leapfrog-ssl-2.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:fb:ce:fd:d7:31:92:70:65:61:4b:12:ee:9b:1b:60:1e:8f was issued on by Let's Encrypt.

With 76 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-2.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:fb:ce:fd:d7:31:92:70:65:61:4b:12:ee:9b:1b:60:1e:8f
Serial Number (int): 434135156807079008335198392448173943561871
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 16:17:0a:20:1c:2f:0f:ec:51:19:11:8f:75:8a:7a:0b:bb:82:f6:ee
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): cb:8b:14:6f:08:20:f8:ab:77:0e:1c:a5:63:cc:20:e1:e6:5a:d6:df
Fingerprint (sha256): 04:df:99:d7:86:a1:b4:d0:02:15:fd:8c:77:33:17:c7:57:08:99:1e:b7:1b:8c:72:63:3e:3d:bc:f4:f4:9d:43

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-2.gcs-web.com

76

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-2.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alpineimmunesciences.gcs-web.com
appian.gcs-web.com
atyrpharma.gcs-web.com
belfuse.gcs-web.com
bioscrip.gcs-web.com
brownformancorp.gcs-web.com
cargurus.gcs-web.com
channeladvisor.gcs-web.com
coremark.gcs-web.com
deciphera.gcs-web.com
draperoakwood.gcs-web.com
enantapharmaceuticalsinc.gcs-web.com
epamsystems.gcs-web.com
exelixis.gcs-web.com
firstindustrialrealtytrustinc.gcs-web.com
firstsolar.gcs-web.com
franchisegrp.gcs-web.com
fredsinc.gcs-web.com
gileadsciences.gcs-web.com
imvaccine.gcs-web.com
investor.firstindustrial.com
investor.lilly.com
investor.matson.com
investor.nilfisk.com
investor.pctel.com
investor.theravance.com
investors.appian.com
investors.atyrpharma.com
investors.bioscrip.com
investors.cargurus.com
investors.deciphera.com
investors.epam.com
investors.optioncarehealth.com
investors.pnk.com
investors.pnkinc.com
investors.visteon.com
ir.alpineimmunesciences.com
ir.belfuse.com
ir.exelixis.com
ir.franchisegrp.com
ir.imvaccine.com
ir.junotherapeutics.com
ir.libertytax.com
ir.mobilemini.com
ir.nightstartx.com
ir.rbbusa.com
ir.steelpartners.com
ir.sunlands.com
ir.sypris.com
junotherapeutics.gcs-web.com
kadantinc.gcs-web.com
leapfrog-ssl-2.gcs-web.com
libertytax.gcs-web.com
lilly.gcs-web.com
lionbiotechnologiesinc.gcs-web.com
matson.gcs-web.com
mcdonaldscorporation.gcs-web.com
mobilemini.gcs-web.com
nightstarx.gcs-web.com
nilfisk.gcs-web.com
onex.gcs-web.com
pctel.gcs-web.com
pnkinc.gcs-web.com
rbbbancorp.gcs-web.com
realogyservicegroupllc.gcs-web.com
secureworks.gcs-web.com
siennabio.gcs-web.com
sigmapharmaceuticals.gcs-web.com
steelpartners.gcs-web.com
sunlands.gcs-web.com
synchronosstechnologiesinc.gcs-web.com
syprissolutionsinc.gcs-web.com
theravancebiopharma.gcs-web.com
vcltest-beta.gcs-web.com
veronapharma.gcs-web.com
visteon.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-52.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-2.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04B4sBrlyH8IwtBD+eCa
yGoO+N78eGS0vSgo2FyUvJ/42VmquB7laypYWFXlA8knF0JKRm9z6cAjCMXj3pHZ
SZRhct+XeuY5jyR9gVSeBYG1lFaD+2Z/g4TxecgmizLWRQ+IjRmdF+S3hExnsFx1
gSA3lQa3tRLO5zxOghfYlEfpV+WVDDiJrja3iTg3+CS5WVqiEIeyQ9FoaXTiJjvc
+kuB0BmpwrcMWoGJWRxOhproVKwUASwnUyCPJdbWYh06KZ0FRfe+Vvkrblb/zIBm
l7ZpWtwP/FOhWXOz/PhS6WJalvXKYt7pSzqaXTZIN5pISzY4Ga1HS46KWMIHQQtk
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 434135156807079008335198392448173943561871
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-21 12:31:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-19 12:31:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-2.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26699633974644547790584601539890273375403551913960639279808906793576560698582282738204330643720181413948821337206801520030179891780021331180850085749320320984823013171521702472761745944470165495812128739697722642584968323250315014707331658327329646531638064498972719169963094068968036123121682760250410218279657016377712108547469767136736530140122254556018162263562215525112130822277814527023758863496183175427070239933356205012373138116554085315543066129028753819534250055762088960352931586397277008391080758772633188541829808118990840877952871289215165481537322925581412726246352120900873743591698490423733220238517
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							16170a201c2f0fec5119118f758a7a0bbb82f6ee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1864 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpineimmunesciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appian.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atyrpharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belfuse.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bioscrip.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brownformancorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cargurus.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'channeladvisor.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coremark.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deciphera.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'draperoakwood.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enantapharmaceuticalsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epamsystems.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exelixis.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstindustrialrealtytrustinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstsolar.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franchisegrp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fredsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gileadsciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imvaccine.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.firstindustrial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.lilly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.matson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.nilfisk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.pctel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.theravance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.appian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.atyrpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.bioscrip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cargurus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.deciphera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.epam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.optioncarehealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.pnk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.pnkinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.visteon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.alpineimmunesciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.belfuse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.exelixis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.franchisegrp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.imvaccine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.junotherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.libertytax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mobilemini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.nightstartx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.rbbusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.steelpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.sunlands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.sypris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'junotherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kadantinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-2.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertytax.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lilly.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lionbiotechnologiesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matson.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdonaldscorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilemini.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nightstarx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nilfisk.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onex.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pctel.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pnkinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbbbancorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realogyservicegroupllc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureworks.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siennabio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sigmapharmaceuticals.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steelpartners.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunlands.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synchronosstechnologiesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syprissolutionsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theravancebiopharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcltest-beta.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veronapharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visteon.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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