leapfrog-ssl.nasdaq.com

Issued by R3

About this certificate

This digital certificate with serial number 03:83:36:7b:fe:fa:00:cb:3e:cc:0e:48:1b:f3:27:12:cc:59 was issued on by Let's Encrypt.

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl.nasdaq.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:83:36:7b:fe:fa:00:cb:3e:cc:0e:48:1b:f3:27:12:cc:59
Serial Number (int): 305986269997748989559091527596374286847065
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5d:5f:f7:6e:23:ae:5b:09:9b:e8:c4:fd:48:d5:7a:16:93:3e:5c:c9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 02:1f:b7:99:10:b7:cf:d7:59:68:bb:39:4e:2c:9e:44:b7:67:7b:18
Fingerprint (sha256): 04:82:18:6d:3c:17:23:21:80:15:4c:b8:14:87:80:d7:cc:ff:6b:fd:d4:5d:9d:23:50:df:f8:65:08:d4:d5:ac

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl.nasdaq.com

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl.nasdaq.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2020virtualinvestorday.bedbathandbeyond.com
aegeanmarine.gcs-web.com
alimerasciences.gcs-web.com
arclogisticsir.gcs-web.com
bedbathandbeyond.gcs-web.com
bioblastpharma.gcs-web.com
blackrockbkcc.gcs-web.com
bostonbeerco.gcs-web.com
bravobrio.gcs-web.com
cabelas.gcs-web.com
canadiansolar.gcs-web.com
capitalbancorpinc.gcs-web.com
caretrust.gcs-web.com
catocorp.gcs-web.com
dinebrands.gcs-web.com
dineequity.gcs-web.com
douglasdynamics.gcs-web.com
enstargroup.gcs-web.com
genesco.gcs-web.com
gentex.gcs-web.com
gritstoneoncology.gcs-web.com
hubgroup.gcs-web.com
icumed.gcs-web.com
intriconcorp.gcs-web.com
investor.alimerasciences.com
investor.caretrustreit.com
investor.enstargroup.com
investor.oxfordinc.com
investor.siga.com
investorrelations.intricon.com
investors.canadiansolar.com
investors.quakerhoughton.com
investors.reachplc.com
investors.sparinc.com
investors.univstainless.com
ir.capitalbankmd.com
ir.connection.com
ir.gentex.com
ir.gritstoneoncology.com
ir.icumed.com
ir.lasallehotels.com
ir.libertytax.com
ir.manning-napier.com
ir.navios.com
ir.o2micro.com
ir.plxpharma.com
lasallehotelproperties.gcs-web.com
leapfrog-ssl.gcs-web.com
leapfrog-ssl.nasdaq.com
libertytax.gcs-web.com
manningnapier.gcs-web.com
masimocorp.gcs-web.com
navios.gcs-web.com
nbtbancorp.gcs-web.com
neiman.gcs-web.com
niriaustinsa.gcs-web.com
novartis.gcs-web.com
nv5globalinc.gcs-web.com
o2micro.gcs-web.com
okta.gcs-web.com
oxfordindustriesinc.gcs-web.com
pcconnectioninc.gcs-web.com
plxpharmainc.gcs-web.com
proqr.gcs-web.com
quakerchemicalcorp.gcs-web.com
reachplc.gcs-web.com
resourcecapital.gcs-web.com
scafg.gcs-web.com
siga.gcs-web.com
sparinc.gcs-web.com
stampscominc.gcs-web.com
treehousefoods.gcs-web.com
universalhealthrealty.gcs-web.com
univstainless.gcs-web.com
valhi.gcs-web.com
vcltest.gcs-web.com
verintsystems.gcs-web.com
westmarine.gcs-web.com
wolverineworldwide.gcs-web.com
www.blackrockbkcc.com
www.bostonbeer.com
www.niriaustinsa.org
www.uhrit.com
www.valhi.net

