incapsula.com

- Incapsula Inc -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 11:21:e6:be:11:59:1e:70:39:3b:d1:0c:99:22:e0:fc:ed:2c was issued on by GlobalSign nv-sa.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:e6:be:11:59:1e:70:39:3b:d1:0c:99:22:e0:fc:ed:2c
Serial Number (int): 1492444888275610504501027621457076003073324
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 6e:c3:c8:e7:1a:a1:2a:ce:22:9d:f3:3f:61:2d:02:fa:a0:b8:85:4f
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): b0:cf:d3:16:dc:5f:2e:d7:bf:42:dc:93:2d:0e:0e:b8:77:22:7e:79
Fingerprint (sha256): 11:6c:a5:91:1a:f8:cc:4d:7f:f3:85:5c:c5:8f:21:bd:56:d2:13:86:17:41:7a:8c:e9:68:47:07:c5:6d:1c:fa

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate incapsula.com

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
znaturalfoods.com
*.balkans.emea.boservices.dolce-gusto.com
*.bossventure.com
*.clairporium.com
*.contasuper.com.br
*.dolce-gusto.com.uy
*.ecopayz.com
*.essentialsbyaai.com.au
*.fgoption.com
*.game.prav-pit.ru
*.ico.org.uk
*.mec.efoqa.com
*.nestlepromotions.com.au
*.purina.be
*.pyuy.boservices.dolce-gusto.com
*.sagph.org
*.sgmyph.apac.boservices.dolce-gusto.com
*.swimsuitsforall.com
*.sygnia.com
*.temp.eservice.polandspring.com
*.uat-extranet01.zurich.co.uk
*.vitafriendspku.com
8200.org.il
Direct.empi.com
Ppteachertrainingapplysupport.ucasenvironments.com
adventureaquarium.com
api.loafdeals.com
api.netexam.com
bevbucks.com
blog.sitelock.com
bossventure.com
ca-orderquery.smartphoneexperts.com
canadianvisaexpert.com
checkout.loafdeals.com
clairporium.com
cnsss.trident.edu
connect.cubic.com
coursenet.trident.edu
elderswholesale.com.au
encore.loafdeals.com
fgoption.com
form.nafc.ca
fringout1.fring.com
game.prav-pit.ru
ggn.nl
gosuper.com
helpdesk.imperva.com
iStore.ccccloud.com
ibreports.ironfx.com
ico.org.uk
icu.simcoe.ca
issuetracker-ext.imperva.com
joalvarez.com
loafdeals.com
login.ccccloud.biz
login.loafdeals.com
mognettibike.it
neb.ca
nestlepromotions.com.au
oregoncity.grand-benedicts.com
ppteachertrainingtracksupport.ucasenvironments.com
purina.be
rus.gogetssl.com
search.sierraclub.org
sharepoint-dev.soa.org
shop.vray.info
spiritclips.com
sslusers.wix.com
sss.trident.edu
swimsuitsforall.com
techbase.kde.org
terraverdeservices.com
userbase.kde.org
users.wix.com
vitafriendspku.com
web2.v-mail.com
wp.timeout.co.il
www.8200.org.il
www.adventureaquarium.com
www.bevbucks.com
www.canadianvisaexpert.com
www.crimenetwork.biz
www.ggn.nl
www.gosuper.com
www.jfmg.co.uk
www.joalvarez.com
www.loafdeals.com
www.mognettibike.it
www.neb.ca
www.spiritclips.com
www.terraverdeservices.com
www.znaturalfoods.com

Other certificates including the domain name incapsula.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMpjCCC46gAwIBAgISESHmvhFZHnA5O9EMmSLg/O0sMA0GCSqGSIb3DQEBCwUA
MGYxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTwwOgYD
VQQDEzNHbG9iYWxTaWduIE9yZ2FuaXphdGlvbiBWYWxpZGF0aW9uIENBIC0gU0hB
MjU2IC0gRzIwHhcNMTYwMTE4MjMyMDI4WhcNMTYwOTIxMDUzNjMyWjBgMQswCQYD
VQQGEwJVUzERMA8GA1UECBMIRGVsYXdhcmUxDjAMBgNVBAcTBURvdmVyMRYwFAYD
VQQKEw1JbmNhcHN1bGEgSW5jMRYwFAYDVQQDEw1pbmNhcHN1bGEuY29tMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZzQ0ICs6s+8ekPiZFGXJ43fRVXb
aaF6Igc51S53FvMPt8cpSNIQkXUtXiqVXarUcj4l0MhF+c/UykKC/Rhl8VGGsTAr
uke7HCrLz3lSHnJlu5VtGgyNSUByquFC2CssM4sLrG9x8+7c+x53LVo4fABKH1t4
uiN/xlUw3BPUEm+a6zemBsUhqhaUf/zFxUWcRmbxVdL97pOCZaEvCpThQfLzoHM1
PFUflIeUQjxDHN9ym18j/MJH+3thmN1P5gNIifgEKuodiDIlymiMmrM0+d5tKHgO
wWvIaE7DvvAYsSgRcVhpVGWYWAUw/sfTF0ONgV5r6G6fyZEWKAn/1Psr+wIDAQAB
o4IJUjCCCU4wDgYDVR0PAQH/BAQDAgWgMEkGA1UdIARCMEAwPgYGZ4EMAQICMDQw
MgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRv
