incapsula.com

- Incapsula Inc -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 47:a0:a0:45:0b:b9:cc:03:73:6c:1b:42 was issued on by GlobalSign nv-sa.

With 78 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 47:a0:a0:45:0b:b9:cc:03:73:6c:1b:42
Serial Number (int): 22167620680761371496907807554
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 11:0f:0b:cf:78:19:98:35:52:61:cd:d5:08:50:c2:b9:a6:72:d1:72
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 59:1c:64:3f:57:79:27:a0:73:66:99:3a:11:84:63:14:cd:e5:af:c8
Fingerprint (sha256): 38:9d:63:6c:a9:19:e3:c9:29:1f:b7:22:b6:f7:27:5a:fe:78:c1:a0:29:49:f7:5e:8f:d0:98:13:c0:22:a3:e3

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate incapsula.com

78

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.2vanparkinglot.com
*.aliains.com
*.apicil.com
*.appdirect.com
*.as2.purina-pro.fr
*.atsprintfreedom.com
*.baronwebdev.com
*.castleworldwide.com
*.cheapoair.co.uk
*.civilrightsmuseum.org
*.dbu.edu
*.dev.mylandhome.com
*.dev.spotoption.com
*.ernaehrungsstudio.nestle.de
*.eu.f4f.com
*.greensky-devga.com
*.healthcaresolutions.com
*.hotelopia.com
*.hoyesundiaespecial.com
*.icissupplyanddemand.com
*.iowaculture.gov
*.iowastep.org
*.juliesbarleystraw.com
*.libdems.org.uk
*.maestrorecetas.cl
*.meritor.com
*.mylandhome.com
*.nescook.croquonslavie.fr
*.nestleapps1.in
*.organicvalley.coop
*.pajamagram.com
*.pajamajeans.com
*.promociones.nescafe.cl
*.redtrucktickets.com
*.renta.fi
*.scripnet.com
*.secure.m1691tankmix.com
*.simplex-affiliates.com
*.ssd.ru
*.steamboat.com
*.taptisch.com
*.trading-technologies.co.uk
*.tss.cloudtotvs.com.br
*.uat.mckessonperformancebenchmarks.com
*.viewinwebver2.net
*.webapi.nationalcar.com
*.winpredict.com
*.winterparkresort.com
*.xo.gr
*.yourtravelmates.com
*.zrent.net
2vanparkinglot.com
apicil.com
atsprintfreedom.com
castleworldwide.com
civilrightsmuseum.org
greensky-devga.com
healthcaresolutions.com
hoyesundiaespecial.com
icissupplyanddemand.com
iowaculture.gov
iowastep.org
juliesbarleystraw.com
maestrorecetas.cl
nestleapps1.in
organicvalley.coop
pajamagram.com
pajamajeans.com
promociones.nescafe.cl
redtrucktickets.com
renta.fi
scripnet.com
ssd.ru
steamboat.com
taptisch.com
winterparkresort.com
zrent.net

Other certificates including the domain name incapsula.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttVaroPWYNjRPgzDVK7Z
+Tk38Gr4gQ1Dl9KoOja4xw8VVA3NmCKiBRJ6dbNDKBvZafuW0vVxlrxvksETDygM
s114B+K/GOdKlrCU1gbaqKNvHNFpy2CV8nNKMREy7zL2QpikoLfsH67Ay/WSBTec
nkyT4tiqqJJKGbc8xr/yRefGcbRiAu0lg/RMwInLh/Mh8+4WS/kiX7h0dCNZYEng
vat3/3gSbKsgkZJjbU0nHSeBDFoIbt4hdydf46QB52X4uDhe9VeF4RGfkrHqkL/u
3DeXB4ZcGp/6EYAv8Fl8qrJttBGzc2WtvrJe7GuQSY5pFrIvlXDwBckjuQMuNsQU
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 22167620680761371496907807554
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-18 02:25:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-05 06:34:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23080580393550224835921280424184124358170983282591034213265410010507073754096208870011786744328486791324601545156142943289042722775306574640854563876113777043203291837108860306559655222839214443265510472914089847098828863971931487434140857730101407392699413001556453375305895500210107578672257786457393527856248355628736674576822047532004907069381838900922490194298589838695388957259029966774046540528362646837753000518551636511422948798328690448018044529481131237605851543696248934785352654916776944538188028699901440734993493977082634777643359747952872743468873231047859851152336918327519700533701082839344977548463
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1548 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2vanparkinglot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aliains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apicil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.as2.purina-pro.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atsprintfreedom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baronwebdev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.castleworldwide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cheapoair.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.civilrightsmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dbu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.mylandhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.spotoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ernaehrungsstudio.nestle.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu.f4f.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greensky-devga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthcaresolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotelopia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoyesundiaespecial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.icissupplyanddemand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iowaculture.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iowastep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.juliesbarleystraw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.libdems.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maestrorecetas.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meritor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mylandhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nescook.croquonslavie.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestleapps1.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.organicvalley.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pajamagram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pajamajeans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.promociones.nescafe.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redtrucktickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renta.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scripnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.m1691tankmix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simplex-affiliates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ssd.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steamboat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taptisch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trading-technologies.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tss.cloudtotvs.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.mckessonperformancebenchmarks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viewinwebver2.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webapi.nationalcar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.winpredict.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.winterparkresort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xo.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yourtravelmates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zrent.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2vanparkinglot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apicil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atsprintfreedom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castleworldwide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civilrightsmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greensky-devga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthcaresolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoyesundiaespecial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icissupplyanddemand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowaculture.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowastep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juliesbarleystraw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maestrorecetas.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestleapps1.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organicvalley.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pajamagram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pajamajeans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promociones.nescafe.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redtrucktickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renta.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scripnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssd.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steamboat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taptisch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winterparkresort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zrent.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							110f0bcf781998355261cdd50850c2b9a672d172
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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