incapsula.com

- Incapsula Inc -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 2d:7e:48:1d:79:ed:66:36:5b:0a:69:e5 was issued on by GlobalSign nv-sa.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 2d:7e:48:1d:79:ed:66:36:5b:0a:69:e5
Serial Number (int): 14079490649360106952371890661
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 9a:30:07:db:26:5e:de:d9:c6:79:bb:01:f4:bf:20:cb:15:73:95:99
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 4e:d5:84:b7:09:13:26:ef:c9:7d:90:63:d6:88:f0:ed:f8:19:e5:d3
Fingerprint (sha256): 15:a5:d9:f7:a1:33:6e:e6:c2:93:7f:9a:06:36:fe:e0:ef:d5:fc:78:e6:4f:fa:ad:e9:31:cd:1c:03:8a:85:67

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate incapsula.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.afc-itf.com.au
*.aipac.org
*.alcon.com
*.apria.com
*.avisame.mx
*.ben-no-mo.com
*.besportsminded.com
*.binarytopoffers.com
*.bossrevolution.com
*.bruria.cu.cc
*.christmasalight.com.au
*.circulodecredito.com.mx
*.concordsoftwareleasing.com
*.criskco.com
*.cspace.com
*.daveandbusters.com
*.fortrade.com
*.geni.com
*.grandoption.com
*.greenskyonline.com
*.groupo.com
*.help.frontline.cloud
*.hg.org
*.homeaway.co.th
*.homeaway.com.vn
*.hotelbeds.com
*.isolvedhire.com
*.jltbridges.com
*.lexus-polska.pl
*.malaysiaairlines.com
*.menacetoys.com.au
*.misofi.net
*.moevenpick-icecream.ch
*.mortgagekeeperonline.co.uk
*.naccme.com
*.nandos.co.uk
*.nanny-annie.com
*.nestlecocoaplan.com
*.onestopmegashop.com.au
*.optioncccfd.com
*.originpc.com
*.paysecure.ru
*.pleasant.net
*.purina-one.de
*.riskengineering.zurich.com
*.rlicorp.com
*.schoeller-direct.de
*.speakdogtricities.com
*.talksextherapy.com
*.test.oldtimer-markt.de
*.toyota.sk
*.verdantcloud.com
*.vitasammelstiftung.ch
*.www.carbontv.com
*.yesoption.com
*.zmidreg.co.uk
*.zurich-vehicles.co.uk
*.zurich.com
*.zurich.com.my
*.zurich.de
*.zurichconnect.ch
*.zurichdevelopmentcenter.com
apria.com
avisame.mx
ben-no-mo.com
besportsminded.com
binarytopoffers.com
bossrevolution.com
christmasalight.com.au
circulodecredito.com.mx
criskco.com
grandoption.com
greenskyonline.com
hg.org
homeaway.co.th
homeaway.com.vn
hotelbeds.com
menacetoys.com.au
moevenpick-icecream.ch
nandos.co.uk
nanny-annie.com
onestopmegashop.com.au
originpc.com
purina-one.de
speakdogtricities.com
talksextherapy.com
toyota.sk
vitasammelstiftung.ch
yesoption.com
zmidreg.co.uk
zurich-vehicles.co.uk
zurich.com
zurich.de
zurichconnect.ch
zurichdevelopmentcenter.com

Other certificates including the domain name incapsula.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxowgx0OU/gtIR9WmdI0y
LiohcjBIDbI/ZSAvMl9PS3UMq/ShPHjQtB1Xbvb/pFRQ0B9UBNAZnweyhkoNQrYb
6vplsoIhkZNxJ2GjcVMjXVLRGGgSVnM/rJ2OJxJCIPhB1MnW/Yoa33tjrMFtEOjI
IPgkVhTuSm+EcvISfM8YHsel+ZOf+fv/gMVmG9hWs809ynKoHop9caFo3W+aFIvT
yW6HEhptxRc63jw9a0JeAkJPrMCT4shb1q3EuCxto5s7TbRXoYJtRUWthdc81BG8
dkS/uIbEqvDmgh0MuSda7rfkXKPpFLWsFDZV38EL8ImH1VNnbitiUVGifbZk9T9o
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14079490649360106952371890661
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-17 09:23:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-17 10:35:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25064284095445122850515412401578697521472802530204659909604597272628092455729657612539927817029833454136833327297955756991427053483087976567417933069678998191885837572811707946207262676782645811250193271757440682191191771659179726984062666935556999990892480199336342630368328584381041680077319066720472135430184512253501334129598077438150948753630507916523314491895822652471661177878857852833612439546260037204121817900760843416703858846167835448941756493171283985109499548047686968276042326062468851516987651127871910252623506844314100309516286524699628587785839568410739937823255306202990011132641437820644359104721
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1802 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afc-itf.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aipac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avisame.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ben-no-mo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.besportsminded.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.binarytopoffers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bossrevolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bruria.cu.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.christmasalight.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.circulodecredito.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.concordsoftwareleasing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.criskco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daveandbusters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fortrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grandoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenskyonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.groupo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.help.frontline.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homeaway.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homeaway.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotelbeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.isolvedhire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jltbridges.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lexus-polska.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.malaysiaairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.menacetoys.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.misofi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moevenpick-icecream.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mortgagekeeperonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naccme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nandos.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nanny-annie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestlecocoaplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onestopmegashop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.optioncccfd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.originpc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paysecure.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pleasant.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purina-one.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.riskengineering.zurich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rlicorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schoeller-direct.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.speakdogtricities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.talksextherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.oldtimer-markt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toyota.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.verdantcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vitasammelstiftung.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.carbontv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yesoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zmidreg.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurich-vehicles.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurich.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurichconnect.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurichdevelopmentcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avisame.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ben-no-mo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'besportsminded.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'binarytopoffers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bossrevolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christmasalight.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulodecredito.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'criskco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenskyonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeaway.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeaway.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelbeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menacetoys.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moevenpick-icecream.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nandos.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanny-annie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onestopmegashop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'originpc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purina-one.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'speakdogtricities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talksextherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toyota.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitasammelstiftung.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yesoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zmidreg.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zurich-vehicles.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zurich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zurich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zurichconnect.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zurichdevelopmentcenter.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9a3007db265eded9c679bb01f4bf20cb15739599
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004a31917360c1bda830f249ebdc528ab30fe6611c35be14d7ddced021d2d8c6525fe544f7ca33b9b1463ce2b8ec4712a6ba4b10f07e843d3b849c5f5c50654e14256e70daa7ae5e1b62fe07304da4b10ef1876ee8c73c7fe4772805ca4fa06ded79db52c14ec36f0127ff490accd9d844680bcd4a6cebb6a6f0b0e1ac2e5513b7dde32ed40826f44c0b0ec9b2e6988187d4ab93173c48de16d81bc96ec06c32514fd96607f889478054bef591436c2ae1276c28a142f3d9fa410b040d0fe65830488713a1aa5136de9b11dae83b8a386c22fa2a469220e1ba39bcbdfc15b32a977e49447ef6493caec1fa03f8643856c4740a19244f47b48f646d61efb7c11181