incapsula.com

- Incapsula Inc -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 42:86:46:2b:42:45:c3:b6:a8:75:07:e5 was issued on by GlobalSign nv-sa.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 42:86:46:2b:42:45:c3:b6:a8:75:07:e5
Serial Number (int): 20588338071676369059095840741
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 2a:df:d6:75:44:fb:d4:e4:90:4c:29:b7:b9:9f:b8:64:ff:87:38:10
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 9d:67:38:c4:87:fc:b9:fc:0a:b2:8b:66:d7:b3:5c:e3:2c:84:04:32
Fingerprint (sha256): 44:c6:6a:30:8f:13:4a:5f:84:19:6f:a3:3a:0f:58:b7:cd:08:55:44:3d:95:7d:cd:06:ec:14:b9:9c:7e:5d:0a

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate incapsula.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.antidoping.org.sg
*.app.zdrowystartwprzyszlosc.pl
*.beggin-fan.beggintime.com
*.bestjet.com
*.bravurasolutions.com
*.budgecovers.com
*.buzzluck.com
*.cg4assettracking.com
*.chick-fil-adev.com
*.chodadee.com
*.cn.spotoption.com
*.cnation.co
*.connect.sahabatnestle.co.id
*.cstenet.com
*.danozdirect.co.nz
*.directv.cl
*.directv.com.ar
*.directvla.com
*.directvplay.com
*.dish.skyfencenet.com
*.dolce-gusto.cz
*.dunbarvalutrak.com
*.empirecovers.com
*.empirepatio.com
*.eztrader.com
*.forela.com
*.gassercustoms.com
*.havigs.com
*.homeworkmarket.com
*.imore.com
*.invictawatch.com
*.kccd.edu
*.kde.org
*.lab.ematsa.cat
*.maggi.com.ec
*.medibank.elasticgrid.com
*.metro-trade.com
*.myacxiom.com
*.nbiblio.com
*.nesquik.ua
*.nestle-soluciones.es
*.nestlebaby.es
*.p.nestle.jp
*.propertyvalue.com.au
*.proplanwins.com
*.purinadentalife.ca
*.ravago.com
*.rorg.com
*.scoifmanwatch.com
*.searado.com
*.spotoption.com
*.startup.ltda
*.tdmarketplace.net
*.thesourceled.com
*.tiprodimg.myngp.com
*.uk-staging.je-labs.com
*.valuebasket.com
*.volunteers.sg
*.zoomindev.info
antidoping.org.sg
bestjet.com
budgecovers.com
buzzluck.com
cg4assettracking.com
chick-fil-adev.com
danozdirect.co.nz
directv.cl
directv.com.ar
directvla.com
directvplay.com
empirecovers.com
empirepatio.com
gassercustoms.com
homeworkmarket.com
imore.com
invictawatch.com
kccd.edu
lab.ematsa.cat
maggi.com.ec
metro-trade.com
nbiblio.com
nesquik.ua
nestle-soluciones.es
nestlebaby.es
propertyvalue.com.au
proplanwins.com
purinadentalife.ca
rorg.com
scoifmanwatch.com
searado.com
startup.ltda
thesourceled.com
volunteers.sg

Other certificates including the domain name incapsula.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVKWjwSyJwCucDAShN1d
cYXM7gWEEi55AtW1Ibhf3504VvqmkGRbf/QBFqH9j0J1s/AiLZQPNDgNNgF664r3
lgPa9cQXAUXnTA5zFYul76079XXeos7IxSUG9yKI9l1zTS6ICrDUxP71hY3ImoiH
Sq49ShbXkBQVJjoVxUY2HJllT/25o1f9JuMkPN9gT0m3YazfhiGYCUG7tKsSbQOj
fTdRFucewcqZqA0QciJ601eCXv1+tlT1F0Op171YezO4SU0Jbp3fWH55PpY282vf
gL5LGGaqQaxDt4I0s51zBAR/92WOnPobWfn0Tm3KPoTjvory0abJbATMtlVhOgTp
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20588338071676369059095840741
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-30 00:23:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-16 07:47:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23394812138456044679690429870827774039035951766950682152104974509828227406301336480754847230386388858741767166464861156165976000739322442085158191223864042985305348310168685318873075060306136522315477653516395478049660130990190640385034736257578442393274231613083395376487141868130482605366893817382995539200176216975719034646584553860079908025628398094168612123140291765800297031512518283606530124215927503440146582607758424223631608598246797630833090904345768165914644128448401420102084471200791966131897351079752380572917812495835943558324636535632691358118471851468248791438081746560589407924603421193740312963429
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1695 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.antidoping.org.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.app.zdrowystartwprzyszlosc.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beggin-fan.beggintime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestjet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bravurasolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.budgecovers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buzzluck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cg4assettracking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chick-fil-adev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chodadee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cn.spotoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cnation.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.connect.sahabatnestle.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cstenet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.danozdirect.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.directv.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.directv.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.directvla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.directvplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dish.skyfencenet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dolce-gusto.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dunbarvalutrak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.empirecovers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.empirepatio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eztrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gassercustoms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.havigs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homeworkmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.invictawatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kccd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kde.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lab.ematsa.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maggi.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medibank.elasticgrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metro-trade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myacxiom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nbiblio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nesquik.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestle-soluciones.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestlebaby.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.p.nestle.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.propertyvalue.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.proplanwins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purinadentalife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ravago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rorg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scoifmanwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.searado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spotoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.startup.ltda'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tdmarketplace.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thesourceled.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tiprodimg.myngp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uk-staging.je-labs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valuebasket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.volunteers.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zoomindev.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antidoping.org.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestjet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'budgecovers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buzzluck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cg4assettracking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chick-fil-adev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danozdirect.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directv.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directv.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directvla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directvplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'empirecovers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'empirepatio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gassercustoms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeworkmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invictawatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kccd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lab.ematsa.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maggi.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metro-trade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbiblio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nesquik.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestle-soluciones.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestlebaby.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'propertyvalue.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proplanwins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purinadentalife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rorg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scoifmanwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'searado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startup.ltda'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesourceled.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volunteers.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2adfd67544fbd4e4904c29b7b99fb864ff873810
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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