leapfrog-ssl-20.gcs-web.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:45:dc:21:f8:0a:58:8d:75:a0:04:ff:e6:46:ee:10:1d:01 was issued on by Let's Encrypt.

With 74 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-20.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:45:dc:21:f8:0a:58:8d:75:a0:04:ff:e6:46:ee:10:1d:01
Serial Number (int): 372221233580312022732449495333407915252993
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 0a:3c:a6:47:3f:0e:0a:5a:b7:48:f8:0f:e3:cf:3a:3a:c3:73:50:75
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3b:59:98:9a:af:69:fe:53:3d:e3:27:23:cf:f8:de:47:96:a9:24:f9
Fingerprint (sha256): 0b:bd:0a:4b:f2:f5:72:4e:f5:7c:48:91:03:cc:e7:ad:f7:2f:b1:49:b2:dd:65:e5:ae:85:0c:14:67:8f:50:b3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate leapfrog-ssl-20.gcs-web.com

74

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-20.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agncgcswebcom.gcs-web.com
ametekinc.gcs-web.com
atreca.gcs-web.com
bakerhughesrigcount.gcs-web.com
bectondickinson.gcs-web.com
biogen.gcs-web.com
cambiumnetworks.gcs-web.com
collegiumpharma.gcs-web.com
cray.gcs-web.com
crossfirstbankshares.gcs-web.com
diamondbackenergy.gcs-web.com
durect.gcs-web.com
flexshopper.gcs-web.com
groceryoutletinc.gcs-web.com
healthcatalystinc.gcs-web.com
interxion.gcs-web.com
intracellulartherapies.gcs-web.com
investor-cn.sandschina.com
investor-hk.sandschina.com
investor.moduslink.com
investor.morphictx.com
investor.ni.com
investor.paratekpharma.com
investor.sandschina.com
investor.stoketherapeutics.com
investor.therealreal.com
investor.tjx.com
investors.ametek.com
investors.bd.com
investors.biogen.com
investors.cambiumnetworks.com
investors.cray.com
investors.crossfirstbankshares.com
investors.durect.com
investors.flexshopper.com
investors.groceryoutlet.com
investors.interxion.com
investors.irhythmtech.com
investors.nrg.com
investors.usacompression.com
investors.usacpartners.com
ioncorp.gcs-web.com
ir.agnc.com
ir.atreca.com
ir.collegiumpharma.com
ir.diamondbackenergy.com
ir.healthcatalyst.com
ir.intracellulartherapies.com
ir.iongeo.com
ir.ncsmultistage.com
ir.targaresources.com
ir.viperenergy.com
irhythmtech.gcs-web.com
leapfrog-ssl-20.gcs-web.com
morphictx.gcs-web.com
ncsmultistageholdings.gcs-web.com
ni.gcs-web.com
nrgenergyinc.gcs-web.com
paratekpharma.gcs-web.com
rigcount.bhge.com
sandschinaltd.gcs-web.com
steelconnect.gcs-web.com
stoketherapeutics.gcs-web.com
targaresources.gcs-web.com
therealreal.gcs-web.com
thetjxcompaniesinc.gcs-web.com
thetorocompany.gcs-web.com
usacompressionpartnerslp.gcs-web.com
viperenergy.gcs-web.com
whitehorsefinance.gcs-web.com
www.diamondbackenergy.com
www.thetorocompany.com
www.viperenergy.com
www.whitehorsefinance.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-52.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-20.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILwzCCCqugAwIBAgISBEXcIfgKWI11oAT/5kbuEB0BMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MDIxNDIwNDlaFw0x
OTA5MzAxNDIwNDlaMCYxJDAiBgNVBAMTG2xlYXBmcm9nLXNzbC0yMC5nY3Mtd2Vi
LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOkEmbVr8n5USSBF
OO21yAQDcrxXFKEYMRRKMLNLABHKTTW1PeZ02aDrHUMIORs6sil+3V4ibhXAFrC7
ZWu2gIMhZlItC7xz0ZpUeZwC1mZ8SzJ7ESptYTVRze5xBzAmcjwOjEmT+hs/lStZ
xFMSUhCtqb6APinb3PRiwPgCMdUVqcOYftOYSyoVQm217XahLjXrQ3B1R4Cuiufo
TvgOMYkRmVu81Pi14PL5E0LJ9OpqMTolGZefXhhn3gLBc4WQWsKSe7xjG14kC33h
r10cHcNqgBM1B0C9dDlN0KlN0ZW6TGUVpt/dPOPhM28NvWT5TUnOpl4+d9WSMpHD
5n8FFVUCAwEAAaOCCMUwggjBMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUCjymRz8O
Clq3SPgP4886OsNzUHUwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw
bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnLzCCB2wGA1UdEQSCB2MwggdfghlhZ25jZ2Nzd2ViY29t
Lmdjcy13ZWIuY29tghVhbWV0ZWtpbmMuZ2NzLXdlYi5jb22CEmF0cmVjYS5nY3Mt
d2ViLmNvbYIfYmFrZXJodWdoZXNyaWdjb3VudC5nY3Mtd2ViLmNvbYIbYmVjdG9u
ZGlja2luc29uLmdjcy13ZWIuY29tghJiaW9nZW4uZ2NzLXdlYi5jb22CG2NhbWJp
dW1uZXR3b3Jrcy5nY3Mtd2ViLmNvbYIbY29sbGVnaXVtcGhhcm1hLmdjcy13ZWIu
Y29tghBjcmF5Lmdjcy13ZWIuY29tgiBjcm9zc2ZpcnN0YmFua3NoYXJlcy5nY3Mt
d2ViLmNvbYIdZGlhbW9uZGJhY2tlbmVyZ3kuZ2NzLXdlYi5jb22CEmR1cmVjdC5n
Y3Mtd2ViLmNvbYIXZmxleHNob3BwZXIuZ2NzLXdlYi5jb22CHGdyb2NlcnlvdXRs
ZXRpbmMuZ2NzLXdlYi5jb22CHWhlYWx0aGNhdGFseXN0aW5jLmdjcy13ZWIuY29t
ghVpbnRlcnhpb24uZ2NzLXdlYi5jb22CImludHJhY2VsbHVsYXJ0aGVyYXBpZXMu
Z2NzLXdlYi5jb22CGmludmVzdG9yLWNuLnNhbmRzY2hpbmEuY29tghppbnZlc3Rv
