incapsula.com

- Incapsula Inc -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 11:21:c5:93:a3:87:f1:df:b1:cc:1f:eb:de:3a:64:67:48:9d was issued on by GlobalSign nv-sa.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:c5:93:a3:87:f1:df:b1:cc:1f:eb:de:3a:64:67:48:9d
Serial Number (int): 1492400803447926418985618083899879283181725
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 77:bd:0f:a5:90:92:d4:5b:48:43:9f:db:f9:34:97:76:30:27:8c:dd
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): ee:09:a8:70:57:c7:a9:fa:db:b1:c1:6c:92:29:b4:40:a2:0a:33:52
Fingerprint (sha256): 24:36:64:e4:e1:06:ad:0c:3f:7b:31:19:36:5a:88:96:3c:b4:fa:f4:90:99:f2:af:e1:85:b9:5a:10:14:c0:75

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate incapsula.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.altaineapps.com
*.autoeurope.de
*.bioreliance.com
*.blog.dolce-gusto.ua
*.brothsserveddaily.com
*.bzoptions.com
*.cailler.com
*.caldrea.com
*.carecatalog.purina.eu
*.caresharing.com
*.caroz.co.il
*.carswithheart.com
*.ceragon.com
*.cityofny.org
*.clearcreekrental.com
*.crazywinner.co
*.ddd003.net
*.deepeddymerch.com
*.dolce-gusto.hu
*.dolce-gusto.ua
*.domesticbin.com
*.gemeinsam-fuer-gesuendere-kinder.ch
*.getpregnantandshine.com
*.glamour.de
*.gq-magazin.de
*.insieme-per-bambini-sani.ch
*.internap.com
*.jojo.pl
*.kpmg.ie
*.lalechera.com.co
*.linksnappy.com
*.military1.com
*.mrsmeyers.com
*.murata.com.hk
*.nankidoptipro.com.ph
*.nestle-family.com
*.nestleprofessional.fr
*.optiprogram.pl
*.purina-latz.fi
*.realremit.com
*.sites.silverstripe.com
*.techdata.com
*.thetrueoption.com
*.toyota.ee
*.travelleaders.com
*.unis-pour-la-sante-des-enfants.ch
*.vcccd.edu
*.xn--aino-jtel-02aa3t.fi
*.xn--classic-jtel-ocba7y.fi
autoeurope.de
brothsserveddaily.com
bzoptions.com
cailler.com
caldrea.com
caresharing.com
caroz.co.il
carswithheart.com
ceragon.com
clearcreekrental.com
crazywinner.co
ddd003.net
deepeddymerch.com
dolce-gusto.hu
dolce-gusto.ua
domesticbin.com
gemeinsam-fuer-gesuendere-kinder.ch
getpregnantandshine.com
glamour.de
gq-magazin.de
insieme-per-bambini-sani.ch
internap.com
jojo.pl
kpmg.ie
military1.com
mrsmeyers.com
nankidoptipro.com.ph
nestle-family.com
nestleprofessional.fr
optiprogram.pl
purina-latz.fi
recruiting.msnhealth.com
recruitingtrain.msnhealth.com
rss.maximtest.com
rss1.maxhealth.com
staffing.msnhealth.com
staffingtrain.msnhealth.com
techdata.com
thetrueoption.com
toyota.ee
tss.maxhealth.com
tss.maximtest.com
unis-pour-la-sante-des-enfants.ch
xn--aino-jtel-02aa3t.fi
xn--classic-jtel-ocba7y.fi

Other certificates including the domain name incapsula.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJcYcS8YPtZRh2m1aeVg
tlHx2HXbtz/4IgWDGNaam2nxMewrbFDeIP9cKGFW5VDj5eea5F5N3JvIBHmzh+ZU
zGfezuTx+cUcWxAaN1Sp4XGMoO5vj4igN859+ph4+OnnvpQyVSvSk+1KQCtndZcg
ibpo43IpTD2gzFvzEgAbxth0ht1IzjnP24thAH0oGh3Hy52VRzs/FKaC9MJhhhw/
RCEIXlYrb6tJU/ysIp/kFHcYMmBNaB7N+LBx300wGg8dSw01UYaVGiE6gF/+P3xi
NEE3xhG/AWhhgSWOR+D+7xtBMXi98YbtskS7zaqo6TIphNyfnssNjcot8LiCzFUa
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492400803447926418985618083899879283181725
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-08 11:25:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-10 09:42:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24817215730030531858378509766165125165689811900493760959561685236229438600484581950016969990323592802488208272632504152253406390636364155780673621672936273295970565874526822231258975804025625589231370326995121019811988750260467897776693163510939250363179459700464155158199987249180373097897171110296446450953123147884932158789522097786439855506763966761130318236582567562414397427155517955495581586089422097326422298670656424031783270561167349064276299579937773701156243404504490366765129540801405649743322689768140326101657365364830944922998334575011513509171250292226279803638774313119205192150790835633988989950469
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1848 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altaineapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autoeurope.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bioreliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blog.dolce-gusto.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brothsserveddaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bzoptions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cailler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caldrea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carecatalog.purina.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caresharing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caroz.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carswithheart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ceragon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cityofny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clearcreekrental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crazywinner.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ddd003.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deepeddymerch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dolce-gusto.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dolce-gusto.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.domesticbin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gemeinsam-fuer-gesuendere-kinder.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getpregnantandshine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glamour.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gq-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insieme-per-bambini-sani.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jojo.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kpmg.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lalechera.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.linksnappy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.military1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mrsmeyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.murata.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nankidoptipro.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestle-family.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestleprofessional.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.optiprogram.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purina-latz.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realremit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sites.silverstripe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.techdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thetrueoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toyota.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.travelleaders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unis-pour-la-sante-des-enfants.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vcccd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--aino-jtel-02aa3t.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--classic-jtel-ocba7y.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoeurope.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brothsserveddaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bzoptions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cailler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caldrea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caresharing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caroz.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carswithheart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceragon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clearcreekrental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crazywinner.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ddd003.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deepeddymerch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dolce-gusto.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dolce-gusto.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domesticbin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gemeinsam-fuer-gesuendere-kinder.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getpregnantandshine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glamour.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gq-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insieme-per-bambini-sani.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jojo.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpmg.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'military1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrsmeyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nankidoptipro.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestle-family.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestleprofessional.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optiprogram.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purina-latz.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recruiting.msnhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recruitingtrain.msnhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rss.maximtest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rss1.maxhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staffing.msnhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staffingtrain.msnhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetrueoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toyota.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tss.maxhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tss.maximtest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unis-pour-la-sante-des-enfants.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--aino-jtel-02aa3t.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--classic-jtel-ocba7y.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							77bd0fa59092d45b48439fdbf934977630278cdd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00483288c31fa48fb76412c35e32e4a0d8957650fe05431bfd5199d410cf8a86ea851ea0a0b87e3f3f3fe3dd6bf8ef7116cd4427cd439b7cc236efc56e3703261162d5860cffe37ac1acf72407ae37d47c0d59f3914afbd511d0fbc5d4298ed3af99ff9f2ca459dc568c2e91697a6fb81abe5df120a21c52bef031c918487b82bb2e7849fb0b919afd55c7bd15c87720839f553cd8c6cbe53881a6d9cf88d9e53e97ee0adb08d41b95729af52245c335390d1ba061f9969836ff370010cfae0a89c6320df9e8d23ee2405d65a75e329cd952951aacc9fde063e5cd1b2bbbfba4e6ebabc14af0120f6c14930002c13e20f265e5399aa01d3f93253932879cf73173