.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lrsbookings.tfl.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maklernetz.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maklerweb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobility.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygerberlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myzurich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nacatexas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestlehealthscience.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newstart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northernbcmining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optiv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paddlelogic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skeeterboats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yamahaboats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yamahagolfcar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yamahaprecisionagriculture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yamahawaverunners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zioinfosite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zurich.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zurichinternational.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0c6587ff454e112f0249f038e343042639e999d0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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