incapsula.com

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate


This digital certificate with serial number 11:21:a5:54:c7:97:b3:18:8b:99:b0:61:43:64:c9:02:73:45 was issued on by GlobalSign nv-sa .

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
State / Province: Delaware
Locality: Dover
Country: US

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:a5:54:c7:97:b3:18:8b:99:b0:61:43:64:c9:02:73:45
Serial Number (int): 1492357941768774181488005601651353400275781
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 68:80:54:84:e3:4a:5a:0a:87:fa:44:04:02:8b:1b:ad:25:03:47:3c
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 82:8d:dc:fa:10:66:58:b8:17:d3:45:b1:5d:48:ee:ba:21:de:8c:91
Fingerprint (sha256): 1e:0e:e8:b1:e3:54:34:7d:37:0c:8e:b3:8a:2d:02:e5:3e:29:20:ec:b9:a1:14:17:14:b6:eb:78:b0:c0:54:9b

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for the current certificate on incapsula.com
84
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.api.nespresso-blendcreator.fr
*.awesomecloud.com
*.backend.nespresso-blendcreator.fr
*.bdmhistoricalrecords.dia.govt.nz
*.bibanking.bi.com.gt
*.bibanking.bi.com.sv
*.bicotiza.bi.com.gt
*.bienlinea.bi.com.gt
*.bissli.co.il
*.bmtmicro.com
*.clubbi.com.gt
*.collegeschedulerapp.com
*.conexionregional.net
*.corporacionbi.com
*.ctwmag.com
*.doglitter.com
*.dolce-gusto.be
*.dulcereceta.cl
*.e-zpassny.com
*.elroble.com
*.enlacebancario.com
*.ensilo.com
*.flash.nespresso-blendcreator.fr
*.fta-eu.org
*.fta-intl.org
*.innox.co.nz
*.jobberman.com
*.kitkat.co.za
*.nescafedolca.com.ar
*.nespresso-blendcreator.fr
*.nespresso-elearning.fr
*.nestle-cereals.gt
*.nestle-lalechera.com.mx
*.newscientist.com
*.pingidentity.com
*.promo.nestlechoco.bg
*.purinaproplan.com
*.remotecapture.net
*.swicoauctions.com
*.thebig5.ae
*.tollsbymailny.com
*.tradewindstea.com
*.vericheque.bi.com.gt
*.videomega.tv
*.webaccess.bi.com.gt
*.webcu.org
*.wetsuitwearhouse.com
awesomecloud.com
bdmhistoricalrecords.dia.govt.nz
bibanking.bi.com.sv
bicotiza.bi.com.gt
bienlinea.bi.com.gt
bissli.co.il
clubbi.com.gt
conexionregional.net
corporacionbi.com
ctwmag.com
doglitter.com
dulcereceta.cl
e-zpassny.com
elroble.com
ensilo.com
fta-eu.org
fta-intl.org
innox.co.nz
jobberman.com
kitkat.co.za
nescafedolca.com.ar
nespresso-blendcreator.fr
nespresso-elearning.fr
nestle-cereals.gt
nestle-lalechera.com.mx
newscientist.com
purinaproplan.com
remotecapture.net
swicoauctions.com
thebig5.ae
tollsbymailny.com
tradewindstea.com
vericheque.bi.com.gt
videomega.tv
webaccess.bi.com.gt
wetsuitwearhouse.com

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIILnTCCCoWgAwIBAgISESGlVMeXsxiLmbBhQ2TJAnNFMA0GCSqGSIb3DQEBCwUA MGYxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTwwOgYD VQQDEzNHbG9iYWxTaWduIE9yZ2FuaXphdGlvbiBWYWxpZGF0aW9uIENBIC0gU0hB MjU2IC0gRzIwHhcNMTUwMjIxMTc0MzQwWhcNMTYwMTA5MDkzOTMzWjBgMQswCQYD VQQGEwJVUzERMA8GA1UECBMIRGVsYXdhcmUxDjAMBgNVBAcTBURvdmVyMRYwFAYD VQQKEw1JbmNhcHN1bGEgSW5jMRYwFAYDVQQDEw1pbmNhcHN1bGEuY29tMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVYDloyPXqssupuvp4I2eW7yeQmX maTIosDS6uD3G92uIQuUV+bJ1JTTYVaMyUWRImEawCntji+aYK3jGfyz48fawOm+ KPwA7B3olhtvY8U4QJrRprFoddqzeSSCYjMG7WHP5BqEFmv40B/lh3e4rXQRL5Ph nQuiKTYT3wNh5/joqgjkufY+gll7Ym2Tr/tYUjF91MkVt5bn9iMHV6RJTgGVnh0g u/y/hZk1s3cvuz3sjvtKDQaLT7K3cW/buiRovf6m1IJYz5GI7l6+dxqKounnrYKT 10+KtcR+P+L/EgCqWjaF++APf38SxT6IdhVMJwdCEtFKqaXWAXndsfiTvQIDAQAB o4IISTCCCEUwDgYDVR0PAQH/BAQDAgWgMEkGA1UdIARCMEAwPgYGZ4EMAQICMDQw MgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRv cnkvMIIGjgYDVR0RBIIGhTCCBoGCDWluY2Fwc3VsYS5jb22CHyouYXBpLm5lc3By ZXNzby1ibGVuZGNyZWF0b3IuZnKCEiouYXdlc29tZWNsb3VkLmNvbYIjKi5iYWNr ZW5kLm5lc3ByZXNzby1ibGVuZGNyZWF0b3IuZnKCIiouYmRtaGlzdG9yaWNhbHJl Y29yZHMuZGlhLmdvdnQubnqCFSouYmliYW5raW5nLmJpLmNvbS5ndIIVKi5iaWJh bmtpbmcuYmkuY29tLnN2ghQqLmJpY290aXphLmJpLmNvbS5ndIIVKi5iaWVubGlu ZWEuYmkuY29tLmd0gg4qLmJpc3NsaS5jby5pbIIOKi5ibXRtaWNyby5jb22CDyou Y2x1YmJpLmNvbS5ndIIZKi5jb2xsZWdlc2NoZWR1bGVyYXBwLmNvbYIWKi5jb25l eGlvbnJlZ2lvbmFsLm5ldIITKi5jb3Jwb3JhY2lvbmJpLmNvbYIMKi5jdHdtYWcu Y29tgg8qLmRvZ2xpdHRlci5jb22CECouZG9sY2UtZ3VzdG8uYmWCECouZHVsY2Vy ZWNldGEuY2yCDyouZS16cGFzc255LmNvbYINKi5lbHJvYmxlLmNvbYIUKi5lbmxh Y2ViYW5jYXJpby5jb22CDCouZW5zaWxvLmNvbYIhKi5mbGFzaC5uZXNwcmVzc28t YmxlbmRjcmVhdG9yLmZyggwqLmZ0YS1ldS5vcmeCDiouZnRhLWludGwub3Jngg0q Lmlubm94LmNvLm56gg8qLmpvYmJlcm1hbi5jb22CDioua2l0a2F0LmNvLnphghUq Lm5lc2NhZmVkb2xjYS5jb20uYXKCGyoubmVzcHJlc3NvLWJsZW5kY3JlYXRvci5m coIYKi5uZXNwcmVzc28tZWxlYXJuaW5nLmZyghMqLm5lc3RsZS1jZXJlYWxzLmd0 ghkqLm5lc3RsZS1sYWxlY2hlcmEuY29tLm14ghIqLm5ld3NjaWVudGlzdC5jb22C EioucGluZ2lkZW50aXR5LmNvbYIWKi5wcm9tby5uZXN0bGVjaG9jby5iZ4ITKi5w dXJpbmFwcm9wbGFuLmNvbYITKi5yZW1vdGVjYXB0dXJlLm5ldIITKi5zd2ljb2F1 Y3Rpb25zLmNvbYIMKi50aGViaWc1LmFlghMqLnRvbGxzYnltYWlsbnkuY29tghMq LnRyYWRld2luZHN0ZWEuY29tghYqLnZlcmljaGVxdWUuYmkuY29tLmd0gg4qLnZp ZGVvbWVnYS50doIVKi53ZWJhY2Nlc3MuYmkuY29tLmd0ggsqLndlYmN1Lm9yZ4IW Ki53ZXRzdWl0d2VhcmhvdXNlLmNvbYIQYXdlc29tZWNsb3VkLmNvbYIgYmRtaGlz dG9yaWNhbHJlY29yZHMuZGlhLmdvdnQubnqCE2JpYmFua2luZy5iaS5jb20uc3aC EmJpY290aXphLmJpLmNvbS5ndIITYmllbmxpbmVhLmJpLmNvbS5ndIIMYmlzc2xp LmNvLmlsgg1jbHViYmkuY29tLmd0ghRjb25leGlvbnJlZ2lvbmFsLm5ldIIRY29y cG9yYWNpb25iaS5jb22CCmN0d21hZy5jb22CDWRvZ2xpdHRlci5jb22CDmR1bGNl cmVjZXRhLmNsgg1lLXpwYXNzbnkuY29tggtlbHJvYmxlLmNvbYIKZW5zaWxvLmNv bYIKZnRhLWV1Lm9yZ4IMZnRhLWludGwub3Jnggtpbm5veC5jby5ueoINam9iYmVy bWFuLmNvbYIMa2l0a2F0LmNvLnphghNuZXNjYWZlZG9sY2EuY29tLmFyghluZXNw cmVzc28tYmxlbmRjcmVhdG9yLmZyghZuZXNwcmVzc28tZWxlYXJuaW5nLmZyghFu ZXN0bGUtY2VyZWFscy5ndIIXbmVzdGxlLWxhbGVjaGVyYS5jb20ubXiCEG5ld3Nj aWVudGlzdC5jb22CEXB1cmluYXByb3BsYW4uY29tghFyZW1vdGVjYXB0dXJlLm5l dIIRc3dpY29hdWN0aW9ucy5jb22CCnRoZWJpZzUuYWWCEXRvbGxzYnltYWlsbnku Y29tghF0cmFkZXdpbmRzdGVhLmNvbYIUdmVyaWNoZXF1ZS5iaS5jb20uZ3SCDHZp ZGVvbWVnYS50doITd2ViYWNjZXNzLmJpLmNvbS5ndIIUd2V0c3VpdHdlYXJob3Vz ZS5jb20wCQYDVR0TBAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw SQYDVR0fBEIwQDA+oDygOoY4aHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9ncy9n c29yZ2FuaXphdGlvbnZhbHNoYTJnMi5jcmwwgaAGCCsGAQUFBwEBBIGTMIGQME0G CCsGAQUFBzAChkFodHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2VydC9n c29yZ2FuaXphdGlvbnZhbHNoYTJnMnIxLmNydDA/BggrBgEFBQcwAYYzaHR0cDov L29jc3AyLmdsb2JhbHNpZ24uY29tL2dzb3JnYW5pemF0aW9udmFsc2hhMmcyMB0G A1UdDgQWBBRogFSE40paCof6RAQCixutJQNHPDAfBgNVHSMEGDAWgBSW3mHxvRwW KVMcwMx9O4MAQOYafDANBgkqhkiG9w0BAQsFAAOCAQEAPTHOVmotCUh8XEBa5tHQ KY+78qg4f5cm/dSfD7WocX1aAFgDPcflDyMU6qELcIjatwaqQdUu0H64mR2UPJlj 8HYekl6esjnsVfgg8Jvic23HYXQhzRwzZ5FwTBd2DfRhWL0aAtY/GWLzHTJ2QYwu X13zu383WQvb2KyfvkahS/hP7lzYwckLb43lntKsKsseC4afilFyNGjI7aeXp5AH f6GCqgi6RsPK2xz0+q7+NDbeiEzhmScOGVkv55Oyc1tQVDgzfNbuMXmx10pCYqVS CyKkruxQlbDKpUaQAQoEoEuue/w8y80uCJaJDFRruHqP2hMqPHs7+T9OPQ5aYk38 7Q== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVYDloyPXqssupuvp4I2 eW7yeQmXmaTIosDS6uD3G92uIQuUV+bJ1JTTYVaMyUWRImEawCntji+aYK3jGfyz 48fawOm+KPwA7B3olhtvY8U4QJrRprFoddqzeSSCYjMG7WHP5BqEFmv40B/lh3e4 rXQRL5PhnQuiKTYT3wNh5/joqgjkufY+gll7Ym2Tr/tYUjF91MkVt5bn9iMHV6RJ TgGVnh0gu/y/hZk1s3cvuz3sjvtKDQaLT7K3cW/buiRovf6m1IJYz5GI7l6+dxqK ounnrYKT10+KtcR+P+L/EgCqWjaF++APf38SxT6IdhVMJwdCEtFKqaXWAXndsfiT vQIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1492357941768774181488005601651353400275781 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-02-21 17:43:40 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-09 09:39:33 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25416314390273079469289349364959378260579503064567165540903088936619284763889650990644465144420443104695573929444670549636220530365766702034919099540039802341429921472116696812775717043928837763029719545682936806664005592639055078255072187796177108637716112682208809771338282827376319566966464825461634487218818752541008756660070250361201387798967570905083586987191483154842266083020499627760519376768499114818694782006834036097674685468137813990144654237515932140278913854202884373728070584212443135381546945421035776195406159647551095742819015687631296073790335462522019707854645154469093829855650001831503989347261 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1669 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.nespresso-blendcreator.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.awesomecloud.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.backend.nespresso-blendcreator.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bdmhistoricalrecords.dia.govt.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bibanking.bi.com.gt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bibanking.bi.com.sv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bicotiza.bi.com.gt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bienlinea.bi.com.gt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bissli.co.il' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bmtmicro.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clubbi.com.gt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.collegeschedulerapp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.conexionregional.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.corporacionbi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ctwmag.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doglitter.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dolce-gusto.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dulcereceta.cl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-zpassny.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elroble.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enlacebancario.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ensilo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flash.nespresso-blendcreator.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fta-eu.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fta-intl.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.innox.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jobberman.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kitkat.co.za' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nescafedolca.com.ar' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nespresso-blendcreator.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nespresso-elearning.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestle-cereals.gt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestle-lalechera.com.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newscientist.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pingidentity.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.promo.nestlechoco.bg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purinaproplan.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.remotecapture.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swicoauctions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebig5.ae' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tollsbymailny.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tradewindstea.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vericheque.bi.com.gt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.videomega.tv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webaccess.bi.com.gt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webcu.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wetsuitwearhouse.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awesomecloud.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdmhistoricalrecords.dia.govt.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bibanking.bi.com.sv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicotiza.bi.com.gt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bienlinea.bi.com.gt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bissli.co.il' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubbi.com.gt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conexionregional.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporacionbi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctwmag.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doglitter.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dulcereceta.cl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-zpassny.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elroble.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ensilo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fta-eu.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fta-intl.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innox.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobberman.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitkat.co.za' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nescafedolca.com.ar' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nespresso-blendcreator.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nespresso-elearning.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestle-cereals.gt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestle-lalechera.com.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newscientist.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purinaproplan.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remotecapture.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swicoauctions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebig5.ae' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tollsbymailny.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradewindstea.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vericheque.bi.com.gt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videomega.tv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webaccess.bi.com.gt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wetsuitwearhouse.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 68805484e34a5a0a87fa4404028b1bad2503473c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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