Other certificates including the domain name nasdaq.com

(limited to 100 certificates)
midev.nasdaq.com
leapfrog-ssl.nasdaq.com
incapsula.com
incapsula.com
platform-status.buckzy.net
access.secureqa.nasdaq.com
globenewswire.com
ssl003.insnw.net
incapsula.com
incapsula.com
incapsula.com
teleport.demo.ume.nff.aws.exchsys.nasdaq.com
incapsula.com
incapsula.com
incapsula.com
listingcenter.nasdaq.com
incapsula.com
irintelligence.nasdaqomx.com
imperva.com
incapsula.com
imperva.com
teleport.eks.uat.ums-atris.aws.nasdaq.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl.nasdaq.com
nfn.analytics.nasdaq.com
imperva.com
ssl003.insnw.net
www.nasdaq.com
test.dev.mdic.aws.nasdaq.com
qc.globenewswire.com
newsclient.news.eu.nasdaq.com
teleport.iri.uat.irinsight.aws.nasdaq.com
*.rpxnow.com
imperva.com
platform-status.buckzy.net
incapsula.com
incapsula.com
incapsula.com
imperva.com
gjma.nasdaq.com
docs.data.nasdaq.com
imperva.com
incapsula.com
imperva.com
sp.nasdaq.com
incapsula.com
*.ingress.ops.amgmktums1.aws.nasdaq.com
business.nasdaq.com
estonia-evoting.nasdaq.com
incapsula.com
mvrcheck.io
incapsula.com
incapsula.com
incapsula.com
incapsula.com
apidownload.dev.mpp2.aws.nasdaq.com
leapfrog-ssl.nasdaq.com
incapsula.com
imperva.com
ssl003.insnw.net
ssl003.insnw.net
incapsula.com
incapsula.com
incapsula.com
leapfrog-ssl.nasdaq.com
incapsula.com
incapsula.com
us18usfpoccmq02.tss.nasdaq.com
leapfrog-ssl-38.gcs-web.com
boardvantage.nasdaq.com
incapsula.com
incapsula.com
imperva.com
incapsula.com
incapsula.com
imperva.com
incapsula.com
authorization.mojoportal.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
nasdaq.com
teleport.eks.pro.ums-cix.aws.nasdaq.com
mvrcheck.io
www.nasdaq.com
teleport.qa.inet.aws.exchsys.nasdaq.com
platform-status.buckzy.net
access1.eu.secureweb.nasdaq.com
imperva.com
incapsula.com
incapsula.com
incapsula.com
boardvantage.nasdaq.com
saml.portal.na.nasdaq.com
ndeuat.nasdaq.com
incapsula.com
platform-status.buckzy.net
incapsula.com
*.poc.nffume.aws.nasdaq.com

