incapsula.com

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 44:ab:5b:93:99:40:4f:cc:19:3f:aa:9b:2a:b7:57:70 was issued on by Sectigo Limited.

With 74 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=incapsula.com,OU=Domain Control Validated+OU=Hosted by Incapsula Inc+OU=PositiveSSL Multi-Domain

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 44:ab:5b:93:99:40:4f:cc:19:3f:aa:9b:2a:b7:57:70
Serial Number (int): 91277243869426511367832230300875183984
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 30:b9:92:de:a8:e4:29:39:b4:62:8a:f1:b7:3c:88:02:92:21:60:de
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): fc:d1:7e:0d:f7:e1:b1:49:ca:43:68:e4:89:ec:4b:28:45:0c:cc:59
Fingerprint (sha256): 21:4f:eb:6a:93:09:b0:51:3e:10:bc:cd:86:70:bb:d2:b8:93:dc:6a:0a:43:fc:69:6b:a9:33:04:58:81:ae:e6

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate incapsula.com

74

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.3ss.hays.com
*.aqualogy.net
*.careoregon.org
*.daiwa.co.jp
*.elog-elster.com
*.emea.boservices.dolce-gusto.com
*.es.emea.boservices.dolce-gusto.com
*.finance.liga-stavok.com
*.fr.optionweb.com
*.fukuibank.co.jp
*.geindustrial.com
*.hk.apac.boservices.dolce-gusto.com
*.integrios.com
*.kolcraft.com
*.lowndessheriff.com
*.maggi.es
*.md.com
*.nestle.pt
*.purina.com.my
*.redirect.nestle.com
*.ref360.com
*.reoconnex.com
*.sgdcrecer.net
*.silverdollarcity.com
*.smap.ap.sony.com
*.sony.com.ph
*.sony.com.sg
*.stag.m.eservice.deerparkdelivery.com
*.stag.m.eservice.icemountaindirectdelivery.com
*.stag.m.eservice.nestlepurelifedelivery.com
*.stag.m.eservice.ozarkadelivery.com
*.stag.m.eservice.polandspringdelivery.com
*.stag.m.eservice.zephyrhillsdelivery.com
*.tevamo.hu
*.toho-ad.com
3ss.hays.com
aqualogy.net
careoregon.org
dev.brt.enterprise.co.uk
elog-elster.com
emea.boservices.dolce-gusto.com
finance.liga-stavok.com
fr.optionweb.com
fukuibank.co.jp
geindustrial.com
integrios.com
kolcraft.com
lowndessheriff.com
maggi.es
md.com
nestle.pt
purina.com.my
ref360.com
reoconnex.com
security.gecentricity360.com
sgdcrecer.net
silverdollarcity.com
smap.ap.sony.com
sony.com.ph
sony.com.sg
st-blogs.gepower.com
st-myplant.gejenbacher.com
st-myplant4.gejenbacher.com
stag.m.eservice.deerparkdelivery.com
stag.m.eservice.icemountaindirectdelivery.com
stag.m.eservice.nestlepurelifedelivery.com
stag.m.eservice.ozarkadelivery.com
stag.m.eservice.polandspringdelivery.com
stag.m.eservice.zephyrhillsdelivery.com
tevamo.hu
toho-ad.com
www.finandina.com
www.sgdcrecer.net

Other certificates including the domain name incapsula.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxth++e7TB+gfKiznYzym
Hc/rZvVlNwxn0ylxom2XjiK+X86nAQtroZoP/nchVbbHPEtCwSfngTBVM+WMmaUY
2qEEVXIea9nJK9j6lDwwx7DNWnBMTTKSsG85A3TzmbUipvwFf1S6Kue2s8fcDfls
CPOqaW1syU0pgMKajyWk5ZLf9VoaV/ZDDM2p3iQUvl5N8DFoYJEail/esOCm01l5
yOvG31am1VnyTF5CBtcCR0E/AQTHii4TGsivbg4nsmzJRmRNNV5lNzsXFLp1Gy9p
1biWtKIqOBw1uryv7TDbgVTMSK6obAQ02AWSVoe52PL9acShqyH8H84NIrwdXjVA
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 91277243869426511367832230300875183984
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PositiveSSL Multi-Domain'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25101942540389273452365195574085832580103735277290032553110344456089386400336134802998640356088787149673457511196961133046784984703174999753804530896078877404182361100672161657145270551487198935013530153818460956126304403584793952058526370952226010155536563111584166355442295341640804391503304669517259168537140711426466442359411812429214245873393381488214979046645790160158747897410768098049621315855379609522799866546728800009017613271587713118186159028379465185029647035963756732605831455244199931267830472411624132230241060306154524672146433357330868774177097056515930176584953696139012485022789032735122700714087
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							30b992dea8e42939b4628af1b73c8802922160de
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1658 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3ss.hays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aqualogy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.careoregon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daiwa.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elog-elster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emea.boservices.dolce-gusto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.es.emea.boservices.dolce-gusto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finance.liga-stavok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fr.optionweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fukuibank.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geindustrial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hk.apac.boservices.dolce-gusto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.integrios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kolcraft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lowndessheriff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maggi.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.md.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestle.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purina.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redirect.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ref360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reoconnex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sgdcrecer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.silverdollarcity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smap.ap.sony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sony.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sony.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stag.m.eservice.deerparkdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stag.m.eservice.icemountaindirectdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stag.m.eservice.nestlepurelifedelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stag.m.eservice.ozarkadelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stag.m.eservice.polandspringdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stag.m.eservice.zephyrhillsdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tevamo.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toho-ad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3ss.hays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqualogy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careoregon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.brt.enterprise.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elog-elster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emea.boservices.dolce-gusto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finance.liga-stavok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.optionweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fukuibank.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geindustrial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kolcraft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lowndessheriff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maggi.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'md.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestle.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purina.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ref360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reoconnex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security.gecentricity360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgdcrecer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silverdollarcity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smap.ap.sony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sony.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sony.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-blogs.gepower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-myplant.gejenbacher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-myplant4.gejenbacher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.m.eservice.deerparkdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.m.eservice.icemountaindirectdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.m.eservice.nestlepurelifedelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.m.eservice.ozarkadelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.m.eservice.polandspringdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.m.eservice.zephyrhillsdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tevamo.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toho-ad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.finandina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sgdcrecer.net'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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