incapsula.com

- Incapsula Inc -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 11:21:5c:9b:e5:ff:d4:c2:a3:90:fe:b5:95:f3:2e:4a:4c:46 was issued on by GlobalSign nv-sa.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:5c:9b:e5:ff:d4:c2:a3:90:fe:b5:95:f3:2e:4a:4c:46
Serial Number (int): 1492261277394881274248968711222778676268102
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 11:e0:c3:c0:43:e1:33:a0:d3:ec:be:9f:a1:bd:47:ee:d8:22:15:61
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 3f:8f:e0:61:02:1e:c0:c5:4f:38:13:05:ce:ae:6f:85:e0:a8:b2:4e
Fingerprint (sha256): 1c:a1:18:5c:dc:e0:16:d8:65:00:53:55:13:07:52:08:6e:59:41:12:2c:a2:68:37:1b:cc:d3:d5:ba:bf:9e:fe

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate incapsula.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.alacenallena.com.mx
*.atelier.nestlefamily.ch
*.boursepro.com
*.brooksmacdonald.com
*.cerelac.com.vn
*.cokecce.com
*.confettiblue.com.au
*.cuaa.edu
*.dcs.qld.gov.au
*.dga.org
*.dolce-gusto.be
*.emergency.qld.gov.au
*.enrichwithpurina.ca
*.foolcdn.com
*.gameinformer.com
*.gosupermodel.com
*.gratifyfoods.com
*.halsanskok.no
*.hybriddc.com.br
*.ie.spotoption.com
*.inovatemarketing.com
*.kamagrauk.com
*.klepper.net
*.m.nestle-purelife.us
*.maximarkets.ru
*.mobilecover.sg
*.monkeytracker.cz
*.nanprobb.com
*.nestle.ci
*.nestlecontigo.com.ve
*.nestlefamily.ch
*.nestlewaterspa.com
*.optifibre.fr
*.osemsnacks.co.il
*.proplan-hond.nl
*.proplan-hund.de
*.proplanvetdirect.com
*.purina-friskies.gr
*.rays.net
*.redibids.com
*.serenataflowers.com
*.siteblindado.com
*.siteblindado.com.br
*.skyfenceqa.com
*.soundmindz.org
*.startsuccess-nescafe.com.ua
*.supercoat.com.au
*.tritondigital.net
*.uxns.com.mx
*.vistaone.com
api.truck-n.com
app.oration.com
boursepro.com
cerelac.com.vn
confettiblue.com.au
dga.org
dolce-gusto.be
enrichwithpurina.ca
foolcdn.com
gratifyfoods.com
halsanskok.no
hawaiianweddingplace.com
hybriddc.com.br
inovatemarketing.com
kamagrauk.com
klepper.net
maximarkets.ru
mobilecover.sg
nanprobb.com
nauticalgoldjewelry.com
nestlecontigo.com.ve
nestlefamily.ch
nestlewaterspa.com
optifibre.fr
osemsnacks.co.il
proplan-hond.nl
proplan-hund.de
proplanvetdirect.com
purina-friskies.gr
quintoandar.com.br
redibids.com
secure.falconetix.com
services.kosservizi.com
sodastream.co.il
soundmindz.org
startsuccess-nescafe.com.ua
supercoat.com.au
tickets-rtl.rentatoll.net
user.quintoandar.com.br
uxns.com.mx
vistaone.com
www.hawaiianweddingplace.com
www.nauticalgoldjewelry.com
www.quintoandar.com.br
www.sodastream.co.il

Other certificates including the domain name incapsula.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn84H88OceO4IPSTnJri7
3L65zkOysqgTftq516ZtFZRqxUKvwf0vppR5t6A+7Jw8GKuo+bW80zBD8+uCHqDO
krwwz3UbrXWUO1AxEsrfkF++amWXV1XxC2/E769vGMTq0mz0y+imS0Z0N/759+ft
aV8nZgBNqFCJRHZ7lXlCKKOyiJDsN7LpFu6T/sRLQnE77PYPWx4qm/tojS1IasML
caehQa+FSvvquyIWZyKTLOs1igDavipam2U3voGsjyQX/l2Nx7BOEpyycLQxClh9
gxsyE9PLFF1PDoDbGWn991iXddSd2dNFUm3OPpoL2LthE3ObiUwTpFbS9N4E0ADj
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492261277394881274248968711222778676268102
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-18 14:45:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-19 11:22:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20173488193512405201513584464389802044111296547533549928576071287014089645392569352659154288577055829707853449940836800381556187041129597063981594063014669886453974894227525921044731048001176810351831125658501697495474551878416702521669851346430857880946856962936699805759455963739357773933642423146697468051388850730273335219790727040163632399000286730933356679136611377145134769952889374170066466415508267932745165271445399662725588495649261032128557354623350110757974286787024175966675713903472368709565745626220654603274893178924024701618582731657615625595822899093753551030461481891884257956176054812646918120433
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1842 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alacenallena.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atelier.nestlefamily.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boursepro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brooksmacdonald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cerelac.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cokecce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.confettiblue.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cuaa.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dcs.qld.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dga.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dolce-gusto.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emergency.qld.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enrichwithpurina.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foolcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gameinformer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gosupermodel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gratifyfoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.halsanskok.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hybriddc.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ie.spotoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inovatemarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kamagrauk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.klepper.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.nestle-purelife.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maximarkets.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mobilecover.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.monkeytracker.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nanprobb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestle.ci'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestlecontigo.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestlefamily.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestlewaterspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.optifibre.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.osemsnacks.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.proplan-hond.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.proplan-hund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.proplanvetdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purina-friskies.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rays.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redibids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.serenataflowers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.siteblindado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.siteblindado.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skyfenceqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soundmindz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.startsuccess-nescafe.com.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supercoat.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tritondigital.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uxns.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vistaone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.truck-n.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.oration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boursepro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cerelac.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'confettiblue.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dga.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dolce-gusto.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enrichwithpurina.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foolcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gratifyfoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halsanskok.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawaiianweddingplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hybriddc.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inovatemarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kamagrauk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klepper.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maximarkets.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilecover.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanprobb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nauticalgoldjewelry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestlecontigo.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestlefamily.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestlewaterspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optifibre.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osemsnacks.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proplan-hond.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proplan-hund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proplanvetdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purina-friskies.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quintoandar.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redibids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.falconetix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.kosservizi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sodastream.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soundmindz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startsuccess-nescafe.com.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supercoat.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets-rtl.rentatoll.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user.quintoandar.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uxns.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vistaone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawaiianweddingplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nauticalgoldjewelry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quintoandar.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sodastream.co.il'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							11e0c3c043e133a0d3ecbe9fa1bd47eed8221561
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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