leapfrog-ssl-22.gcs-web.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:32:80:6a:b1:31:e4:3b:79:bd:99:15:63:37:66:24:9d:54 was issued on by Let's Encrypt.

With 73 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-22.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:32:80:6a:b1:31:e4:3b:79:bd:99:15:63:37:66:24:9d:54
Serial Number (int): 278521671302194451329811791824160945380692
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a2:de:78:d8:95:17:d2:96:07:a0:60:22:48:e2:b6:0d:a4:d1:9c:c2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b2:bf:58:42:dc:22:ff:e9:25:e2:c3:f7:1e:5d:d6:0c:77:05:85:08
Fingerprint (sha256): 0d:a6:16:11:41:90:94:d9:b8:42:eb:c7:e9:30:64:25:5c:1b:e3:f9:6d:c4:00:7a:1c:36:3e:65:f4:25:8f:e4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate leapfrog-ssl-22.gcs-web.com

73

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-22.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aduro.gcs-web.com
aprea.gcs-web.com
athenahealth.gcs-web.com
bakerhughes.gcs-web.com
baldwinriskpartners.gcs-web.com
beamtherapeutics.gcs-web.com
bellushealth.gcs-web.com
callawaygolf.gcs-web.com
carnivalcorporationplc.gcs-web.com
centogene.gcs-web.com
cumminsinc.gcs-web.com
deleklogisticspartnerslp.gcs-web.com
delekus.gcs-web.com
exagen.gcs-web.com
galectintherapeuticsinc.gcs-web.com
galeratherapeutics.gcs-web.com
gatx.gcs-web.com
gbsinc.gcs-web.com
hbtbank.gcs-web.com
hermanmillerinc.gcs-web.com
hess.gcs-web.com
investor.cummins.com
investor.galectintherapeutics.com
investor.glucosebiosensor.com
investor.onepeloton.com
investor.shutterstock.com
investors.aduro.com
investors.bakerhughes.com
investors.beamtx.com
investors.centogene.com
investors.exagen.com
investors.galeratx.com
investors.hermanmiller.com
investors.jmsmucker.com
investors.liquidia.com
investors.midlandsb.com
investors.otonomy.com
investors.skyworksinc.com
investors.tileshop.com
investors.vir.bio
ir.aprea.com
ir.baldwinriskpartners.com
ir.bellushealth.com
ir.callawaygolf.com
ir.deleklogistics.com
ir.delekus.com
ir.gatx.com
ir.hbtfinancial.com
ir.ocugen.com
ir.restorbio.com
ir.rhythmtx.com
ir.rockwellmed.com
ir.telabio.com
jmsmucker.gcs-web.com
leapfrog-ssl-22.gcs-web.com
liquidia.gcs-web.com
midlandsb.gcs-web.com
newsroom.athenahealth.com
ocugen.gcs-web.com
onepeloton.gcs-web.com
otonomy.gcs-web.com
restorbioinc.gcs-web.com
rhythmpharmaceuticals.gcs-web.com
rockwellmedicalinc.gcs-web.com
shutterstock.gcs-web.com
skyworks.gcs-web.com
telabio.gcs-web.com
tileshop.gcs-web.com
vir.gcs-web.com
www.carnivalcorp.com
www.carnivalcorp.us
www.carnivalcorporation.com
www.carnivalplc.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-52.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-22.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuILl9UajlQtTNMeIvKLQ
uSw/IN7F3bYkle19FINlIfqqxY7C4c1EJ4HDFTCeCXfhJhqgSB+ivddH3TDsYV4O
Ny5rIb6IOp6zt30IIFtmZBEUnUhOFf/ijxK9ZdHLgZqznoWTDvEIlN4DT8aPAcnW
VfzuOzcYQAbA0ol8+sbwxgCqpTuz+WwxGc6vN7heNVroBfPW0aVXvJxGy+AD51z/
fgtguEiOiL+G7DWzCgxB7HI6IlD+TwwDuiarx0ClX7kTXjqhl6xmq4rpboBmRiRM
v16chEjZtWV84W8IQxCe+rc3aLSUT6cdpyaCBaI6vaxyGdK7d3aQQdioZnVc0FNp
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278521671302194451329811791824160945380692
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-15 14:20:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-13 14:20:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-22.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23292396458346741618355828948818216184441491368060704170893898009027569934783183557369526922178554035632912183177164665955789177183871391721734047319419537771828293674792179844662149470670238411586705825520618056857646763974986101088137865352917370880415000360504859998438523117108395431862112312259471134135836534551594223101080890640662339268901785128562368575146748232170969299370295547143604596518929529526678560955689593286743900243954322558044815576935266163983243469838897119395692899828748569591481075381233922522677235577646793676947991852191012275349111858026296195451796227730421837957286643176666079390089
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a2de78d89517d29607a0602248e2b60da4d19cc2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1747 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aduro.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aprea.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athenahealth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakerhughes.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baldwinriskpartners.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beamtherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellushealth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'callawaygolf.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carnivalcorporationplc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centogene.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cumminsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deleklogisticspartnerslp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delekus.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exagen.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galectintherapeuticsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galeratherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gatx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gbsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbtbank.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hermanmillerinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hess.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.cummins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.galectintherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.glucosebiosensor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.onepeloton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.shutterstock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.aduro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.beamtx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.centogene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.exagen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.galeratx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.hermanmiller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.jmsmucker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.liquidia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.midlandsb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.otonomy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.skyworksinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.tileshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.vir.bio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.aprea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.baldwinriskpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.bellushealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.callawaygolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.deleklogistics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.delekus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gatx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.hbtfinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ocugen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.restorbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.rhythmtx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.rockwellmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.telabio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jmsmucker.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-22.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liquidia.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midlandsb.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.athenahealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocugen.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onepeloton.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otonomy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restorbioinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhythmpharmaceuticals.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockwellmedicalinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shutterstock.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skyworks.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telabio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tileshop.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vir.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carnivalcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carnivalcorp.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carnivalcorporation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carnivalplc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dd001b96600000403004830460221008d2e5774a406a4248c1e63f34e75e4f1ce2a0ed65427ccc3770ee5dcd4b9a7b50221009b064dad50f884ebe75bc0955e28f45fbb9360951bf1174484b2fc0f13f5fd19007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dd001b9520000040300483046022100ab4ec4a591ecee0420b5f226f0dd0be2eb0856542adc397a83761c93b5367a73022100973f4dd12842e77e3238e06ed1ee2b93ca2fdc32ece6735cc0e243643244ebca
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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