incapsula.com

- Incapsula Inc -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 2f:ba:eb:21:ce:e9:b7:e8:f3:72:48:56 was issued on by GlobalSign nv-sa.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 2f:ba:eb:21:ce:e9:b7:e8:f3:72:48:56
Serial Number (int): 14771766043827218308131866710
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: f7:ba:b6:33:14:51:c6:cb:d4:39:84:31:67:a6:8d:0d:44:c9:9a:3f
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 21:84:0f:1c:af:5f:36:0a:9c:cc:84:07:b9:e8:7a:82:c1:64:e7:f2
Fingerprint (sha256): 0b:65:6c:06:46:38:c8:81:e6:57:95:c8:55:8e:10:73:91:5c:11:eb:02:a7:6f:72:4e:2f:92:51:f4:07:b2:ea

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate incapsula.com

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.aeroexpress.ru
*.alloyapparel.com
*.aquaself-hr.net
*.avs4you.com
*.bitcoin.com
*.ceicdata.com
*.cellnextelecom.com
*.chick-fil-akidsclub.com
*.clesf.org
*.copart.in
*.diyparty.com.au
*.factoryprice.co.il
*.gejenbacher.com
*.goldsecurity.com
*.hk.apac.boservices.dolce-gusto.com
*.ideecadeauphoto.com
*.izoncam.com
*.just-eat.ca
*.just-eat.dk
*.just-eat.es
*.just-eat.ie
*.justeat.it
*.justeat.nl
*.karriar-magazine.com
*.kgelectronic.com.au
*.lastminute.com
*.letgo.com
*.magicgadgets.com
*.mechbankbusiness.com
*.mozzi.co.nz
*.mrv.com.br
*.myeverythingdisc.com
*.myofficeguy.com
*.needleandthread.com
*.onside.co.nz
*.passportcard.co.il
*.prod.croquonslavie.fr
*.ragezone.com
*.ravago.com
*.rlicorp.com
*.rpcremote.com.hk
*.skyfencenet.com
*.spotoption.com
*.stage.croquonslavie.fr
*.testbetasslautorenew18.biz
*.testckswp53454.org
*.testdcregipgapr17.be
*.texus.toyota-europe.com
*.tyruscap.mc
*.viewcases.com
*.war.zamsh.incapsula.mobi
*.wyethnutrition.com.ph
aeroexpress.ru
alloyapparel.com
aquaself-hr.net
cellnextelecom.com
chick-fil-akidsclub.com
clesf.org
diyparty.com.au
factoryprice.co.il
goldsecurity.com
ideecadeauphoto.com
izoncam.com
just-eat.ca
just-eat.dk
just-eat.es
just-eat.ie
justeat.it
justeat.nl
karriar-magazine.com
kgelectronic.com.au
magicgadgets.com
mechbankbusiness.com
mozzi.co.nz
mrv.com.br
myeverythingdisc.com
myofficeguy.com
needleandthread.com
passportcard.co.il
prev-my.gepower.com
ragezone.com
testbetasslautorenew18.biz
testckswp53454.org
testdcregipgapr17.be
viewcases.com
wyethnutrition.com.ph

Other certificates including the domain name incapsula.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KACTijL86Mtv+MmsgC2
u5QU0slZo4AAPrJO46uviLSQgOsWp7yTaTLftMx6j5pz5DQsmVktpx1CN5Rij8sn
3vp0RmSaUvzT5uzy8fqdy0EW2VXCLGNm/yuF1vV7dGh42YRHac+4UsH5ZHSc8gdA
AKuICIb3SJJkfLgr1atJbrllHGnr1z1jjW0xWZKbNUD6WAbg7oYWanJQDH+Ls418
P1Q8EnCmB3+DGJo4D4Jh4FNAZGHaqGCRhzVrEqnWB2MYmSaH9LJC5DCQdZt6Ifqe
1btKu7+iRgZSF/uswV9jMQYJoWyNrXA4k4BnoGcGGqXhG/LtfUH+a/NPY8cpZFd7
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14771766043827218308131866710
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-24 19:30:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-21 07:51:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27851330473725487175756131012915121291126593439400634827253948931254680782272205022320646655127096732626608536794222630852514537173349885895085853288948617872792383047344705288922687387304435478188797127095635720956051838583174169743214434804012772416124846919704491910555242086349642295019920307103019555153216889624733451859704929091142570771076768864630923527332283523699362653704640781443634982775484429582901015819429849522876586937724403170478074032285581919569900439839296200308753031221424826297601255748384215775397836755622245437530468348488365363430750506681837870973522072667708356221396605157211245083449
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1640 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aeroexpress.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alloyapparel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aquaself-hr.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avs4you.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitcoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ceicdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cellnextelecom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chick-fil-akidsclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clesf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.copart.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diyparty.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.factoryprice.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gejenbacher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goldsecurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hk.apac.boservices.dolce-gusto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ideecadeauphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.izoncam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.just-eat.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.just-eat.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.just-eat.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.just-eat.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.justeat.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.justeat.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.karriar-magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kgelectronic.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lastminute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.letgo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.magicgadgets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mechbankbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mozzi.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mrv.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myeverythingdisc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myofficeguy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.needleandthread.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onside.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.passportcard.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.croquonslavie.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ragezone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ravago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rlicorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rpcremote.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skyfencenet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spotoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.croquonslavie.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.testbetasslautorenew18.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.testckswp53454.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.testdcregipgapr17.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.texus.toyota-europe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tyruscap.mc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viewcases.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.war.zamsh.incapsula.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wyethnutrition.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeroexpress.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alloyapparel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquaself-hr.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cellnextelecom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chick-fil-akidsclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clesf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diyparty.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factoryprice.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldsecurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ideecadeauphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'izoncam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'just-eat.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'just-eat.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'just-eat.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'just-eat.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justeat.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justeat.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karriar-magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kgelectronic.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magicgadgets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mechbankbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mozzi.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrv.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myeverythingdisc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myofficeguy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'needleandthread.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passportcard.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prev-my.gepower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ragezone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testbetasslautorenew18.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testckswp53454.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testdcregipgapr17.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viewcases.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wyethnutrition.com.ph'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f7bab6331451c6cbd439843167a68d0d44c99a3f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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