incapsula.com
- Incapsula Inc -
Issued by GlobalSign CloudSSL CA - SHA256 - G3
About this certificate
This digital certificate with serial number 7a:1a:35:de:0e:d8:eb:ec:10:98:e6:cb was issued on by GlobalSign nv-sa.
With 68 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Incapsula Inc
Organization:
Incapsula Inc
State / Province:
Delaware
Locality: Dover
Country: US
Locality: Dover
Country: US
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 7a:1a:35:de:0e:d8:eb:ec:10:98:e6:cbSerial Number (int): 37788857651184719508306192075
Serial Number lenght: 95 bits, 12 octets
SubjectKeyId: a6:f8:64:d1:79:f5:92:89:3d:93:f9:30:51:e0:dc:2f:09:1c:ae:36
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6
Fingerprint (sha1): 5c:a4:29:39:ee:ce:09:38:23:57:64:a9:69:ad:97:9b:f3:bd:b0:c3
Fingerprint (sha256): 67:5e:54:d5:a0:cf:3c:f8:c0:ec:31:81:da:56:64:d4:09:82:64:3b:81:20:53:8e:a4:5e:d7:6c:f5:92:ec:6e
Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt
Revocation information
OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3Check the revocation status for certificate incapsula.com
68
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for incapsula.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
incapsula.com
*.aboutspms.com
*.alconexchangeportaltraining.com
*.betterconversations.novartis.com
*.bioupper.com
*.carcinoid.com
*.cibavision.com
*.cookie.airoptix.com
*.cosentyx.com
*.dev.myalcon.com
*.entresto.com
*.exelonpatch.com
*.extavia.com
*.focalinxr.com
*.focalview.com
*.get.cibavision.com
*.gilenya.com
*.global.airoptix.com
*.hf360.info
*.ilaris.com
*.joingetconnected.com
*.migraene-helden.de
*.myalcon.my
*.ncc.novartis.com
*.non-us.kymriah.com
*.novartis.com
*.novartispharma.fr
*.nvfund.com
*.oncologyaccessnow.com
*.pro.pataday.com
*.ptoryasis.co.il
*.qa.myalcon.com
*.realityofspa.com
*.sandoz-biosimilars.com
*.sjiasupport.com
*.supplierconnect.novartispharma.com
*.talkspms.com
*.tempodivita.it
*.thisaslife.com
*.us.keepitpumping.com
*.us.state.lookup.novartis.com
*.virtualconsultant.alcon.com
aboutspms.com
alconexchangeportaltraining.com
bioupper.com
carcinoid.com
cibavision.com
cosentyx.com
entresto.com
exelonpatch.com
extavia.com
focalinxr.com
focalview.com
gilenya.com
hf360.info
ilaris.com
joingetconnected.com
migraene-helden.de
myalcon.my
ncc.novartis.com
nvfund.com
oncologyaccessnow.com
ptoryasis.co.il
realityofspa.com
sandoz-biosimilars.com
sjiasupport.com
talkspms.com
tempodivita.it
*.aboutspms.com
*.alconexchangeportaltraining.com
*.betterconversations.novartis.com
*.bioupper.com
*.carcinoid.com
*.cibavision.com
*.cookie.airoptix.com
*.cosentyx.com
*.dev.myalcon.com
*.entresto.com
*.exelonpatch.com
*.extavia.com
*.focalinxr.com
*.focalview.com
*.get.cibavision.com
*.gilenya.com
*.global.airoptix.com
*.hf360.info
*.ilaris.com
*.joingetconnected.com
*.migraene-helden.de
*.myalcon.my
*.ncc.novartis.com
*.non-us.kymriah.com
*.novartis.com
*.novartispharma.fr
*.nvfund.com
*.oncologyaccessnow.com
*.pro.pataday.com
*.ptoryasis.co.il
*.qa.myalcon.com
*.realityofspa.com
*.sandoz-biosimilars.com
*.sjiasupport.com
*.supplierconnect.novartispharma.com
*.talkspms.com
*.tempodivita.it
*.thisaslife.com
*.us.keepitpumping.com
*.us.state.lookup.novartis.com
*.virtualconsultant.alcon.com
aboutspms.com
alconexchangeportaltraining.com
bioupper.com
carcinoid.com
cibavision.com
cosentyx.com
entresto.com
exelonpatch.com
extavia.com
focalinxr.com
focalview.com
gilenya.com
hf360.info
ilaris.com
joingetconnected.com
migraene-helden.de
myalcon.my
ncc.novartis.com
nvfund.com
oncologyaccessnow.com
ptoryasis.co.il
realityofspa.com
sandoz-biosimilars.com
sjiasupport.com
talkspms.com
tempodivita.it
Other certificates including the domain name incapsula.com
(limited to 100 certificates)
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
statuspage.io
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
statuspage.io
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
Certificate
