leapfrog-ssl-3.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:6d:33:f7:80:ea:97:0c:19:1f:1e:78:7d:5c:42:17:9c:53 was issued on by Let's Encrypt.

With 80 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=leapfrog-ssl-3.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:6d:33:f7:80:ea:97:0c:19:1f:1e:78:7d:5c:42:17:9c:53
Serial Number (int): 385608997461266934073923505936605654785107
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e9:c8:b5:38:b2:d6:49:b1:3d:35:28:64:c7:90:a1:6a:5c:a7:60:47
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): df:ec:6e:6c:53:eb:2d:7b:d0:6e:1c:de:a7:a3:73:dc:b3:73:fd:0a
Fingerprint (sha256): 00:8b:5f:c9:f2:9a:48:85:e2:e3:be:bf:f8:61:47:87:c1:00:5e:b4:6b:e3:a7:ad:96:98:da:fe:be:eb:04:0f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-3.gcs-web.com

80

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-3.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acmresearch.gcs-web.com
allscriptshealthcaresolutionsinc.gcs-web.com
americanfinancialgroup.gcs-web.com
apogeeenterprises.gcs-web.com
aptorumgroup.gcs-web.com
ascentcapitalgroup.gcs-web.com
autodeskinc.gcs-web.com
avnet.gcs-web.com
cannae.gcs-web.com
celsion.gcs-web.com
churchilldownsincorporated.gcs-web.com
clene.gcs-web.com
comscore.gcs-web.com
dynasil.gcs-web.com
hasbro.gcs-web.com
invest.clene.com
investor.allscripts.com
investor.cannaeholdings.com
investor.celsion.com
investor.hasbro.com
investor.quinstreet.com
investor.textainer.com
investor.ultralifecorporation.com
investors.autodesk.com
investors.landsend.com
investors.lincolneducationalservices.com
investors.wtwco.com
ir.acmrcsh.com
ir.afginc.com
ir.apog.com
ir.aptorumgroup.com
ir.ascentcapitalgroupinc.com
ir.avnet.com
ir.churchilldownsincorporated.com
ir.comscore.com
ir.israelcorp.com
ir.kingsoft.com
ir.lunainc.com
ir.lunainnovations.com
ir.lutherburbanksavings.com
ir.madrigalpharma.com
ir.mrcy.com
ir.nantkwest.com
ir.ominto.com
ir.remoraroyalties.com
ir.towerstream.com
ir.wns.com
israelcorp.gcs-web.com
jbtcorporation.gcs-web.com
kingsoftcorporation.gcs-web.com
landsendinc.gcs-web.com
leapfrog-ssl-3.gcs-web.com
lincolneducationalservices.gcs-web.com
lunainnovationsinc.gcs-web.com
lutherburbanksavings.gcs-web.com
madrigalpharma.gcs-web.com
metlifeinc.gcs-web.com
mrcy.gcs-web.com
nantkwestinc.gcs-web.com
nrecorp.gcs-web.com
nuvasiveinc.gcs-web.com
omintoinc.gcs-web.com
osiris.gcs-web.com
quinstreet.gcs-web.com
remoraroyalties.gcs-web.com
riministreet.gcs-web.com
synlogic.gcs-web.com
tcpcapital.gcs-web.com
terraformglobal.gcs-web.com
textainergroupholdingsltd.gcs-web.com
towerstream.gcs-web.com
ultralifecorporation.gcs-web.com
whirlpoolcorp.gcs-web.com
willistowerswatson.gcs-web.com
wnsnorthamerica.gcs-web.com
www.afginc.com
www.apog.com
www.apogeerenovation.com
www.ir.avnet.com
www.terraformpower.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-3.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMnzCCC4egAwIBAgISBG0z94DqlwwZHx54fVxCF5xTMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMTExMzQzNTdaFw0yNDAzMTAxMzQzNTZaMCUxIzAhBgNVBAMT
GmxlYXBmcm9nLXNzbC0zLmdjcy13ZWIuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsm6MifTH5ZYrnJGtthMwc2K/n/bM5Ux/3mU4rbNY5KXEixPF
aYIIGbELeQxheVZyk2tZI8LjYhqwTCqZXL22JFdhyfizZgPIQbumBC4HJoLLHWSW
JCcR0EDANjc/s6Nf9mNo97zBsFXBgUW4TZF0YselMbsODuWrQValdevIL0UOQFf+
lpWt9s/GqkYw1K1fYr6sYPcX8RxzLCAZ709xD0g1p7mMFS124NRLR8w1VBMWXLgu
B9OsBLNge3HS2Fd11gVt9lmPvYo52fXsXmVYQCx2wfY5rQCjcYy5/IdGam56+hzn
ac+ysFJovmZLe7KUUBtWrn/PclnvwORG0EC+JwIDAQABo4IJujCCCbYwDgYDVR0P
AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMB
