incapsula.com

- Incapsula Inc -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 55:97:47:3f:58:3e:b4:54:4a:f2:44:76 was issued on by GlobalSign nv-sa.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 55:97:47:3f:58:3e:b4:54:4a:f2:44:76
Serial Number (int): 26489110090100018233520309366
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 33:4f:b0:c4:e6:d3:fc:8c:88:46:8b:d0:1e:62:81:b6:4d:5d:12:ff
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 5e:0b:4f:17:8f:82:42:53:56:2a:e0:45:5e:98:e4:ba:d8:92:1f:ca
Fingerprint (sha256): 67:30:9c:90:7f:d8:a8:1f:22:7b:71:7b:2b:10:16:8b:e6:ae:3f:55:b8:59:a3:56:9a:d7:cd:cc:33:8c:f7:4d

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate incapsula.com

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.antidoping.org.sg
*.app.zdrowystartwprzyszlosc.pl
*.beggin-fan.beggintime.com
*.bestjet.com
*.bravurasolutions.com
*.budgecovers.com
*.buzzluck.com
*.cg4assettracking.com
*.chick-fil-adev.com
*.chodadee.com
*.cn.spotoption.com
*.cnation.co
*.connect.sahabatnestle.co.id
*.cstenet.com
*.danozdirect.co.nz
*.directv.cl
*.directv.com.ar
*.directvla.com
*.directvplay.com
*.dolce-gusto.cz
*.dunbarvalutrak.com
*.empirecovers.com
*.empirepatio.com
*.eztrader.com
*.forela.com
*.gassercustoms.com
*.gutegutscheine.at
*.havigs.com
*.homeworkmarket.com
*.ibeauthentic.com
*.imore.com
*.invictawatch.com
*.kccd.edu
*.kde.org
*.lab.ematsa.cat
*.maggi.com.ec
*.medibank.elasticgrid.com
*.metro-trade.com
*.myacxiom.com
*.nbiblio.com
*.nestlebaby.es
*.p.nestle.jp
*.pdsclear.com.ph
*.planyo.com
*.propertyvalue.com.au
*.proplanwins.com
*.purinadentalife.ca
*.ravago.com
*.rorg.com
*.scoifmanwatch.com
*.searado.com
*.spotoption.com
*.startup.ltda
*.tdmarketplace.net
*.tiprodimg.myngp.com
*.volunteers.sg
*.zoomindev.info
antidoping.org.sg
bestjet.com
budgecovers.com
buzzluck.com
cg4assettracking.com
chick-fil-adev.com
danozdirect.co.nz
directv.cl
directv.com.ar
directvla.com
directvplay.com
empirecovers.com
empirepatio.com
gassercustoms.com
gutegutscheine.at
homeworkmarket.com
imore.com
invictawatch.com
kccd.edu
lab.ematsa.cat
maggi.com.ec
metro-trade.com
nbiblio.com
nestlebaby.es
pdsclear.com.ph
planyo.com
plb-elasticsearch.csd.t-mobile.com
propertyvalue.com.au
proplanwins.com
purinadentalife.ca
rorg.com
scoifmanwatch.com
searado.com
startup.ltda
volunteers.sg

Other certificates including the domain name incapsula.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILOTCCCiGgAwIBAgIMVZdHP1g+tFRK8kR2MA0GCSqGSIb3DQEBCwUAMFcxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS0wKwYDVQQDEyRH
bG9iYWxTaWduIENsb3VkU1NMIENBIC0gU0hBMjU2IC0gRzMwHhcNMTYxMDE1MjIw
MjA4WhcNMTcwNTE2MDc0NzMzWjBgMQswCQYDVQQGEwJVUzERMA8GA1UECBMIRGVs
YXdhcmUxDjAMBgNVBAcTBURvdmVyMRYwFAYDVQQKEw1JbmNhcHN1bGEgSW5jMRYw
FAYDVQQDEw1pbmNhcHN1bGEuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3QGl70ohlF0LhLy3bEU7nPjpVwV2e/LOHiWyDTa3qcNX0vT+s1r684mE
7cXyXhalYV6UI+JXzgrdnDmO5r8HQCAmLdIkakdY3AS3yzGbE7wRJTJdQr4AmqCr
O1irBUHpfb4/P0ONHzum+6VJlz0Z/fnE+Yvodk57RIJkCuiHyvEkPCeLpDGVJ7o/
23japdIc1BYyaP1jZtshosnWWhub9ggR43qIkl6PE+gA8FJqqUCC99kyHJ1WwuLQ
rZT476VBOytP0oSHNmpGc/dvMmyfzKUzprcwkPI5WMTidBSuWp7RwcoZ/EpcZYeq
8zfooq0kO3/bTuboqNLBOaOgxx07nwIDAQABo4IH+jCCB/YwDgYDVR0PAQH/BAQD
AgWgMIGKBggrBgEFBQcBAQR+MHwwQgYIKwYBBQUHMAKGNmh0dHA6Ly9zZWN1cmUu
Z2xvYmFsc2lnbi5jb20vY2FjZXJ0L2Nsb3Vkc3Nsc2hhMmczLmNydDA2BggrBgEF
BQcwAYYqaHR0cDovL29jc3AyLmdsb2JhbHNpZ24uY29tL2Nsb3Vkc3Nsc2hhMmcz
MFYGA1UdIARPME0wQQYJKwYBBAGgMgEUMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8v
d3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMAgGBmeBDAECAjAJBgNVHRME
AjAAMIIGkwYDVR0RBIIGijCCBoaCDWluY2Fwc3VsYS5jb22CEyouYW50aWRvcGlu
Zy5vcmcuc2eCHyouYXBwLnpkcm93eXN0YXJ0d3Byenlzemxvc2MucGyCGyouYmVn
Z2luLWZhbi5iZWdnaW50aW1lLmNvbYINKi5iZXN0amV0LmNvbYIWKi5icmF2dXJh
c29sdXRpb25zLmNvbYIRKi5idWRnZWNvdmVycy5jb22CDiouYnV6emx1Y2suY29t
ghYqLmNnNGFzc2V0dHJhY2tpbmcuY29tghQqLmNoaWNrLWZpbC1hZGV2LmNvbYIO
Ki5jaG9kYWRlZS5jb22CEyouY24uc3BvdG9wdGlvbi5jb22CDCouY25hdGlvbi5j
b4IdKi5jb25uZWN0LnNhaGFiYXRuZXN0bGUuY28uaWSCDSouY3N0ZW5ldC5jb22C
EyouZGFub3pkaXJlY3QuY28ubnqCDCouZGlyZWN0di5jbIIQKi5kaXJlY3R2LmNv
bS5hcoIPKi5kaXJlY3R2bGEuY29tghEqLmRpcmVjdHZwbGF5LmNvbYIQKi5kb2xj
ZS1ndXN0by5jeoIUKi5kdW5iYXJ2YWx1dHJhay5jb22CEiouZW1waXJlY292ZXJz
LmNvbYIRKi5lbXBpcmVwYXRpby5jb22CDiouZXp0cmFkZXIuY29tggwqLmZvcmVs
YS5jb22CEyouZ2Fzc2VyY3VzdG9tcy5jb22CEyouZ3V0ZWd1dHNjaGVpbmUuYXSC
DCouaGF2aWdzLmNvbYIUKi5ob21ld29ya21hcmtldC5jb22CEiouaWJlYXV0aGVu
dGljLmNvbYILKi5pbW9yZS5jb22CEiouaW52aWN0YXdhdGNoLmNvbYIKKi5rY2Nk
LmVkdYIJKi5rZGUub3JnghAqLmxhYi5lbWF0c2EuY2F0gg4qLm1hZ2dpLmNvbS5l
