incapsula.com

- Incapsula Inc -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 38:6b:1a:21:fb:99:8d:b3:d2:53:5f:fd was issued on by GlobalSign nv-sa.

With 121 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 38:6b:1a:21:fb:99:8d:b3:d2:53:5f:fd
Serial Number (int): 17460639021094875791896043517
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: b1:4b:45:ac:3b:6e:ff:bf:34:fb:cc:94:be:75:ae:0d:4f:a3:50:de
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): ab:3f:be:4e:4e:54:ed:2b:3b:6c:9f:16:57:36:7b:3c:7f:ec:93:5c
Fingerprint (sha256): 14:c9:7a:3e:c2:42:44:d4:54:93:d6:a4:9f:09:54:a0:47:c2:59:8f:ff:3d:39:e5:b0:cc:f8:d9:bd:77:39:22

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate incapsula.com

121

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.92y.org
*.angelsdetour.com
*.argentor.ca
*.austinwomensexpo.com
*.bcservice.com
*.becomingunicorns.com
*.bjjreno.com
*.cloverleafchemical.com
*.cpsexp.com
*.daytradingbias.com
*.divetoo.com
*.dogbehavingbadly.com
*.donnajeanlong.com
*.doubletappnutrition.com
*.dougdjones.com
*.drsclaims.com
*.emmastewartphotos.com
*.everydaysage.com
*.ezywipeusa.com
*.fibermais.com.br
*.forescout.jp
*.gmac.com
*.grupodfm.com.mx
*.gthaus.com
*.handyscape.com
*.healthnutchefs.com
*.herbcorona.com
*.houstonwomensexpo.com
*.idcintl.com
*.kimberamerica.com
*.konnectproibks.com
*.lakeconroesmiles.com
*.lincolnparkpiano.com
*.luraedesigns.com
*.mba.com
*.membersolutions.com
*.moderndrivenmedia.com
*.moonlightpillows.com
*.mylawyerslist.com
*.myvolo.ca
*.myvolo.com
*.neu-brains.site
*.nevisport.com
*.newtekwebhosting.com
*.onlinelaserusa.com
*.printbuddy.mx
*.rightbraindesigns.com
*.savingstar.com
*.sheffermanlaw.com
*.shootingstarsusa.com
*.shopalmabeauty.com
*.simplexity.sa
*.skyprepago.com.br
*.smartcaribbean.net
*.tamperlock.com
*.thepredatorybird.com
*.trespass.pl
*.trustbluecoat.com
*.unileverdigital.com
*.zurich.fr
92y.org
angelsdetour.com
argentor.ca
austinwomensexpo.com
bcservice.com
becomingunicorns.com
bjjreno.com
cloverleafchemical.com
copadavis.com
cpsexp.com
daytradingbias.com
divetoo.com
dogbehavingbadly.com
donnajeanlong.com
doubletappnutrition.com
dougdjones.com
drsclaims.com
emmastewartphotos.com
estetique.com
everydaysage.com
ezywipeusa.com
fibermais.com.br
forescout.jp
grupodfm.com.mx
gthaus.com
handyscape.com
healthnutchefs.com
herbcorona.com
houstonwomensexpo.com
idcintl.com
jobninja.co.il
konnectproibks.com
lakeconroesmiles.com
lincolnparkpiano.com
luraedesigns.com
mba.com
moderndrivenmedia.com
moonlightpillows.com
mylawyerslist.com
neu-brains.site
nevisport.com
newtekwebhosting.com
onlinelaserusa.com
printbuddy.mx
rightbraindesigns.com
savingstar.com
sheffermanlaw.com
shootingstarsusa.com
shopalmabeauty.com
simplexity.sa
smartcaribbean.net
store.kimberamerica.com
tamperlock.com
thepredatorybird.com
trespass.pl
trustbluecoat.com
unileverdigital.com
www.estetique.com
www.jobninja.co.il
zurich.fr

Other certificates including the domain name incapsula.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzyw5Egu8hlMQOnoY0IF
UVIa7x6eeB06UjAk8PsYhTgreLpu8XGH6iSBqoD9doXQMZZaJSfelT82N2BdO9w6
VCDuxLW56Bd3NxOFmM9m9z9xTryl010F3kk/y5Q34A0DTlfuoScqWJfTIYOSiWQT
c94EYuUn+77bPY6ipO7eYuDtjFZzSDcHZIo5wkQigr3lw2Nr3EaZiiyfTeCGwWs9
EETOvdWfeRXUdZEySgGATta3x5siPXDWWKORdU+P6NWQ5+uy/451o5tyOmKrlEq4
1qQmfmZ5tr1MQC06XxXqbwzazCdGgmNiK1w2VZMH+G5kHqcMUrgIFgzQrVVkoPE5
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17460639021094875791896043517
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-18 11:47:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-12 15:36:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21111724768626007278663893520106811115035300345613187068020342007694802629056882777560612765894122799398565934678806151776117109216673296759126937485167228575848610488480131780039218488541622535954700505791639276793102967628428705616488312757830763307121757174755576827447924549383372821612119007354427423114935524591462829112110485987647406621265801661534389900174785781042007473543607097986114835575541467807719328724163350384442241819549301779402930622630560047672609792214271676334190034962788255414247298731834789864346896051561597595393298641018572295252615069185719182786060511644393867564924104031111130200517
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2271 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.92y.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.angelsdetour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.argentor.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.austinwomensexpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bcservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.becomingunicorns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bjjreno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cloverleafchemical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cpsexp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daytradingbias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.divetoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dogbehavingbadly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.donnajeanlong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doubletappnutrition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dougdjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drsclaims.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emmastewartphotos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.everydaysage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ezywipeusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fibermais.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forescout.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gmac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grupodfm.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gthaus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.handyscape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthnutchefs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.herbcorona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.houstonwomensexpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.idcintl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kimberamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.konnectproibks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lakeconroesmiles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lincolnparkpiano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luraedesigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.membersolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moderndrivenmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moonlightpillows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mylawyerslist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myvolo.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myvolo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neu-brains.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nevisport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newtekwebhosting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlinelaserusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.printbuddy.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rightbraindesigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.savingstar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sheffermanlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shootingstarsusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopalmabeauty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simplexity.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skyprepago.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smartcaribbean.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tamperlock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thepredatorybird.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trespass.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trustbluecoat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unileverdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurich.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '92y.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angelsdetour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'argentor.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'austinwomensexpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'becomingunicorns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bjjreno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloverleafchemical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'copadavis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpsexp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daytradingbias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divetoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dogbehavingbadly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donnajeanlong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doubletappnutrition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dougdjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drsclaims.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emmastewartphotos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estetique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everydaysage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ezywipeusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fibermais.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forescout.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grupodfm.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gthaus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handyscape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthnutchefs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herbcorona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houstonwomensexpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idcintl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobninja.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konnectproibks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lakeconroesmiles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lincolnparkpiano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luraedesigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moderndrivenmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moonlightpillows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylawyerslist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neu-brains.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nevisport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newtekwebhosting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinelaserusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'printbuddy.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rightbraindesigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savingstar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sheffermanlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shootingstarsusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopalmabeauty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplexity.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartcaribbean.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.kimberamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tamperlock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepredatorybird.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trespass.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trustbluecoat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unileverdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.estetique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jobninja.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zurich.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b14b45ac3b6effbf34fbcc94be75ae0d4fa350de
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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