incapsula.com

- Incapsula Inc -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 11:21:18:78:cf:1d:75:df:60:87:7c:4d:15:2a:8d:62:c2:6a was issued on by GlobalSign nv-sa.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:18:78:cf:1d:75:df:60:87:7c:4d:15:2a:8d:62:c2:6a
Serial Number (int): 1492170707696629908908425533243893536178794
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: cb:65:49:e8:64:ef:64:27:59:57:90:f9:b1:07:35:cb:3a:70:cb:d9
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 24:da:5a:d2:43:3b:17:a3:23:d3:47:95:1c:d5:ba:22:9f:84:98:d6
Fingerprint (sha256): 17:38:b2:95:69:5e:30:5b:f0:b0:40:17:5a:6e:93:f9:cc:c6:bb:cb:e6:a5:c7:d7:ac:9e:31:84:90:b9:ec:e0

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate incapsula.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.ausdiginc.com
*.babyunitedllc.com
*.bamba.co.il
*.behealthybeactive.co.nz
*.bishulim.co.il
*.boobooi.vn
*.buynespresso.com
*.campbowwow.com
*.choosewellness.com.ph
*.classmethod.info
*.closedforgood.org
*.copartmea.com
*.dolce-gusto.si
*.dziecko.nestle.pl
*.fagalbolivia.com
*.fbphotcontest.kokokrunch.com
*.firewoodfx.com
*.gardengourmet.eu
*.godinezunidos.com.mx
*.ie.spotoption.com
*.jadeworld.com
*.jeu-vittel.com
*.leadsmarket.com
*.nestlebarnmat.se
*.npkavosaparatai.lt
*.pfnet.provident.com
*.portal.achieve3000.com
*.precisionplanting.com
*.proplan.co.il
*.provident.com
*.purina.co.il
*.rvsalescentre.com.au
*.sabramezze.co.uk
*.sercae.com
*.sidemates.com
*.spotcapitalmarkets.com
*.spotoption.com
*.startstrong.nestle.co.za
*.studioscene.com.au
*.tivalltalk.nl
*.utorrent.com
*.wirehive.net
*.wyethmama.com.hk
*.wynyardgroup.com
*.zukes.com
api.pagar.me
ausdiginc.com
babyunitedllc.com
bamba.co.il
behealthybeactive.co.nz
bishulim.co.il
bluefin.com
boobooi.vn
bteva.co.il
buynespresso.com
campbowwow.com
choosewellness.com.ph
compliancefacts.com
copartmea.com
dia.govt.nz
dolce-gusto.si
fagalbolivia.com
gardengourmet.eu
godinezunidos.com.mx
igss.americansystems.com
jadeworld.com
jeu-vittel.com
leadsmarket.com
maps.simcoe.ca
mydev.cardconex.com
nestlebarnmat.se
npkavosaparatai.lt
partnerdev.cardconex.com
perftest.nationalexpress.com
proplan.co.il
provident.com
purina.co.il
puroast.com
rvsalescentre.com.au
sabramezze.co.uk
sercae.com
sidemates.com
spotcapitalmarkets.com
studioscene.com.au
tivalltalk.nl
tm.menard-inc.com
webmail.haltonpolice.ca
wirehive.net
www.bluefin.com
www.bteva.co.il
www.client.abermed.com
www.compliancefacts.com
www.dia.govt.nz
www.member.abermed.com
www.puroast.com
wyethmama.com.hk
zukes.com

Other certificates including the domain name incapsula.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsskvixxrEoR+PfT21i4F
dq9GO6K4heX0Rafdl3rlVBsapuSUQ1RmneFGzjtc8JmZeXegHOaxL8+9+2t1gogp
QccrAlUfph7f+31E9ENqmfOWfyTn9wp9A/mSm+BjDoSF9KRl//pXX1eiKKo4GnRQ
gv0kLEa7MAno/mPCUM+J+vWJEsYkjgrfesz57uL6uiH0kNh7xmxksaXuj9TLgAQk
TlIlQkRx4vudBo0Q6eBk7hfaSZUKwUsPOTCUiWLrLVX2lX1OcsI4COPLDeZItOXN
w8J3x5BszeB9hRzPDM++CBqvyYO75bUyU5U3KTZ4PJaFrUENEn7G3Jg6KneX59cN
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492170707696629908908425533243893536178794
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-27 06:00:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-21 14:55:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22569626658269684204833565989197846205808169812427592706942957724898422850341923207689563842177336284124090483422576909099396860465363175724058260351045254363991884978435145852895184965454842769875881438281079328049113244627305647931224901082917986499945584703163345365226679910293691578070294769662668338624308151484840339241486879845004233573205990642805450897090991102650656739479494511479199811935795006245839069270726188672211681335721105490422220614680661938151674934193753866696427371936996292628294885602716389309884835268722658233272816792044636630248807382749708169464428189587763418633448609046035221122479
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1853 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ausdiginc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.babyunitedllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bamba.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.behealthybeactive.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bishulim.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boobooi.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buynespresso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.campbowwow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.choosewellness.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.classmethod.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.closedforgood.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.copartmea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dolce-gusto.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dziecko.nestle.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fagalbolivia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fbphotcontest.kokokrunch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firewoodfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gardengourmet.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.godinezunidos.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ie.spotoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jadeworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jeu-vittel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leadsmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestlebarnmat.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.npkavosaparatai.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pfnet.provident.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portal.achieve3000.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.precisionplanting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.proplan.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.provident.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purina.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rvsalescentre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sabramezze.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sercae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sidemates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spotcapitalmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spotoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.startstrong.nestle.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.studioscene.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tivalltalk.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.utorrent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wirehive.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wyethmama.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wynyardgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zukes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.pagar.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ausdiginc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'babyunitedllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bamba.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'behealthybeactive.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bishulim.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluefin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boobooi.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bteva.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buynespresso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campbowwow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'choosewellness.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compliancefacts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'copartmea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dia.govt.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dolce-gusto.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fagalbolivia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gardengourmet.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'godinezunidos.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igss.americansystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jadeworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeu-vittel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leadsmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maps.simcoe.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydev.cardconex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestlebarnmat.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'npkavosaparatai.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnerdev.cardconex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perftest.nationalexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proplan.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'provident.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purina.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puroast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rvsalescentre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sabramezze.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sercae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sidemates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spotcapitalmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studioscene.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tivalltalk.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tm.menard-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.haltonpolice.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wirehive.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluefin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bteva.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.client.abermed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.compliancefacts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dia.govt.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.member.abermed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.puroast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wyethmama.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zukes.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cb6549e864ef6427595790f9b10735cb3a70cbd9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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