incapsula.com

- Incapsula Inc -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 21:7d:a8:33:68:47:98:32:17:ec:63:32 was issued on by GlobalSign nv-sa.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 21:7d:a8:33:68:47:98:32:17:ec:63:32
Serial Number (int): 10364915357423427618547196722
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: c1:b0:2f:7e:34:df:cb:7e:58:ff:ba:46:fc:17:40:26:61:27:35:46
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 98:a2:b8:df:34:90:52:24:fc:85:ef:cb:e6:7c:5b:f0:79:e4:f5:f6
Fingerprint (sha256): 18:4f:3d:86:5c:c9:68:3e:0a:a1:02:bc:4a:0d:95:94:44:a7:6e:47:45:43:c0:73:db:21:78:69:0c:ea:1f:9e

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate incapsula.com

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.abertistelecom.com
*.adgar.com
*.alacenallena.com.mx
*.buebchen.de
*.capita-independent.co.uk
*.capita-one.co.uk
*.ccsave.toyota-europe.com
*.cloud-hoth.illumina.com
*.coffeetogo.co.uk
*.consensuscorpdev.com
*.dentalvisionplans.com
*.dev.reprintsdesk.com
*.dolce-gusto.sk
*.equinenz.com
*.equinenz.nz
*.eritemadelarosacea.es
*.exito.com
*.gallagher.com
*.gebuy.harveynorman.com.au
*.globalintplay.com
*.gogiftsonline.com
*.herbalsworld.com
*.hitzoneondemand.nl
*.homecare.co.uk
*.jhnet.com
*.jm.jumia.com
*.kamikano.com
*.karensheldoncatering.com.au
*.kpnspotify.com
*.kuhnrikonshop.com
*.marketdirect.com.au
*.mcdonalds.co.uk
*.moncampaign.com
*.moniker.com
*.mychickencoop.com.au
*.mypeoplenet.com
*.myvistarrewards.com
*.neptunefi.com
*.netmeds.com
*.nutrir-nestle.com.mx
*.paleoherousa.com
*.printpro.com.au
*.proservice.com
*.purinavets.com
*.spotoption.com
*.taxschool.com
*.tennisexpress.com
*.toyota-europe.com
*.tropicana.net
*.valeantaspirehigher.com
*.w88151.com
*.youngsseafood.co.uk
abertistelecom.com
alacenallena.com.mx
buebchen.de
capita-independent.co.uk
capita-one.co.uk
coffeetogo.co.uk
dolce-gusto.sk
equinenz.com
equinenz.nz
eritemadelarosacea.es
exito.com
gallagher.com
gebuy.harveynorman.com.au
haiku.northshore.org
haikutest.northshore.org
herbalsworld.com
hitzoneondemand.nl
homecare.co.uk
jhnet.com
karensheldoncatering.com.au
kpnspotify.com
kuhnrikonshop.com
marketdirect.com.au
moncampaign.com
moniker.com
mychickencoop.com.au
myvistarrewards.com
netmeds.com
nutrir-nestle.com.mx
paleoherousa.com
printpro.com.au
purinavets.com
taxschool.com
tennisexpress.com
valeantaspirehigher.com
w88151.com
youngsseafood.co.uk

Other certificates including the domain name incapsula.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xBUv6JJyv8Hs2GExpZ3
kbjBoU4PdvSGOOJhPhqg0eQ1d67NmGdeqxrFVj3mZI1ufDzaPfwomustvlr09rpF
L5P2f7vZfkhdTvWCXmZQRMkuBtXEr+7Thr3fDCH4Fc4Q1glW5jwy+75WmiufVMRs
hHlycOb0Uo0MJwTr/wGXGsQ8cWnwMWbVQSAIaMxSaB3JlUOydDzqMcKtEhjklLWf
n4/lNvXH7csVNZu+TRWTtaW5JjLkgjD8VG+Cu/BlkONQSZKuFhhT64A7VhSv4CEj
6gh7+ver6xaR6J/CJDQsBkRpnPN1owX1KQHD9f2yD44wWidzS+VdtcDA9sLAZeg2
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10364915357423427618547196722
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-19 10:20:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-20 10:20:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26644335488295144075766566674287250043806015632331337350782637676712046239222348075239939938411257331946933534829042687594484545407860133326488520467982246019259621333716425400909716473023732665666353736810295637380362197056058483653446491827600807600123701253379254360019211757480299009483498594929106341837808435100403120704216426147200448253725750273211504253711216574626628304748824453318526965215753147767073987110537166941238667574240852700312085686667724131179175400790187852030678804642859092469832423543019836515970654590621567982766106495801236273991250471837260298423381719508361893632242828661660504831647
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1753 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abertistelecom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adgar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alacenallena.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buebchen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capita-independent.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capita-one.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ccsave.toyota-europe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cloud-hoth.illumina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coffeetogo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.consensuscorpdev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dentalvisionplans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.reprintsdesk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dolce-gusto.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.equinenz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.equinenz.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eritemadelarosacea.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exito.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gallagher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gebuy.harveynorman.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.globalintplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gogiftsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.herbalsworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hitzoneondemand.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homecare.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jhnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jm.jumia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kamikano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.karensheldoncatering.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kpnspotify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kuhnrikonshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marketdirect.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mcdonalds.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moncampaign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moniker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mychickencoop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mypeoplenet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myvistarrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neptunefi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.netmeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nutrir-nestle.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paleoherousa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.printpro.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.proservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purinavets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spotoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taxschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tennisexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toyota-europe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tropicana.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valeantaspirehigher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.w88151.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youngsseafood.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abertistelecom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alacenallena.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buebchen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capita-independent.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capita-one.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coffeetogo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dolce-gusto.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equinenz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equinenz.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eritemadelarosacea.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exito.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gallagher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gebuy.harveynorman.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haiku.northshore.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haikutest.northshore.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herbalsworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hitzoneondemand.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homecare.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karensheldoncatering.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpnspotify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuhnrikonshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketdirect.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moncampaign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moniker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mychickencoop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myvistarrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netmeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutrir-nestle.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paleoherousa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'printpro.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purinavets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taxschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tennisexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valeantaspirehigher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w88151.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youngsseafood.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c1b02f7e34dfcb7e58ffba46fc17402661273546
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00269caa4624023aa3675c27e18e83fc5da44e4c708f0ed02c288ea97a3aea13264a61006bb41426a532bed11fbc5f9f4516330327f38fec56117930f2f7e3d1330a7e427dea574775682db2af226a96a0aa0b15783fe7c0a10ccb12e3f244150c29663576acd92e7d1bf4d2482608d14ea939cd04bb7ddc7628c0b60846b4646bdd13a14498da15af110aada8f256898719d0dffb2f994962b2fee13fb801c11c24d4e3da63a2fdf795e04bd2bcb72ed8ec8df67e96142d139cb09cf63f8b6a156ded5c02e370bc7497d0d8c7159a2b7d741dfa37c46ca6f060662e307e3978aae1404828986a2b6e7c3bdaa1708bd36f4649c903edd4638d5382d9f618093d2c