incapsula.com

- Incapsula Inc -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 11:1d:a6:de:4d:a0:02:5b:91:ea:fa:3f was issued on by GlobalSign nv-sa.

With 138 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:1d:a6:de:4d:a0:02:5b:91:ea:fa:3f
Serial Number (int): 5297092029338504468521220671
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 91:93:42:e4:87:a7:aa:39:a5:e3:a6:00:5a:ab:2f:60:4f:fb:e2:46
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 78:78:04:2e:a6:ef:eb:99:99:7d:16:fb:15:5a:d2:e0:0e:78:6e:56
Fingerprint (sha256): 23:3f:3b:0a:31:17:64:94:22:1b:f7:7f:94:c6:c9:ac:76:b6:8b:d1:09:6a:ff:d2:af:2f:76:7d:8d:66:45:6e

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate incapsula.com

138

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.42842820.com
*.42842821.com
*.6575888.com
*.acmemerch.com.au
*.amecfw.com
*.atlantisparadise.com
*.australianruralsupplies.com.au
*.azu88.com
*.basefitready.com
*.brigalowcountry.com.au
*.bugrugs.com.au
*.c21stores.com
*.cicasadebolsa-online.com
*.cinemacity.hu
*.citynews.sg
*.coin178.com
*.cqgame.cc
*.cs-best.com
*.d2668.com
*.d2686.com
*.d8win.com
*.decathlon.com.tr
*.dolce-gusto.se
*.drones-r-us.com.au
*.enterprise.com
*.enterprisecarshare.co.uk
*.ezshield.com
*.facebook.nestle-purelife.us
*.fandaminis.com.au
*.fareverse.com
*.finmarket.com
*.giffgaff.com
*.ipc.be
*.kbbarbercollege.com
*.kelloggs.com
*.kemwel.com
*.kl686.com
*.kokoheim.com.au
*.lbgj7.net
*.lesara.dk
*.lesara.se
*.livety.com
*.looktour.net
*.mad.zamsh.incapsula.mobi
*.manage.rackspace.com
*.metrobank.plc.uk
*.mnh-prevention.fr
*.moevenpick-eis.de
*.mylunchclub.com.au
*.nationaltheatre.org.uk
*.nexfolio.com
*.nexus-trade.com
*.nyerjanestlevel.hu
*.onnen.fi
*.onoffapp.com
*.ou.edu
*.ozon.ru
*.p-store.net
*.prestigegifting.co.uk
*.printeroutlet.com.au
*.pro-immigration.com
*.recruitech.com
*.riobilheteunico.com.br
*.scarpantoniwines.com
*.scuderia-autoart.com
*.sfc.hk
*.soulfulonline.com.au
*.starttalking.gr
*.tevix.net
*.tor.zamsh.incapsula.mobi
*.trs.texas.gov
*.view-master.com
*.vitalnutrients.net
*.vividseats.com
*.wearebakers.co.uk
*.wellingtonnz.com
*.wid-usb.com
*.xtendimaxapplicationrequirements.com
*.zrh.zamsh.incapsula.mobi
42842820.com
42842821.com
6575888.com
acmemerch.com.au
australianruralsupplies.com.au
azu88.com
brigalowcountry.com.au
bugrugs.com.au
c21stores.com
cicasadebolsa-online.com
cinemacity.hu
citynews.sg
coin178.com
cs-best.com
d2668.com
d2686.com
d8win.com
decathlon.com.tr
dolce-gusto.se
drones-r-us.com.au
enterprisecarshare.co.uk
fandaminis.com.au
fareverse.com
ipc.be
kbbarbercollege.com
kemwel.com
kl686.com
kokoheim.com.au
lbgj7.net
lesara.dk
lesara.se
livety.com
moevenpick-eis.de
my.gepower.com
mylunchclub.com.au
nexfolio.com
nyerjanestlevel.hu
onnen.fi
onoffapp.com
ozon.ru
p-store.net
prestigegifting.co.uk
printeroutlet.com.au
recruitech.com
riobilheteunico.com.br
scarpantoniwines.com
scuderia-autoart.com
shop.bernina.com.au
shop.lowrange.tv
soulfulonline.com.au
starttalking.gr
trs.texas.gov
view-master.com
vitalnutrients.net
waypoint-beta.imperva.com
wearebakers.co.uk
wellingtonnz.com
wid-usb.com