Certificate

The complete raw certificate details for leapfrog-ssl.nasdaq.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINJzCCDA+gAwIBAgISA4M2e/76AMs+zA5IG/MnEsxZMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjA4MjMxNTE0NDZaFw0yMjExMjExNTE0NDVaMCIxIDAeBgNVBAMT
F2xlYXBmcm9nLXNzbC5uYXNkYXEuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwW8MTVruL/6+FEmOi5Wz3iZg+y0NPSalniY9AzT1XWrWQY6zemlT
1g69AsrUzyNCHdelsp6thQpKYUBs5AjIXXh/iWiTfyACZJycnToX/jdSRXu9PNWx
JnpCoMAXgFQL/yNtCUdj2wuqowt5J8FQEDgCvd4Fxlj358+zwH3l0XbGIEzshMgS
UX4SO95IRgJ+KiybySBMg0ltstNQIKhAVhpzCVZAusRWuS50rMZ3y9R+bUxaWe+A
85Z1cHJ6S/u8T3gofYeA2esoBmVCdxBtkGv+HiZw0LBA5UIH2cwKy3wQc+7k5sTh
m9U399BKcK5Fxfc1VL9krCMhuA6uMdbCPQIDAQABo4IKRTCCCkEwDgYDVR0PAQH/
BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8E
AjAAMB0GA1UdDgQWBBRdX/duI65bCZvoxP1I1XoWkz5cyTAfBgNVHSMEGDAWgBQU
LrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGG
FWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmku
bGVuY3Iub3JnLzCCCBIGA1UdEQSCCAkwgggFgisyMDIwdmlydHVhbGludmVzdG9y
ZGF5LmJlZGJhdGhhbmRiZXlvbmQuY29tghhhZWdlYW5tYXJpbmUuZ2NzLXdlYi5j
b22CG2FsaW1lcmFzY2llbmNlcy5nY3Mtd2ViLmNvbYIaYXJjbG9naXN0aWNzaXIu
Z2NzLXdlYi5jb22CHGJlZGJhdGhhbmRiZXlvbmQuZ2NzLXdlYi5jb22CGmJpb2Js
YXN0cGhhcm1hLmdjcy13ZWIuY29tghlibGFja3JvY2tia2NjLmdjcy13ZWIuY29t
ghhib3N0b25iZWVyY28uZ2NzLXdlYi5jb22CFWJyYXZvYnJpby5nY3Mtd2ViLmNv
bYITY2FiZWxhcy5nY3Mtd2ViLmNvbYIZY2FuYWRpYW5zb2xhci5nY3Mtd2ViLmNv
bYIdY2FwaXRhbGJhbmNvcnBpbmMuZ2NzLXdlYi5jb22CFWNhcmV0cnVzdC5nY3Mt
d2ViLmNvbYIUY2F0b2NvcnAuZ2NzLXdlYi5jb22CFmRpbmVicmFuZHMuZ2NzLXdl
Yi5jb22CFmRpbmVlcXVpdHkuZ2NzLXdlYi5jb22CG2RvdWdsYXNkeW5hbWljcy5n
Y3Mtd2ViLmNvbYIXZW5zdGFyZ3JvdXAuZ2NzLXdlYi5jb22CE2dlbmVzY28uZ2Nz
LXdlYi5jb22CEmdlbnRleC5nY3Mtd2ViLmNvbYIdZ3JpdHN0b25lb25jb2xvZ3ku
Z2NzLXdlYi5jb22CFGh1Ymdyb3VwLmdjcy13ZWIuY29tghJpY3VtZWQuZ2NzLXdl
Yi5jb22CGGludHJpY29uY29ycC5nY3Mtd2ViLmNvbYIcaW52ZXN0b3IuYWxpbWVy
YXNjaWVuY2VzLmNvbYIaaW52ZXN0b3IuY2FyZXRydXN0cmVpdC5jb22CGGludmVz
dG9yLmVuc3Rhcmdyb3VwLmNvbYIWaW52ZXN0b3Iub3hmb3JkaW5jLmNvbYIRaW52
ZXN0b3Iuc2lnYS5jb22CHmludmVzdG9ycmVsYXRpb25zLmludHJpY29uLmNvbYIb
aW52ZXN0b3JzLmNhbmFkaWFuc29sYXIuY29tghxpbnZlc3RvcnMucXVha2VyaG91
Z2h0b24uY29tghZpbnZlc3RvcnMucmVhY2hwbGMuY29tghVpbnZlc3RvcnMuc3Bh
cmluYy5jb22CG2ludmVzdG9ycy51bml2c3RhaW5sZXNzLmNvbYIUaXIuY2FwaXRh
bGJhbmttZC5jb22CEWlyLmNvbm5lY3Rpb24uY29tgg1pci5nZW50ZXguY29tghhp
ci5ncml0c3RvbmVvbmNvbG9neS5jb22CDWlyLmljdW1lZC5jb22CFGlyLmxhc2Fs
bGVob3RlbHMuY29tghFpci5saWJlcnR5dGF4LmNvbYIVaXIubWFubmluZy1uYXBp
ZXIuY29tgg1pci5uYXZpb3MuY29tgg5pci5vMm1pY3JvLmNvbYIQaXIucGx4cGhh
cm1hLmNvbYIibGFzYWxsZWhvdGVscHJvcGVydGllcy5nY3Mtd2ViLmNvbYIYbGVh
cGZyb2ctc3NsLmdjcy13ZWIuY29tghdsZWFwZnJvZy1zc2wubmFzZGFxLmNvbYIW
bGliZXJ0eXRheC5nY3Mtd2ViLmNvbYIZbWFubmluZ25hcGllci5nY3Mtd2ViLmNv
bYIWbWFzaW1vY29ycC5nY3Mtd2ViLmNvbYISbmF2aW9zLmdjcy13ZWIuY29tghZu
YnRiYW5jb3JwLmdjcy13ZWIuY29tghJuZWltYW4uZ2NzLXdlYi5jb22CGG5pcmlh
dXN0aW5zYS5nY3Mtd2ViLmNvbYIUbm92YXJ0aXMuZ2NzLXdlYi5jb22CGG52NWds
b2JhbGluYy5nY3Mtd2ViLmNvbYITbzJtaWNyby5nY3Mtd2ViLmNvbYIQb2t0YS5n
Y3Mtd2ViLmNvbYIfb3hmb3JkaW5kdXN0cmllc2luYy5nY3Mtd2ViLmNvbYIbcGNj
b25uZWN0aW9uaW5jLmdjcy13ZWIuY29tghhwbHhwaGFybWFpbmMuZ2NzLXdlYi5j
b22CEXByb3FyLmdjcy13ZWIuY29tgh5xdWFrZXJjaGVtaWNhbGNvcnAuZ2NzLXdl
Yi5jb22CFHJlYWNocGxjLmdjcy13ZWIuY29tghtyZXNvdXJjZWNhcGl0YWwuZ2Nz
LXdlYi5jb22CEXNjYWZnLmdjcy13ZWIuY29tghBzaWdhLmdjcy13ZWIuY29tghNz
cGFyaW5jLmdjcy13ZWIuY29tghhzdGFtcHNjb21pbmMuZ2NzLXdlYi5jb22CGnRy
ZWVob3VzZWZvb2RzLmdjcy13ZWIuY29tgiF1bml2ZXJzYWxoZWFsdGhyZWFsdHku
Z2NzLXdlYi5jb22CGXVuaXZzdGFpbmxlc3MuZ2NzLXdlYi5jb22CEXZhbGhpLmdj
cy13ZWIuY29tghN2Y2x0ZXN0Lmdjcy13ZWIuY29tghl2ZXJpbnRzeXN0ZW1zLmdj
cy13ZWIuY29tghZ3ZXN0bWFyaW5lLmdjcy13ZWIuY29tgh53b2x2ZXJpbmV3b3Js
ZHdpZGUuZ2NzLXdlYi5jb22CFXd3dy5ibGFja3JvY2tia2NjLmNvbYISd3d3LmJv
c3RvbmJlZXIuY29tghR3d3cubmlyaWF1c3RpbnNhLm9yZ4INd3d3LnVocml0LmNv
bYINd3d3LnZhbGhpLm5ldDBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLf
EwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCC
AQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2ACl5vvCeOTkh8FZzn2Old+W+V32cYAr4
