incapsula.com

- Incapsula Inc -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 5f:98:6c:eb:cc:d6:e8:7e:67:80:bc:70 was issued on by GlobalSign nv-sa.

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 5f:98:6c:eb:cc:d6:e8:7e:67:80:bc:70
Serial Number (int): 29585347022934452865190640752
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 40:f5:d0:aa:4f:b9:c1:bc:1e:92:a9:00:17:0f:4f:52:36:3d:18:e1
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): e8:4c:b1:54:ac:7f:4b:16:c9:cd:d8:26:42:14:97:6b:d3:b5:fd:2c
Fingerprint (sha256): 2c:a3:e8:a1:47:5a:6e:19:62:f6:88:89:ff:f9:45:c3:48:16:ed:7c:c5:a1:60:06:2f:51:a9:5c:ca:4f:23:08

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate incapsula.com

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.activetrail.com
*.activetrail.de
*.activetrail.es
*.activetrail.fr
*.adultsinballet.org
*.boutiqueroi.com
*.brunsoncon.com
*.canadianpresence.com
*.candelim.com
*.cetaphil.com.cn
*.cldtchprodmar620.com
*.customis.com
*.dabracingcollectables.com
*.dealeronlinestore.com
*.egrafe.com
*.electricguitarcity.com
*.floridaticketstation.com
*.g888fc.net
*.gh2fitness.com
*.ghanaturals.com
*.imtonline.pt
*.lelandshanle.com
*.loveshutter.com
*.manojenterprises.com
*.mapletreeappliances.com
*.marlenefrankebespoke.com
*.monkeytracker.cz
*.mountainlimos.com
*.oconnorcc.com
*.oneservice.gov.sg
*.qatestmar62020-f.com
*.questchurchstl.org
*.quotezone.co.uk
*.rcmclean.org
*.ridregioni.org
*.seanj.net
*.shopeverythingbaby.com
*.southsidemassagetherapy.com
*.suvichisholm.com
*.ticketsnashville.com
*.treatprostatitis.com
*.x10networks.com
activetrail.com
activetrail.de
activetrail.es
activetrail.fr
adultsinballet.org
boutiqueroi.com
brunsoncon.com
canadianpresence.com
candelim.com
cetaphil.com.cn
cldtchprodmar620.com
customis.com
dabracingcollectables.com
dealeronlinestore.com
egrafe.com
electricguitarcity.com
floridaticketstation.com
g888fc.net
gh2fitness.com
ghanaturals.com
imtonline.pt
lelandshanle.com
loveshutter.com
manojenterprises.com
mapletreeappliances.com
marlenefrankebespoke.com
mindgym4u.com
mountainlimos.com
oconnorcc.com
qatestmar62020-f.com
questchurchstl.org
rcmclean.org
reports.certifiedlanguages.com
ridregioni.org
seanj.net
shopeverythingbaby.com
southsidemassagetherapy.com
suvichisholm.com
ticketsnashville.com
treatprostatitis.com
www.mindgym4u.com

Other certificates including the domain name incapsula.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9mVW6r+tMAW882rqTyf
EFarlmfRhiQxecoPPGq9PP0kGX+E/3OkOvgfIGTvIJYmux2jBZVx+7/GwiPAg7Mb
rg1E1NncAn58UhEUV2tvCO9GR8UDr+jYDEJZ/eHdQF47dVQIUMrfensZOfOgWwkI
CqQVy+JHfyQMtsh7rC144R+2zuf+mrsvJ/Yx9r8mnDfxE0PQUn01BmcpNS8fcxhH
AUx06KvvAYtup8mMApi95x//Hq1wJJ0pG9shkSMPdkdEvhmpYpohO1wyluzCspPe
rqz6NOm+kyQf97ciNH7XyzpniuDvcMipbEQPVrKVS1GhtNS33zVhLkLzw7+cJxBN
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 29585347022934452865190640752
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-10 01:18:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-05 13:29:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19169278438120470106087169865668060428103875025670767797151292972757738156071437821367406110332029034544261746954411434339959853874833461163810353437487392639701635466654883924741910376910448080697270183361915851060350550996028096945932760836770738456800643288476166070422958352231618009498784018227560683720255495659019000180566325113356486162654288751623594130552671243116877430486150686072257797689301828426403232478731527307268505688660649446784923079067107925647133262411449488018826417227372291449299848613253273603940244225071875113919762349356106632715507333994772693532202345763733181985073574546906167659887
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1676 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.activetrail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.activetrail.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.activetrail.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.activetrail.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adultsinballet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boutiqueroi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brunsoncon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canadianpresence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.candelim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cetaphil.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cldtchprodmar620.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.customis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dabracingcollectables.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dealeronlinestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.egrafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.electricguitarcity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.floridaticketstation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.g888fc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gh2fitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ghanaturals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imtonline.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lelandshanle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loveshutter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manojenterprises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mapletreeappliances.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marlenefrankebespoke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.monkeytracker.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mountainlimos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oconnorcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oneservice.gov.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qatestmar62020-f.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.questchurchstl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quotezone.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rcmclean.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ridregioni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seanj.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopeverythingbaby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.southsidemassagetherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suvichisholm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketsnashville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.treatprostatitis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.x10networks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activetrail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activetrail.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activetrail.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activetrail.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adultsinballet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boutiqueroi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brunsoncon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadianpresence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'candelim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cetaphil.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cldtchprodmar620.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dabracingcollectables.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealeronlinestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egrafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electricguitarcity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floridaticketstation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g888fc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gh2fitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghanaturals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imtonline.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lelandshanle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loveshutter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manojenterprises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapletreeappliances.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlenefrankebespoke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindgym4u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountainlimos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oconnorcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qatestmar62020-f.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'questchurchstl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcmclean.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reports.certifiedlanguages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ridregioni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seanj.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopeverythingbaby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southsidemassagetherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suvichisholm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketsnashville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'treatprostatitis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mindgym4u.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							40f5d0aa4fb9c1bc1e92a900170f4f52363d18e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004552d912fffcb847979b70059be20e6189b6edfae02a50dd06f9bb70f96e6daecdb2c185fdc364945738a9c22b217a88993aeaeae999652ee1b4f1401b435974552f6b94efa30702656ef65347cfc58eef5db929f9d808911941c985e17180dd9b09291ea3adcd2a8aa6a79713ae86532169c78b844451be555f1735e4de0abcb75159b72daf6c235047867d6b406208384bec9f4433316658d0f25890fcaa25129ad4bea4f797a30b28df749454446f2518c3abaff0a71295a359a5ba3decfbaf2a94836594094f5759dbded6ab2bb96061d955538553ec9e634c1b06c0e3f9a304cfdd935427ab2d6389f05957bd05a8b0a0d3afa8ca547ea0d5232acd74ef