incapsula.com

- Incapsula Inc -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 37:23:c0:bc:66:da:54:6b:1a:db:7f:e3 was issued on by GlobalSign nv-sa.

With 81 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 37:23:c0:bc:66:da:54:6b:1a:db:7f:e3
Serial Number (int): 17064898113624416586034806755
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 22:40:34:c2:db:e1:63:12:76:a1:03:32:6c:70:b5:6d:bb:9b:fa:bb
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 2f:8b:d2:01:fe:51:39:90:8b:8e:fd:77:ae:5b:e5:72:79:09:82:1a
Fingerprint (sha256): 3a:b9:59:2b:12:c8:84:9e:dd:8d:3d:69:52:f6:ea:cc:a6:78:75:bc:cb:33:c3:38:d5:56:eb:f4:59:fb:99:f6

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate incapsula.com

81

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.1944thedrama.com
*.1944themovie.com
*.1944thepodcast.com
*.aah-point.com
*.acts4.org
*.allamerican.com.mx
*.atlanticstreetcenter.org
*.awlmeetings.com
*.dolce-gusto.com.mt
*.dolce-gusto.pe
*.donnarenaypatrick.com
*.draperyavenue.com
*.encinopharmacy.com
*.firstcrcmv.com
*.fnl.co.nz
*.forground.com
*.gossipgirltour.com
*.grbusinessinc.com
*.indigohotels.com
*.karenolson.com
*.kingbros.net
*.macombgov.org
*.mountainlakesorganic.com
*.nash-epidemiology-institute.com
*.nestlepurelifepromise.com
*.nninfantnutritionpmsquiz.in
*.nsymbio.com
*.nutricionyejercicio.es
*.ontracksolutions360.com
*.pjslittlehorse.com
*.pjslittletiger.com
*.prisonermoon.com
*.sandiegowineandculinary.com
*.sbstest.co.nz
*.slabyfoundation.com
*.spotoption.com
*.superdigital.com.br
*.triptychpress.com
*.uniprix.com
*.vipcentralparktours.com
*.yourownacre.com
1944thedrama.com
1944themovie.com
1944thepodcast.com
aae.icts.com.br
aah-point.com
acts4.org
atlanticstreetcenter.org
awlmeetings.com
bvcnordic.berlitz.com
dolce-gusto.com.mt
dolce-gusto.pe
donnarenaypatrick.com
draperyavenue.com
encinopharmacy.com
firstcrcmv.com
forground.com
gossipgirltour.com
grbusinessinc.com
indigohotels.com
karenolson.com
kingbros.net
mountainlakesorganic.com
nash-epidemiology-institute.com
nninfantnutritionpmsquiz.in
nsymbio.com
nutricionyejercicio.es
ontracksolutions360.com
pjslittlehorse.com
pjslittletiger.com
portal.performancetrust.com
prisonermoon.com
reach360.asbury.edu
sandiegowineandculinary.com
slabyfoundation.com
superdigital.com.br
triptychpress.com
vipcentralparktours.com
www.st-albans.herts.sch.uk
yourownacre.com

Other certificates including the domain name incapsula.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxnrLYtXsEtJJH+5U+93
R6NQVyiTskg6l5R9gA4Kw3M5pVwn/P9gdwuq42rnKqrhN1qIK4PFSh8lfsU+tLqM
cKPwXFuJ8d/KL16jEa4kozAuH/mZ2RtC6/nlOT4QNWd0GBUy1FLSCs+K8td8tOXn
vITifKBo/DishDoYn3VlMN+GLBCDTMxY4EyITONhbX5tV09Dc6q9LQlqlh08Vl0K
GHtd12IQU2CblmKx5wSeb5mwaV1Nk5xJZb/uEG8rV4H9SbaqVIiBVoMgB+GX6zpk
A+P3G0JeacHOhFyKcia4DxpNjPmHgYQmx0Wb8agwUsi5Ld3gU85/WzBGw+O1MrJY
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17064898113624416586034806755
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-20 15:25:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-22 03:47:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24124297217941399078475070620205642473974228660473128457772668786033900047677337537967595314523424179208172159200964983704629665210218821010241902197367833227304967129570000901712486403649672448271642056798020468499197496166774417329716982387232623508972653354583795256165050739377759982859581753663848819613913471083253224431102930351017412098432253270115590093131790086311670931842485223194657650697988022640976210408306607116581405949879730447876500590563651823271886923510992856573572646757447144499168536449255039751836960849087732725140282575136719310794709408787186998192111503925363658510687009673784362948769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1698 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1944thedrama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1944themovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1944thepodcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aah-point.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acts4.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allamerican.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atlanticstreetcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.awlmeetings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dolce-gusto.com.mt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dolce-gusto.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.donnarenaypatrick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.draperyavenue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.encinopharmacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firstcrcmv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fnl.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gossipgirltour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grbusinessinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indigohotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.karenolson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kingbros.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.macombgov.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mountainlakesorganic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nash-epidemiology-institute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestlepurelifepromise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nninfantnutritionpmsquiz.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nsymbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nutricionyejercicio.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ontracksolutions360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pjslittlehorse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pjslittletiger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prisonermoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandiegowineandculinary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sbstest.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slabyfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spotoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.superdigital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.triptychpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uniprix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vipcentralparktours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yourownacre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1944thedrama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1944themovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1944thepodcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aae.icts.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aah-point.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acts4.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlanticstreetcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awlmeetings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bvcnordic.berlitz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dolce-gusto.com.mt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dolce-gusto.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donnarenaypatrick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'draperyavenue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encinopharmacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstcrcmv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gossipgirltour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grbusinessinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indigohotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karenolson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingbros.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountainlakesorganic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nash-epidemiology-institute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nninfantnutritionpmsquiz.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsymbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutricionyejercicio.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ontracksolutions360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pjslittlehorse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pjslittletiger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.performancetrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prisonermoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reach360.asbury.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandiegowineandculinary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slabyfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superdigital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'triptychpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vipcentralparktours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st-albans.herts.sch.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourownacre.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							224034c2dbe1631276a103326c70b56dbb9bfabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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