incapsula.com

- Incapsula Inc -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 4f:4e:03:c1:3c:ab:29:5b:15:fc:e1:3e was issued on by GlobalSign nv-sa.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 4f:4e:03:c1:3c:ab:29:5b:15:fc:e1:3e
Serial Number (int): 24543629721508889674244743486
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 33:4f:b0:c4:e6:d3:fc:8c:88:46:8b:d0:1e:62:81:b6:4d:5d:12:ff
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): a1:34:f7:53:9f:17:ed:a1:18:71:b9:74:8a:2f:8a:4c:16:07:30:60
Fingerprint (sha256): 69:02:74:01:26:97:33:30:97:26:58:42:07:5c:ac:a0:2a:07:c6:78:e9:69:f9:b5:f9:69:e4:b5:94:c0:56:d9

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate incapsula.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.antidoping.org.sg
*.app.zdrowystartwprzyszlosc.pl
*.beggin-fan.beggintime.com
*.bestjet.com
*.bravurasolutions.com
*.budgecovers.com
*.buzzluck.com
*.cg4assettracking.com
*.chick-fil-adev.com
*.chodadee.com
*.cn.spotoption.com
*.connect.sahabatnestle.co.id
*.cstenet.com
*.danozdirect.co.nz
*.directv.cl
*.directv.com.ar
*.directvla.com
*.directvplay.com
*.dolce-gusto.cz
*.dunbarvalutrak.com
*.efectivale.com.mx
*.empirecovers.com
*.empirepatio.com
*.eztrader.com
*.forela.com
*.gutegutscheine.at
*.havigs.com
*.homeworkmarket.com
*.i-tracing.com
*.ibeauthentic.com
*.icemain.com
*.invictawatch.com
*.kccd.edu
*.kde.org
*.lab.ematsa.cat
*.maggi.com.ec
*.medibank.elasticgrid.com
*.metro-trade.com
*.myacxiom.com
*.nbiblio.com
*.nestlebaby.es
*.p.nestle.jp
*.pdsclear.com.ph
*.planyo.com
*.propertyvalue.com.au
*.proplanwins.com
*.purinadentalife.ca
*.putorcall.com
*.ravago.com
*.rorg.com
*.scoifmanwatch.com
*.searado.com
*.shuffieldlowman.com
*.spotoption.com
*.startup.ltda
*.tdmarketplace.net
*.tiprodimg.myngp.com
*.tytocare.com
*.volunteers.sg
antidoping.org.sg
bestjet.com
budgecovers.com
buzzluck.com
cg4assettracking.com
chick-fil-adev.com
danozdirect.co.nz
directv.cl
directv.com.ar
directvla.com
directvplay.com
efectivale.com.mx
empirecovers.com
empirepatio.com
gutegutscheine.at
homeworkmarket.com
invictawatch.com
kccd.edu
lab.ematsa.cat
maggi.com.ec
metro-trade.com
nbiblio.com
nestlebaby.es
pdsclear.com.ph
planyo.com
plb-elasticsearch.csd.t-mobile.com
propertyvalue.com.au
proplanwins.com
purinadentalife.ca
rorg.com
scoifmanwatch.com
searado.com
shuffieldlowman.com
startup.ltda
volunteers.sg

Other certificates including the domain name incapsula.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QGl70ohlF0LhLy3bEU7
nPjpVwV2e/LOHiWyDTa3qcNX0vT+s1r684mE7cXyXhalYV6UI+JXzgrdnDmO5r8H
QCAmLdIkakdY3AS3yzGbE7wRJTJdQr4AmqCrO1irBUHpfb4/P0ONHzum+6VJlz0Z
/fnE+Yvodk57RIJkCuiHyvEkPCeLpDGVJ7o/23japdIc1BYyaP1jZtshosnWWhub
9ggR43qIkl6PE+gA8FJqqUCC99kyHJ1WwuLQrZT476VBOytP0oSHNmpGc/dvMmyf
zKUzprcwkPI5WMTidBSuWp7RwcoZ/EpcZYeq8zfooq0kO3/bTuboqNLBOaOgxx07
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 24543629721508889674244743486
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-15 01:40:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-16 07:47:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27899478146590720879575263804656088802377042316596432410400420257863038307141774672434804535387648299940457804315296936298708489617583650870958802591526665567279819807559823356571663676616789096425522325402967357454506900143820387337269213742742261145749603009690747858934269801810278011271182166025965211425916290873882401764206231410025780160758245580048763770598110880609140616272387565081353089076332044291747777450715137640377346935912165618409498725623395059127966528662270444027474217506388921081575273172355391137124714736068845445568001745851701040954590628440777979368460377690788147818230951609923333340063
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1727 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.antidoping.org.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.app.zdrowystartwprzyszlosc.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beggin-fan.beggintime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestjet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bravurasolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.budgecovers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buzzluck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cg4assettracking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chick-fil-adev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chodadee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cn.spotoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.connect.sahabatnestle.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cstenet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.danozdirect.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.directv.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.directv.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.directvla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.directvplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dolce-gusto.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dunbarvalutrak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.efectivale.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.empirecovers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.empirepatio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eztrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gutegutscheine.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.havigs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homeworkmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.i-tracing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibeauthentic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.icemain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.invictawatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kccd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kde.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lab.ematsa.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maggi.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medibank.elasticgrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metro-trade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myacxiom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nbiblio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestlebaby.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.p.nestle.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pdsclear.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.planyo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.propertyvalue.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.proplanwins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purinadentalife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.putorcall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ravago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rorg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scoifmanwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.searado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shuffieldlowman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spotoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.startup.ltda'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tdmarketplace.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tiprodimg.myngp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tytocare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.volunteers.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antidoping.org.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestjet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'budgecovers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buzzluck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cg4assettracking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chick-fil-adev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danozdirect.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directv.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directv.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directvla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directvplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'efectivale.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'empirecovers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'empirepatio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gutegutscheine.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeworkmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invictawatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kccd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lab.ematsa.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maggi.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metro-trade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbiblio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestlebaby.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdsclear.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planyo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plb-elasticsearch.csd.t-mobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'propertyvalue.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proplanwins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purinadentalife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rorg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scoifmanwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'searado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shuffieldlowman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startup.ltda'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volunteers.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							334fb0c4e6d3fc8c88468bd01e6281b64d5d12ff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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