incapsula.com

- Incapsula Inc -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 43:3b:5d:0d:68:9b:6e:6c:c1:93:d5:38 was issued on by GlobalSign nv-sa.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 43:3b:5d:0d:68:9b:6e:6c:c1:93:d5:38
Serial Number (int): 20807261708815702375814911288
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 8d:63:79:63:d9:54:15:61:94:95:a3:ce:9c:e1:b0:39:11:44:1b:f3
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 24:db:3a:ab:43:47:40:2f:ce:5c:e8:18:0b:79:96:2a:79:6b:b3:38
Fingerprint (sha256): 26:b9:ee:01:74:3d:5a:f5:3a:dc:1e:59:7f:48:06:9c:79:33:e5:58:e5:ef:87:2b:f4:9a:8c:4b:ed:5a:34:7c

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate incapsula.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.anytimefitness.com
*.bb.cls350.org
*.catchowgentle.com
*.catchowgivesback.com
*.dc6.pageuppeople.com
*.elbitsystems-us.com
*.enercon.com
*.fullcirclecomputing.com
*.geba.com
*.joininv.com
*.lacocinanestle.do
*.mapp.pregnant.nestlebaby.com
*.mypetchicken.com
*.nandos.ie
*.nestlebornemad.dk
*.nestlehealthscience.ph
*.olostaging.express
*.process.jubba.me
*.proplan-dog.com
*.regularpay.com
*.rpcpromo.com.au
*.rumbo.com
*.sahara.com
*.sbo60.com
*.seminis.es
*.sial.com
*.surreycc.gov.uk
*.tryproplan.ca
*.utvwindshieldsandaccessories.com
aecapc.mylam.com
anytimefitness.com
api.affiliateedge.com
apps.imperva.com
atac.mylam.com
catchowgentle.com
catchowgivesback.com
crossrider-predictions.com
e3.my.t-mobile.com
fir3net.com
fullcirclecomputing.com
gcitrading.com
geba.com
imperva.de
joininv.com
lacocinanestle.do
lsrel01.greensfelder.com
m.bank-yahav.co.il
ma-stg.my.t-mobile.com
mail-oa.ironfx.com
mapi.sitelock.com
mypetchicken.com
nandos.ie
nci.ca
nestlebornemad.dk
nestlehealthscience.ph
process.jubba.me
proplan-dog.com
qdr.mylam.com
quicknom.com
refurb.mylam.com
rpcpromo.com.au
rumbo.com
sbo60.com
secure.htcdepot.com
secure.imore.com
secure.wpcentral.com
secure128.com
seminis.es
sfs.mylam.com
shop.mobilenations.com
shopusa.com
sunflower.com.hk
swkey.mylam.com
test.imperva.com
trainingportal.bioversity.cgiar.org
tryproplan.ca
utvwindshieldsandaccessories.com
wsrqa-atac.mylam.com
wsrqa-pe.mylam.com
wsrqa-swkey.mylam.com
wsrqa-www.mylam.com
www.2options.com
www.crossrider-predictions.com
www.eurasian-inc.com
www.fir3net.com
www.gcitrading.com
www.imperva.de
www.incomesaga.net
www.nci.ca
www.quicknom.com
www.ruskod.net
www.secure128.com
www.shopusa.com
www.sunflower.com.hk

Other certificates including the domain name incapsula.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyn6sgl1MvyYnjSm/nzSo
92ibl6F5lzhaLgXepFE61NTso9b5+p4gyZ9Mbj2dukwfBkEWjiQ5kiBKTt1l1KOJ
PDIBgSvfFq/CmGLZQGnA33L6VAchN4Tls8CRXszJmbRk4wqVHuLATBS39qrk7zxw
idCHx5n1XHtXuQAMZ/M5frEpk/BvEkj0GWSrLRzT6OUfu5WE14RtcBSbbTWa4pvV
o/OS1NrRvAdf6KgYVVrp1ZLzY31ZVm0kM/nPsQfDX4zhTaWwReJhiq8Abw6ZLRJo
Hht1I6ktkm8PLTNPY5VoZq8kali0kb9oLkmUL5dpHXTmCr2a2h+bUep9jKDRw40u
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20807261708815702375814911288
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-11 11:49:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-23 11:50:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25562602813692955505709098226090503979297027114155841372702182475035575004514121755434101885733186080662312151228154743752856229561321865738444887156028923772241204930575255336525887706142492952371434707242170652171319337646965934440195344061289595764426872455574189884357439150015929313203688165269818810533476605865406183952669920815945555112179800851152232910472544601388639871833036435545515206267810020195778607395967073650381813556510846071219957894309716813224344250450125723646171301346166283224623845924182145497661291309562261450317180710320747585790976565968240170765431907020982376487073718951253533077147
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1804 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anytimefitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bb.cls350.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.catchowgentle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.catchowgivesback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dc6.pageuppeople.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elbitsystems-us.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enercon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fullcirclecomputing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.joininv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lacocinanestle.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mapp.pregnant.nestlebaby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mypetchicken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nandos.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestlebornemad.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestlehealthscience.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.olostaging.express'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.process.jubba.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.proplan-dog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.regularpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rpcpromo.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rumbo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sahara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sbo60.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seminis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.surreycc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tryproplan.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.utvwindshieldsandaccessories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aecapc.mylam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anytimefitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.affiliateedge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atac.mylam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catchowgentle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catchowgivesback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crossrider-predictions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e3.my.t-mobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fir3net.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fullcirclecomputing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcitrading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joininv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacocinanestle.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsrel01.greensfelder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.bank-yahav.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ma-stg.my.t-mobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail-oa.ironfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapi.sitelock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypetchicken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nandos.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nci.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestlebornemad.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestlehealthscience.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'process.jubba.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proplan-dog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qdr.mylam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quicknom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refurb.mylam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rpcpromo.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rumbo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbo60.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.htcdepot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.imore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.wpcentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure128.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seminis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfs.mylam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.mobilenations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunflower.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swkey.mylam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trainingportal.bioversity.cgiar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tryproplan.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utvwindshieldsandaccessories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsrqa-atac.mylam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsrqa-pe.mylam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsrqa-swkey.mylam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsrqa-www.mylam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2options.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crossrider-predictions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eurasian-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fir3net.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gcitrading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imperva.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.incomesaga.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nci.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quicknom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ruskod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secure128.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunflower.com.hk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8d637963d95415619495a3ce9ce1b03911441bf3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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