incapsula.com

- Incapsula Inc -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 01:31:ad:0a:66:dd:f8:02:7e:4f:75:a0 was issued on by GlobalSign nv-sa.

With 91 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:31:ad:0a:66:dd:f8:02:7e:4f:75:a0
Serial Number (int): 369539536263792335317333408
Serial Number lenght: 89 bits, 12 octets

SubjectKeyId: 8f:31:c8:f9:47:73:ed:08:72:1c:23:a3:6f:93:11:70:e0:f8:bf:c0
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 11:c9:43:9b:d9:df:f7:54:30:33:75:f1:5c:20:5b:f9:15:20:ee:9f
Fingerprint (sha256): 19:4e:ad:0e:4b:33:25:52:76:15:23:c8:fe:de:c1:ca:6b:a4:e6:42:50:c1:2c:36:63:5e:d6:74:3e:38:77:58

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate incapsula.com

91

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.aerocrs.com
*.almax.com
*.amd4u.com
*.apihealthcare.com
*.atesa.es
*.blog1.water-challenge.com
*.bmis-chronos.com
*.caratello.ch
*.clearent.net
*.compute.hk
*.dev.mms.mckesson.com
*.dev.supplier.mckesson.com
*.dolce-gusto.com.ph
*.dtsc.ca.gov
*.dunbararmoredinvoice.com
*.euromania.com
*.fabricguru.com
*.firstbullion.com
*.herouxdevtek.com
*.kogent.co.jp
*.mewebsync.com
*.momentosnestle.com
*.mooremedical.com
*.nespressopromotion.com.au
*.nestlehealthykids.pk
*.pattersonplusrewards.com
*.peachy.co.uk
*.primefortune.be
*.psychicsource.com
*.rejuveneticsglobal.com
*.rumbo.de
*.scatech.net
*.second-life.nespresso.com
*.shakatime.com
*.starlabs.digital
*.teaching-in-japan.gaba.co.jp
*.tealfridgeproject.com.au
*.test1.latableadessert.fr
*.test1.nestle-waters.com
*.test1.nestle.com
*.test1.nestleprofessional.com
*.test2.latableadessert.fr
*.test2.nestle-waters.com
*.test2.nestlehealthscience.com
*.tipranks.com
*.track.nestlefamily.ch
*.training.nestle.com
*.troplaughlin.com
*.usgboral.com
*.walbusch.de
*.wooot.com.au
almax.com
amd4u.com
bmis-chronos.com
business.t-mobile.com
caratello.ch
chra.mbie.govt.nz
collaboration.herouxdevtek.com
counterterrorexpo.com
csatoday.iaai.com
dtsc.ca.gov
dunbararmoredinvoice.com
firstbullion.com
herouxdevtek.com
imgapi.fanappz.com
kogent.co.jp
mewebsync.com
momentosnestle.com
my.caltex.com.au
my.good2give.org.au
nespressopromotion.com.au
nestlehealthykids.pk
pattersonplusrewards.com
peachy.co.uk
prefarm4.sat.gob.gt
primefortune.be
rejuveneticsglobal.com
reviews.cubic.com
rumbo.de
second-life.nespresso.com
shakatime.com
starlabs.digital
tealfridgeproject.com.au
walbusch.de
westfieldcomics.com
wog.truck-n.com
wooot.com.au
www.counterterrorexpo.com
www.thefilebay.com
www.westfieldcomics.com

Other certificates including the domain name incapsula.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuMfEICqhuath395iBKu
8FsHZBB5FHUjjjA9VE1PFtiUpUj8AaMHidI9pcn9uaDL/aex52R2ToWOjirQuJIa
vVQZDOQS101DBRm0LN00aVfGCUoQzEjC4axnB0E2WoGNj2RSw4cSterEP0cl03Y2
apeL/RaZrULAcTm2lVDRMXA652WYRrde+XkMImHsXsQZmDXEgZuXWjF/+IkcAZg7
KcLjbLVMLQBozE1e7+2FY8cn3aionVWIgbl0EubM4r6IK7uUfV+OmtpecSA4CcOt
fszJw1t4oka5vm2ySYc5SZY6FJvajFeSRepHtBy7/xjNYDgApUTlTAf6AT8u2cPU
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 369539536263792335317333408
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-13 15:52:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-20 13:30:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25107182092986911705264705748647509541415753282264323280382833637564663691167836344824238619190740602288525391368178841293339032698523615020656053199226762883331504127359908087846441260774410444032964872840612373288331719214448927148346661738775010905698499808244955322578071852987899322471293772994292414108721120917842164921436867594483291564374447019117797298496932206478522625802240283070842915080594850638347240013204175429092349646684591321555040315671604149898739095471798955148916884349465108765236326988676797771081453688701471288759704792903692424008906167466158516752964736239593867866605946126121054753967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1854 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aerocrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.almax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amd4u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apihealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atesa.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blog1.water-challenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bmis-chronos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caratello.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clearent.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.compute.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.mms.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.supplier.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dolce-gusto.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dtsc.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dunbararmoredinvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.euromania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fabricguru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firstbullion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.herouxdevtek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kogent.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mewebsync.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.momentosnestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mooremedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nespressopromotion.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestlehealthykids.pk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pattersonplusrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peachy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.primefortune.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.psychicsource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rejuveneticsglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rumbo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scatech.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.second-life.nespresso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shakatime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.starlabs.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teaching-in-japan.gaba.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tealfridgeproject.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test1.latableadessert.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test1.nestle-waters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test1.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test1.nestleprofessional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test2.latableadessert.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test2.nestle-waters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test2.nestlehealthscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tipranks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.track.nestlefamily.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.training.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.troplaughlin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usgboral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.walbusch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wooot.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'almax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amd4u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmis-chronos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.t-mobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caratello.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chra.mbie.govt.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaboration.herouxdevtek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'counterterrorexpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csatoday.iaai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dtsc.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dunbararmoredinvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstbullion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herouxdevtek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imgapi.fanappz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kogent.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mewebsync.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'momentosnestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.caltex.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.good2give.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nespressopromotion.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestlehealthykids.pk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pattersonplusrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peachy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prefarm4.sat.gob.gt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primefortune.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rejuveneticsglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reviews.cubic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rumbo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'second-life.nespresso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shakatime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starlabs.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tealfridgeproject.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walbusch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westfieldcomics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wog.truck-n.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wooot.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.counterterrorexpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thefilebay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westfieldcomics.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8f31c8f94773ed08721c23a36f931170e0f8bfc0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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