incapsula.com

- Incapsula Inc -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 50:ae:21:e3:ee:9d:e7:41:69:e1:8b:6a was issued on by GlobalSign nv-sa.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 50:ae:21:e3:ee:9d:e7:41:69:e1:8b:6a
Serial Number (int): 24969313921019543625247329130
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 65:de:76:4c:11:00:06:20:b3:c8:c5:1d:28:74:1d:40:93:a7:e0:25
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): f6:d3:0b:e9:5f:18:cd:10:22:5e:33:e6:7d:37:7b:fb:0e:37:14:95
Fingerprint (sha256): 16:32:ac:e6:73:51:e3:ff:f0:5a:16:b3:e5:d4:bf:84:5c:1d:02:a5:40:51:9a:4f:37:9c:0c:97:a6:06:d0:69

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate incapsula.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.agua-stamaria.com.mx
*.alertir.com
*.altusdataexchange.com
*.apps.kitkat.es
*.bankersalmanac.com
*.btl.nestle.at
*.btl.nestle.be
*.btl.nestle.bg
*.btl.nestle.ch
*.btl.nestle.co.th
*.btl.nestle.com.mt
*.btl.nestle.com.tr
*.btl.nestle.com.vn
*.btl.nestle.cz
*.btl.nestle.de
*.btl.nestle.dk
*.btl.nestle.es
*.btl.nestle.fi
*.btl.nestle.fr
*.btl.nestle.gr
*.btl.nestle.hu
*.btl.nestle.lk
*.btl.nestle.no
*.btl.nestle.pl
*.btl.nestle.pt
*.btl.nestle.ro
*.btl.nestle.ru
*.btl.nestle.se
*.btl.nestle.sk
*.cikolatam.com
*.dojoneeds.com
*.fontainedespres.be
*.giadinhnestle.com.vn
*.golantelecom.co.il
*.gutesache.be
*.ie.spotoption.com
*.lucasmurrey.com
*.mirantis.com
*.mot-testing.service.gov.uk
*.my.dolce-gusto.de
*.nespresso-karriere.at
*.nestle.com.bd
*.nestle.es
*.nestlesqv.com.br
*.oct-all-net.com
*.photogift.com.au
*.pingviini.fi
*.pl.classoft.net
*.primelucky.no
*.promedxpress.com
*.purina-proplan.be
*.purinatotalcare.com.au
*.sparesqa.mylam.com
*.spie.org
*.stage-euw1.investis.com
*.stage-mid-euw3.investis.com
*.sydneyfishmarket.com.au
*.tik.me
*.titleadvantage.com
*.trackmyfile.com
*.verinthms.com
*.yahav.co.il
agua-stamaria.com.mx
alertir.com
altusdataexchange.com
apps.kitkat.es
bankersalmanac.com
cikolatam.com
dojoneeds.com
fontainedespres.be
giadinhnestle.com.vn
golantelecom.co.il
gutesache.be
lucasmurrey.com
mirantis.com
my.dolce-gusto.de
mymobilevm.tams.com
nespresso-karriere.at
nestlesqv.com.br
oct-all-net.com
photogift.com.au
pingviini.fi
primelucky.no
purina-proplan.be
purinatotalcare.com.au
sparesqa.mylam.com
stage-euw1.investis.com
stage-mid-euw3.investis.com
titleadvantage.com
trackmyfile.com
yahav.co.il

Other certificates including the domain name incapsula.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsyVPtxJhnFsU2LyP7eo
ZmkplQ2wTakvDd/abocPWSWJZhGoA5aTvfP32rNWEYfUiHlUiGe/KudSbiDVdGMA
7Vnw6cLrITfHKfZAYvgCwPPr23xct74Ug2G3VgM3T+QGjujL1bJ7q+5AADWyvqgI
Qv7JteCSSAd8MyMmA82V+H39U2+ubinwPN1QUvFBLSybu6G33seSA1RmSKVykOJl
XieQJH/61N69szf5bbmjePPZ2J65+teuEiETbwx1VISTLqW/cDji3KZsFl5gLJ+K
i6QFMmr3p4+gKBWd5RkmDKNADTRh3kM1s9pmvrC0I9wKHrPfiOr9Tngll2s6v4PO
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 24969313921019543625247329130
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-04 08:59:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-19 09:15:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20046535817200337741699375337527360608828904000064150498887699643648236171461181105482409058257025362927213827774180837638365574025637679319171098074367157286030553368700389133105308561398124312636956624950519162077194882138564170717145232343117950929839938754578396986958918299548368988744040138335254952284122013438593601290802982098188438921687512537648350588958473336053853945469402075548228288748166458379345620352843136727700067456480074860378170714937764529439983194245376674957966921062396153572512478486720120638625880925719017933178404213874988912327315286810896990564849452699384934450974701335828630851301
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1749 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agua-stamaria.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alertir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altusdataexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apps.kitkat.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bankersalmanac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btl.nestle.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btl.nestle.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btl.nestle.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btl.nestle.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btl.nestle.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btl.nestle.com.mt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btl.nestle.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btl.nestle.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btl.nestle.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btl.nestle.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btl.nestle.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btl.nestle.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btl.nestle.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btl.nestle.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btl.nestle.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btl.nestle.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btl.nestle.lk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btl.nestle.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btl.nestle.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btl.nestle.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btl.nestle.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btl.nestle.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btl.nestle.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btl.nestle.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cikolatam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dojoneeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fontainedespres.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.giadinhnestle.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.golantelecom.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gutesache.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ie.spotoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lucasmurrey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mirantis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mot-testing.service.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.my.dolce-gusto.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nespresso-karriere.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestle.com.bd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestle.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestlesqv.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oct-all-net.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.photogift.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pingviini.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pl.classoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.primelucky.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.promedxpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purina-proplan.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purinatotalcare.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sparesqa.mylam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage-euw1.investis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage-mid-euw3.investis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sydneyfishmarket.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tik.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.titleadvantage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trackmyfile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.verinthms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yahav.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agua-stamaria.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alertir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altusdataexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.kitkat.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankersalmanac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cikolatam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dojoneeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fontainedespres.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giadinhnestle.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golantelecom.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gutesache.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucasmurrey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mirantis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.dolce-gusto.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymobilevm.tams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nespresso-karriere.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestlesqv.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oct-all-net.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photogift.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pingviini.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primelucky.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purina-proplan.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purinatotalcare.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sparesqa.mylam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-euw1.investis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-mid-euw3.investis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'titleadvantage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trackmyfile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yahav.co.il'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							65de764c11000620b3c8c51d28741d4093a7e025
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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