incapsula.com

- Incapsula Inc -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 11:21:7a:e0:5e:4a:b2:8b:b4:8f:b1:28:04:09:27:3f:fb:a7 was issued on by GlobalSign nv-sa.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:7a:e0:5e:4a:b2:8b:b4:8f:b1:28:04:09:27:3f:fb:a7
Serial Number (int): 1492301509750761877819207032346145468709799
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 77:bd:0f:a5:90:92:d4:5b:48:43:9f:db:f9:34:97:76:30:27:8c:dd
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): cc:a7:3d:7d:95:cd:9f:ab:d6:61:60:93:30:34:8b:fe:f3:f2:42:bb
Fingerprint (sha256): 10:05:64:21:b4:62:d0:02:49:36:f4:a3:1a:a4:45:21:ea:42:0c:5b:a4:39:cc:69:1b:77:e1:b9:11:4b:11:1b

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate incapsula.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.altaineapps.com
*.autoeurope.de
*.bioreliance.com
*.blog.dolce-gusto.ua
*.brothsserveddaily.com
*.bzoptions.com
*.cailler.com
*.caldrea.com
*.carecatalog.purina.eu
*.caresharing.com
*.caroz.co.il
*.carswithheart.com
*.cebddostesting.co.uk
*.ceragon.com
*.cityofny.org
*.clearcreekrental.com
*.crazywinner.co
*.ddd003.net
*.deepeddymerch.com
*.dolce-gusto.hu
*.dolce-gusto.ua
*.domesticbin.com
*.gemeinsam-fuer-gesuendere-kinder.ch
*.getpregnantandshine.com
*.glamour.de
*.gq-magazin.de
*.insieme-per-bambini-sani.ch
*.internap.com
*.jojo.pl
*.kpmg.ie
*.lalechera.com.co
*.linksnappy.com
*.military1.com
*.mrsmeyers.com
*.murata.com.hk
*.nankidoptipro.com.ph
*.nestle-family.com
*.nestleprofessional.fr
*.optiprogram.pl
*.realremit.com
*.sites.silverstripe.com
*.techdata.com
*.thetrueoption.com
*.toyota.ee
*.travelleaders.com
*.unis-pour-la-sante-des-enfants.ch
*.vcccd.edu
*.vtechda.com
*.xn--aino-jtel-02aa3t.fi
*.xn--classic-jtel-ocba7y.fi
autoeurope.de
brothsserveddaily.com
bzoptions.com
cailler.com
caldrea.com
caresharing.com
caroz.co.il
carswithheart.com
cebddostesting.co.uk
ceragon.com
clearcreekrental.com
crazywinner.co
ddd003.net
deepeddymerch.com
dolce-gusto.hu
dolce-gusto.ua
domesticbin.com
gemeinsam-fuer-gesuendere-kinder.ch
getpregnantandshine.com
glamour.de
gq-magazin.de
insieme-per-bambini-sani.ch
internap.com
jojo.pl
kpmg.ie
military1.com
mrsmeyers.com
nankidoptipro.com.ph
nestle-family.com
nestleprofessional.fr
optiprogram.pl
recruiting.msnhealth.com
recruitingtrain.msnhealth.com
rss.maximtest.com
rss1.maxhealth.com
staffing.msnhealth.com
staffingtrain.msnhealth.com
techdata.com
thetrueoption.com
toyota.ee
tss.maxhealth.com
tss.maximtest.com
unis-pour-la-sante-des-enfants.ch
vtechda.com
xn--aino-jtel-02aa3t.fi
xn--classic-jtel-ocba7y.fi