+U1dJlwlXceEAAABgst8JFwAAAQDAEcwRQIhAJwVY+Yo+/eesXJUuEqbi84bpEeb
3NnugYSvmYC1bNMgAiAML3YZgN2PyBmNs0EMLSq5E1QbWCyQyqKvAJeoNwL/UQB3
AN+lXqtogk8fbK3uuF9OPlrqzaISpGpejjsSwCBEXCpzAAABgst8JnsAAAQDAEgw
RgIhAOyBUXo4vakftICSNY75C3fjEa16ae/2nI4zLALudUpuAiEAwLYBRXS16ngb
n8tQdjMjp0rvWR8T5gdoGtvtAkP+7wswDQYJKoZIhvcNAQELBQADggEBAIOScD72
dETBH6cVH+RPv7wgvhP3JKNXO3HawLKIMElbJgQZw5eiSd/RQxrYUnY5j3kGeCRp
3849IlHott7SL3vW7xjGC92RwHJUCuIKoJXW1OQrs9HVYHmOCibO40XNBhhCkRXy
+7i7lBEN8yK+aQL/hVN+EKgQ08+1mIN8rGi6lPJpHNEkZo/O1rUqpOsuIABdqVEG
oeqo8icVNJOOOP4v9RxccT+u+65x3RfJ6zmDhDKx+6QTdIv5jRlJqARY1RNjJriT
zmJDf2Ewureesbbd4v011cC0z2A6Qo0RlqwMg2cwlwYAtmqGrcKOPnriYj2d/UPq
LFyULtCzZwQcMeQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwW8MTVruL/6+FEmOi5Wz
3iZg+y0NPSalniY9AzT1XWrWQY6zemlT1g69AsrUzyNCHdelsp6thQpKYUBs5AjI
XXh/iWiTfyACZJycnToX/jdSRXu9PNWxJnpCoMAXgFQL/yNtCUdj2wuqowt5J8FQ
EDgCvd4Fxlj358+zwH3l0XbGIEzshMgSUX4SO95IRgJ+KiybySBMg0ltstNQIKhA
VhpzCVZAusRWuS50rMZ3y9R+bUxaWe+A85Z1cHJ6S/u8T3gofYeA2esoBmVCdxBt
kGv+HiZw0LBA5UIH2cwKy3wQc+7k5sThm9U399BKcK5Fxfc1VL9krCMhuA6uMdbC
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305986269997748989559091527596374286847065
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-23 15:14:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-21 15:14:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl.nasdaq.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24418752695467814242177850835437975489376396225516630726865475031161974966747172484779071593353278181951933952450298744442499320754147155128888969533315855190563859821740281055828146230449675263845508706343326296406399275277797922401784731783425465675211236503233193750775522609133262553461626294390551612364057478653580667349367778637223759672573092214866020356766827652458982350599199091009866434446909402955195615983111208895669649650979497210966376656243798980627550506925064138669746894374156469348052109932366512077428440475839719190576569076603073845830998920930971326671944434061687960633525565640633799328317
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5d5ff76e23ae5b099be8c4fd48d57a16933e5cc9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2057 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2020virtualinvestorday.bedbathandbeyond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aegeanmarine.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alimerasciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arclogisticsir.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bedbathandbeyond.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bioblastpharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackrockbkcc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bostonbeerco.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bravobrio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabelas.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadiansolar.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitalbancorpinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caretrust.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catocorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dinebrands.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dineequity.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'douglasdynamics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enstargroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genesco.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gentex.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gritstoneoncology.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hubgroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icumed.