leapfrog-ssl-20.gcs-web.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:06:c6:99:b0:2e:44:28:0f:03:c3:1e:d7:1e:32:be:2b:a9 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-20.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:06:c6:99:b0:2e:44:28:0f:03:c3:1e:d7:1e:32:be:2b:a9
Serial Number (int): 263642537134760819019069752696799200422825
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c9:5b:d7:d9:65:d8:49:24:5b:9f:a5:6c:8f:5d:a4:ad:d6:c0:4d:fd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3b:c0:bc:aa:b5:41:e9:d3:ce:97:85:66:3d:01:84:d1:62:9a:12:93
Fingerprint (sha256): 0c:3e:8d:a7:d6:70:ec:ea:fe:fc:56:43:4e:3b:40:a7:e1:2c:91:17:72:ee:2d:ee:4d:4e:34:61:4a:01:89:2c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate leapfrog-ssl-20.gcs-web.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-20.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adtcorp.gcs-web.com
afya.gcs-web.com
agncgcswebcom.gcs-web.com
altimmune.gcs-web.com
ametekinc.gcs-web.com
atreca.gcs-web.com
bakerhughesrigcount.gcs-web.com
bectondickinson.gcs-web.com
biogen.gcs-web.com
cambiumnetworks.gcs-web.com
collegiumpharma.gcs-web.com
cray.gcs-web.com
crossfirstbankshares.gcs-web.com
diamondbackenergy.gcs-web.com
dsv.gcs-web.com
durect.gcs-web.com
enterpriseproductspartnerslp.gcs-web.com
flexshopper.gcs-web.com
globalstar.gcs-web.com
groceryoutletinc.gcs-web.com
healthcatalystinc.gcs-web.com
huntingtoningalls.gcs-web.com
ingredion.gcs-web.com
interxion.gcs-web.com
intracellulartherapies.gcs-web.com
investor-cn.sandschina.com
investor-hk.sandschina.com
investor.dsv.com
investor.moduslink.com
investor.morphictx.com
investor.ni.com
investor.paratekpharma.com
investor.rentacenter.com
investor.sandschina.com
investor.stoketherapeutics.com
investor.therealreal.com
investor.tjx.com
investors.ametek.com
investors.bd.com
investors.biogen.com
investors.cambiumnetworks.com
investors.cray.com
investors.crossfirstbankshares.com
investors.durect.com
investors.flexshopper.com
investors.globalstar.com
investors.groceryoutlet.com
investors.interxion.com
investors.irhythmtech.com
investors.nrg.com
investors.rapt.com
investors.usacompression.com
investors.usacpartners.com
ioncorp.gcs-web.com
ir-west.enterpriseproducts.com
ir.afya.com.br
ir.agnc.com
ir.altimmune.com
ir.atreca.com
ir.collegiumpharma.com
ir.diamondbackenergy.com
ir.healthcatalyst.com
ir.huntingtoningalls.com
ir.ingredionincorporated.com
ir.intracellulartherapies.com
ir.iongeo.com
ir.ncsmultistage.com
ir.pliantrx.com
ir.targaresources.com
ir.trivago.com
ir.viperenergy.com
irhythmtech.gcs-web.com
leapfrog-ssl-20.gcs-web.com
morphictx.gcs-web.com
ncsmultistageholdings.gcs-web.com
news.adt.com
ni.gcs-web.com
nrgenergyinc.gcs-web.com
paratekpharma.gcs-web.com
plianttherapeutics.gcs-web.com
rapt.gcs-web.com
rentacenter.gcs-web.com
rigcount.bhge.com
sandschinaltd.gcs-web.com
steelconnect.gcs-web.com
stoketherapeutics.gcs-web.com
targaresources.gcs-web.com
therealreal.gcs-web.com
thetjxcompaniesinc.gcs-web.com
thetorocompany.gcs-web.com
trivago.gcs-web.com
usacompressionpartnerslp.gcs-web.com
viperenergy.gcs-web.com
whitehorsefinance.gcs-web.com
www.diamondbackenergy.com
www.thetorocompany.com
www.viperenergy.com
www.whitehorsefinance.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-52.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-20.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IGEWpVGtSQ+NhPLY2MM
wZCPwIjOn1Z2/LUcMTjCFZFnnSaal2u0zz9RyZfEXu3EEyfAmFobrp4TTDK7tDlF
y2p1Gs4tWXRsQjojtUN9YvpPG1EfwqUI/DwT/THfj2FW0SQwJLJnIo1gEChuAQ76
ZSdS9nF1hLPvgzWUFUKV6Qpvrm+0E/hOX/c0O87vxyC6dN4hjvxztTEWYcfcJRMy
yC/XgoHgcOIiLRi1Wm+GX68qu9+yXViOma3gWlKX3gkkd3H77t5AfJkctbjnWIN7
SGlv1ssJBPFdeaMO2iD1xHZyNiUnSECnAGJtZ+a2Vt5Wczt/tP2zR/ADQiZo6pXZ
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263642537134760819019069752696799200422825
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-19 14:45:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-17 14:45:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-20.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26321434649548638669529296583214050755241831775405263547427513394299392228027995172373426107904849356862603852245847034781648360887372887606648061154874723942901163623748344239032221898008709952861477008339135211016213500475087802766428601826781560014738927024543581816801857367972289384983448704356968795387971338838712261711965323374207103819588567149021011541255971206058400383618223645417223952704101715558560552274470352694466860681611999506726835127242823452216584013396006684022945852682963197264572019601150952889753558651868887854189813601321492203014628610197307508463797536242414910037510095627851750824301
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c95bd7d965d849245b9fa56c8f5da4add6c04dfd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2445 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adtcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afya.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agncgcswebcom.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altimmune.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ametekinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atreca.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakerhughesrigcount.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bectondickinson.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biogen.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambiumnetworks.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegiumpharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cray.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crossfirstbankshares.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondbackenergy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsv.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'durect.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseproductspartnerslp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flexshopper.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalstar.