incapsula.com

- Incapsula Inc -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 70:c2:75:d9:62:ac:be:f5:2d:77:82:d2 was issued on by GlobalSign nv-sa.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 70:c2:75:d9:62:ac:be:f5:2d:77:82:d2
Serial Number (int): 34897409235928113372481422034
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 06:8b:fa:27:77:2e:9e:e2:9d:69:a8:27:5b:0b:e7:1e:d4:9d:40:fb
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 06:1d:5b:79:05:1b:c8:87:d4:da:60:b4:cc:21:da:fb:dc:53:93:ce
Fingerprint (sha256): 31:64:13:0b:7e:b2:f9:ea:4a:6c:ab:14:b4:47:8f:45:6a:8b:af:fe:42:2d:95:05:67:a6:c7:59:9b:d6:cd:19

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate incapsula.com

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.1.ltpdev.nl
*.Chick-fil-a-list.com
*.alteogroup.com
*.ams.incapsula.mobi
*.ceregrow.in
*.cgsadvisors.com
*.cgt.it
*.challenger.sg
*.daktronics.com
*.decathlon.fr
*.esr.cri.nz
*.gulftainer.com
*.hachvana.mod.gov.il
*.hays.com
*.homeaway.ec
*.infinitecampus.com
*.milo.com.ec
*.myzurich.co.uk
*.nestlenan.se
*.nutrenactive.com.br
*.odeoncareers.co.uk
*.pblassaysci.com
*.plivamed.net
*.plivazdravlje.hr
*.plusnetrewards.com
*.prod.nestlehealthscience.nl
*.proplan-chien.fr
*.pscu.org
*.purina.se
*.rcscentral.com
*.rumbo.fr
*.safra.sg
*.spinnup.com
*.stl-tsl.org
*.stratoscale.com
*.tevix.net
*.transinfo.com.au
*.truettroofing.com
*.uat.williamhill.com.au
*.unahistoriaquedalavuelta.com
*.unite-students.com
*.uws.ac.uk
*.wcis.nestle.com
*.xn--stoffwechselkur-dit-xwb.de
Chick-fil-a-list.com
ceregrow.in
cgsadvisors.com
dndapps.cityofboston.gov
esr.cri.nz
essentialdayspa.com
geo.elections.nsw.gov.au
hmis.cityofboston.gov
homeaway.ec
infinitecampus.com
kb.ctera.com
maps.cityofboston.gov
maqasvc1.kforce.com
marine.yamaha-motor.jp
members.theproducebox.com
milo.com.ec
nestlenan.se
nutrenactive.com.br
odeoncareers.co.uk
oimprd.cityofboston.gov
pblassaysci.com
plivamed.net
plivazdravlje.hr
plusnetrewards.com
proplan-chien.fr
pscu.org
purina.se
rumbo.fr
secure.myaccountadvantage.com
shoprma.com
skyward.d230.org
spinnup.com
stl-tsl.org
stratoscale.com
support.proofpoint.com
sysaid.connectcom.com.br
transinfo.com.au
truettroofing.com
unahistoriaquedalavuelta.com
unite-students.com
ven441.ae-admin.com
wcis.nestle.com
web.prepaid.t-mobile.com
www.essentialdayspa.com
www.shoprma.com
www.stl-tsl.org
www2.t-mobile.com
xn--stoffwechselkur-dit-xwb.de

Other certificates including the domain name incapsula.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3mrIF36dCNZdlVdF53H
3IR83MTUTIg4MmJU+/VuGrn2aThxmpeTlZh9C6FL6+2UnijFFwtpFxytppeQNayT
FkRdBGuuacuNr2GFH0KnTIyAyG1nT6gaE+t2V3ekzOLgvX49kRpsDSlleAh25+i+
TaLwDnbswGWkMgKHjZy6Ov/YVg7SVUdJisMNh7e8npicEpOAzl5cn3r861470YWy
CuJLhXU7t8zGZUg95bXLgN4UadWxNwa5u/CUGn8R3bkjqGFxqm4wPt1tZmPt31zn
G0wG9s80VeMqDrMB3ZFbkjR9kUQ+oStqAHqcUtMgv4Amvvz03j9uA8tt9APZcyNt
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 34897409235928113372481422034
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-16 21:08:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-02 08:44:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24171513203558565270360993551752189530397571133842553990766315375353363493865360780667781163753305452107448128195675420205838025906065382677014014534556520379284303880996989783712406216639144582614507195751136934631183971629925539538564026017957410137132802062134057303205603335126884614866156584159704592691853745226349608564189179621527729825082379399793870628801409898822182278459880507072826733820610886307681432740698353773546276916374152644388697220336817491100765130144145017508108911432716207416529588505885364058375990089739704593383043504293932943090413424535943463705244220584945574264056968962359559417307
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1764 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1.ltpdev.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.Chick-fil-a-list.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alteogroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ams.incapsula.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ceregrow.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cgsadvisors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cgt.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.challenger.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daktronics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.decathlon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.esr.cri.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gulftainer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hachvana.mod.gov.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homeaway.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infinitecampus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.milo.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myzurich.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestlenan.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nutrenactive.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.odeoncareers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pblassaysci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plivamed.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plivazdravlje.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plusnetrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.nestlehealthscience.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.proplan-chien.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pscu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purina.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rcscentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rumbo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.safra.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spinnup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stl-tsl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stratoscale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tevix.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.transinfo.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.truettroofing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.williamhill.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unahistoriaquedalavuelta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unite-students.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uws.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wcis.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--stoffwechselkur-dit-xwb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Chick-fil-a-list.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceregrow.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cgsadvisors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dndapps.cityofboston.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esr.cri.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'essentialdayspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geo.elections.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hmis.cityofboston.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeaway.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infinitecampus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kb.ctera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maps.cityofboston.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maqasvc1.kforce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marine.yamaha-motor.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.theproducebox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milo.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestlenan.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutrenactive.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odeoncareers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oimprd.cityofboston.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pblassaysci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plivamed.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plivazdravlje.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plusnetrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proplan-chien.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pscu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purina.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rumbo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.myaccountadvantage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoprma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skyward.d230.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spinnup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stl-tsl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stratoscale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.proofpoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sysaid.connectcom.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transinfo.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truettroofing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unahistoriaquedalavuelta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unite-students.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ven441.ae-admin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcis.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.prepaid.t-mobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.essentialdayspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shoprma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stl-tsl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.t-mobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--stoffwechselkur-dit-xwb.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							068bfa27772e9ee29d69a8275b0be71ed49d40fb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00002c4843b77d75a8dfbba7b7a1530d8fc71da788ba2752e72d81282da2e195c1d6f6a88b6bb96542f1ad3fc183bd3d96e19543e388b6d22a17e8b08f03952f5b197886dccbd6f9affd555013ea2caff25487a6c46014ccfb11511df850a3ba968be807eadfa9ba684870c0dcc0c145a5b138e61b81c077886a3c820692e04b401414cc36196d666b25082bd784523250191d87fa8d40d6012bba86566d68c44373243c07678169b368571602b06d9557bc8e930508a37c6c84c93994e7af19a78682fd51d768c03538231c82645e9ce91fe27932af1b2f1025ea74660ba4406b67426f5cfb178ef4a7b3f9a5d1cd195ca3e2352b993945e392ab0dd83c006d67