The complete raw certificate details for incapsula.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJ0zCCCLugAwIBAgIMeho13g7Y6+wQmObLMA0GCSqGSIb3DQEBCwUAMFcxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS0wKwYDVQQDEyRH bG9iYWxTaWduIENsb3VkU1NMIENBIC0gU0hBMjU2IC0gRzMwHhcNMTgwOTI3MTY1 MTA0WhcNMTkwMTAzMTAwNjM0WjBgMQswCQYDVQQGEwJVUzERMA8GA1UECBMIRGVs YXdhcmUxDjAMBgNVBAcTBURvdmVyMRYwFAYDVQQKEw1JbmNhcHN1bGEgSW5jMRYw FAYDVQQDEw1pbmNhcHN1bGEuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAncF96FfIx7GuFD8K22327IYr+njYlmcEIonh0+v6SagbiR59F+mst4Z2 HGUMI9ttw/aA8L+RVxfXLxamEbMF02TqhB+mKeT0JFfiiUL8EN0IJOHnfrTTHvBn UJgnG9BpfNEd9NEr55CkXyOgAebtBrehJ83R7/OmrpFUaOoPjVBEvPLJHY4Da38i 9+bB3DIwVen4qiqJoDlnHbvguPSrl4mu5siacR1abAHnxtKSuNl9Ta3jJ/I2izJO lolJquEKNiTFgU86eZ6AFi6sk/hyvj+wd5nkbK/zFnP7YhMqYLrmwWvHzPbPT6t5 2YzETDJuCuiIbjgx+7zusw1TnhZ4WQIDAQABo4IGlDCCBpAwDgYDVR0PAQH/BAQD AgWgMIGKBggrBgEFBQcBAQR+MHwwQgYIKwYBBQUHMAKGNmh0dHA6Ly9zZWN1cmUu Z2xvYmFsc2lnbi5jb20vY2FjZXJ0L2Nsb3Vkc3Nsc2hhMmczLmNydDA2BggrBgEF BQcwAYYqaHR0cDovL29jc3AyLmdsb2JhbHNpZ24uY29tL2Nsb3Vkc3Nsc2hhMmcz MFYGA1UdIARPME0wQQYJKwYBBAGgMgEUMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8v d3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMAgGBmeBDAECAjAJBgNVHRME AjAAMIIFGAYDVR0RBIIFDzCCBQuCDWluY2Fwc3VsYS5jb22CDyouYWJvdXRzcG1z LmNvbYIhKi5hbGNvbmV4Y2hhbmdlcG9ydGFsdHJhaW5pbmcuY29tgiIqLmJldHRl cmNvbnZlcnNhdGlvbnMubm92YXJ0aXMuY29tgg4qLmJpb3VwcGVyLmNvbYIPKi5j YXJjaW5vaWQuY29tghAqLmNpYmF2aXNpb24uY29tghUqLmNvb2tpZS5haXJvcHRp eC5jb22CDiouY29zZW50eXguY29tghEqLmRldi5teWFsY29uLmNvbYIOKi5lbnRy ZXN0by5jb22CESouZXhlbG9ucGF0Y2guY29tgg0qLmV4dGF2aWEuY29tgg8qLmZv Y2FsaW54ci5jb22CDyouZm9jYWx2aWV3LmNvbYIUKi5nZXQuY2liYXZpc2lvbi5j b22CDSouZ2lsZW55YS5jb22CFSouZ2xvYmFsLmFpcm9wdGl4LmNvbYIMKi5oZjM2 MC5pbmZvggwqLmlsYXJpcy5jb22CFiouam9pbmdldGNvbm5lY3RlZC5jb22CFCou bWlncmFlbmUtaGVsZGVuLmRlggwqLm15YWxjb24ubXmCEioubmNjLm5vdmFydGlz LmNvbYIUKi5ub24tdXMua3ltcmlhaC5jb22CDioubm92YXJ0aXMuY29tghMqLm5v dmFydGlzcGhhcm1hLmZyggwqLm52ZnVuZC5jb22CFyoub25jb2xvZ3lhY2Nlc3Nu b3cuY29tghEqLnByby5wYXRhZGF5LmNvbYIRKi5wdG9yeWFzaXMuY28uaWyCECou cWEubXlhbGNvbi5jb22CEioucmVhbGl0eW9mc3BhLmNvbYIYKi5zYW5kb3otYmlv c2ltaWxhcnMuY29tghEqLnNqaWFzdXBwb3J0LmNvbYIkKi5zdXBwbGllcmNvbm5l Y3Qubm92YXJ0aXNwaGFybWEuY29tgg4qLnRhbGtzcG1zLmNvbYIQKi50ZW1wb2Rp dml0YS5pdIIQKi50aGlzYXNsaWZlLmNvbYIWKi51cy5rZWVwaXRwdW1waW5nLmNv bYIeKi51cy5zdGF0ZS5sb29rdXAubm92YXJ0aXMuY29tgh0qLnZpcnR1YWxjb25z dWx0YW50LmFsY29uLmNvbYINYWJvdXRzcG1zLmNvbYIfYWxjb25leGNoYW5nZXBv cnRhbHRyYWluaW5nLmNvbYIMYmlvdXBwZXIuY29tgg1jYXJjaW5vaWQuY29tgg5j aWJhdmlzaW9uLmNvbYIMY29zZW50eXguY29tggxlbnRyZXN0by5jb22CD2V4ZWxv bnBhdGNoLmNvbYILZXh0YXZpYS5jb22CDWZvY2FsaW54ci5jb22CDWZvY2Fsdmll dy5jb22CC2dpbGVueWEuY29tggpoZjM2MC5pbmZvggppbGFyaXMuY29tghRqb2lu Z2V0Y29ubmVjdGVkLmNvbYISbWlncmFlbmUtaGVsZGVuLmRlggpteWFsY29uLm15 ghBuY2Mubm92YXJ0aXMuY29tggpudmZ1bmQuY29tghVvbmNvbG9neWFjY2Vzc25v dy5jb22CD3B0b3J5YXNpcy5jby5pbIIQcmVhbGl0eW9mc3BhLmNvbYIWc2FuZG96 LWJpb3NpbWlsYXJzLmNvbYIPc2ppYXN1cHBvcnQuY29tggx0YWxrc3Btcy5jb22C DnRlbXBvZGl2aXRhLml0MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAd BgNVHQ4EFgQUpvhk0Xn1kok9k/kwUeDcLwkcrjYwHwYDVR0jBBgwFoAUqSuH4c4k Rzsbv8+FNwJVnQ2UWOYwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQEL BQADggEBAC8beLRm7DnX8THEWC8gbGZ+hMxrm8hR+DtwDu5MEy3Bizd4lDs+IfU2 HbALnEgM7ByJhUyFWDl1uhot37g1J+d1b8u7w3BA5v58babZ1k4QvhjyvuXLRUsI EdlkDM33o1f+hDhKMdSzJCgmxYCU7H8icuKyik6dgBCoCesiJEuD0v8L7KnCneSa V++il+2Ql1ZrLResj0tnm18nGXMBwqJ7kns1m0ytdjL0X1DT3laRVbPNAdB7EqXz nlsShZPE6r3SdGWdYKo712xlVIKyrruNKrQrmX9t/exIBEWmmfovf63qzDee5Dyh b150UMynczwmlIuUgey3bnm/YheajWA= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncF96FfIx7GuFD8K2232 7IYr+njYlmcEIonh0+v6SagbiR59F+mst4Z2HGUMI9ttw/aA8L+RVxfXLxamEbMF 02TqhB+mKeT0JFfiiUL8EN0IJOHnfrTTHvBnUJgnG9BpfNEd9NEr55CkXyOgAebt BrehJ83R7/OmrpFUaOoPjVBEvPLJHY4Da38i9+bB3DIwVen4qiqJoDlnHbvguPSr l4mu5siacR1abAHnxtKSuNl9Ta3jJ/I2izJOlolJquEKNiTFgU86eZ6AFi6sk/hy vj+wd5nkbK/zFnP7YhMqYLrmwWvHzPbPT6t52YzETDJuCuiIbjgx+7zusw1TnhZ4 WQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 37788857651184719508306192075 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-27 16:51:04 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-03 10:06:34 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19914828255471399063050127571334115372219381473843694946824704034750571748493758954939916632357071561003042596189626136294075649801880838966005440565313939279010329912568385568959814641620828552142389134107525316667265303909174678224413749022826827805333419208151811200440591055796998691112135647496148217370056668273617201788027182780888983061527178821698993431995030867697227260362974140821293363432727750199296005830247367585752805201492544563136535045338752732013135557774364345526114769057650415486708162131468812304652121457167651433889576139145409588516674339086508832921583553986718950499449216962366482577497 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1295 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aboutspms.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alconexchangeportaltraining.