cnkvMIIHlwYDVR0RBIIHjjCCB4qCDWluY2Fwc3VsYS5jb22CEXpuYXR1cmFsZm9v
ZHMuY29tgikqLmJhbGthbnMuZW1lYS5ib3NlcnZpY2VzLmRvbGNlLWd1c3RvLmNv
bYIRKi5ib3NzdmVudHVyZS5jb22CESouY2xhaXJwb3JpdW0uY29tghMqLmNvbnRh
c3VwZXIuY29tLmJyghQqLmRvbGNlLWd1c3RvLmNvbS51eYINKi5lY29wYXl6LmNv
bYIYKi5lc3NlbnRpYWxzYnlhYWkuY29tLmF1gg4qLmZnb3B0aW9uLmNvbYISKi5n
YW1lLnByYXYtcGl0LnJ1ggwqLmljby5vcmcudWuCDyoubWVjLmVmb3FhLmNvbYIZ
Ki5uZXN0bGVwcm9tb3Rpb25zLmNvbS5hdYILKi5wdXJpbmEuYmWCISoucHl1eS5i
b3NlcnZpY2VzLmRvbGNlLWd1c3RvLmNvbYILKi5zYWdwaC5vcmeCKCouc2dteXBo
LmFwYWMuYm9zZXJ2aWNlcy5kb2xjZS1ndXN0by5jb22CFSouc3dpbXN1aXRzZm9y
YWxsLmNvbYIMKi5zeWduaWEuY29tgiAqLnRlbXAuZXNlcnZpY2UucG9sYW5kc3By
aW5nLmNvbYIdKi51YXQtZXh0cmFuZXQwMS56dXJpY2guY28udWuCFCoudml0YWZy
aWVuZHNwa3UuY29tggs4MjAwLm9yZy5pbIIPRGlyZWN0LmVtcGkuY29tgjJQcHRl
YWNoZXJ0cmFpbmluZ2FwcGx5c3VwcG9ydC51Y2FzZW52aXJvbm1lbnRzLmNvbYIV
YWR2ZW50dXJlYXF1YXJpdW0uY29tghFhcGkubG9hZmRlYWxzLmNvbYIPYXBpLm5l
dGV4YW0uY29tggxiZXZidWNrcy5jb22CEWJsb2cuc2l0ZWxvY2suY29tgg9ib3Nz
dmVudHVyZS5jb22CI2NhLW9yZGVycXVlcnkuc21hcnRwaG9uZWV4cGVydHMuY29t
ghZjYW5hZGlhbnZpc2FleHBlcnQuY29tghZjaGVja291dC5sb2FmZGVhbHMuY29t
gg9jbGFpcnBvcml1bS5jb22CEWNuc3NzLnRyaWRlbnQuZWR1ghFjb25uZWN0LmN1
YmljLmNvbYIVY291cnNlbmV0LnRyaWRlbnQuZWR1ghZlbGRlcnN3aG9sZXNhbGUu
Y29tLmF1ghRlbmNvcmUubG9hZmRlYWxzLmNvbYIMZmdvcHRpb24uY29tggxmb3Jt
Lm5hZmMuY2GCE2ZyaW5nb3V0MS5mcmluZy5jb22CEGdhbWUucHJhdi1waXQucnWC
Bmdnbi5ubIILZ29zdXBlci5jb22CFGhlbHBkZXNrLmltcGVydmEuY29tghNpU3Rv
cmUuY2NjY2xvdWQuY29tghRpYnJlcG9ydHMuaXJvbmZ4LmNvbYIKaWNvLm9yZy51
a4INaWN1LnNpbWNvZS5jYYIcaXNzdWV0cmFja2VyLWV4dC5pbXBlcnZhLmNvbYIN
am9hbHZhcmV6LmNvbYINbG9hZmRlYWxzLmNvbYISbG9naW4uY2NjY2xvdWQuYml6
ghNsb2dpbi5sb2FmZGVhbHMuY29tgg9tb2duZXR0aWJpa2UuaXSCBm5lYi5jYYIX
bmVzdGxlcHJvbW90aW9ucy5jb20uYXWCHm9yZWdvbmNpdHkuZ3JhbmQtYmVuZWRp
Y3RzLmNvbYIycHB0ZWFjaGVydHJhaW5pbmd0cmFja3N1cHBvcnQudWNhc2Vudmly
b25tZW50cy5jb22CCXB1cmluYS5iZYIQcnVzLmdvZ2V0c3NsLmNvbYIVc2VhcmNo
LnNpZXJyYWNsdWIub3JnghZzaGFyZXBvaW50LWRldi5zb2Eub3Jngg5zaG9wLnZy
YXkuaW5mb4IPc3Bpcml0Y2xpcHMuY29tghBzc2x1c2Vycy53aXguY29tgg9zc3Mu
dHJpZGVudC5lZHWCE3N3aW1zdWl0c2ZvcmFsbC5jb22CEHRlY2hiYXNlLmtkZS5v
cmeCFnRlcnJhdmVyZGVzZXJ2aWNlcy5jb22CEHVzZXJiYXNlLmtkZS5vcmeCDXVz
ZXJzLndpeC5jb22CEnZpdGFmcmllbmRzcGt1LmNvbYIPd2ViMi52LW1haWwuY29t
ghB3cC50aW1lb3V0LmNvLmlsgg93d3cuODIwMC5vcmcuaWyCGXd3dy5hZHZlbnR1
cmVhcXVhcml1bS5jb22CEHd3dy5iZXZidWNrcy5jb22CGnd3dy5jYW5hZGlhbnZp
c2FleHBlcnQuY29tghR3d3cuY3JpbWVuZXR3b3JrLmJpeoIKd3d3Lmdnbi5ubIIP
d3d3Lmdvc3VwZXIuY29tgg53d3cuamZtZy5jby51a4IRd3d3LmpvYWx2YXJlei5j
b22CEXd3dy5sb2FmZGVhbHMuY29tghN3d3cubW9nbmV0dGliaWtlLml0ggp3d3cu
bmViLmNhghN3d3cuc3Bpcml0Y2xpcHMuY29tghp3d3cudGVycmF2ZXJkZXNlcnZp
Y2VzLmNvbYIVd3d3LnpuYXR1cmFsZm9vZHMuY29tMAkGA1UdEwQCMAAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEkGA1UdHwRCMEAwPqA8oDqGOGh0dHA6
Ly9jcmwuZ2xvYmFsc2lnbi5jb20vZ3MvZ3Nvcmdhbml6YXRpb252YWxzaGEyZzIu
Y3JsMIGgBggrBgEFBQcBAQSBkzCBkDBNBggrBgEFBQcwAoZBaHR0cDovL3NlY3Vy
ZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQvZ3Nvcmdhbml6YXRpb252YWxzaGEyZzJy
MS5jcnQwPwYIKwYBBQUHMAGGM2h0dHA6Ly9vY3NwMi5nbG9iYWxzaWduLmNvbS9n
c29yZ2FuaXphdGlvbnZhbHNoYTJnMjAdBgNVHQ4EFgQUbsPI5xqhKs4infM/YS0C
+qC4hU8wHwYDVR0jBBgwFoAUlt5h8b0cFilTHMDMfTuDAEDmGnwwDQYJKoZIhvcN
AQELBQADggEBACnnKXZnrEZ+lVZHHMO91FOU8xgrRxa0xLsJ6WfopFxIL0pkjSPp
d/+cwsatZu1RHUH+DXF4TJtglCejM3kFzj7liNA58mg46xNNsCex+bVFM8s+m/3M
GtfS5Omh2P48bdONmpUG5IuPmWbVt+pLnxnQtDAWXU+7d6NbvhT9dUYhadbs3PsL
3YjxA+qTIdBQWGkLAdWjbf4vJwnOOaSzzHwD+5At5KjteIl0MpVevRuPA3ZBoAFC
hhCLsUFV7k2i2dAfCIYxOZmCSZ46GrsHMUmTxpeVaWCSQgmoBgv5Izj8TRBlOjXo
5T1ptDc3oH002kPx7i1ZLjUbbbQW9OKgXdQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZzQ0ICs6s+8ekPiZFGX
J43fRVXbaaF6Igc51S53FvMPt8cpSNIQkXUtXiqVXarUcj4l0MhF+c/UykKC/Rhl
