incapsula.com

- Incapsula Inc -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 11:21:38:a9:2e:07:a5:e4:56:d5:44:87:b7:15:ac:c6:df:cf was issued on by GlobalSign nv-sa.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:38:a9:2e:07:a5:e4:56:d5:44:87:b7:15:ac:c6:df:cf
Serial Number (int): 1492213494147844989938991184505388512239567
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 5c:d1:c5:b2:62:8d:36:d5:47:a1:ca:14:1f:7e:e0:e9:00:71:91:1f
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 92:8c:2a:1f:53:8e:22:cf:7c:9a:14:5f:00:b0:0a:32:2a:76:9c:bc
Fingerprint (sha256): 69:2e:30:fc:e7:6e:31:73:47:24:95:3e:ad:20:dd:7f:83:e9:fb:42:6c:74:27:2a:78:69:a9:27:91:18:cd:5e

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate incapsula.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.atesaonline.com
*.atesarenting.com
*.bemydatebuddy.com
*.crndev.chick-fil-a.com
*.helpmejvp.com
*.innovid.com
*.lafayettephotography.eu
*.lodgeandinninsurance.com
*.murad.com
*.nestlehealthscience.be
*.pcicomplianceguide.org
*.poloniaero.com
*.prod.nestlehealthscience.com.br
*.realworks.nl
*.redbrickhealth.com
*.scotrail.co.uk
*.shay.work
*.weedworthy.com
*.zionsecurity.com
IOSwapsTest.cls-group.com
app.clear8.com
arch-test-1.jobfitsystem.com
atesaonline.com
atesarenting.com
bemydatebuddy.com
beta.rapaportfairtrade.com
blackshop.pro
bodyways.org
bridge.grand-benedicts.com
connect.lufkin.com
crndev.chick-fil-a.com
dinomart.com.au
drupalstag.nestle-cereals.pt
electronicrestoral.com
eventas.cajamar.es
extranet.robertheath.co.uk
fastlec.com.au
financeiro.siteblindado.com.br
helpmejvp.com
high-minded.net
kt8merch.com
lafayettephotography.eu
lodgeandinninsurance.com
lufkin-sp.lufkin.com
my.t-mobile.com
myplanbymedica.com
nestlehealthscience.be
offshorewindillinois.com
partners.tams.com
passport.mobilenations.com
payments.ausfis.org
pcicomplianceguide.org
physics.educationmadevisual.com
poloniaero.com
portal.spd.co.il
pricechopper.com
realworks.nl
redbrickhealth.com
sale.macktakmart.com
scotrail.co.uk
secure.algocharge.com
secure.id.fc2cn.com
secure.mobilenations.com
secure2.algocharge.com
secured.algocharge.com
secured.allcharge.com
secured2.algocharge.com
shay.work
shop.maevona.com
singpostuat2-staging.oss.neopost-id.com
sjgov.org
sslauthority.com
supplier.yamaha-motor.co.th
usb.yamaha-motor.co.th
vapeworld.com
vintageskiworld.com
weedworthy.com
www.affiliates-center.org
www.blackshop.pro
www.bodyways.org
www.dinomart.com.au
www.electronicrestoral.com
www.fastlec.com.au
www.high-minded.net
www.kt8merch.com
www.myplanbymedica.com
www.offshorewindillinois.com
www.pricechopper.com
www.sjgov.org
www.sslauthority.com
www.vapeworld.com
www.vintageskiworld.com
www.xanalytics.com
www.ymassist.co.jp
ymassist.co.jp
zionsecurity.com

Other certificates including the domain name incapsula.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8yeA6BZ3rqriY6YzHjM
59RbBUSie1mKlQVRm0HWRj54AW5EMVHwMycfsMM+gKHj95G7FmEQ1Vcaam7V33u6
RemX9uyQOgdjE9bNFOCR3Fso2nsabffhpVfB0lnvvg8fUq/X1InKa7Xjhv8qAuFB
KsgcyhtK8vEn6MgFGD4RXiipPa7eBMOs7LDvLt343FahxHrlf3TWIfSTg49DiBBZ
ZOJtqAluEWVp8pd1T5evBm4LgukpAriItpqk6uyIqdx6bS2CW20tWQU0Du0o9hZE
NNW2mhu/69UUyeajCwYMIY2FBnPHZtJnORR2FpeOr6p3GXqjQ2cLqGajj8gwG6xj
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492213494147844989938991184505388512239567
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-01 08:59:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-21 05:19:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23202510331844184768196282394769115196185514580385945450034017957794965588806174135324675403935896195265835653304111520076395178036099249565628016530751702038674621778671384673143991415802682992490149552907869619350511573593470295116035329532516683361374547213903799488681146767007290955702187089550588432320706494258670551539780175443908309113017687469260349989957818316804788127148115981695022738143255963202632018567904865910008776406498547889711184713152425915617992673081829045329019037730963234435844169420127473815372753035155989446259134142056385805909738470573189385233121351611483576084248696973584036029227
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2068 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atesaonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atesarenting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bemydatebuddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crndev.chick-fil-a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.helpmejvp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.innovid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lafayettephotography.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lodgeandinninsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.murad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestlehealthscience.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pcicomplianceguide.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poloniaero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.nestlehealthscience.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realworks.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redbrickhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scotrail.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shay.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weedworthy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zionsecurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'IOSwapsTest.cls-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.clear8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arch-test-1.jobfitsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atesaonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atesarenting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bemydatebuddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.rapaportfairtrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackshop.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bodyways.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridge.grand-benedicts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.lufkin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crndev.chick-fil-a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dinomart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drupalstag.nestle-cereals.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electronicrestoral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eventas.cajamar.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extranet.robertheath.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastlec.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financeiro.siteblindado.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpmejvp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'high-minded.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kt8merch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lafayettephotography.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lodgeandinninsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lufkin-sp.lufkin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.t-mobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplanbymedica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestlehealthscience.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offshorewindillinois.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.tams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passport.mobilenations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.ausfis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcicomplianceguide.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'physics.educationmadevisual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poloniaero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.spd.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pricechopper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realworks.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redbrickhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sale.macktakmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scotrail.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.algocharge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.id.fc2cn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobilenations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure2.algocharge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secured.algocharge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secured.allcharge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secured2.algocharge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shay.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.maevona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'singpostuat2-staging.oss.neopost-id.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjgov.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sslauthority.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supplier.yamaha-motor.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usb.yamaha-motor.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vapeworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vintageskiworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weedworthy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.affiliates-center.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blackshop.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bodyways.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dinomart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.electronicrestoral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fastlec.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.high-minded.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kt8merch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myplanbymedica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offshorewindillinois.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pricechopper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjgov.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sslauthority.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vapeworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vintageskiworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xanalytics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ymassist.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ymassist.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zionsecurity.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5cd1c5b2628d36d547a1ca141f7ee0e90071911f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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