Other certificates including the domain name incapsula.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJcYcS8YPtZRh2m1aeVg
tlHx2HXbtz/4IgWDGNaam2nxMewrbFDeIP9cKGFW5VDj5eea5F5N3JvIBHmzh+ZU
zGfezuTx+cUcWxAaN1Sp4XGMoO5vj4igN859+ph4+OnnvpQyVSvSk+1KQCtndZcg
ibpo43IpTD2gzFvzEgAbxth0ht1IzjnP24thAH0oGh3Hy52VRzs/FKaC9MJhhhw/
RCEIXlYrb6tJU/ysIp/kFHcYMmBNaB7N+LBx300wGg8dSw01UYaVGiE6gF/+P3xi
NEE3xhG/AWhhgSWOR+D+7xtBMXi98YbtskS7zaqo6TIphNyfnssNjcot8LiCzFUa
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492301509750761877819207032346145468709799
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-16 05:27:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-10 09:42:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24817215730030531858378509766165125165689811900493760959561685236229438600484581950016969990323592802488208272632504152253406390636364155780673621672936273295970565874526822231258975804025625589231370326995121019811988750260467897776693163510939250363179459700464155158199987249180373097897171110296446450953123147884932158789522097786439855506763966761130318236582567562414397427155517955495581586089422097326422298670656424031783270561167349064276299579937773701156243404504490366765129540801405649743322689768140326101657365364830944922998334575011513509171250292226279803638774313119205192150790835633988989950469
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1888 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altaineapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autoeurope.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bioreliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blog.dolce-gusto.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brothsserveddaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bzoptions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cailler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caldrea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carecatalog.purina.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caresharing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caroz.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carswithheart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cebddostesting.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ceragon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cityofny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clearcreekrental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crazywinner.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ddd003.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deepeddymerch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dolce-gusto.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dolce-gusto.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.domesticbin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gemeinsam-fuer-gesuendere-kinder.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getpregnantandshine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glamour.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gq-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insieme-per-bambini-sani.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jojo.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kpmg.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lalechera.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.linksnappy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.military1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mrsmeyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.murata.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nankidoptipro.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestle-family.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestleprofessional.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.optiprogram.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realremit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sites.silverstripe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.techdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thetrueoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toyota.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.travelleaders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unis-pour-la-sante-des-enfants.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vcccd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vtechda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--aino-jtel-02aa3t.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--classic-jtel-ocba7y.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoeurope.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brothsserveddaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bzoptions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cailler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caldrea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caresharing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caroz.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carswithheart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cebddostesting.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceragon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clearcreekrental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crazywinner.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ddd003.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deepeddymerch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dolce-gusto.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dolce-gusto.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domesticbin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gemeinsam-fuer-gesuendere-kinder.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getpregnantandshine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glamour.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gq-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insieme-per-bambini-sani.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jojo.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpmg.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'military1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrsmeyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nankidoptipro.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestle-family.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestleprofessional.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optiprogram.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recruiting.msnhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recruitingtrain.msnhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rss.maximtest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rss1.maxhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staffing.msnhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staffingtrain.msnhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetrueoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toyota.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tss.maxhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tss.maximtest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unis-pour-la-sante-des-enfants.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vtechda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--aino-jtel-02aa3t.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--classic-jtel-ocba7y.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							77bd0fa59092d45b48439fdbf934977630278cdd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0038b751d4855926ebe51286ece6509b65b8c50f74635e00b6e9556736bed7f69761627873af9600220771287c843fbe365d663a2109e35c26765677f4fb3007f2e1b223ed8e4fe492ee3ec5e4f7f65d84efe17111f6a7efb87e7de3f9e709d6663cf780da853e5b143c51d5ddbb61d12cb4dd5ab94a4d0b25e80008f5e9dbfd4ffc348a3c4b94eab240d11ea2f2b2e005235d0208296f0aaf4cbdb00daee06762f36aec574fcb0bb0ee9cb7d0776aa4b28630d7a465b079395cbee5f58f4a0bca95f2c3690efaed8960a228fc312d03e98b9c05580f368f81c2e777b53431c46ca78eabb5312b928020f8458c413fa2fab3b600af19fc466bd8e53f55755215b9