8VGGsTAruke7HCrLz3lSHnJlu5VtGgyNSUByquFC2CssM4sLrG9x8+7c+x53LVo4
fABKH1t4uiN/xlUw3BPUEm+a6zemBsUhqhaUf/zFxUWcRmbxVdL97pOCZaEvCpTh
QfLzoHM1PFUflIeUQjxDHN9ym18j/MJH+3thmN1P5gNIifgEKuodiDIlymiMmrM0
+d5tKHgOwWvIaE7DvvAYsSgRcVhpVGWYWAUw/sfTF0ONgV5r6G6fyZEWKAn/1Psr
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492444888275610504501027621457076003073324
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-18 23:20:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-21 05:36:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26461134432532724957825177780375310733896693237694461555832057731918850665023145872874613823823309841967273829993988339385511307760308503898765306621860241630591407306104876336382345754408127419030820980541958236781749638710371777315626670934307801206962153980443974359141185649445796204950730110360775805839593012270371211198304736396589528516224917288185696072817129745288260172902858810880171218841698581242622098699038078034583922982123227851504389511518087511523647825767060066560541321873643666104048326270945567367757287683085300611054852383186605710965684878658483623613215923156605511685144696511459065801723
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1934 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'znaturalfoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.balkans.emea.boservices.dolce-gusto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bossventure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clairporium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.contasuper.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dolce-gusto.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecopayz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.essentialsbyaai.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fgoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.game.prav-pit.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ico.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mec.efoqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestlepromotions.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purina.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pyuy.boservices.dolce-gusto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sagph.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sgmyph.apac.boservices.dolce-gusto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swimsuitsforall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sygnia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.temp.eservice.polandspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat-extranet01.zurich.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vitafriendspku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '8200.org.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Direct.empi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Ppteachertrainingapplysupport.ucasenvironments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adventureaquarium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.loafdeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.netexam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bevbucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.sitelock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bossventure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca-orderquery.smartphoneexperts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadianvisaexpert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.loafdeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clairporium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnsss.trident.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.cubic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coursenet.trident.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elderswholesale.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encore.loafdeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fgoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'form.nafc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fringout1.fring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'game.prav-pit.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ggn.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gosuper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iStore.ccccloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibreports.ironfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ico.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icu.simcoe.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'issuetracker-ext.imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joalvarez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loafdeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.ccccloud.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.loafdeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mognettibike.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestlepromotions.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oregoncity.grand-benedicts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppteachertrainingtracksupport.ucasenvironments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purina.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rus.gogetssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.sierraclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharepoint-dev.soa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.vray.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiritclips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sslusers.wix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sss.trident.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swimsuitsforall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techbase.kde.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terraverdeservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'userbase.kde.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'users.wix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitafriendspku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web2.v-mail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wp.timeout.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.8200.org.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adventureaquarium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bevbucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canadianvisaexpert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crimenetwork.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ggn.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gosuper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jfmg.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joalvarez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loafdeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mognettibike.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiritclips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terraverdeservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.znaturalfoods.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6ec3c8e71aa12ace229df33f612d02faa0b8854f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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