leapfrog-ssl-20.gcs-web.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b1:5e:72:af:2c:9d:04:92:4f:2a:d0:77:7e:5a:4d:52:a1 was issued on by Let's Encrypt.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-20.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b1:5e:72:af:2c:9d:04:92:4f:2a:d0:77:7e:5a:4d:52:a1
Serial Number (int): 321692379646688817498132683420380810793633
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 08:27:35:b8:81:b3:f8:fa:37:eb:f2:7f:b2:b3:e6:30:20:31:3e:8e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 09:be:fa:5c:4a:42:72:29:bf:93:91:2e:cc:0e:5c:cc:09:38:a1:f3
Fingerprint (sha256): 0d:72:6b:71:6d:34:05:55:bc:aa:70:69:98:18:ae:12:ba:b5:b3:d5:8b:d7:05:34:6b:f0:6a:30:44:9f:fb:a7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate leapfrog-ssl-20.gcs-web.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-20.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adtcorp.gcs-web.com
afya.gcs-web.com
agncgcswebcom.gcs-web.com
altimmune.gcs-web.com
ametekinc.gcs-web.com
atreca.gcs-web.com
bakerhughesrigcount.gcs-web.com
biogen.gcs-web.com
cambiumnetworks.gcs-web.com
collegiumpharma.gcs-web.com
cray.gcs-web.com
crossfirstbankshares.gcs-web.com
diamondbackenergy.gcs-web.com
dsv.gcs-web.com
durect.gcs-web.com
enterpriseproductspartnerslp.gcs-web.com
flexshopper.gcs-web.com
globalstar.gcs-web.com
groceryoutletinc.gcs-web.com
healthcatalystinc.gcs-web.com
huntingtoningalls.gcs-web.com
ingredion.gcs-web.com
interxion.gcs-web.com
intracellulartherapies.gcs-web.com
investor-cn.sandschina.com
investor-hk.sandschina.com
investor.dsv.com
investor.moduslink.com
investor.morphictx.com
investor.ni.com
investor.paratekpharma.com
investor.rentacenter.com
investor.sandschina.com
investor.stoketherapeutics.com
investor.therealreal.com
investor.tjx.com
investors.ametek.com
investors.biogen.com
investors.cambiumnetworks.com
investors.cray.com
investors.crossfirstbankshares.com
investors.durect.com
investors.flexshopper.com
investors.globalstar.com
investors.groceryoutlet.com
investors.interxion.com
investors.irhythmtech.com
investors.nrg.com
investors.rapt.com
investors.usacompression.com
investors.usacpartners.com
ioncorp.gcs-web.com
ir-west.enterpriseproducts.com
ir.afya.com.br
ir.agnc.com
ir.altimmune.com
ir.atreca.com
ir.collegiumpharma.com
ir.diamondbackenergy.com
ir.healthcatalyst.com
ir.huntingtoningalls.com
ir.ingredionincorporated.com
ir.intracellulartherapies.com
ir.iongeo.com
ir.ncsmultistage.com
ir.pliantrx.com
ir.steelconnectinc.com
ir.trivago.com
ir.viperenergy.com
irhythmtech.gcs-web.com
leapfrog-ssl-20.gcs-web.com
morphictx.gcs-web.com
ncsmultistageholdings.gcs-web.com
news.adt.com
ni.gcs-web.com
nrgenergyinc.gcs-web.com
paratekpharma.gcs-web.com
plianttherapeutics.gcs-web.com
rapt.gcs-web.com
rentacenter.gcs-web.com
rigcount.bakerhughes.com
rigcount.bhge.com
sandschinaltd.gcs-web.com
steelconnect.gcs-web.com
stoketherapeutics.gcs-web.com
therealreal.gcs-web.com
thetjxcompaniesinc.gcs-web.com
thetorocompany.gcs-web.com
trivago.gcs-web.com
usacompressionpartnerslp.gcs-web.com
viperenergy.gcs-web.com
whitehorsefinance.gcs-web.com
www.diamondbackenergy.com
www.thetorocompany.com
www.viperenergy.com
www.whitehorsefinance.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-52.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-20.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyD1v2JAyeGZx+UJb5gVB
WDantfK2AHSRJiK4stawD7fybKM3tGXK4zhOoY/1DlhvnY9FyUpR3yi09AQAjBPQ
39uwFQj6JFGjHLOLfMA+0KtnR4qDIGiRskR5q1MBQJYaJG0OkjQyYt3HWDztHJA/
A4S/rOAk4G4YejbFd09jxYdnAw3LqoVL39E3DP5v6KBhSVlUj9Ktb0fczn4GtumQ
7lkh7Oz+FEZkTvqH6V1D0KvrJI01LeJo0WMVgUcvjLyGfkPNKHH/vBvLt7NSgodG
FfKUS5KrlRFcIe8U9A6yPz9vZ0h8i1RH+VLVf0J7GWfwqXqEdStUj1ASGOqGbDzl
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321692379646688817498132683420380810793633
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-12 17:12:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-10 17:12:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-20.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25277956656870322253523854942579052665932523902692368115346885549761468953156004557368129411464855042568477706483438735224318961570734450815198196440353183022870110762618532221470871399241548011683425349238887574922182586104285019160260428979775196069359735538600989483085018236214934915244370361484008700892113707556427700890106082696915279668968811470955254068633974494532766350686021077652111802122461843764423745474745159176792240062802997386824155013720383713430313728943035545020317704850306880526597155081358263786585548020829789902225545377729558446551722399145914032116976757851581698535797469699589638251831
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							082735b881b3f8fa37ebf27fb2b3e63020313e8e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2397 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adtcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afya.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agncgcswebcom.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altimmune.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ametekinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atreca.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakerhughesrigcount.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biogen.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambiumnetworks.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegiumpharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cray.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crossfirstbankshares.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondbackenergy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsv.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'durect.