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intriconcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.alimerasciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.caretrustreit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.enstargroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.oxfordinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.siga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorrelations.intricon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.canadiansolar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.quakerhoughton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.reachplc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sparinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.univstainless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.capitalbankmd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.connection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gentex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gritstoneoncology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.icumed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.lasallehotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.libertytax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.manning-napier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.navios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.o2micro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.plxpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lasallehotelproperties.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl.nasdaq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertytax.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manningnapier.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masimocorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navios.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbtbancorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neiman.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niriaustinsa.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novartis.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nv5globalinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'o2micro.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okta.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oxfordindustriesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcconnectioninc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plxpharmainc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proqr.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quakerchemicalcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reachplc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resourcecapital.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scafg.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siga.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sparinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stampscominc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'treehousefoods.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalhealthrealty.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'univstainless.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valhi.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcltest.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verintsystems.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westmarine.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wolverineworldwide.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blackrockbkcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bostonbeer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.niriaustinsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhrit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valhi.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc78400000182cb7c245c00000403004730450221009c1563e628fbf79eb17254b84a9b8bce1ba4479bdcd9ee8184af9980b56cd32002200c2f761980dd8fc8198db3410c2d2ab913541b582c90caa2af0097a83702ff51007700dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a7300000182cb7c267b0000040300483046022100ec81517a38bda91fb48092358ef90b77e311ad7a69eff69c8e332c02ee754a6e022100c0b6014574b5ea781b9fcb50763323a74aef591f13e607681adbed0243feef0b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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