incapsula.com

- Incapsula Inc -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 11:21:d5:0d:98:1b:9b:e5:03:8b:46:da:7a:fe:91:c3:35:77 was issued on by GlobalSign nv-sa.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:d5:0d:98:1b:9b:e5:03:8b:46:da:7a:fe:91:c3:35:77
Serial Number (int): 1492421375096390177500795679582552758367607
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 77:bd:0f:a5:90:92:d4:5b:48:43:9f:db:f9:34:97:76:30:27:8c:dd
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 2b:02:86:28:f0:c4:51:d2:a7:2d:42:7d:46:6c:23:47:2e:6c:c8:48
Fingerprint (sha256): 16:a6:8d:cb:96:7c:6e:29:ee:9e:16:d8:57:d6:60:a4:65:e8:d6:4a:04:9f:9a:3e:37:de:78:9e:f6:44:5c:26

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate incapsula.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.altaineapps.com
*.autoeurope.de
*.bioreliance.com
*.blog.dolce-gusto.ua
*.brothsserveddaily.com
*.bzoptions.com
*.cailler.com
*.caldrea.com
*.carecatalog.purina.eu
*.carswithheart.com
*.cebddostesting.co.uk
*.ceragon.com
*.cityofny.org
*.clearcreekrental.com
*.crazywinner.co
*.ddd003.net
*.deepeddymerch.com
*.dolce-gusto.hu
*.dolce-gusto.ua
*.domesticbin.com
*.gemeinsam-fuer-gesuendere-kinder.ch
*.getpregnantandshine.com
*.glamour.de
*.gq-magazin.de
*.insieme-per-bambini-sani.ch
*.internap.com
*.jojo.pl
*.kpmg.ie
*.lalechera.com.co
*.linksnappy.com
*.military1.com
*.mrsmeyers.com
*.murata.com.hk
*.nankidoptipro.com.ph
*.nestle-family.com
*.nestleprofessional.fr
*.optiprogram.pl
*.pornbraze.com
*.realremit.com
*.sites.silverstripe.com
*.techdata.com
*.thetrueoption.com
*.toyota.ee
*.travelleaders.com
*.unis-pour-la-sante-des-enfants.ch
*.vcccd.edu
*.vtechda.com
*.xn--aino-jtel-02aa3t.fi
*.xn--classic-jtel-ocba7y.fi
autoeurope.de
brothsserveddaily.com
bzoptions.com
cailler.com
caldrea.com
carswithheart.com
cebddostesting.co.uk
ceragon.com
clearcreekrental.com
crazywinner.co
ddd003.net
deepeddymerch.com
dolce-gusto.hu
dolce-gusto.ua
domesticbin.com
gemeinsam-fuer-gesuendere-kinder.ch
getpregnantandshine.com
glamour.de
gq-magazin.de
insieme-per-bambini-sani.ch
internap.com
jojo.pl
kpmg.ie
military1.com
mrsmeyers.com
nankidoptipro.com.ph
nestle-family.com
nestleprofessional.fr
optiprogram.pl
pornbraze.com
recruiting.msnhealth.com
recruitingtrain.msnhealth.com
rss.maximtest.com
rss1.maxhealth.com
staffing.msnhealth.com
staffingtrain.msnhealth.com
techdata.com
thetrueoption.com
toyota.ee
tss.maxhealth.com
tss.maximtest.com
unis-pour-la-sante-des-enfants.ch
vtechda.com
xn--aino-jtel-02aa3t.fi
xn--classic-jtel-ocba7y.fi

Other certificates including the domain name incapsula.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJcYcS8YPtZRh2m1aeVg
tlHx2HXbtz/4IgWDGNaam2nxMewrbFDeIP9cKGFW5VDj5eea5F5N3JvIBHmzh+ZU
zGfezuTx+cUcWxAaN1Sp4XGMoO5vj4igN859+ph4+OnnvpQyVSvSk+1KQCtndZcg
ibpo43IpTD2gzFvzEgAbxth0ht1IzjnP24thAH0oGh3Hy52VRzs/FKaC9MJhhhw/
RCEIXlYrb6tJU/ysIp/kFHcYMmBNaB7N+LBx300wGg8dSw01UYaVGiE6gF/+P3xi
NEE3xhG/AWhhgSWOR+D+7xtBMXi98YbtskS7zaqo6TIphNyfnssNjcot8LiCzFUa
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492421375096390177500795679582552758367607
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-05 08:07:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-10 09:42:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24817215730030531858378509766165125165689811900493760959561685236229438600484581950016969990323592802488208272632504152253406390636364155780673621672936273295970565874526822231258975804025625589231370326995121019811988750260467897776693163510939250363179459700464155158199987249180373097897171110296446450953123147884932158789522097786439855506763966761130318236582567562414397427155517955495581586089422097326422298670656424031783270561167349064276299579937773701156243404504490366765129540801405649743322689768140326101657365364830944922998334575011513509171250292226279803638774313119205192150790835633988989950469
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1856 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altaineapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autoeurope.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bioreliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blog.dolce-gusto.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brothsserveddaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bzoptions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cailler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caldrea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carecatalog.purina.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carswithheart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cebddostesting.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ceragon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cityofny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clearcreekrental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crazywinner.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ddd003.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deepeddymerch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dolce-gusto.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dolce-gusto.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.domesticbin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gemeinsam-fuer-gesuendere-kinder.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getpregnantandshine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glamour.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gq-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insieme-per-bambini-sani.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jojo.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kpmg.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lalechera.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.linksnappy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.military1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mrsmeyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.murata.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nankidoptipro.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestle-family.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestleprofessional.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.optiprogram.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pornbraze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realremit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sites.silverstripe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.techdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thetrueoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toyota.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.travelleaders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unis-pour-la-sante-des-enfants.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vcccd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vtechda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--aino-jtel-02aa3t.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--classic-jtel-ocba7y.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoeurope.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brothsserveddaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bzoptions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cailler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caldrea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carswithheart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cebddostesting.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceragon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clearcreekrental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crazywinner.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ddd003.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deepeddymerch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dolce-gusto.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dolce-gusto.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domesticbin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gemeinsam-fuer-gesuendere-kinder.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getpregnantandshine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glamour.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gq-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insieme-per-bambini-sani.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jojo.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpmg.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'military1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrsmeyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nankidoptipro.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestle-family.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestleprofessional.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optiprogram.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pornbraze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recruiting.msnhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recruitingtrain.msnhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rss.maximtest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rss1.maxhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staffing.msnhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staffingtrain.msnhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetrueoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toyota.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tss.maxhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tss.maximtest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unis-pour-la-sante-des-enfants.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vtechda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--aino-jtel-02aa3t.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--classic-jtel-ocba7y.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							77bd0fa59092d45b48439fdbf934977630278cdd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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