Y4IaKi5tZWRpYmFuay5lbGFzdGljZ3JpZC5jb22CESoubWV0cm8tdHJhZGUuY29t
gg4qLm15YWN4aW9tLmNvbYINKi5uYmlibGlvLmNvbYIPKi5uZXN0bGViYWJ5LmVz
gg0qLnAubmVzdGxlLmpwghEqLnBkc2NsZWFyLmNvbS5waIIMKi5wbGFueW8uY29t
ghYqLnByb3BlcnR5dmFsdWUuY29tLmF1ghEqLnByb3BsYW53aW5zLmNvbYIUKi5w
dXJpbmFkZW50YWxpZmUuY2GCDCoucmF2YWdvLmNvbYIKKi5yb3JnLmNvbYITKi5z
Y29pZm1hbndhdGNoLmNvbYINKi5zZWFyYWRvLmNvbYIQKi5zcG90b3B0aW9uLmNv
bYIOKi5zdGFydHVwLmx0ZGGCEyoudGRtYXJrZXRwbGFjZS5uZXSCFSoudGlwcm9k
aW1nLm15bmdwLmNvbYIPKi52b2x1bnRlZXJzLnNnghAqLnpvb21pbmRldi5pbmZv
ghFhbnRpZG9waW5nLm9yZy5zZ4ILYmVzdGpldC5jb22CD2J1ZGdlY292ZXJzLmNv
bYIMYnV6emx1Y2suY29tghRjZzRhc3NldHRyYWNraW5nLmNvbYISY2hpY2stZmls
LWFkZXYuY29tghFkYW5vemRpcmVjdC5jby5ueoIKZGlyZWN0di5jbIIOZGlyZWN0
di5jb20uYXKCDWRpcmVjdHZsYS5jb22CD2RpcmVjdHZwbGF5LmNvbYIQZW1waXJl
Y292ZXJzLmNvbYIPZW1waXJlcGF0aW8uY29tghFnYXNzZXJjdXN0b21zLmNvbYIR
Z3V0ZWd1dHNjaGVpbmUuYXSCEmhvbWV3b3JrbWFya2V0LmNvbYIJaW1vcmUuY29t
ghBpbnZpY3Rhd2F0Y2guY29tgghrY2NkLmVkdYIObGFiLmVtYXRzYS5jYXSCDG1h
Z2dpLmNvbS5lY4IPbWV0cm8tdHJhZGUuY29tggtuYmlibGlvLmNvbYINbmVzdGxl
YmFieS5lc4IPcGRzY2xlYXIuY29tLnBoggpwbGFueW8uY29tgiJwbGItZWxhc3Rp
Y3NlYXJjaC5jc2QudC1tb2JpbGUuY29tghRwcm9wZXJ0eXZhbHVlLmNvbS5hdYIP
cHJvcGxhbndpbnMuY29tghJwdXJpbmFkZW50YWxpZmUuY2GCCHJvcmcuY29tghFz
Y29pZm1hbndhdGNoLmNvbYILc2VhcmFkby5jb22CDHN0YXJ0dXAubHRkYYINdm9s
dW50ZWVycy5zZzAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHQYDVR0O
BBYEFDNPsMTm0/yMiEaL0B5igbZNXRL/MB8GA1UdIwQYMBaAFKkrh+HOJEc7G7/P
hTcCVZ0NlFjmMA0GCSqGSIb3DQEBCwUAA4IBAQBpHT/eG0bV4GMUy72e8EL33U8d
tBXrTfeOunJ/w7Y+yQ2gtR1MS1EiL37rX9vNgLuwANxwoIYHoLx/Un7HwtXFWHWC
X/l0sU2Goc/r4LPju8j+KHzbV5ZMrfXHo6KXCcSKC2l0/6xSgUMO6ZLSo+G/71I+
Pxf5a9UsOLSexNh/GxBTH9WZQvHoiVRxLfjxkwkvDGFunxt8Joa3vGg3cE4zxnqi
Jb0nNS/aGrUMMPHA4G0VSQSefw8MWKLvkDREOuWh3ZrDumj8MThbkZ9gmnZ51fbr
d/Vn7jnwm8Pys3PlbRg7JXxLGcayooctdcCvedtcz+Jka50ERg2MIyQCaOIy
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QGl70ohlF0LhLy3bEU7
nPjpVwV2e/LOHiWyDTa3qcNX0vT+s1r684mE7cXyXhalYV6UI+JXzgrdnDmO5r8H
QCAmLdIkakdY3AS3yzGbE7wRJTJdQr4AmqCrO1irBUHpfb4/P0ONHzum+6VJlz0Z
/fnE+Yvodk57RIJkCuiHyvEkPCeLpDGVJ7o/23japdIc1BYyaP1jZtshosnWWhub
9ggR43qIkl6PE+gA8FJqqUCC99kyHJ1WwuLQrZT476VBOytP0oSHNmpGc/dvMmyf
zKUzprcwkPI5WMTidBSuWp7RwcoZ/EpcZYeq8zfooq0kO3/bTuboqNLBOaOgxx07
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 26489110090100018233520309366
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-15 22:02:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-16 07:47:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27899478146590720879575263804656088802377042316596432410400420257863038307141774672434804535387648299940457804315296936298708489617583650870958802591526665567279819807559823356571663676616789096425522325402967357454506900143820387337269213742742261145749603009690747858934269801810278011271182166025965211425916290873882401764206231410025780160758245580048763770598110880609140616272387565081353089076332044291747777450715137640377346935912165618409498725623395059127966528662270444027474217506388921081575273172355391137124714736068845445568001745851701040954590628440777979368460377690788147818230951609923333340063
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1674 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.antidoping.org.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.app.zdrowystartwprzyszlosc.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beggin-fan.beggintime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestjet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bravurasolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.budgecovers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buzzluck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cg4assettracking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chick-fil-adev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chodadee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cn.spotoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cnation.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.connect.sahabatnestle.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cstenet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.danozdirect.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.directv.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.directv.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.directvla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.directvplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dolce-gusto.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dunbarvalutrak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.empirecovers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.empirepatio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eztrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gassercustoms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gutegutscheine.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.havigs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homeworkmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibeauthentic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.invictawatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kccd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kde.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lab.ematsa.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maggi.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medibank.elasticgrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metro-trade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myacxiom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nbiblio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestlebaby.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.p.nestle.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pdsclear.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.planyo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.propertyvalue.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.proplanwins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purinadentalife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ravago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rorg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scoifmanwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.searado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spotoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.startup.ltda'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tdmarketplace.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tiprodimg.myngp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.volunteers.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zoomindev.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antidoping.org.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestjet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'budgecovers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buzzluck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cg4assettracking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chick-fil-adev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danozdirect.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directv.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directv.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directvla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directvplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'empirecovers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'empirepatio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gassercustoms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gutegutscheine.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeworkmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invictawatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kccd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lab.ematsa.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maggi.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metro-trade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbiblio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestlebaby.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdsclear.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planyo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plb-elasticsearch.csd.t-mobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'propertyvalue.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proplanwins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purinadentalife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rorg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scoifmanwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'searado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startup.ltda'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volunteers.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							334fb0c4e6d3fc8c88468bd01e6281b64d5d12ff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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