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.betterconversations.novartis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bioupper.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carcinoid.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cibavision.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cookie.airoptix.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cosentyx.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.myalcon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.entresto.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exelonpatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.extavia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.focalinxr.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.focalview.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.get.cibavision.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gilenya.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.global.airoptix.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hf360.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ilaris.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.joingetconnected.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.migraene-helden.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myalcon.my' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ncc.novartis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.non-us.kymriah.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.novartis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.novartispharma.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nvfund.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oncologyaccessnow.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pro.pataday.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ptoryasis.co.il' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.myalcon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realityofspa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandoz-biosimilars.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sjiasupport.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supplierconnect.novartispharma.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.talkspms.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tempodivita.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thisaslife.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us.keepitpumping.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us.state.lookup.novartis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.virtualconsultant.alcon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboutspms.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alconexchangeportaltraining.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bioupper.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carcinoid.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cibavision.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosentyx.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entresto.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exelonpatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extavia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'focalinxr.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'focalview.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gilenya.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hf360.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilaris.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joingetconnected.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'migraene-helden.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myalcon.my' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncc.novartis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nvfund.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oncologyaccessnow.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptoryasis.co.il' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realityofspa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandoz-biosimilars.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjiasupport.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talkspms.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tempodivita.it' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a6f864d179f592893d93f93051e0dc2f091cae36 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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