Af8EAjAAMB0GA1UdDgQWBBTpyLU4stZJsT01KGTHkKFqXKdgRzAfBgNVHSMEGDAW
gBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUH
MAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3Iz
LmkubGVuY3Iub3JnLzCCB8AGA1UdEQSCB7cwggezghdhY21yZXNlYXJjaC5nY3Mt
d2ViLmNvbYIsYWxsc2NyaXB0c2hlYWx0aGNhcmVzb2x1dGlvbnNpbmMuZ2NzLXdl
Yi5jb22CImFtZXJpY2FuZmluYW5jaWFsZ3JvdXAuZ2NzLXdlYi5jb22CHWFwb2dl
ZWVudGVycHJpc2VzLmdjcy13ZWIuY29tghhhcHRvcnVtZ3JvdXAuZ2NzLXdlYi5j
b22CHmFzY2VudGNhcGl0YWxncm91cC5nY3Mtd2ViLmNvbYIXYXV0b2Rlc2tpbmMu
Z2NzLXdlYi5jb22CEWF2bmV0Lmdjcy13ZWIuY29tghJjYW5uYWUuZ2NzLXdlYi5j
b22CE2NlbHNpb24uZ2NzLXdlYi5jb22CJmNodXJjaGlsbGRvd25zaW5jb3Jwb3Jh
dGVkLmdjcy13ZWIuY29tghFjbGVuZS5nY3Mtd2ViLmNvbYIUY29tc2NvcmUuZ2Nz
LXdlYi5jb22CE2R5bmFzaWwuZ2NzLXdlYi5jb22CEmhhc2Jyby5nY3Mtd2ViLmNv
bYIQaW52ZXN0LmNsZW5lLmNvbYIXaW52ZXN0b3IuYWxsc2NyaXB0cy5jb22CG2lu
dmVzdG9yLmNhbm5hZWhvbGRpbmdzLmNvbYIUaW52ZXN0b3IuY2Vsc2lvbi5jb22C
E2ludmVzdG9yLmhhc2Jyby5jb22CF2ludmVzdG9yLnF1aW5zdHJlZXQuY29tghZp
bnZlc3Rvci50ZXh0YWluZXIuY29tgiFpbnZlc3Rvci51bHRyYWxpZmVjb3Jwb3Jh
dGlvbi5jb22CFmludmVzdG9ycy5hdXRvZGVzay5jb22CFmludmVzdG9ycy5sYW5k
c2VuZC5jb22CKGludmVzdG9ycy5saW5jb2xuZWR1Y2F0aW9uYWxzZXJ2aWNlcy5j
b22CE2ludmVzdG9ycy53dHdjby5jb22CDmlyLmFjbXJjc2guY29tgg1pci5hZmdp
bmMuY29tggtpci5hcG9nLmNvbYITaXIuYXB0b3J1bWdyb3VwLmNvbYIcaXIuYXNj
ZW50Y2FwaXRhbGdyb3VwaW5jLmNvbYIMaXIuYXZuZXQuY29tgiFpci5jaHVyY2hp
bGxkb3duc2luY29ycG9yYXRlZC5jb22CD2lyLmNvbXNjb3JlLmNvbYIRaXIuaXNy
YWVsY29ycC5jb22CD2lyLmtpbmdzb2Z0LmNvbYIOaXIubHVuYWluYy5jb22CFmly
Lmx1bmFpbm5vdmF0aW9ucy5jb22CG2lyLmx1dGhlcmJ1cmJhbmtzYXZpbmdzLmNv
bYIVaXIubWFkcmlnYWxwaGFybWEuY29tggtpci5tcmN5LmNvbYIQaXIubmFudGt3
ZXN0LmNvbYINaXIub21pbnRvLmNvbYIWaXIucmVtb3Jhcm95YWx0aWVzLmNvbYIS
aXIudG93ZXJzdHJlYW0uY29tggppci53bnMuY29tghZpc3JhZWxjb3JwLmdjcy13
ZWIuY29tghpqYnRjb3Jwb3JhdGlvbi5nY3Mtd2ViLmNvbYIfa2luZ3NvZnRjb3Jw
b3JhdGlvbi5nY3Mtd2ViLmNvbYIXbGFuZHNlbmRpbmMuZ2NzLXdlYi5jb22CGmxl
YXBmcm9nLXNzbC0zLmdjcy13ZWIuY29tgiZsaW5jb2xuZWR1Y2F0aW9uYWxzZXJ2
aWNlcy5nY3Mtd2ViLmNvbYIebHVuYWlubm92YXRpb25zaW5jLmdjcy13ZWIuY29t
giBsdXRoZXJidXJiYW5rc2F2aW5ncy5nY3Mtd2ViLmNvbYIabWFkcmlnYWxwaGFy
bWEuZ2NzLXdlYi5jb22CFm1ldGxpZmVpbmMuZ2NzLXdlYi5jb22CEG1yY3kuZ2Nz
LXdlYi5jb22CGG5hbnRrd2VzdGluYy5nY3Mtd2ViLmNvbYITbnJlY29ycC5nY3Mt
d2ViLmNvbYIXbnV2YXNpdmVpbmMuZ2NzLXdlYi5jb22CFW9taW50b2luYy5nY3Mt
d2ViLmNvbYISb3NpcmlzLmdjcy13ZWIuY29tghZxdWluc3RyZWV0Lmdjcy13ZWIu
Y29tghtyZW1vcmFyb3lhbHRpZXMuZ2NzLXdlYi5jb22CGHJpbWluaXN0cmVldC5n
Y3Mtd2ViLmNvbYIUc3lubG9naWMuZ2NzLXdlYi5jb22CFnRjcGNhcGl0YWwuZ2Nz
LXdlYi5jb22CG3RlcnJhZm9ybWdsb2JhbC5nY3Mtd2ViLmNvbYIldGV4dGFpbmVy
Z3JvdXBob2xkaW5nc2x0ZC5nY3Mtd2ViLmNvbYIXdG93ZXJzdHJlYW0uZ2NzLXdl
Yi5jb22CIHVsdHJhbGlmZWNvcnBvcmF0aW9uLmdjcy13ZWIuY29tghl3aGlybHBv
b2xjb3JwLmdjcy13ZWIuY29tgh53aWxsaXN0b3dlcnN3YXRzb24uZ2NzLXdlYi5j
b22CG3duc25vcnRoYW1lcmljYS5nY3Mtd2ViLmNvbYIOd3d3LmFmZ2luYy5jb22C
DHd3dy5hcG9nLmNvbYIYd3d3LmFwb2dlZXJlbm92YXRpb24uY29tghB3d3cuaXIu
YXZuZXQuY29tghZ3d3cudGVycmFmb3JtcG93ZXIuY29tMBMGA1UdIAQMMAowCAYG
Z4EMAQIBMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYASLDja9qmRzQP5WoC+p0w
6xxSActW3SyB2bu/qznYhHMAAAGMWVWyUQAABAMARzBFAiADLnXxZmhrTmtB4xd7
5zzsnsq7FXBZqbKDbijgxm5hMwIhANZ7fXq4c5YNzPAmUOhMpu66t6N7S/VRgY+r
mufam5YTAHcAouK/1h7eLy8HoNZObTen3GVDsMa1LqLat4r4mm31F9gAAAGMWVWy
ZAAABAMASDBGAiEA/cdmVydcQynLdJefMqYuGxcyy6rYcfzH5bH64FjjNSgCIQDK
C5l0huGpke9/k59CEcoljcKkRWEx2qYBIIe8MvaXyTANBgkqhkiG9w0BAQsFAAOC
AQEAgzuwTqJvqG0XwahebyHTD5Bwqh/cnwcySWl5dI/xtn3P/PWhdzVujehJkvqn
ESeBB00PTaKgRyD+zfDyqHL6RDnTzQSVoHdDnDgvH2MNiF+Tmn1Fs1SZUdupkCzc
dFQK1OKCyNzbFefZEQnBxgGr8utsQp2va1rFZ1EetWlYb5UJdWrMnL/J7BKiWh9+
H/97hgF57NasjUS6aRb9+PNWCOeV53F2pnEe+1gc+CIbJiwaKs1ko6QjHxKjS1ww
/Zg4h3Xb3k/NmN3WddydozfQZqiB2X57m+xtH0HOi3TKEoWiIdhVXHWrK5f6bMgj
