incapsula.com

- Incapsula Inc -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 04:26:01:78:04:24:69:ee:c7:c8:74:b2 was issued on by GlobalSign nv-sa.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 04:26:01:78:04:24:69:ee:c7:c8:74:b2
Serial Number (int): 1283886156704987847917597874
Serial Number lenght: 91 bits, 12 octets

SubjectKeyId: 8f:31:c8:f9:47:73:ed:08:72:1c:23:a3:6f:93:11:70:e0:f8:bf:c0
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): b9:18:78:40:dd:b8:a8:f6:db:3d:d3:f1:d1:76:f5:db:a3:33:e7:3a
Fingerprint (sha256): 2e:37:45:78:16:0b:7f:68:36:d2:9b:06:d4:e0:e4:b8:33:87:57:0a:91:9f:ed:08:b7:cc:93:80:9f:2e:91:8b

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate incapsula.com

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.aerocrs.com
*.amd4u.com
*.apihealthcare.com
*.atesa.es
*.blog1.water-challenge.com
*.bmis-chronos.com
*.caratello.ch
*.clearent.net
*.compute.hk
*.dev.mms.mckesson.com
*.dev.supplier.mckesson.com
*.dolce-gusto.com.ph
*.dtsc.ca.gov
*.dunbararmoredinvoice.com
*.euromania.com
*.fabricguru.com
*.firstbullion.com
*.herouxdevtek.com
*.kogent.co.jp
*.meridianchoice.com
*.mewebsync.com
*.momentosnestle.com
*.mooremedical.com
*.nespressopromotion.com.au
*.nestlehealthykids.pk
*.pattersonplusrewards.com
*.peachy.co.uk
*.primefortune.be
*.psychicsource.com
*.rejuveneticsglobal.com
*.rumbo.de
*.scatech.net
*.second-life.nespresso.com
*.shakatime.com
*.starlabs.digital
*.teaching-in-japan.gaba.co.jp
*.tealfridgeproject.com.au
*.test1.latableadessert.fr
*.test1.nestle-waters.com
*.test1.nestle.com
*.test1.nestleprofessional.com
*.test2.latableadessert.fr
*.test2.nestle-waters.com
*.test2.nestlehealthscience.com
*.tipranks.com
*.track.nestlefamily.ch
*.training.nestle.com
*.troplaughlin.com
*.usgboral.com
*.walbusch.de
*.whitehousehistory.org
*.wooot.com.au
amd4u.com
bmis-chronos.com
business.t-mobile.com
caratello.ch
chra.mbie.govt.nz
collaboration.herouxdevtek.com
counterterrorexpo.com
csatoday.iaai.com
dtsc.ca.gov
dunbararmoredinvoice.com
firstbullion.com
herouxdevtek.com
imgapi.fanappz.com
kogent.co.jp
meridianchoice.com
mewebsync.com
momentosnestle.com
my.caltex.com.au
my.good2give.org.au
nespressopromotion.com.au
nestlehealthykids.pk
pattersonplusrewards.com
peachy.co.uk
prefarm4.sat.gob.gt
primefortune.be
rejuveneticsglobal.com
reviews.cubic.com
rumbo.de
second-life.nespresso.com
shakatime.com
starlabs.digital
tealfridgeproject.com.au
walbusch.de
westfieldcomics.com
whitehousehistory.org
wog.truck-n.com
wooot.com.au
www.counterterrorexpo.com
www.thefilebay.com
www.westfieldcomics.com

Other certificates including the domain name incapsula.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuMfEICqhuath395iBKu
8FsHZBB5FHUjjjA9VE1PFtiUpUj8AaMHidI9pcn9uaDL/aex52R2ToWOjirQuJIa
vVQZDOQS101DBRm0LN00aVfGCUoQzEjC4axnB0E2WoGNj2RSw4cSterEP0cl03Y2
apeL/RaZrULAcTm2lVDRMXA652WYRrde+XkMImHsXsQZmDXEgZuXWjF/+IkcAZg7
KcLjbLVMLQBozE1e7+2FY8cn3aionVWIgbl0EubM4r6IK7uUfV+OmtpecSA4CcOt
fszJw1t4oka5vm2ySYc5SZY6FJvajFeSRepHtBy7/xjNYDgApUTlTAf6AT8u2cPU
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1283886156704987847917597874
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-08 12:19:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-20 13:30:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25107182092986911705264705748647509541415753282264323280382833637564663691167836344824238619190740602288525391368178841293339032698523615020656053199226762883331504127359908087846441260774410444032964872840612373288331719214448927148346661738775010905698499808244955322578071852987899322471293772994292414108721120917842164921436867594483291564374447019117797298496932206478522625802240283070842915080594850638347240013204175429092349646684591321555040315671604149898739095471798955148916884349465108765236326988676797771081453688701471288759704792903692424008906167466158516752964736239593867866605946126121054753967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1920 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aerocrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amd4u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apihealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atesa.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blog1.water-challenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bmis-chronos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caratello.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clearent.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.compute.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.mms.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.supplier.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dolce-gusto.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dtsc.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dunbararmoredinvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.euromania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fabricguru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firstbullion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.herouxdevtek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kogent.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meridianchoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mewebsync.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.momentosnestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mooremedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nespressopromotion.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestlehealthykids.pk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pattersonplusrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peachy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.primefortune.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.psychicsource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rejuveneticsglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rumbo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scatech.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.second-life.nespresso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shakatime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.starlabs.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teaching-in-japan.gaba.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tealfridgeproject.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test1.latableadessert.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test1.nestle-waters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test1.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test1.nestleprofessional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test2.latableadessert.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test2.nestle-waters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test2.nestlehealthscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tipranks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.track.nestlefamily.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.training.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.troplaughlin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usgboral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.walbusch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whitehousehistory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wooot.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amd4u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmis-chronos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.t-mobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caratello.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chra.mbie.govt.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaboration.herouxdevtek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'counterterrorexpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csatoday.iaai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dtsc.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dunbararmoredinvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstbullion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herouxdevtek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imgapi.fanappz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kogent.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meridianchoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mewebsync.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'momentosnestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.caltex.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.good2give.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nespressopromotion.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestlehealthykids.pk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pattersonplusrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peachy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prefarm4.sat.gob.gt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primefortune.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rejuveneticsglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reviews.cubic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rumbo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'second-life.nespresso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shakatime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starlabs.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tealfridgeproject.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walbusch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westfieldcomics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitehousehistory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wog.truck-n.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wooot.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.counterterrorexpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thefilebay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westfieldcomics.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8f31c8f94773ed08721c23a36f931170e0f8bfc0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00699a1a1a28cf2377b70ec80ec2e7c8116f92d0a7d62aa37b542e37e1320b4fb7c7d4ed1a0936335d7f028b18af739038e38ed5d1ff9c6c8e040fa163c1b3cc0649f46b3634593775122159f93876e9a055ff8d066c380f010c9b0f8d43e0ffad36a7df0d984268b3d8af988671bbd24a2f32d766afc498706e0cbad405e20f98a2c38f13d6ea08b29a1a1cb66499b030eb776f75cf0c2dd184b3c05d5c92c759024c6c2e52e5a7bbffcceab78fef5415f6abe3e476a6b78ff103c48be2f749472ee9a6d58f401cc70d140305c4cb4cc763a2d2b1747adf9fc3ed2b58c79721cd3cf9255cf5513c2e726ef0ce1736448c388eb157c45cf3b17f733a436af29c98