incapsula.com

- Incapsula Inc -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 05:1e:98:a1:07:bd:96:95:bc:2e:ee:45 was issued on by GlobalSign nv-sa.

With 79 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 05:1e:98:a1:07:bd:96:95:bc:2e:ee:45
Serial Number (int): 1584413593884123770890677829
Serial Number lenght: 91 bits, 12 octets

SubjectKeyId: 22:40:34:c2:db:e1:63:12:76:a1:03:32:6c:70:b5:6d:bb:9b:fa:bb
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 16:ad:38:5a:5e:e0:08:4e:e0:42:30:6a:fa:26:c3:b8:42:cc:5e:86
Fingerprint (sha256): 3a:fd:d0:2b:85:0f:1a:23:d3:d4:22:eb:f4:1c:cf:5c:cc:3f:d7:7c:74:32:7f:fa:42:ed:d4:79:24:79:05:bf

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate incapsula.com

79

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.1944thedrama.com
*.1944themovie.com
*.1944thepodcast.com
*.aah-point.com
*.acts4.org
*.allamerican.com.mx
*.atlanticstreetcenter.org
*.awlmeetings.com
*.dolce-gusto.com.mt
*.dolce-gusto.pe
*.donnarenaypatrick.com
*.draperyavenue.com
*.encinopharmacy.com
*.firstcrcmv.com
*.fnl.co.nz
*.forground.com
*.gossipgirltour.com
*.grbusinessinc.com
*.indigohotels.com
*.karenolson.com
*.kingbros.net
*.macombgov.org
*.mountainlakesorganic.com
*.nash-epidemiology-institute.com
*.nestlepurelifepromise.com
*.nninfantnutritionpmsquiz.in
*.nsymbio.com
*.nutricionyejercicio.es
*.ontracksolutions360.com
*.pjslittlehorse.com
*.pjslittletiger.com
*.prisonermoon.com
*.sandiegowineandculinary.com
*.sbstest.co.nz
*.slabyfoundation.com
*.spotoption.com
*.triptychpress.com
*.uniprix.com
*.vipcentralparktours.com
*.yourownacre.com
1944thedrama.com
1944themovie.com
1944thepodcast.com
aae.icts.com.br
aah-point.com
acts4.org
atlanticstreetcenter.org
awlmeetings.com
bvcnordic.berlitz.com
dolce-gusto.com.mt
dolce-gusto.pe
donnarenaypatrick.com
draperyavenue.com
encinopharmacy.com
firstcrcmv.com
forground.com
gossipgirltour.com
grbusinessinc.com
indigohotels.com
karenolson.com
kingbros.net
mountainlakesorganic.com
nash-epidemiology-institute.com
nninfantnutritionpmsquiz.in
nsymbio.com
nutricionyejercicio.es
ontracksolutions360.com
pjslittlehorse.com
pjslittletiger.com
portal.performancetrust.com
prisonermoon.com
reach360.asbury.edu
sandiegowineandculinary.com
slabyfoundation.com
triptychpress.com
vipcentralparktours.com
www.st-albans.herts.sch.uk
yourownacre.com

Other certificates including the domain name incapsula.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxnrLYtXsEtJJH+5U+93
R6NQVyiTskg6l5R9gA4Kw3M5pVwn/P9gdwuq42rnKqrhN1qIK4PFSh8lfsU+tLqM
cKPwXFuJ8d/KL16jEa4kozAuH/mZ2RtC6/nlOT4QNWd0GBUy1FLSCs+K8td8tOXn
vITifKBo/DishDoYn3VlMN+GLBCDTMxY4EyITONhbX5tV09Dc6q9LQlqlh08Vl0K
GHtd12IQU2CblmKx5wSeb5mwaV1Nk5xJZb/uEG8rV4H9SbaqVIiBVoMgB+GX6zpk
A+P3G0JeacHOhFyKcia4DxpNjPmHgYQmx0Wb8agwUsi5Ld3gU85/WzBGw+O1MrJY
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1584413593884123770890677829
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-20 20:20:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-22 03:47:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24124297217941399078475070620205642473974228660473128457772668786033900047677337537967595314523424179208172159200964983704629665210218821010241902197367833227304967129570000901712486403649672448271642056798020468499197496166774417329716982387232623508972653354583795256165050739377759982859581753663848819613913471083253224431102930351017412098432253270115590093131790086311670931842485223194657650697988022640976210408306607116581405949879730447876500590563651823271886923510992856573572646757447144499168536449255039751836960849087732725140282575136719310794709408787186998192111503925363658510687009673784362948769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1654 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1944thedrama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1944themovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1944thepodcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aah-point.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acts4.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allamerican.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atlanticstreetcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.awlmeetings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dolce-gusto.com.mt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dolce-gusto.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.donnarenaypatrick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.draperyavenue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.encinopharmacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firstcrcmv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fnl.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gossipgirltour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grbusinessinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indigohotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.karenolson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kingbros.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.macombgov.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mountainlakesorganic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nash-epidemiology-institute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestlepurelifepromise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nninfantnutritionpmsquiz.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nsymbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nutricionyejercicio.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ontracksolutions360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pjslittlehorse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pjslittletiger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prisonermoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandiegowineandculinary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sbstest.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slabyfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spotoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.triptychpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uniprix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vipcentralparktours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yourownacre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1944thedrama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1944themovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1944thepodcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aae.icts.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aah-point.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acts4.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlanticstreetcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awlmeetings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bvcnordic.berlitz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dolce-gusto.com.mt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dolce-gusto.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donnarenaypatrick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'draperyavenue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encinopharmacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstcrcmv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gossipgirltour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grbusinessinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indigohotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karenolson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingbros.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountainlakesorganic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nash-epidemiology-institute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nninfantnutritionpmsquiz.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsymbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutricionyejercicio.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ontracksolutions360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pjslittlehorse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pjslittletiger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.performancetrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prisonermoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reach360.asbury.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandiegowineandculinary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slabyfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'triptychpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vipcentralparktours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st-albans.herts.sch.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourownacre.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							224034c2dbe1631276a103326c70b56dbb9bfabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005f87e2d62882fb7cc9053efdf543d758fe49cd718b33e1f67e911ffb52abaac423ffe6e2b99cc5b3625707404044172a8a196c2910e2f64bf630bb5496d021a9874f7786c2f342a5d393b7bab9551cd638d60e1c7ea72a9d191d76f1df3ee88d8f36c529123bd5a33a7ecc29d184c41b7506ce9a9fa10c12af4380ca901c5d0019640dfb274ada61f0d590c8832a5ebb5d443915cd070dcab01de6bb99af5fe8c30993ddf9f356e9dee78ecc2d257ab7ef60de8757731489df64f2dca9b7adaea971e38d91b592063c5df21572f45e54c3fdb242697c1b770dc8992d5735f6de52704c4172ffdee6214eff8e5e8e03236b548c9adf4b0408aed3743b8c70eddd