leapfrog-ssl-4.gcs-web.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:7a:6e:8e:73:17:91:c0:8d:19:05:51:df:86:81:39:bc:81 was issued on by Let's Encrypt.

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-4.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:7a:6e:8e:73:17:91:c0:8d:19:05:51:df:86:81:39:bc:81
Serial Number (int): 390110547211430192084836835805942806854785
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 4a:67:aa:f4:80:d9:13:90:65:48:76:bd:14:64:a5:5b:01:b9:89:29
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 07:1e:a7:c4:56:f0:6f:6a:9b:b8:37:2b:ee:46:28:92:81:57:03:8d
Fingerprint (sha256): 0c:31:6d:6d:71:0b:0d:a7:b2:b9:cb:08:0b:3d:f1:92:f9:d7:c7:d0:73:66:82:d6:7b:e6:e1:d0:39:c9:76:b0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate leapfrog-ssl-4.gcs-web.com

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-4.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adaptimmune.gcs-web.com
aia.gcs-web.com
altair.gcs-web.com
aralezpharmaceuticalsinc.gcs-web.com
arbutusbio.gcs-web.com
assemblybio.gcs-web.com
bandwidth.gcs-web.com
bill.gcs-web.com
caredxinc.gcs-web.com
casellawastesystems.gcs-web.com
catabasispharmaceuticalsinc.gcs-web.com
discoverycommunicationsinc.gcs-web.com
elliemae.gcs-web.com
enterabio.gcs-web.com
fleetcor.gcs-web.com
gastar.gcs-web.com
genprex.gcs-web.com
globalpowerequipmentgroupinc.gcs-web.com
intelliatherapeutics.gcs-web.com
investor.altair.com
investor.arbutusbio.com
investor.assemblybio.com
investor.fleetcor.com
investor.ptc.com
investor.sangamo.com
investor.synlogictx.com
investor.teaminc.com
investor.veracyte.com
investor.westpharma.com
investors.aia.com
investors.altair.com
investors.bandwidth.com
investors.caredxinc.com
investors.enterabio.com
investors.factory.jcrew.com
investors.jabil.com
investors.jcrew.com
investors.madewell.com
investors.nkt.com
investors.optimizerx.com
investors.pier1.com
investors.sperotherapeutics.com
investors.sterlingbank.com
investors.torm.com
investors.unitil.com
investors.willscot.com
ir.adaptimmune.com
ir.altair.com
ir.aralez.com
ir.casella.com
ir.catabasis.com
ir.corporate.discovery.com
ir.gastar.com
ir.intelliatx.com
ir.istar.com
ir.opiant.com
ir.superiorenergy.com
ir.tuesdaymorning.com
ir.uhsinc.com
istarfinancial.gcs-web.com
jabil.gcs-web.com
jcrewgroupinc.gcs-web.com
leapfrog-ssl-4.gcs-web.com
metabank.gcs-web.com
navientnews.gcs-web.com
news.navient.com
nkt.gcs-web.com
opiantpharmaceuticalsinc.gcs-web.com
optimizerx.gcs-web.com
pier1.gcs-web.com
ptcinc.gcs-web.com
reatapharma.gcs-web.com
sangamotherapeuticsinc.gcs-web.com
sperotherapeutics.gcs-web.com
sterlingbank.gcs-web.com
superiorenergyservices.gcs-web.com
synlogic.gcs-web.com
teaminc.gcs-web.com
teleflexincorporated.gcs-web.com
torm.gcs-web.com
tuesdaymorning.gcs-web.com
uhsinc.gcs-web.com
unitilcorp.gcs-web.com
veracyteinc.gcs-web.com
westpharma.gcs-web.com
williamsscotsman.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-4.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqycitO+ItJxF5C70I0Ou
8m1p8r3Zt72F3FsbTMhzHIEndceO8McdGyTQogSi2gvasUJYANDbfGsDdVpzDT/q
x3h1fF2epodqMBjKS3IYdM+5m/ZV5+za3tVRP/pzA6HmxGgvjNM/iXY2p0MwUYIZ
NotMJqg4nm3BXRqSq0ZnW7Rs9U0Y8unW9n85YwCxRsKq7IxqTUrIHdAg14Q7BH6F
c7igQpkyIj220ryel0zHk3VtyDDqsjKpJjhKcemR73ZFIWlo+p3vUp9LSlcbf/pq
il5NMV50SBobjdSb8q7z1myNen9Jrx2OEA4T9Ls55xLMUx45zKhQ3OT8CTHMFRdZ
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 390110547211430192084836835805942806854785
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 12:11:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-02 12:11:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-4.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21606048619683375122737774388022205338664977082102718954381704188554394464407083134391099518913689513177527645194714324088137001262362745464845282723994800339632590081780498899920998791120197070946332017345163070712423586949685362114034135875775374947829443835801992007992530496177182561225809949418384740599632041937243444135470272501635057865979989043332357824497108262860177941696607679687856322183975413865380433650873602617638865170124556986429251122982455575883121294331753724669865412958986858007888212230242712216337645334496286606860651596880049369415078218520728195924995007485382745594015860247425334073723
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4a67aaf480d91390654876bd1464a55b01b98929
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2070 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adaptimmune.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aia.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altair.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aralezpharmaceuticalsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbutusbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assemblybio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bandwidth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bill.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caredxinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casellawastesystems.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catabasispharmaceuticalsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discoverycommunicationsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elliemae.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterabio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fleetcor.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gastar.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genprex.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalpowerequipmentgroupinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intelliatherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.altair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.arbutusbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.assemblybio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.fleetcor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.ptc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.sangamo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.synlogictx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.teaminc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.veracyte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.westpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.aia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.altair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.bandwidth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.caredxinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.enterabio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.factory.jcrew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.jabil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.jcrew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.madewell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.nkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.optimizerx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.pier1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sperotherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sterlingbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.torm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.unitil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.willscot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.adaptimmune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.altair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.aralez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.casella.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.catabasis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.corporate.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gastar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.intelliatx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.istar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.opiant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.superiorenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tuesdaymorning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.uhsinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'istarfinancial.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jabil.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcrewgroupinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-4.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metabank.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navientnews.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.navient.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nkt.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opiantpharmaceuticalsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optimizerx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pier1.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptcinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reatapharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sangamotherapeuticsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sperotherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sterlingbank.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superiorenergyservices.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synlogic.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teaminc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teleflexincorporated.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torm.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuesdaymorning.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitilcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veracyteinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westpharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'williamsscotsman.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170a5ac6437000004030048304602210096d795a84fd4e78f63603791c90205aa8078b9636c6f1f9903e82a5712da756f0221009f4639e5595d88a59c047e59aff7400d5be3afab0091daae6c3a963471ffad9e00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170a5ac646a000004030046304402204a3216a232710c27767ce656a0a7a977b0be465a009f367e073ceaadb4f94efa0220489305f2766e63c9e7949d57fbc80b5f81f4a5d29a80242a7a41d8c2ea01d3b9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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