Other certificates including the domain name incapsula.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxL+mVob32Kmt0nCF5AtE
k3mV9mgAmccYt5X0BP+gxsI6m3lWaZg8Lu6pIHQdUc+xkP2SW9u1k5SEVz8VPwsY
Njp5xrmP3H06BCMU1PQhNneGQDz4lLdRVDeUq/I+wkDlbpUXRg7EigSKo1Xie/VR
XP0C0jrvD0eiKsS8EnSfljMdNyrL3bElW2FNBTRnRKqyif4Sawpibe/B0EmxuaxI
oA9UDCcaSRCpGYDFyaoTgubJswj+vnPNS4k6mygw0gJzA2DdLXor3RksuC28BrF4
qogMqylsG/BSicdfdDYZJAHA+E5YYci380+lW5LfEIBo2sJEICkGccAn0oacQsrX
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5297092029338504468521220671
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-29 05:27:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-06 12:31:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24837213791206481761460639106435648782196388611482093709493057917975313235307341324012290540949557365856444408969528018132396087086056667551993386490729607991891138045980738179228212381688393326049429362763554960956643522525063319877482656990620494431594929144722515603918967017642397842829154279619196733814448181875845876952253211157228827322277112941350099756278422210945912027977903953759984366940218442638092195303167282825227144907598111979051407369004127480113330510669185596020194570132922229814848698557143672144036019397610025079188739229468552204754910338199808058231299159819484079517497383375436455270283
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2492 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.42842820.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.42842821.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.6575888.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acmemerch.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amecfw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atlantisparadise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.australianruralsupplies.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azu88.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.basefitready.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brigalowcountry.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bugrugs.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.c21stores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cicasadebolsa-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cinemacity.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.citynews.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coin178.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cqgame.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cs-best.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.d2668.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.d2686.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.d8win.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.decathlon.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dolce-gusto.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drones-r-us.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enterprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enterprisecarshare.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ezshield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.facebook.nestle-purelife.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fandaminis.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fareverse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.giffgaff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ipc.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kbbarbercollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kelloggs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kemwel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kl686.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kokoheim.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lbgj7.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lesara.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lesara.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.looktour.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mad.zamsh.incapsula.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manage.rackspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metrobank.plc.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mnh-prevention.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moevenpick-eis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mylunchclub.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nationaltheatre.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nexfolio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nexus-trade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nyerjanestlevel.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onnen.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onoffapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ou.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ozon.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.p-store.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prestigegifting.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.printeroutlet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pro-immigration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.recruitech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.riobilheteunico.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scarpantoniwines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scuderia-autoart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sfc.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soulfulonline.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.starttalking.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tevix.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tor.zamsh.incapsula.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trs.texas.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.view-master.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vitalnutrients.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vividseats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wearebakers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wellingtonnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wid-usb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xtendimaxapplicationrequirements.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zrh.zamsh.incapsula.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '42842820.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '42842821.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '6575888.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acmemerch.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'australianruralsupplies.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azu88.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brigalowcountry.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bugrugs.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c21stores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cicasadebolsa-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinemacity.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citynews.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coin178.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cs-best.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd2668.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd2686.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd8win.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decathlon.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dolce-gusto.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drones-r-us.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterprisecarshare.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fandaminis.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fareverse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipc.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbbarbercollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kemwel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kl686.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kokoheim.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lbgj7.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesara.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesara.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moevenpick-eis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.gepower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylunchclub.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nexfolio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyerjanestlevel.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onnen.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onoffapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ozon.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p-store.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prestigegifting.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'printeroutlet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recruitech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riobilheteunico.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scarpantoniwines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scuderia-autoart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.bernina.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.lowrange.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soulfulonline.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starttalking.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trs.texas.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'view-master.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitalnutrients.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waypoint-beta.imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wearebakers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtonnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wid-usb.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							919342e487a7aa39a5e3a6005aab2f604ffbe246
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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