incapsula.com

- Incapsula Inc -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 4e:52:28:90:9d:08:05:f1:fe:15:08:6e was issued on by GlobalSign nv-sa.

With 80 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 4e:52:28:90:9d:08:05:f1:fe:15:08:6e
Serial Number (int): 24239154245579076953519229038
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: e3:a1:1f:5e:e6:77:5f:e0:87:14:89:a8:7d:f6:c6:5b:30:7c:a3:5b
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 46:14:f0:cd:e1:4f:91:47:e9:a4:d6:cd:f2:94:72:7c:b3:db:68:57
Fingerprint (sha256): 14:de:b1:59:18:a4:da:c6:37:cf:54:bb:9e:fd:68:93:ce:18:e0:cf:9b:9f:0d:88:ca:82:24:8c:80:51:02:7e

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate incapsula.com

80

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.acad.us.com
*.almirall.ch
*.borbay.com
*.btl.nestle.com
*.caixaescena.org
*.circulodecredito.com.pe
*.decathlon-rdc.com
*.decathlon.bg
*.decathlon.in
*.decathlon.si
*.enel.it
*.eu.sial.com
*.freespinscasino.com
*.hapo.org
*.iamevidencethemovie.com
*.juliamadrigan.com
*.kompasslev.cz
*.lutzchimneyservices.com
*.master.dolce-gusto.com
*.memphissoccer.com
*.my-leaflet.ie
*.myexoticescape.com
*.officesofmillet.com
*.puzzlesandcorks.com
*.qualpay.com
*.ravpage.co.il
*.release.easilink.cnb.com
*.rudderservices.com
*.sistic.stixcloud.com
*.tripcase.com
*.trpaintball.com
*.webinetmedia.com
111429.com
acad.us.com
almirall.ch
bakersfieldcollege.edu
borbay.com
bransonshows.com
caixaescena.org
circulodecredito.com.pe
concept-dev.instron.com
dealer.hyundaicanada.com
decathlon-rdc.com
decathlon.bg
decathlon.in
decathlon.si
edms.enercon.com
foxrentacar.com
freespinscasino.com
fusion.aarcorp.com
iamevidencethemovie.com
ipec.carryoncampus.com
johnsonstring.com
juliamadrigan.com
kompasslev.cz
kvootzati.co.il
lutzchimneyservices.com
memphissoccer.com
mobile.quickswipe.com
my-leaflet.ie
myexoticescape.com
officesofmillet.com
puzzlesandcorks.com
ravpage.co.il
rudderservices.com
smartformsdev.djoglobal.com
stage.kitkat.com
test.dotloop.com
trpaintball.com
vacationsmadeeasy.com
webinetmedia.com
wp.atmag.co.il
www.111429.com
www.bakersfieldcollege.edu
www.bransonshows.com
www.foxrentacar.com
www.johnsonstring.com
www.kvootzati.co.il
www.vacationsmadeeasy.com

Other certificates including the domain name incapsula.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILzTCCCrWgAwIBAgIMTlIokJ0IBfH+FQhuMA0GCSqGSIb3DQEBCwUAMFcxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS0wKwYDVQQDEyRH
bG9iYWxTaWduIENsb3VkU1NMIENBIC0gU0hBMjU2IC0gRzMwHhcNMTkwMzEyMTUw
OTM5WhcNMTkwNzAyMDg0MzE0WjBgMQswCQYDVQQGEwJVUzERMA8GA1UECBMIRGVs
YXdhcmUxDjAMBgNVBAcTBURvdmVyMRYwFAYDVQQKEw1JbmNhcHN1bGEgSW5jMRYw
FAYDVQQDEw1pbmNhcHN1bGEuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApwqvTrLTkrrq+6GWEnjj/HJ0uPrIFnKhAl/hlUXZHcrpH9g2IOQxJkNp
NleV/QZCz/CkNLvcq3WtAxO92+jOtj+0ZlJS4nmHqAp8xdusEyyQuAToVj600XJi
fHYORos6zqFJaavJZmlySYFqJGmxZMkod8DIPizhzXxTgF4natCLcixrsR5J6XoY
8atYi5CBEd6yHSZ/181DfZhM8WGLgBp/6TAYQRcK90PuJ2RGDE2p9UUKbp5po5SD
rpazpdiq7XQPkVP/71lUmQcZUaM6jFzwnlI/5ROmbJE2YnMBzDkis0MLT/BdZSvV
54FH92Yv7Ln5gmJcQEPn66MrSnF8DwIDAQABo4IIjjCCCIowDgYDVR0PAQH/BAQD
AgWgMIGKBggrBgEFBQcBAQR+MHwwQgYIKwYBBQUHMAKGNmh0dHA6Ly9zZWN1cmUu
Z2xvYmFsc2lnbi5jb20vY2FjZXJ0L2Nsb3Vkc3Nsc2hhMmczLmNydDA2BggrBgEF
BQcwAYYqaHR0cDovL29jc3AyLmdsb2JhbHNpZ24uY29tL2Nsb3Vkc3Nsc2hhMmcz
MFYGA1UdIARPME0wQQYJKwYBBAGgMgEUMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8v
d3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMAgGBmeBDAECAjAJBgNVHRME
