incapsula.com

- Incapsula Inc -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 10:1a:80:65:f4:83:8e:5d:77:c1:d9:ac was issued on by GlobalSign nv-sa.

With 79 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 10:1a:80:65:f4:83:8e:5d:77:c1:d9:ac
Serial Number (int): 4983798572101542916686731692
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 3d:c2:03:24:12:90:ee:d5:cb:81:91:f6:1b:a3:f5:d0:45:39:3b:72
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 2d:83:13:b2:5e:20:8b:07:2e:40:6b:4d:cd:ba:7f:13:97:7a:f2:05
Fingerprint (sha256): 3c:eb:f5:2a:58:bc:0f:b3:8c:ce:f0:6c:58:51:30:6c:73:ca:d0:a8:ef:d4:30:97:59:a0:59:31:ae:96:72:87

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate incapsula.com

79

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.actualcasino.com
*.agoratech.tech
*.algstaging.com
*.anastasiasaffiliate.com
*.arcon.com.br
*.bdg.reupmobile.com
*.bitpagos.com
*.brockandscott.com
*.customfleet.com.au
*.demo.paysecure.ru
*.dotname.co.kr
*.everyaction.com
*.eyebuydirect.com
*.eyeonid.com
*.frogtape.com
*.gs1mexico.org
*.homeaway.com.ar
*.il2medaff.com
*.jumia.mg
*.kidkraft.ca
*.kwarta-padala.com
*.legalsupply.com
*.lilcracka.com.au
*.loves.com
*.lucelec.com
*.mattel.com
*.medone.idf.il
*.minitech.com.au
*.monsanto.sk
*.mygnosis.com
*.nestlerecipes.tt
*.nodumapp.io
*.oneworld.com
*.ontarioca.gov
*.ooshop.com
*.peek-cloppenburg.de
*.pspenv.net
*.responder.co.il
*.rlijewelryinsurance.com
*.safetyjogger.com
*.softmoc.com
*.themdu.com
*.tpgnation.com
*.true-adventure.co.uk
*.wsparciezywieniowedzieci.pl
*.ymaryland.org
*.zurichcorporatepensions.co.uk
actualcasino.com
agoratech.tech
anastasiasaffiliate.com
bitpagos.com
brockandscott.com
dotname.co.kr
everyaction.com
eyebuydirect.com
eyeonid.com
homeaway.com.ar
il2medaff.com
jumia.mg
kidkraft.ca
legalsupply.com
lilcracka.com.au
loves.com
minitech.com.au
monsanto.sk
mygnosis.com
nestlerecipes.tt
nodumapp.io
ontarioca.gov
peek-cloppenburg.de
responder.co.il
rlijewelryinsurance.com
safetyjogger.com
tpgnation.com
true-adventure.co.uk
wsparciezywieniowedzieci.pl
ymaryland.org
zurichcorporatepensions.co.uk

Other certificates including the domain name incapsula.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cHhc+YyEdbcKk23GuZf
S3kF43JRBepsD60e1W10SeALwy6PmhGesvtvhJbf3Mbt3GVLZfb06sXzJ0qa8Hhw
+VBehDQhs2Q6h/ExC6/A9MsIFgp2rI4/ylKQ+oTEjvyrXOxokRPQTnrWzIiJy+yd
dKRJR5W+2ptVHHG3pFAUs2Tg0zlLJaXys0o0CmPJ49DpgMnkRxBcNounDSOkQXd9
nXkrWh9ERcdkBQBiyxXx4ifHuohxfRoSgBDKD9Sa9u8TC0Yd2UYiaB5kEqeKMzi/
U7Q33oNhjczDjWZZCRfwfOhkE4s6+5NJrCuiJmpP2TCF32S3E8OEc/AnmZy/kueY
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4983798572101542916686731692
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-05 16:30:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-20 18:16:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28499224741362316197552223176905803871979888617441868994468218868948826694002317888171839410625300571176329928228246957378463857720697111591423529404365481129735623630386033760740056383590883348577713086749209687697361140327994461639832608296547335038168129392986984646267717413517266867843354077395831133546579070156844195414104377147411130690476013753827375781628023818324364454575158013289701048487842635208452395312504463094648715014702476825400524681240457622482489326078416524744276016579585777263188360545182036271278185847334691082154312121163053426828019560427191236046538735588432650334241777135863246329857
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1431 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.actualcasino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agoratech.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.algstaging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anastasiasaffiliate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arcon.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bdg.reupmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitpagos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brockandscott.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.customfleet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.demo.paysecure.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dotname.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.everyaction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eyebuydirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eyeonid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frogtape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gs1mexico.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homeaway.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.il2medaff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jumia.mg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kidkraft.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kwarta-padala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.legalsupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lilcracka.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lucelec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mattel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medone.idf.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minitech.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.monsanto.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mygnosis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestlerecipes.tt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nodumapp.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oneworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ontarioca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ooshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peek-cloppenburg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pspenv.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.responder.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rlijewelryinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.safetyjogger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.softmoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themdu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tpgnation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.true-adventure.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wsparciezywieniowedzieci.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ymaryland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurichcorporatepensions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actualcasino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agoratech.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anastasiasaffiliate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitpagos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brockandscott.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotname.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everyaction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyebuydirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyeonid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeaway.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'il2medaff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jumia.mg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kidkraft.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalsupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lilcracka.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minitech.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monsanto.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygnosis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestlerecipes.tt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nodumapp.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ontarioca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peek-cloppenburg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'responder.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rlijewelryinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safetyjogger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tpgnation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'true-adventure.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsparciezywieniowedzieci.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ymaryland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zurichcorporatepensions.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3dc203241290eed5cb8191f61ba3f5d045393b72
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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