leapfrog-ssl.nasdaq.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ae:ee:be:72:38:75:7a:1c:bf:76:01:28:2d:7a:cc:75:2f was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl.nasdaq.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ae:ee:be:72:38:75:7a:1c:bf:76:01:28:2d:7a:cc:75:2f
Serial Number (int): 320863334755591793465445821428575991788847
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ca:d4:8d:1a:1f:4d:0e:90:7e:b0:0b:3b:9b:d2:d8:9b:56:23:36:50
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bc:92:b2:7a:33:02:73:fa:95:3c:db:7f:91:c1:13:3e:75:2a:70:48
Fingerprint (sha256): 00:26:7d:54:29:3e:35:2c:39:98:c3:e0:fe:96:a8:e0:b3:19:c4:34:18:42:fd:aa:ed:8b:7a:ed:a0:47:50:5c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate leapfrog-ssl.nasdaq.com

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl.nasdaq.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aegeanmarine.gcs-web.com
alimerasciences.gcs-web.com
arclogisticsir.gcs-web.com
bedbathandbeyond.gcs-web.com
bioblastpharma.gcs-web.com
blackrockbkcc.gcs-web.com
bostonbeerco.gcs-web.com
bravobrio.gcs-web.com
cabelas.gcs-web.com
canadiansolar.gcs-web.com
caretrust.gcs-web.com
catocorp.gcs-web.com
davitainc.gcs-web.com
dineequity.gcs-web.com
douglasdynamics.gcs-web.com
enstargroup.gcs-web.com
genesco.gcs-web.com
gentex.gcs-web.com
hubgroup.gcs-web.com
icumed.gcs-web.com
intriconcorp.gcs-web.com
investor.alimerasciences.com
investor.caretrustreit.com
investor.enstargroup.com
investor.oxfordinc.com
investor.siga.com
investor.stamps.com
investorrelations.intricon.com
investors.arcxlp.com
investors.bbrg.com
investors.canadiansolar.com
investors.dineequity.com
investors.sparinc.com
investors.st.com
investors.univstainless.com
ir.bioblastpharma.com
ir.connection.com
ir.douglasdynamics.com
ir.icumed.com
ir.lasallehotels.com
ir.libertytax.com
ir.manning-napier.com
ir.masimo.com
ir.novavax.com
ir.nv5.com
ir.o2micro.com
ir.proqr.com
ir.stemline.com
lasallehotelproperties.gcs-web.com
leapfrog-ssl.nasdaq.com
libertytax.gcs-web.com
manningnapier.gcs-web.com
masimocorp.gcs-web.com
metabank.gcs-web.com
navios.gcs-web.com
nbtbancorp.gcs-web.com
neiman.gcs-web.com
niriaustinsa.gcs-web.com
novartis.gcs-web.com
novavax.gcs-web.com
nv5globalinc.gcs-web.com
o2micro.gcs-web.com
okta.gcs-web.com
oxfordindustriesinc.gcs-web.com
pcconnectioninc.gcs-web.com
plxpharmainc.gcs-web.com
proqr.gcs-web.com
quakerchemicalcorp.gcs-web.com
resourcecapital.gcs-web.com
scafg.gcs-web.com
siga.gcs-web.com
sparinc.gcs-web.com
stampscominc.gcs-web.com
stemlinetherapeutics.gcs-web.com
stmicroelectronicsnv.gcs-web.com
treehousefoods.gcs-web.com
universalhealthrealty.gcs-web.com
univstainless.gcs-web.com
valhi.gcs-web.com
vblrx.gcs-web.com
vcltest.gcs-web.com
verintsystems.gcs-web.com
westmarine.gcs-web.com
wolverineworldwide.gcs-web.com
www.blackrockbkcc.com
www.bostonbeer.com
www.metafinancialgroup.com
www.niriaustinsa.org
www.uhrit.com
www.valhi.net

