incapsula.com

- Incapsula Inc -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 3b:39:c1:bb:da:b9:3f:28:dd:ef:6c:44 was issued on by GlobalSign nv-sa.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 3b:39:c1:bb:da:b9:3f:28:dd:ef:6c:44
Serial Number (int): 18329439233210426358647188548
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 3f:e6:c5:ed:9e:48:da:fd:6b:15:1e:ef:7f:64:f8:d8:79:38:f9:65
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 8e:56:51:af:3e:d6:e7:c6:a1:3f:9a:76:b1:96:a1:15:50:9e:bf:e9
Fingerprint (sha256): 0f:b9:3d:11:27:eb:93:9f:d0:cc:c9:78:ed:24:07:76:24:8c:35:08:df:27:23:16:09:60:14:b1:8d:65:8b:59

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate incapsula.com

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.155551.com
*.anytimefitness.com
*.bb.cls350.org
*.catchowgentle.com
*.catchowgivesback.com
*.dc6.pageuppeople.com
*.elbitsystems-us.com
*.enercon.com
*.fullcirclecomputing.com
*.geba.com
*.joininv.com
*.lacocinanestle.do
*.mapp.pregnant.nestlebaby.com
*.mypetchicken.com
*.nandos.ie
*.nestlebornemad.dk
*.nestlehealthscience.ph
*.olostaging.express
*.process.jubba.me
*.proplan-dog.com
*.rpcpromo.com.au
*.rumbo.com
*.sbo60.com
*.seminis.es
*.sial.com
*.surreycc.gov.uk
*.tryproplan.ca
*.utvwindshieldsandaccessories.com
aecapc.mylam.com
anytimefitness.com
api.affiliateedge.com
apps.imperva.com
atac.mylam.com
catchowgentle.com
catchowgivesback.com
crossrider-predictions.com
e3.my.t-mobile.com
fir3net.com
fullcirclecomputing.com
gcitrading.com
geba.com
imperva.de
joininv.com
lacocinanestle.do
lsrel01.greensfelder.com
m.bank-yahav.co.il
ma-stg.my.t-mobile.com
mail-oa.ironfx.com
mapi.sitelock.com
mypetchicken.com
nandos.ie
nci.ca
nestlebornemad.dk
nestlehealthscience.ph
process.jubba.me
proplan-dog.com
qdr.mylam.com
quicknom.com
refurb.mylam.com
rpcpromo.com.au
rumbo.com
secure128.com
seminis.es
sfs.mylam.com
shopusa.com
sunflower.com.hk
swkey.mylam.com
test.imperva.com
trainingportal.bioversity.cgiar.org
tryproplan.ca
utvwindshieldsandaccessories.com
wsrqa-atac.mylam.com
wsrqa-pe.mylam.com
wsrqa-swkey.mylam.com
wsrqa-www.mylam.com
www.2options.com
www.crossrider-predictions.com
www.eurasian-inc.com
www.fir3net.com
www.gcitrading.com
www.imperva.de
www.incomesaga.net
www.nci.ca
www.quicknom.com
www.ruskod.net
www.secure128.com
www.shopusa.com
www.sunflower.com.hk

Other certificates including the domain name incapsula.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmXctBSptQ3kmZrZfSkR
knoqKlRjYWZWW//PMieTJYllozkENmxAHbI2eQNsPhNkvFJ5/3fHY0qCApmDydYL
yreyTDQpapbtTYO5j1q0Jqd5gEsozUniqF3Vi5d8SFyfsotSmDE1CkjJJPA3KQyy
8lia8durECpTwap+YMeDkMnJQWddJnIk8VGM1XZ6SdNpU0SPM3jtAoBBZYJUwEe4
rAgAWJDD+loL9qf5+km+KN201PH+IBGx53emWx0lhYcGhIPoKEqSJ09OQyCGBrZb
H7YIXGLk79noud+5ToDX6LqrzdyPbnM8zTgeTQlEwGnqLHOFEDgruPQvNUgiMzSG
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18329439233210426358647188548
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-22 14:38:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-23 11:50:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22520648368818739643619401426426942703676908377167491283493231852814087497961959099227835909770677190762592223966661286774968467596372704890731295718971886984024823977315955515292184539860627602256435073576972188384161423415979853785269728200896408587414723797899170919911411434476684797118668383997458382061191938201457169719508990979354944209911109154483215256958407235347543476494405422642223617740448604804052868485034159646261243487027522925617886956432795140483272222500481346414595846703755122119260972458274611542298593408576367175755154865531534122621340224233533474715165779413040717136266743342568054228609
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1690 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.155551.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anytimefitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bb.cls350.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.catchowgentle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.catchowgivesback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dc6.pageuppeople.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elbitsystems-us.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enercon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fullcirclecomputing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.joininv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lacocinanestle.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mapp.pregnant.nestlebaby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mypetchicken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nandos.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestlebornemad.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestlehealthscience.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.olostaging.express'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.process.jubba.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.proplan-dog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rpcpromo.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rumbo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sbo60.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seminis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.surreycc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tryproplan.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.utvwindshieldsandaccessories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aecapc.mylam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anytimefitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.affiliateedge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atac.mylam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catchowgentle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catchowgivesback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crossrider-predictions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e3.my.t-mobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fir3net.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fullcirclecomputing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcitrading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joininv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacocinanestle.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsrel01.greensfelder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.bank-yahav.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ma-stg.my.t-mobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail-oa.ironfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapi.sitelock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypetchicken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nandos.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nci.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestlebornemad.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestlehealthscience.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'process.jubba.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proplan-dog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qdr.mylam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quicknom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refurb.mylam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rpcpromo.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rumbo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure128.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seminis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfs.mylam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunflower.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swkey.mylam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trainingportal.bioversity.cgiar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tryproplan.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utvwindshieldsandaccessories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsrqa-atac.mylam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsrqa-pe.mylam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsrqa-swkey.mylam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsrqa-www.mylam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2options.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crossrider-predictions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eurasian-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fir3net.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gcitrading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imperva.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.incomesaga.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nci.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quicknom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ruskod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secure128.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunflower.com.hk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3fe6c5ed9e48dafd6b151eef7f64f8d87938f965
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001e11119669debd1bd38180933c85a3c841404a27366dbd5784ae4d11d07a8816139cea72cb2ec87d9e2e262ac4d511c7f9d6bf6a4a81191b87d848208a1fd7322ec979bd8c6c3e1fd9c2638855ba271bda11d402662742a8926f577b20dbe3f7f1b26b93c7b5c0933fedca455ad70f7220bad797ed6fd74f8f44b7322f9860b37c0b5fa8053881b21a6d200d9e2a7d71d943919689b94f91f18221605ccbea5bf551c541cfee99dfe09bf087eaf3458aa2655bb2309741cf507b92291201765dc4d34f8b2889c9ecf7ccfeac4698c885709ad27eb009074324b7ac4e50e4532f0cc9248e7b92640a58fe2669e3706a457004003c90a0a6bb1034d3b411fc36a4