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groceryoutletinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthcatalystinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huntingtoningalls.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ingredion.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interxion.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intracellulartherapies.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor-cn.sandschina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor-hk.sandschina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.dsv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.moduslink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.morphictx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.ni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.paratekpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.rentacenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.sandschina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.stoketherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.therealreal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.tjx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ametek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.bd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.biogen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cambiumnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cray.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.crossfirstbankshares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.durect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.flexshopper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.globalstar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.groceryoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.interxion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.irhythmtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.nrg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.rapt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.usacompression.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.usacpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ioncorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir-west.enterpriseproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.afya.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.agnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.altimmune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.atreca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.collegiumpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.diamondbackenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.healthcatalyst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.huntingtoningalls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ingredionincorporated.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.intracellulartherapies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.iongeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ncsmultistage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.pliantrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.targaresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.trivago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.viperenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irhythmtech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-20.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morphictx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncsmultistageholdings.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.adt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ni.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrgenergyinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paratekpharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plianttherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapt.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rentacenter.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rigcount.bhge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandschinaltd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steelconnect.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stoketherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'targaresources.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'therealreal.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetjxcompaniesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetorocompany.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trivago.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usacompressionpartnerslp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viperenergy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitehorsefinance.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondbackenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thetorocompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viperenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whitehorsefinance.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016c0ae92ee300000403004730450221009ee39aad0eb54264ba2dd3b69c9cb1efdf9a690cf144656ea9d70f83fe1b32bb02205189d3a4f26b02355f60be84b770f4f4ad7f7c23befa00103566905246f4ddd000760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c0ae92d290000040300473045022031e03f8779e706494c25989a51fa494ca9cc281de02f51cc37e00b42755d814b022100b9c753e7ee622ebbf35fd244101080aa3518c2dea3b7fcb8b5b41c2b9a6bf432
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006fc8f4ff042641f6f979ef3b82e89a2ea0756c84a40529467f83c199263a99b05ead54afd6a02961e3cc96f28e2f6cfbacc8f2a11e8fc346dccb50e5a4b95b0041b4b2feddd1870637a9a1526942f83b35e1803cc50fcb49cd80b1062c00efa8419ea20492f452cba59f7d99abc324d9bc992ceca4a6e9769bfaa675148e553bb3fc24585140e2d89b7aedd81f98879c56aaa40f0f226c886927abf2cefbefbf48c75842b04bf1294674a4c9b6de744c32939921437651b7ef55042e8436e4f405aa7ec3293cb18471c457b148bb75e2380906e834963e869532c2c39b7a2288e00976312b4e5a4f195a20f84b50df7adc46811334ece525260263a5082a65c2