incapsula.com

- Incapsula Inc -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 48:37:f2:4a:6b:bd:3d:35:d4:89:95:25 was issued on by GlobalSign nv-sa.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 48:37:f2:4a:6b:bd:3d:35:d4:89:95:25
Serial Number (int): 22350555812726994095506560293
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 4b:3d:83:9e:52:2e:1f:f0:d4:d8:6e:3f:d9:93:9f:53:d3:b9:1f:6f
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 68:12:f2:5f:1e:f3:69:11:2c:35:8d:92:f9:01:ed:62:83:dc:af:95
Fingerprint (sha256): 21:dc:47:16:10:e9:d7:6d:97:67:80:f3:47:77:1d:4b:6c:f5:67:36:4c:43:2c:7f:23:88:ce:eb:88:0b:e7:c5

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate incapsula.com

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.actie.beneful.nl
*.apps.nestle.com.co
*.apps.wyethnutrition.com.vn
*.autodata-group.com
*.beneful.nl
*.bizj-staging.com
*.casinolistings.com
*.cheapcaribbean.com
*.colincowiecelebrations.com
*.consultaalexperto.proplan.com.ve
*.dead-sea-wonder-of-nature.com
*.designashirt.com
*.dev.crndev.chick-fil-a.com
*.df-bet.org
*.dfb-flashgames.com
*.dogstrust.org.uk
*.dolce-gusto.cl
*.fantasylandcostumes.com.au
*.forter.com
*.fult.com
*.georgiaaquarium.org
*.getstocks.com
*.gtsgamesreg.com
*.iad.zamsh.incapsula.mobi
*.ijobmaster.com
*.indez.com
*.integration.spotoption.com
*.isatsb.com
*.just-eat.no
*.kicqstart-primers-sigmaaldrich.com
*.magellanprovider.com
*.middleeast.emea.boservices.dolce-gusto.com
*.morrgear.com
*.murata.com.cn
*.nestea.com
*.npptcefs-ru.com
*.obmen.cc
*.orderit.ca
*.outreachtime.com
*.purina-adventuros.de
*.ru.emea.esb.dolce-gusto.com
*.saffrron.com
*.seaworld.com
*.shuttledirect.com
*.spotoption.com
*.stage.nestea.com
*.stg-smp.secondmarket.com
*.thebountybox.com
*.thecampaignworkshop.com
*.transitcard.ru
*.trionlogics.com
*.uksv.net
*.us.ams.boservices.dolce-gusto.com
*.vemapos.com
*.yenomafadym.com
*.zukes.dog
*.zyjsmacznieizdrowo.pl
apps.wyethnutrition.com.vn
autodata-group.com
beneful.nl
casinolistings.com
dead-sea-wonder-of-nature.com
designashirt.com
dev.crndev.chick-fil-a.com
dogstrust.org.uk
dolce-gusto.cl
fantasylandcostumes.com.au
fult.com
georgiaaquarium.org
indez.com
integration.spotoption.com
isatsb.com
just-eat.no
kicqstart-primers-sigmaaldrich.com
middleeast.emea.boservices.dolce-gusto.com
nestea.com
npptcefs-ru.com
obmen.cc
purina-adventuros.de
saffrron.com
shuttledirect.com
stage.nestea.com
test.lasvc.br.monsanto.com
thecampaignworkshop.com
trionlogics.com
us.ams.boservices.dolce-gusto.com
vemapos.com
zukes.dog
zyjsmacznieizdrowo.pl

Other certificates including the domain name incapsula.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3JD169ZesUlNPzYeiZ5
udKqUze1ieL26HRWKZJyvZGCWkdpQfb3uAaXnjkVd8K6uZRTJg3pAp4eB3aRiNWo
tT4Aj+ro1L3v7O/yVcbERc6K6gACeEFzqH2ry61rG4C1RAY9fb83lOZIQVb2mhv0
KSbRgMIbgkpBgwHLsA6iAvhhgxaEHQ9XwnxZR2RAoyU78e8dVloKmmwdhq16PC+F
9qg4qWc4PKxS+8GbeA2tnBpgnOVU82vNyPZxDSz+qNP3OlJ3cJ1BKKQzY6AMBXLC
NuRo3iHFAvYGWZprR8e3FBcXMLvkXACpMXehtjuiW3lfgM710FKMdCx0DpBOFVU+
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 22350555812726994095506560293
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-20 20:27:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-27 05:20:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25682722084513396688357014355277656349476065256435936107862854928194460385168139929485571259045905846611099233363825324896487127744082428211166913809525393772418452673292373326037873331254201328568061851385750407507088525195272021671126671716277302658226337355190430622996200292846809181985788660897352494091962778173014567936936767091861672936872760577573994649650557239898486748490357695589377639079639719032089311058458859914809741071788927105848226429461588249213729557577068702286266464344055957058718394223213756341893894225384346612298474631807917976947756583287433795194110786991110547586858703798436665573091
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1904 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.actie.beneful.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apps.nestle.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apps.wyethnutrition.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autodata-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beneful.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bizj-staging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.casinolistings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cheapcaribbean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.colincowiecelebrations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.consultaalexperto.proplan.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dead-sea-wonder-of-nature.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.designashirt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.crndev.chick-fil-a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.df-bet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dfb-flashgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dogstrust.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dolce-gusto.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fantasylandcostumes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fult.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.georgiaaquarium.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getstocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gtsgamesreg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iad.zamsh.incapsula.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ijobmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.integration.spotoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.isatsb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.just-eat.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kicqstart-primers-sigmaaldrich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.magellanprovider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.middleeast.emea.boservices.dolce-gusto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.morrgear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.murata.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.npptcefs-ru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.obmen.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orderit.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outreachtime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purina-adventuros.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ru.emea.esb.dolce-gusto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saffrron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seaworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shuttledirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spotoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.nestea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-smp.secondmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebountybox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thecampaignworkshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.transitcard.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trionlogics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uksv.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us.ams.boservices.dolce-gusto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vemapos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yenomafadym.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zukes.dog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zyjsmacznieizdrowo.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.wyethnutrition.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodata-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beneful.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casinolistings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dead-sea-wonder-of-nature.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designashirt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.crndev.chick-fil-a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dogstrust.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dolce-gusto.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fantasylandcostumes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fult.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'georgiaaquarium.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integration.spotoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isatsb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'just-eat.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kicqstart-primers-sigmaaldrich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'middleeast.emea.boservices.dolce-gusto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'npptcefs-ru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obmen.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purina-adventuros.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saffrron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shuttledirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.nestea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.lasvc.br.monsanto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecampaignworkshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trionlogics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.ams.boservices.dolce-gusto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vemapos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zukes.dog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zyjsmacznieizdrowo.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4b3d839e522e1ff0d4d86e3fd9939f53d3b91f6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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