MFaz7YxCg8eeoOJ6rRtCTKQnqQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsm6MifTH5ZYrnJGtthMw
c2K/n/bM5Ux/3mU4rbNY5KXEixPFaYIIGbELeQxheVZyk2tZI8LjYhqwTCqZXL22
JFdhyfizZgPIQbumBC4HJoLLHWSWJCcR0EDANjc/s6Nf9mNo97zBsFXBgUW4TZF0
YselMbsODuWrQValdevIL0UOQFf+lpWt9s/GqkYw1K1fYr6sYPcX8RxzLCAZ709x
D0g1p7mMFS124NRLR8w1VBMWXLguB9OsBLNge3HS2Fd11gVt9lmPvYo52fXsXmVY
QCx2wfY5rQCjcYy5/IdGam56+hznac+ysFJovmZLe7KUUBtWrn/PclnvwORG0EC+
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 385608997461266934073923505936605654785107
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-11 13:43:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-10 13:43:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-3.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22524932017772901732919695959324738930700808721712146496026149068260023883312944898717583618032625820661145100373726522201329448055700830976056802101309460101382642948401723280981293779038576897365733951849097555214739068408345171458686265627755531251393335087046552674389577497058832804311179966491436353727327982725229289417697939011956530064540248524323795069406760339876028104828758259832666728453900059365822906138989717353393252713490677296234635495880944948873577483936366046779168158972309392823127142995894636823988550816365570157301067330809519022066725424980379228601267745797945048160972353319842168749607
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e9c8b538b2d649b13d352864c790a16a5ca76047
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1975 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acmresearch.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allscriptshealthcaresolutionsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americanfinancialgroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apogeeenterprises.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aptorumgroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ascentcapitalgroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodeskinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avnet.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannae.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celsion.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'churchilldownsincorporated.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clene.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comscore.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynasil.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hasbro.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invest.clene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.allscripts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.cannaeholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.celsion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.hasbro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.quinstreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.textainer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.ultralifecorporation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.autodesk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.landsend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.lincolneducationalservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.wtwco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.acmrcsh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.afginc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.apog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.aptorumgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ascentcapitalgroupinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.avnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.churchilldownsincorporated.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.comscore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.israelcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.kingsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.lunainc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.lunainnovations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.lutherburbanksavings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.madrigalpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mrcy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.nantkwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ominto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.remoraroyalties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.towerstream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.wns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'israelcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jbtcorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingsoftcorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landsendinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-3.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lincolneducationalservices.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lunainnovationsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lutherburbanksavings.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madrigalpharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metlifeinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrcy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nantkwestinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrecorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuvasiveinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omintoinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osiris.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quinstreet.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remoraroyalties.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riministreet.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synlogic.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcpcapital.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terraformglobal.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'textainergroupholdingsltd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'towerstream.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultralifecorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whirlpoolcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willistowerswatson.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wnsnorthamerica.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afginc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apogeerenovation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ir.avnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terraformpower.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c5955b25100000403004730450220032e75f166686b4e6b41e3177be73cec9ecabb157059a9b2836e28e0c66e6133022100d67b7d7ab873960dccf02650e84ca6eebab7a37b4bf551818fab9ae7da9b9613007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c5955b2640000040300483046022100fdc76657275c4329cb74979f32a62e1b1732cbaad871fcc7e5b1fae058e33528022100ca0b997486e1a991ef7f939f4211ca258dc2a4456131daa6012087bc32f697c9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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