Other certificates including the domain name nasdaq.com

(limited to 100 certificates)
midev.nasdaq.com
leapfrog-ssl.nasdaq.com
incapsula.com
incapsula.com
platform-status.buckzy.net
access.secureqa.nasdaq.com
globenewswire.com
ssl003.insnw.net
incapsula.com
incapsula.com
incapsula.com
teleport.demo.ume.nff.aws.exchsys.nasdaq.com
incapsula.com
incapsula.com
incapsula.com
listingcenter.nasdaq.com
incapsula.com
irintelligence.nasdaqomx.com
imperva.com
incapsula.com
imperva.com
teleport.eks.uat.ums-atris.aws.nasdaq.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl.nasdaq.com
nfn.analytics.nasdaq.com
imperva.com
ssl003.insnw.net
www.nasdaq.com
test.dev.mdic.aws.nasdaq.com
qc.globenewswire.com
teleport.iri.uat.irinsight.aws.nasdaq.com
*.rpxnow.com
imperva.com
platform-status.buckzy.net
incapsula.com
incapsula.com
incapsula.com
imperva.com
gjma.nasdaq.com
docs.data.nasdaq.com
imperva.com
incapsula.com
imperva.com
sp.nasdaq.com
incapsula.com
*.ingress.ops.amgmktums1.aws.nasdaq.com
business.nasdaq.com
estonia-evoting.nasdaq.com
incapsula.com
mvrcheck.io
incapsula.com
incapsula.com
incapsula.com
incapsula.com
leapfrog-ssl.nasdaq.com
incapsula.com
imperva.com
ssl003.insnw.net
ssl003.insnw.net
incapsula.com
incapsula.com
incapsula.com
leapfrog-ssl.nasdaq.com
incapsula.com
incapsula.com
us18usfpoccmq02.tss.nasdaq.com
leapfrog-ssl-38.gcs-web.com
boardvantage.nasdaq.com
incapsula.com
incapsula.com
imperva.com
incapsula.com
incapsula.com
imperva.com
incapsula.com
authorization.mojoportal.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
nasdaq.com
teleport.eks.pro.ums-cix.aws.nasdaq.com
mvrcheck.io
www.nasdaq.com
teleport.qa.inet.aws.exchsys.nasdaq.com
platform-status.buckzy.net
access1.eu.secureweb.nasdaq.com
imperva.com
incapsula.com
incapsula.com
incapsula.com
boardvantage.nasdaq.com
saml.portal.na.nasdaq.com
incapsula.com
platform-status.buckzy.net
incapsula.com
*.poc.nffume.aws.nasdaq.com
incapsula.com
incapsula.com
devx.nasdaq.com

Certificate

The complete raw certificate details for leapfrog-ssl.nasdaq.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Lgrp4MGSOHYN14gBeGZ
kc2+orCUlA0Bo2Yf5yvQFScd5jtOYj9cdpNyDaTeX9QIbbLMQ4fGT+JhkYGlwLum
PYHlN8tM554nvbsGJV0ftj8UNja27VjICDz+WV46YZnCucwlQusoRW7bU1BUlyZr
fjOdewnHOCmAWPlU/4JfMAkrU40DzIbnup0ZgZNDrt6aagLLBLupfAueUdKbzVop
wGXrOpguMznbaSCHqd9zjLLOBJKdmD/f1TJ3E70Y9VqYoGvWOAFWwN6HSByj5jnV
D5jWoFJi+bO5sDGNLBZWHu526BIozA8IYQQn1DzbnJ73uexucsLXkAg/KaDpBKxz
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320863334755591793465445821428575991788847
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-30 14:04:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-28 14:04:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl.nasdaq.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28873151402857515015914345075837589129206952514530413143662088127413329302633621701281232290248064852523426241061998021735364543954917970534869770395173030018519970898627066154081013453890813409102629821374257316479099905520236959220622241465357905273521906709106586487961871106015200038582660186815045452583703712295082018537029339561369107162428199685600005531487812407049382002676627040892784161947087273842912127527069865222042156903705077284174076492391056422261382852153755828702445509610798936890710629169783314461449893084309007333964230884702421653116198603613826900689057057575937392253899525075332942820177
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cad48d1a1f4d0e907eb00b3b9bd2d89b56233650
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aegeanmarine.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alimerasciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arclogisticsir.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bedbathandbeyond.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bioblastpharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackrockbkcc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bostonbeerco.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bravobrio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabelas.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadiansolar.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caretrust.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catocorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davitainc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dineequity.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'douglasdynamics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enstargroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genesco.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gentex.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hubgroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icumed.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intriconcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.alimerasciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.caretrustreit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.enstargroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.oxfordinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.siga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.stamps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorrelations.intricon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.arcxlp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.bbrg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.canadiansolar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.dineequity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sparinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.st.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.univstainless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.bioblastpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.connection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.douglasdynamics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.icumed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.lasallehotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.libertytax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.manning-napier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.masimo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.novavax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.nv5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.o2micro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.proqr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.stemline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lasallehotelproperties.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl.nasdaq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertytax.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manningnapier.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masimocorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metabank.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navios.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbtbancorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neiman.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niriaustinsa.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novartis.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novavax.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nv5globalinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'o2micro.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okta.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oxfordindustriesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcconnectioninc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plxpharmainc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proqr.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quakerchemicalcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resourcecapital.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scafg.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siga.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sparinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stampscominc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemlinetherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmicroelectronicsnv.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'treehousefoods.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalhealthrealty.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'univstainless.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valhi.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vblrx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcltest.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verintsystems.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westmarine.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wolverineworldwide.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blackrockbkcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bostonbeer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metafinancialgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.niriaustinsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhrit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valhi.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001658b5cdbc20000040300473045022100ff49ae185ed4e7c83fd726d2709f6b540131a23c913dbdcfa61bd368726be106022047737d2f33de99db2bde4bd20bef92beec8252123f0166071733bfb32bb8e096007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001658b5cddca0000040300483046022100bc737831628e4fd01051099a7bd44da609f90b27497a8576b1b36dffd41368190221008cc4d59fdcb7d6a271e12ec5b6508a638a70782a48450dc9d74c973d1b72ec13
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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