AjAAMIIGIAYDVR0RBIIGFzCCBhOCDWluY2Fwc3VsYS5jb22CDSouYWNhZC51cy5j
b22CDSouYWxtaXJhbGwuY2iCDCouYm9yYmF5LmNvbYIQKi5idGwubmVzdGxlLmNv
bYIRKi5jYWl4YWVzY2VuYS5vcmeCGSouY2lyY3Vsb2RlY3JlZGl0by5jb20ucGWC
EyouZGVjYXRobG9uLXJkYy5jb22CDiouZGVjYXRobG9uLmJngg4qLmRlY2F0aGxv
bi5pboIOKi5kZWNhdGhsb24uc2mCCSouZW5lbC5pdIINKi5ldS5zaWFsLmNvbYIV
Ki5mcmVlc3BpbnNjYXNpbm8uY29tggoqLmhhcG8ub3JnghkqLmlhbWV2aWRlbmNl
dGhlbW92aWUuY29tghMqLmp1bGlhbWFkcmlnYW4uY29tgg8qLmtvbXBhc3NsZXYu
Y3qCGSoubHV0emNoaW1uZXlzZXJ2aWNlcy5jb22CGCoubWFzdGVyLmRvbGNlLWd1
c3RvLmNvbYITKi5tZW1waGlzc29jY2VyLmNvbYIPKi5teS1sZWFmbGV0LmllghQq
Lm15ZXhvdGljZXNjYXBlLmNvbYIVKi5vZmZpY2Vzb2ZtaWxsZXQuY29tghUqLnB1
enpsZXNhbmRjb3Jrcy5jb22CDSoucXVhbHBheS5jb22CDyoucmF2cGFnZS5jby5p
bIIaKi5yZWxlYXNlLmVhc2lsaW5rLmNuYi5jb22CFCoucnVkZGVyc2VydmljZXMu
Y29tghYqLnNpc3RpYy5zdGl4Y2xvdWQuY29tgg4qLnRyaXBjYXNlLmNvbYIRKi50
cnBhaW50YmFsbC5jb22CEioud2ViaW5ldG1lZGlhLmNvbYIKMTExNDI5LmNvbYIL
YWNhZC51cy5jb22CC2FsbWlyYWxsLmNoghZiYWtlcnNmaWVsZGNvbGxlZ2UuZWR1
ggpib3JiYXkuY29tghBicmFuc29uc2hvd3MuY29tgg9jYWl4YWVzY2VuYS5vcmeC
F2NpcmN1bG9kZWNyZWRpdG8uY29tLnBlghdjb25jZXB0LWRldi5pbnN0cm9uLmNv
bYIYZGVhbGVyLmh5dW5kYWljYW5hZGEuY29tghFkZWNhdGhsb24tcmRjLmNvbYIM
ZGVjYXRobG9uLmJnggxkZWNhdGhsb24uaW6CDGRlY2F0aGxvbi5zaYIQZWRtcy5l
bmVyY29uLmNvbYIPZm94cmVudGFjYXIuY29tghNmcmVlc3BpbnNjYXNpbm8uY29t
ghJmdXNpb24uYWFyY29ycC5jb22CF2lhbWV2aWRlbmNldGhlbW92aWUuY29tghZp
cGVjLmNhcnJ5b25jYW1wdXMuY29tghFqb2huc29uc3RyaW5nLmNvbYIRanVsaWFt
YWRyaWdhbi5jb22CDWtvbXBhc3NsZXYuY3qCD2t2b290emF0aS5jby5pbIIXbHV0
emNoaW1uZXlzZXJ2aWNlcy5jb22CEW1lbXBoaXNzb2NjZXIuY29tghVtb2JpbGUu
cXVpY2tzd2lwZS5jb22CDW15LWxlYWZsZXQuaWWCEm15ZXhvdGljZXNjYXBlLmNv
bYITb2ZmaWNlc29mbWlsbGV0LmNvbYITcHV6emxlc2FuZGNvcmtzLmNvbYINcmF2
cGFnZS5jby5pbIIScnVkZGVyc2VydmljZXMuY29tghtzbWFydGZvcm1zZGV2LmRq
b2dsb2JhbC5jb22CEHN0YWdlLmtpdGthdC5jb22CEHRlc3QuZG90bG9vcC5jb22C
D3RycGFpbnRiYWxsLmNvbYIVdmFjYXRpb25zbWFkZWVhc3kuY29tghB3ZWJpbmV0
bWVkaWEuY29tgg53cC5hdG1hZy5jby5pbIIOd3d3LjExMTQyOS5jb22CGnd3dy5i
YWtlcnNmaWVsZGNvbGxlZ2UuZWR1ghR3d3cuYnJhbnNvbnNob3dzLmNvbYITd3d3
LmZveHJlbnRhY2FyLmNvbYIVd3d3LmpvaG5zb25zdHJpbmcuY29tghN3d3cua3Zv
b3R6YXRpLmNvLmlsghl3d3cudmFjYXRpb25zbWFkZWVhc3kuY29tMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAdBgNVHQ4EFgQU46EfXuZ3X+CHFImoffbG
WzB8o1swHwYDVR0jBBgwFoAUqSuH4c4kRzsbv8+FNwJVnQ2UWOYwggEDBgorBgEE
AdZ5AgQCBIH0BIHxAO8AdQBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPT
DAAAAWlyc7ubAAAEAwBGMEQCIEt4pIbKH4t5G7dYKqE2CTx+I0PhydKxB0uFeYAP
8VTUAiB2ltpwp1xRM/tHiCkLTZD5F8eeBImzI6ib2+FeCOAscwB2AKS5CZC0GFgU
h7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABaXJzuO0AAAQDAEcwRQIgSLXNTpCF
ZeLkFaNSelx30xD3fI8DyWWwTPs5EFLyCVcCIQDdbzKxvVNrym2tSD+esK9Fae9l
lLSPi0epaZUHJus9LzANBgkqhkiG9w0BAQsFAAOCAQEAN/2dw4YfrJnlLfrdFCVh
5Bdh3ANX3hj+CjlzKLyn6JqgSIbvLGTxnSPx061AO4nd0jRkhPfCydm8C4Dbavqq
kO/hPDX+Kel0ewYkFNS9xCQqTTua4AutRw2mMT1Roy8Im9eujDNEtCUXV/Vu9I2L
QZRthDJTlBF16Wwm9tZgL+Wl9xpacPM4LdorF8F6xk2Q0lCI11ktRCce8YSGZybe
G5TgMZz97BxX5s9AtSNgwigQP+V/B7FeU39AStIWJXKeCZ+St9bArys3a3ox6wCH
LzWnbHGbCE+XRtiY4kZPa09MbdAikdGaBp/9e6TIgfzvmXEMe7AFOHa3+fxMPyvx
yw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwqvTrLTkrrq+6GWEnjj
/HJ0uPrIFnKhAl/hlUXZHcrpH9g2IOQxJkNpNleV/QZCz/CkNLvcq3WtAxO92+jO
tj+0ZlJS4nmHqAp8xdusEyyQuAToVj600XJifHYORos6zqFJaavJZmlySYFqJGmx
ZMkod8DIPizhzXxTgF4natCLcixrsR5J6XoY8atYi5CBEd6yHSZ/181DfZhM8WGL
gBp/6TAYQRcK90PuJ2RGDE2p9UUKbp5po5SDrpazpdiq7XQPkVP/71lUmQcZUaM6
jFzwnlI/5ROmbJE2YnMBzDkis0MLT/BdZSvV54FH92Yv7Ln5gmJcQEPn66MrSnF8
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 24239154245579076953519229038
