leapfrog-ssl-22.gcs-web.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c9:0b:72:a9:99:8e:2b:c6:1e:6e:38:c7:53:d1:1d:68:a0 was issued on by Let's Encrypt.

With 75 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-22.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c9:0b:72:a9:99:8e:2b:c6:1e:6e:38:c7:53:d1:1d:68:a0
Serial Number (int): 329748830416078009813571116930845846104224
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 53:7c:4a:69:b8:f6:2a:52:c0:43:17:6b:79:50:a4:3c:b4:6b:99:6c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ca:fe:0a:db:46:77:9a:de:56:30:15:ea:1c:34:9d:05:be:30:02:d0
Fingerprint (sha256): 05:84:cb:ea:53:5e:0a:90:39:91:69:c7:ae:b6:60:05:d1:02:a0:71:ed:25:97:e8:4d:03:0f:0a:80:90:e6:81

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate leapfrog-ssl-22.gcs-web.com

75

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-22.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aduro.gcs-web.com
aprea.gcs-web.com
athenahealth.gcs-web.com
bakerhughes.gcs-web.com
baldwinriskpartners.gcs-web.com
beamtherapeutics.gcs-web.com
bellushealth.gcs-web.com
callawaygolf.gcs-web.com
cansortium.gcs-web.com
carnivalcorporationplc.gcs-web.com
centogene.gcs-web.com
cumminsinc.gcs-web.com
deleklogisticspartnerslp.gcs-web.com
delekus.gcs-web.com
exagen.gcs-web.com
galectintherapeuticsinc.gcs-web.com
galeratherapeutics.gcs-web.com
gatx.gcs-web.com
gbsinc.gcs-web.com
hbtbank.gcs-web.com
hermanmillerinc.gcs-web.com
hess.gcs-web.com
investor.cummins.com
investor.galectintherapeutics.com
investor.glucosebiosensor.com
investor.onepeloton.com
investor.shutterstock.com
investors.aduro.com
investors.bakerhughes.com
investors.beamtx.com
investors.centogene.com
investors.exagen.com
investors.galeratx.com
investors.getfluent.com
investors.hermanmiller.com
investors.jmsmucker.com
investors.liquidia.com
investors.midlandsb.com
investors.otonomy.com
investors.skyworksinc.com
investors.tileshop.com
investors.vir.bio
ir.aprea.com
ir.baldwinriskpartners.com
ir.bellushealth.com
ir.callawaygolf.com
ir.deleklogistics.com
ir.delekus.com
ir.gatx.com
ir.hbtfinancial.com
ir.ocugen.com
ir.restorbio.com
ir.rhythmtx.com
ir.rockwellmed.com
ir.telabio.com
jmsmucker.gcs-web.com
leapfrog-ssl-22.gcs-web.com
liquidia.gcs-web.com
midlandsb.gcs-web.com
newsroom.athenahealth.com
ocugen.gcs-web.com
onepeloton.gcs-web.com
otonomy.gcs-web.com
restorbioinc.gcs-web.com
rhythmpharmaceuticals.gcs-web.com
rockwellmedicalinc.gcs-web.com
shutterstock.gcs-web.com
skyworks.gcs-web.com
telabio.gcs-web.com
tileshop.gcs-web.com
vir.gcs-web.com
www.carnivalcorp.com
www.carnivalcorp.us
www.carnivalcorporation.com
www.carnivalplc.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-52.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-22.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkx3b3uvjsF+EP1OsZAkW
eeWVlGuRMaYGx2GRAa+SEigDNp7j1r00lU593zTveY7RoIFMopWk1JsAMcT2yXNW
NIElq6bSW5+ZJpyuXcMMN9CahLa0Ome8B2HjyL+wJRLyawyJKz/AqQ6CDJ4UIYan
0INZcCsNle30CJmF5IDUjEQ7/cftmZgtx7rxfTAj4PWdl2bmes6vx84ViYUXCzsc
20O4oWv6vYwxZk+BTfl34Zy1wy1YYx0ldXYpIDzZeTRfT4hA2WsA/JsY+BsZUEry
0jVar41sNJ4h64NtQtxqj5CT2luRjHhdIwdzp/l3xem48SKdAaPYvRjJSdpkUb/p
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329748830416078009813571116930845846104224
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-15 19:20:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-13 19:20:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-22.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18571754787705871317600048592670212346839369606191912260962522378707714357489359963993923308726898689048402430228327898117505887116299628260429992746214917218289661864277833005782083736411071857166071048796449155936221383017366999336920729042311324863136242024160700443605928601392902815098791590336155536021861062154548811409856233209577913975250353745694457161684248093822121403535431449823843773648793641360371269714554631704433980355739097447531578215452717622303219982199978586773673231328102009788978378221699417391290719497121569820607682252416910696994206523146848835024814858109609058805714561369142485575971
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							537c4a69b8f62a52c043176b7950a43cb46b996c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1796 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aduro.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aprea.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athenahealth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakerhughes.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baldwinriskpartners.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beamtherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellushealth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'callawaygolf.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cansortium.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carnivalcorporationplc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centogene.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cumminsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deleklogisticspartnerslp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delekus.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exagen.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galectintherapeuticsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galeratherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gatx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gbsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbtbank.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hermanmillerinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hess.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.cummins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.galectintherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.glucosebiosensor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.onepeloton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.shutterstock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.aduro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.beamtx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.centogene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.exagen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.galeratx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.getfluent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.hermanmiller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.jmsmucker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.liquidia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.midlandsb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.otonomy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.skyworksinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.tileshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.vir.bio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.aprea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.baldwinriskpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.bellushealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.callawaygolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.deleklogistics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.delekus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gatx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.hbtfinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ocugen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.restorbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.rhythmtx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.rockwellmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.telabio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jmsmucker.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-22.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liquidia.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midlandsb.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.athenahealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocugen.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onepeloton.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otonomy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restorbioinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhythmpharmaceuticals.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockwellmedicalinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shutterstock.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skyworks.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telabio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tileshop.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vir.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carnivalcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carnivalcorp.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carnivalcorporation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carnivalplc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dd114aea500000403004730450221008a4a80bacee20b801299c2031f6e3bd304534aad22e1653d3611466310d928ea02205d13bf57859be29c6da3a841b2e5d8d6cb0d39404ae191c16460b64b703bd6af007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dd114ae770000040300483046022100ec182dc9a614046e158689947f1e9fd2b32c45669e8ad5f4c5f435f78ae117ab022100e80e7abbdc0e7368855ec840da688b024115bb8af6dba2d86841c27c661ac0ef
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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