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseproductspartnerslp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flexshopper.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalstar.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groceryoutletinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthcatalystinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huntingtoningalls.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ingredion.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interxion.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intracellulartherapies.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor-cn.sandschina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor-hk.sandschina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.dsv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.moduslink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.morphictx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.ni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.paratekpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.rentacenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.sandschina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.stoketherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.therealreal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.tjx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ametek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.biogen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cambiumnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cray.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.crossfirstbankshares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.durect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.flexshopper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.globalstar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.groceryoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.interxion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.irhythmtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.nrg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.rapt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.usacompression.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.usacpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ioncorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir-west.enterpriseproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.afya.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.agnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.altimmune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.atreca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.collegiumpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.diamondbackenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.healthcatalyst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.huntingtoningalls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ingredionincorporated.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.intracellulartherapies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.iongeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ncsmultistage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.pliantrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.steelconnectinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.trivago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.viperenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irhythmtech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-20.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morphictx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncsmultistageholdings.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.adt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ni.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrgenergyinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paratekpharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plianttherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapt.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rentacenter.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rigcount.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rigcount.bhge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandschinaltd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steelconnect.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stoketherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'therealreal.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetjxcompaniesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetorocompany.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trivago.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usacompressionpartnerslp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viperenergy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitehorsefinance.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondbackenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thetorocompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viperenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whitehorsefinance.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000173e3df86830000040300473045022004580eb7d5c74cf3f117692be29b246fcc5680c48c80161e6bd7841db8377f27022100c9cf4f858051e9d1d8a9c4df7faff28e8b72fb1a70bb2c2922eec4fe6247e21f007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000173e3df867e0000040300483046022100c8a8167cb1507437b949b6f38190ea18067b0be01b2f0cd1c7b540f59a080bcb022100e3300d8bf11a159f2a3abf87800aab9ae11abe3a9d67fe785ae69db6e8057aa1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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