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-12 15:09:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-02 08:43:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21087065797919727026374857255937715876515326676367925516816901962492548887945327859571494363153921326289783793362551251929480770516113336944210368860898616171548226863764777860921306055271531627455292477465342643587733504033229308614710914563095242731421535027478746514283445228328425943449480970048414309541042586345648381164993677125729825252100013182889117190945263422511900342292325621057546045312020743276025611056309798530695326126681569660539218963653300594565486568600566803509393216652769094807838975009544114328675974912970833291169813318517592781006265615037698237981359623633746369452789678905119428672527
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1559 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acad.us.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.almirall.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.borbay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btl.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caixaescena.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.circulodecredito.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.decathlon-rdc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.decathlon.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.decathlon.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.decathlon.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enel.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu.sial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freespinscasino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hapo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iamevidencethemovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.juliamadrigan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kompasslev.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lutzchimneyservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.master.dolce-gusto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.memphissoccer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.my-leaflet.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myexoticescape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.officesofmillet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.puzzlesandcorks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qualpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ravpage.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.release.easilink.cnb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rudderservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sistic.stixcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tripcase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trpaintball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webinetmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '111429.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acad.us.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'almirall.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakersfieldcollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borbay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bransonshows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caixaescena.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulodecredito.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concept-dev.instron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealer.hyundaicanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decathlon-rdc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decathlon.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decathlon.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decathlon.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edms.enercon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foxrentacar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freespinscasino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fusion.aarcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iamevidencethemovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipec.carryoncampus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnsonstring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juliamadrigan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kompasslev.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kvootzati.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lutzchimneyservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'memphissoccer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.quickswipe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-leaflet.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myexoticescape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'officesofmillet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puzzlesandcorks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ravpage.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rudderservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartformsdev.djoglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.kitkat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.dotloop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trpaintball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vacationsmadeeasy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webinetmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wp.atmag.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.111429.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bakersfieldcollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bransonshows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foxrentacar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnsonstring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kvootzati.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vacationsmadeeasy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e3a11f5ee6775fe0871489a87df6c65b307ca35b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001697273bb9b000004030046304402204b78a486ca1f8b791bb7582aa136093c7e2343e1c9d2b1074b8579800ff154d402207696da70a75c5133fb4788290b4d90f917c79e0489b323a89bdbe15e08e02c73007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001697273b8ed0000040300473045022048b5cd4e908565e2e415a3527a5c77d310f77c8f03c965b04cfb391052f20957022100dd6f32b1bd536bca6dad483f9eb0af4569ef6594b48f8b47a969950726eb3d2f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0037fd9dc3861fac99e52dfadd142561e41761dc0357de18fe0a397328bca7e89aa04886ef2c64f19d23f1d3ad403b89ddd2346484f7c2c9d9bc0b80db6afaaa90efe13c35fe29e9747b062414d4bdc4242a4d3b9ae00bad470da6313d51a32f089bd7ae8c3344b4251757f56ef48d8b41946d843253941175e96c26f6d6602fe5a5f71a5a70f3382dda2b17c17ac64d90d25088d7592d44271ef184866726de1b94e0319cfdec1c57e6cf40b52360c228103fe57f07b15e537f404ad21625729e099f92b7d6c0af2b376b7a31eb00872f35a76c719b084f9746d898e2464f6b4f4c6dd02291d19a069ffd7ba4c881fcef99710c7bb0053876b7f9fc4c3f2bf1cb