incapsula.com

- Incapsula Inc -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 44:3d:2d:35:2f:82:f8:c4:cf:52:84:92 was issued on by GlobalSign nv-sa.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 44:3d:2d:35:2f:82:f8:c4:cf:52:84:92
Serial Number (int): 21118938630440694284513608850
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 9a:30:07:db:26:5e:de:d9:c6:79:bb:01:f4:bf:20:cb:15:73:95:99
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 95:8f:f2:d7:6d:a9:4b:e7:78:75:46:83:70:81:46:16:f1:79:36:c4
Fingerprint (sha256): 16:3e:cb:46:21:e4:51:dc:b8:d6:23:84:43:8c:60:66:eb:bb:c8:be:a2:40:73:97:b5:05:c2:b2:6c:fe:26:ec

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate incapsula.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.afc-itf.com.au
*.aipac.org
*.alcon.com
*.apria.com
*.avisame.mx
*.ben-no-mo.com
*.besportsminded.com
*.binarytopoffers.com
*.bossrevolution.com
*.bruria.cu.cc
*.circulodecredito.com.mx
*.concordsoftwareleasing.com
*.criskco.com
*.cspace.com
*.daveandbusters.com
*.fortrade.com
*.geni.com
*.grandoption.com
*.greenskyonline.com
*.groupo.com
*.hg.org
*.homeaway.co.th
*.homeaway.com.vn
*.hotelbeds.com
*.isolvedhire.com
*.jltbridges.com
*.lexus-polska.pl
*.malaysiaairlines.com
*.misofi.net
*.moevenpick-icecream.ch
*.mortgagekeeperonline.co.uk
*.myrelatives.com
*.naccme.com
*.nandos.co.uk
*.nanny-annie.com
*.nestlecocoaplan.com
*.onestopmegashop.com.au
*.optioncccfd.com
*.originpc.com
*.outerbanks-obx.com
*.paysecure.ru
*.pleasant.net
*.purina-one.de
*.riskengineering.zurich.com
*.rlicorp.com
*.schoeller-direct.de
*.speakdogtricities.com
*.talksextherapy.com
*.tellcportal.com
*.test.oldtimer-markt.de
*.toyota.sk
*.verdantcloud.com
*.viewinwebver8.net
*.viewinwebver9.net
*.vitasammelstiftung.ch
*.www.carbontv.com
*.yesoption.com
*.zmidreg.co.uk
*.zurich-vehicles.co.uk
*.zurich.com
*.zurich.com.my
*.zurich.de
*.zurichconnect.ch
*.zurichdevelopmentcenter.com
apria.com
avisame.mx
ben-no-mo.com
besportsminded.com
binarytopoffers.com
bossrevolution.com
circulodecredito.com.mx
criskco.com
grandoption.com
greenskyonline.com
hg.org
homeaway.co.th
homeaway.com.vn
hotelbeds.com
moevenpick-icecream.ch
myrelatives.com
nandos.co.uk
nanny-annie.com
onestopmegashop.com.au
originpc.com
outerbanks-obx.com
purina-one.de
speakdogtricities.com
talksextherapy.com
tellcportal.com
toyota.sk
vitasammelstiftung.ch
yesoption.com
zmidreg.co.uk
zurich-vehicles.co.uk
zurich.com
zurich.de
zurichconnect.ch
zurichdevelopmentcenter.com

Other certificates including the domain name incapsula.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxowgx0OU/gtIR9WmdI0y
LiohcjBIDbI/ZSAvMl9PS3UMq/ShPHjQtB1Xbvb/pFRQ0B9UBNAZnweyhkoNQrYb
6vplsoIhkZNxJ2GjcVMjXVLRGGgSVnM/rJ2OJxJCIPhB1MnW/Yoa33tjrMFtEOjI
IPgkVhTuSm+EcvISfM8YHsel+ZOf+fv/gMVmG9hWs809ynKoHop9caFo3W+aFIvT
yW6HEhptxRc63jw9a0JeAkJPrMCT4shb1q3EuCxto5s7TbRXoYJtRUWthdc81BG8
dkS/uIbEqvDmgh0MuSda7rfkXKPpFLWsFDZV38EL8ImH1VNnbitiUVGifbZk9T9o
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21118938630440694284513608850
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-13 01:36:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-17 10:35:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25064284095445122850515412401578697521472802530204659909604597272628092455729657612539927817029833454136833327297955756991427053483087976567417933069678998191885837572811707946207262676782645811250193271757440682191191771659179726984062666935556999990892480199336342630368328584381041680077319066720472135430184512253501334129598077438150948753630507916523314491895822652471661177878857852833612439546260037204121817900760843416703858846167835448941756493171283985109499548047686968276042326062468851516987651127871910252623506844314100309516286524699628587785839568410739937823255306202990011132641437820644359104721
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1844 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afc-itf.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aipac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avisame.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ben-no-mo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.besportsminded.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.binarytopoffers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bossrevolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bruria.cu.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.circulodecredito.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.concordsoftwareleasing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.criskco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daveandbusters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fortrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grandoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenskyonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.groupo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homeaway.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homeaway.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotelbeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.isolvedhire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jltbridges.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lexus-polska.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.malaysiaairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.misofi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moevenpick-icecream.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mortgagekeeperonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myrelatives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naccme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nandos.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nanny-annie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestlecocoaplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onestopmegashop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.optioncccfd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.originpc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outerbanks-obx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paysecure.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pleasant.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purina-one.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.riskengineering.zurich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rlicorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schoeller-direct.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.speakdogtricities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.talksextherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tellcportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.oldtimer-markt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toyota.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.verdantcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viewinwebver8.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viewinwebver9.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vitasammelstiftung.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.carbontv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yesoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zmidreg.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurich-vehicles.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurich.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurichconnect.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurichdevelopmentcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avisame.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ben-no-mo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'besportsminded.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'binarytopoffers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bossrevolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulodecredito.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'criskco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenskyonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeaway.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeaway.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelbeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moevenpick-icecream.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myrelatives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nandos.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanny-annie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onestopmegashop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'originpc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outerbanks-obx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purina-one.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'speakdogtricities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talksextherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tellcportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toyota.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitasammelstiftung.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yesoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zmidreg.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zurich-vehicles.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zurich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zurich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zurichconnect.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zurichdevelopmentcenter.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9a3007db265eded9c679bb01f4bf20cb15739599
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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