leapfrog-ssl-26.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 03:c3:98:2d:55:51:24:42:6d:f8:27:ac:80:5e:4f:d2:61:18 was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-26.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c3:98:2d:55:51:24:42:6d:f8:27:ac:80:5e:4f:d2:61:18
Serial Number (int): 327894197384015200837975067834960581910808
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 15:70:89:0e:53:ec:c4:02:63:76:bb:d4:a1:15:73:92:cd:b6:e1:b3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3e:8c:df:a2:22:e6:a2:d5:d2:ef:00:31:e1:f2:6b:5e:89:27:eb:e9
Fingerprint (sha256): 09:fb:09:fc:f7:0c:2e:31:c2:fd:36:4e:bd:95:88:59:94:e3:70:30:de:90:bd:0d:59:ba:73:dc:e3:d9:4e:b2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-26.gcs-web.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-26.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

advaxis.gcs-web.com
akebia.gcs-web.com
allete.gcs-web.com
amicustherapeutics.gcs-web.com
arcturustherapeuticsinc.gcs-web.com
buildabear.gcs-web.com
cocacolabottlingcoconsolidated.gcs-web.com
commscopeholdingcompanyinc.gcs-web.com
cooperstandard.gcs-web.com
daktronics.gcs-web.com
demobryce.gcs-web.com
dicerna.gcs-web.com
dominos.gcs-web.com
edaptmssa.gcs-web.com
extractionog.gcs-web.com
gibraltarindustriesinc.gcs-web.com
griddynamics.gcs-web.com
hookerfurniturecorporation.gcs-web.com
hubgroup.gcs-web.com
hyrecar.gcs-web.com
installedbuildingproducts.gcs-web.com
insuletcorporation.gcs-web.com
intestcorp.gcs-web.com
investor.allete.com
investor.cokeconsolidated.com
investor.daktronics.com
investor.demobryce.com
investor.edap-tms.com
investor.kodak.com
investor.mks.com
investor.mksinst.com
investor.rushenterprises.com
investor.trimble.com
investorday.stepstonegroup.com
investors.dicerna.com
investors.hookerfurnishings.com
investors.hookerfurniture.com
investors.hubgroup.com
investors.installedbuildingproducts.com
investors.lumos-pharma.com
investors.lyratherapeutics.com
investors.matrixservicecompany.com
investors.molinahealthcare.com
investors.parsons.com
investors.psiengines.com
investors.pulmonx.com
investors.wmg.com
investors.xpresspa.com
ir.advaxis.com
ir.akebia.com
ir.amicusrx.com
ir.arcturusrx.com
ir.biosighttx.com
ir.buildabear.com
ir.commscope.com
ir.dominos.com
ir.extractionog.com
ir.gibraltar1.com
ir.hyrecar.com
ir.intest.com
ir.puyiwm.com
ir.sol-gel.com
ir.spplus.com
ir.supernus.com
ir.tenaris.com
ir.vistagen.com
ir.xpresspa.com
kodak.gcs-web.com
leapfrog-ssl-26.gcs-web.com
lumos-pharma.gcs-web.com
lyratherapeutics.gcs-web.com
matrixservicecompany.gcs-web.com
midconenergypartners.gcs-web.com
mksinstrumentsinc.gcs-web.com
molinahealthcare.gcs-web.com
newlinkgeneticscorporation.gcs-web.com
parsons.gcs-web.com
psiengines.gcs-web.com
pulmonx.gcs-web.com
puyi.gcs-web.com
rushenterprises.gcs-web.com
solgel.gcs-web.com
sppluscorporation.gcs-web.com
stepstonemicrosite.gcs-web.com
supernus.gcs-web.com
tenarissa.gcs-web.com
trimbleinc.gcs-web.com
vistagen.gcs-web.com
warnermusicgroup.gcs-web.com
www.advaxis.com
www.investors.dicerna.com
www.ir.cooperstandard.com
www.vistagen.com
xpresspa.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-52.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-26.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu37xcJZNvefOV/uHA9o/
5UTQJeTfQp/KRfaKKoPj1QQ5ZmNRIQaw9pVet9ConOVihYucGeQBi3hp/uYkePY/
BONqmhFdgwMCsF315TrNHd2LCWLhe61qj7I9ql127PHxkBLQXM5f3f54uQhdC1TT
gEa4pZd69mzJTCbSuZI+uKTSkdU30nKbFsN5n3nkSM7F3CkIkulF4xXJzGvOu9+C
S19ChLFPV+1cbR/J4P4dAN0vBPxE5iIalQL+1lG4NRhuCNZShPSp7Al7ibvqR37I
KTdF5/qxWoB8oO31SOyn2IzcUlYOwbsayu/9V1jQj0kh4KpW9RUEo0P9Fss+gLIV
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327894197384015200837975067834960581910808
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-14 20:24:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-13 20:24:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-26.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23669161016251563735487822700942337294953925784785144336928056028018195976518480803229388446621438653367159727644219090939636228913856383528373714665845491167783257084943111196283344172259239321261975554048155175984435502521190847204698214037896362612278318764083677838695858353324381689761310714815232248677696994604393577144123591964502455850869631869377135199243650477052011079928418360140571896174055270813556277584962675353739109500855833954422657436262206415789149669967968406239137656761225076381633052858524139763897039860507756022722082803121868586741084306928259894656785179708675896426336285222095681623453
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1570890e53ecc4026376bbd4a1157392cdb6e1b3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2335 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advaxis.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akebia.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allete.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amicustherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arcturustherapeuticsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildabear.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cocacolabottlingcoconsolidated.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commscopeholdingcompanyinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cooperstandard.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daktronics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demobryce.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dicerna.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dominos.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edaptmssa.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extractionog.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gibraltarindustriesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'griddynamics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hookerfurniturecorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hubgroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyrecar.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'installedbuildingproducts.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insuletcorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intestcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.allete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.cokeconsolidated.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.daktronics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.demobryce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.edap-tms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.kodak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.mks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.mksinst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.rushenterprises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.trimble.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.stepstonegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.dicerna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.hookerfurnishings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.hookerfurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.hubgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.installedbuildingproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.lumos-pharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.lyratherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.matrixservicecompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.molinahealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.parsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.psiengines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.pulmonx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.wmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.xpresspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.advaxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.akebia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.amicusrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.arcturusrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.biosighttx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.buildabear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.commscope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.dominos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.extractionog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gibraltar1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.hyrecar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.intest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.puyiwm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.sol-gel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.spplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.supernus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tenaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vistagen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.xpresspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kodak.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-26.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumos-pharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyratherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matrixservicecompany.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midconenergypartners.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mksinstrumentsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'molinahealthcare.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newlinkgeneticscorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parsons.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psiengines.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulmonx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puyi.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rushenterprises.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solgel.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sppluscorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stepstonemicrosite.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supernus.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenarissa.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trimbleinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vistagen.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warnermusicgroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advaxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investors.dicerna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ir.cooperstandard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vistagen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xpresspa.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018781a7b1590000040300483046022100a0d80ea90d8494d3d75afc86f9044d41e8916acb813b1674ad397f0d00a7e827022100b495cc8715cfe1e2b4c843189457d67e72d96cdd379c6f4370ec5a2e349ca8570077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018781a7b1680000040300483046022100a1c92ba3eb7304d07007f2fd540317f561ad655b42ba241040103e791cbd4677022100addb24ff79838ee0314770650c305795a0b69f69ea2b9f35dfef02a68702f02b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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