ci1oay5zYW5kc2NoaW5hLmNvbYIWaW52ZXN0b3IubW9kdXNsaW5rLmNvbYIWaW52
ZXN0b3IubW9ycGhpY3R4LmNvbYIPaW52ZXN0b3IubmkuY29tghppbnZlc3Rvci5w
YXJhdGVrcGhhcm1hLmNvbYIXaW52ZXN0b3Iuc2FuZHNjaGluYS5jb22CHmludmVz
dG9yLnN0b2tldGhlcmFwZXV0aWNzLmNvbYIYaW52ZXN0b3IudGhlcmVhbHJlYWwu
Y29tghBpbnZlc3Rvci50anguY29tghRpbnZlc3RvcnMuYW1ldGVrLmNvbYIQaW52
ZXN0b3JzLmJkLmNvbYIUaW52ZXN0b3JzLmJpb2dlbi5jb22CHWludmVzdG9ycy5j
YW1iaXVtbmV0d29ya3MuY29tghJpbnZlc3RvcnMuY3JheS5jb22CImludmVzdG9y
cy5jcm9zc2ZpcnN0YmFua3NoYXJlcy5jb22CFGludmVzdG9ycy5kdXJlY3QuY29t
ghlpbnZlc3RvcnMuZmxleHNob3BwZXIuY29tghtpbnZlc3RvcnMuZ3JvY2VyeW91
dGxldC5jb22CF2ludmVzdG9ycy5pbnRlcnhpb24uY29tghlpbnZlc3RvcnMuaXJo
eXRobXRlY2guY29tghFpbnZlc3RvcnMubnJnLmNvbYIcaW52ZXN0b3JzLnVzYWNv
bXByZXNzaW9uLmNvbYIaaW52ZXN0b3JzLnVzYWNwYXJ0bmVycy5jb22CE2lvbmNv
cnAuZ2NzLXdlYi5jb22CC2lyLmFnbmMuY29tgg1pci5hdHJlY2EuY29tghZpci5j
b2xsZWdpdW1waGFybWEuY29tghhpci5kaWFtb25kYmFja2VuZXJneS5jb22CFWly
LmhlYWx0aGNhdGFseXN0LmNvbYIdaXIuaW50cmFjZWxsdWxhcnRoZXJhcGllcy5j
b22CDWlyLmlvbmdlby5jb22CFGlyLm5jc211bHRpc3RhZ2UuY29tghVpci50YXJn
YXJlc291cmNlcy5jb22CEmlyLnZpcGVyZW5lcmd5LmNvbYIXaXJoeXRobXRlY2gu
Z2NzLXdlYi5jb22CG2xlYXBmcm9nLXNzbC0yMC5nY3Mtd2ViLmNvbYIVbW9ycGhp
Y3R4Lmdjcy13ZWIuY29tgiFuY3NtdWx0aXN0YWdlaG9sZGluZ3MuZ2NzLXdlYi5j
b22CDm5pLmdjcy13ZWIuY29tghhucmdlbmVyZ3lpbmMuZ2NzLXdlYi5jb22CGXBh
cmF0ZWtwaGFybWEuZ2NzLXdlYi5jb22CEXJpZ2NvdW50LmJoZ2UuY29tghlzYW5k
c2NoaW5hbHRkLmdjcy13ZWIuY29tghhzdGVlbGNvbm5lY3QuZ2NzLXdlYi5jb22C
HXN0b2tldGhlcmFwZXV0aWNzLmdjcy13ZWIuY29tghp0YXJnYXJlc291cmNlcy5n
Y3Mtd2ViLmNvbYIXdGhlcmVhbHJlYWwuZ2NzLXdlYi5jb22CHnRoZXRqeGNvbXBh
bmllc2luYy5nY3Mtd2ViLmNvbYIadGhldG9yb2NvbXBhbnkuZ2NzLXdlYi5jb22C
JHVzYWNvbXByZXNzaW9ucGFydG5lcnNscC5nY3Mtd2ViLmNvbYIXdmlwZXJlbmVy
Z3kuZ2NzLXdlYi5jb22CHXdoaXRlaG9yc2VmaW5hbmNlLmdjcy13ZWIuY29tghl3
d3cuZGlhbW9uZGJhY2tlbmVyZ3kuY29tghZ3d3cudGhldG9yb2NvbXBhbnkuY29t
ghN3d3cudmlwZXJlbmVyZ3kuY29tghl3d3cud2hpdGVob3JzZWZpbmFuY2UuY29t
MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH
AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMBMGCisGAQQB1nkCBAMBAf8E
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCVHrXiL8GnccgWeg9yT7IBe6wkJDIzV+G3
OWJJ36F4pHLv3wa6cX5zr0t0E90B43gfZ/jh5o9jYTM39fatO9AHhFT7F1BiMYQJ
IwhFs7r9sX69AhOxNcO6IN7nLHxsZukxMXpRu+bsXB9v7bmLNvUti9RCF3uLTCjZ
/33oIPh4VLkCCJOT46XYYAJPJ6BUjFqRtkG2rNbrDbre7h4w0sm6GeGmeOGZ2J28
HL3EAIeuDkNl/tV3VP7PqEBsrg44cyiZuUhtY7VXp8L5tqvtW9PlpGeoLhw+ayOT
RbaACLpyZNr4bthI15e6qPU+pypSKmShT5p7IH14aJ9PfauW2EAg
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6QSZtWvyflRJIEU47bXI
BANyvFcUoRgxFEows0sAEcpNNbU95nTZoOsdQwg5GzqyKX7dXiJuFcAWsLtla7aA
gyFmUi0LvHPRmlR5nALWZnxLMnsRKm1hNVHN7nEHMCZyPA6MSZP6Gz+VK1nEUxJS
EK2pvoA+Kdvc9GLA+AIx1RWpw5h+05hLKhVCbbXtdqEuNetDcHVHgK6K5+hO+A4x
iRGZW7zU+LXg8vkTQsn06moxOiUZl59eGGfeAsFzhZBawpJ7vGMbXiQLfeGvXRwd
w2qAEzUHQL10OU3QqU3RlbpMZRWm39084+Ezbw29ZPlNSc6mXj531ZIykcPmfwUV
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 372221233580312022732449495333407915252993
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-02 14:20:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-30 14:20:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-20.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29415793610975086367601741711094608752685336628593643986457811588810710068112912643271507229847532949005857496154735590389693029451469575615636872148997563557867560460889021258716967313070166052622731441764048745182220391146805247135107611197646719166497360747576941870157664427014388778550255274406985600598188877240445791872258443684027402920129571227389168488564138779555373435128711158200858698947929697556602916284095588493572264020199893224547213272545585056395823799162165697794848211248922273251769953551105208146483774234032689087972607085552236709615569315048736293993299533365784730855926965293219576091989
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0a3ca6473f0e0a5ab748f80fe3cf3a3ac3735075
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1891 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agncgcswebcom.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ametekinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atreca.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakerhughesrigcount.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bectondickinson.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biogen.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambiumnetworks.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegiumpharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cray.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crossfirstbankshares.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondbackenergy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'durect.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flexshopper.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groceryoutletinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthcatalystinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interxion.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intracellulartherapies.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor-cn.sandschina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor-hk.sandschina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.moduslink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.morphictx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.ni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.paratekpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.sandschina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.stoketherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.therealreal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.tjx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ametek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.bd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.biogen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cambiumnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cray.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.crossfirstbankshares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.durect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.flexshopper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.groceryoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.interxion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.irhythmtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.nrg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.usacompression.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.usacpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ioncorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.agnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.atreca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.collegiumpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.diamondbackenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.healthcatalyst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.intracellulartherapies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.iongeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ncsmultistage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.targaresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.viperenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irhythmtech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-20.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morphictx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncsmultistageholdings.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ni.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrgenergyinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paratekpharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rigcount.bhge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandschinaltd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steelconnect.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stoketherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'targaresources.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'therealreal.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetjxcompaniesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetorocompany.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usacompressionpartnerslp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viperenergy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitehorsefinance.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondbackenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thetorocompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viperenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whitehorsefinance.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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