incapsula.com

- Incapsula Inc -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 2f:1b:02:9e:51:a2:09:c9:db:e5:ca:4c was issued on by GlobalSign nv-sa.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 2f:1b:02:9e:51:a2:09:c9:db:e5:ca:4c
Serial Number (int): 14578448823933617429062994508
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 4b:3d:83:9e:52:2e:1f:f0:d4:d8:6e:3f:d9:93:9f:53:d3:b9:1f:6f
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 6c:fa:35:19:84:04:1e:6b:fc:d9:a8:f2:91:b6:ef:dd:7e:c8:bd:ef
Fingerprint (sha256): 36:15:d6:06:6f:06:0f:23:0c:bc:42:bc:57:0d:c7:30:1c:90:f7:46:c4:67:6f:4d:19:9b:c1:85:01:56:96:82

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate incapsula.com

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.actie.beneful.nl
*.apps.nestle.com.co
*.apps.wyethnutrition.com.vn
*.autodata-group.com
*.beneful.nl
*.casinolistings.com
*.colincowiecelebrations.com
*.consultaalexperto.proplan.com.ve
*.dead-sea-wonder-of-nature.com
*.designashirt.com
*.dev.crndev.chick-fil-a.com
*.df-bet.org
*.dfb-flashgames.com
*.dogstrust.org.uk
*.dolce-gusto.cl
*.fantasylandcostumes.com.au
*.forter.com
*.fult.com
*.georgiaaquarium.org
*.getstocks.com
*.gtsgamesreg.com
*.iad.zamsh.incapsula.mobi
*.ijobmaster.com
*.indez.com
*.integration.spotoption.com
*.isatsb.com
*.just-eat.no
*.kicqstart-primers-sigmaaldrich.com
*.middleeast.emea.boservices.dolce-gusto.com
*.morrgear.com
*.murata.com.cn
*.nestea.com
*.npptcefs-ru.com
*.obmen.cc
*.orderit.ca
*.outreachtime.com
*.purina-adventuros.de
*.ru.emea.esb.dolce-gusto.com
*.saffrron.com
*.seaworld.com
*.shrws.org
*.shuttledirect.com
*.spotoption.com
*.spsr.ru
*.stage.nestea.com
*.stg-smp.secondmarket.com
*.thebountybox.com
*.thecampaignworkshop.com
*.transitcard.ru
*.trionlogics.com
*.uksv.net
*.us.ams.boservices.dolce-gusto.com
*.vemapos.com
*.yenomafadym.com
*.zukes.dog
*.zyjsmacznieizdrowo.pl
apps.wyethnutrition.com.vn
autodata-group.com
beneful.nl
casinolistings.com
dead-sea-wonder-of-nature.com
designashirt.com
dev.crndev.chick-fil-a.com
dogstrust.org.uk
dolce-gusto.cl
fantasylandcostumes.com.au
fult.com
georgiaaquarium.org
indez.com
integration.spotoption.com
isatsb.com
just-eat.no
kicqstart-primers-sigmaaldrich.com
middleeast.emea.boservices.dolce-gusto.com
nestea.com
npptcefs-ru.com
obmen.cc
purina-adventuros.de
saffrron.com
shuttledirect.com
stage.nestea.com
test.lasvc.br.monsanto.com
thecampaignworkshop.com
trionlogics.com
us.ams.boservices.dolce-gusto.com
vemapos.com
zukes.dog
zyjsmacznieizdrowo.pl

Other certificates including the domain name incapsula.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3JD169ZesUlNPzYeiZ5
udKqUze1ieL26HRWKZJyvZGCWkdpQfb3uAaXnjkVd8K6uZRTJg3pAp4eB3aRiNWo
tT4Aj+ro1L3v7O/yVcbERc6K6gACeEFzqH2ry61rG4C1RAY9fb83lOZIQVb2mhv0
KSbRgMIbgkpBgwHLsA6iAvhhgxaEHQ9XwnxZR2RAoyU78e8dVloKmmwdhq16PC+F
9qg4qWc4PKxS+8GbeA2tnBpgnOVU82vNyPZxDSz+qNP3OlJ3cJ1BKKQzY6AMBXLC
NuRo3iHFAvYGWZprR8e3FBcXMLvkXACpMXehtjuiW3lfgM710FKMdCx0DpBOFVU+
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14578448823933617429062994508
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-29 22:52:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-27 05:20:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25682722084513396688357014355277656349476065256435936107862854928194460385168139929485571259045905846611099233363825324896487127744082428211166913809525393772418452673292373326037873331254201328568061851385750407507088525195272021671126671716277302658226337355190430622996200292846809181985788660897352494091962778173014567936936767091861672936872760577573994649650557239898486748490357695589377639079639719032089311058458859914809741071788927105848226429461588249213729557577068702286266464344055957058718394223213756341893894225384346612298474631807917976947756583287433795194110786991110547586858703798436665573091
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1862 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.actie.beneful.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apps.nestle.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apps.wyethnutrition.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autodata-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beneful.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.casinolistings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.colincowiecelebrations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.consultaalexperto.proplan.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dead-sea-wonder-of-nature.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.designashirt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.crndev.chick-fil-a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.df-bet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dfb-flashgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dogstrust.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dolce-gusto.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fantasylandcostumes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fult.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.georgiaaquarium.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getstocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gtsgamesreg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iad.zamsh.incapsula.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ijobmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.integration.spotoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.isatsb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.just-eat.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kicqstart-primers-sigmaaldrich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.middleeast.emea.boservices.dolce-gusto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.morrgear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.murata.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.npptcefs-ru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.obmen.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orderit.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outreachtime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purina-adventuros.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ru.emea.esb.dolce-gusto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saffrron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seaworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shrws.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shuttledirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spotoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spsr.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.nestea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-smp.secondmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebountybox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thecampaignworkshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.transitcard.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trionlogics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uksv.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us.ams.boservices.dolce-gusto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vemapos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yenomafadym.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zukes.dog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zyjsmacznieizdrowo.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.wyethnutrition.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodata-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beneful.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casinolistings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dead-sea-wonder-of-nature.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designashirt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.crndev.chick-fil-a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dogstrust.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dolce-gusto.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fantasylandcostumes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fult.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'georgiaaquarium.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integration.spotoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isatsb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'just-eat.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kicqstart-primers-sigmaaldrich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'middleeast.emea.boservices.dolce-gusto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'npptcefs-ru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obmen.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purina-adventuros.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saffrron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shuttledirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.nestea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.lasvc.br.monsanto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecampaignworkshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trionlogics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.ams.boservices.dolce-gusto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vemapos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zukes.dog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zyjsmacznieizdrowo.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4b3d839e522e1ff0d4d86e3fd9939f53d3b91f6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008acd38057945112e8e98c70d1ce6eb863d5b584d46135f06eb393e90eb32d267474d6a3b628b2bd148a8140ceecc8746c22cd137b9fd67de8089676995a37955e7f476b78d0141d9c8b4be32111a0c83e741746e34f581ef674ead5e4d7d2a75ca709acfe7d615f9089e2e9f9cbbd87935304031d19299af86d5f41810a2325da01b41c683dd4d574e61fd9fb44dbd76eb1f0f335baba32af424f8fe457d5e368bcdf0c32e6b4b12dad7128a1dd8e41572409238df21ac61418dd91585497b2c575eff108d10c788b140613493a1f991f5c5d7479013087f0d47ab04a7df08cb4d034f2d1428b6817d7a20090fa93639f86da925c11d07777da4bb3bd28e4ff2