leapfrog-ssl-15.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 03:0b:fa:de:c5:7e:f1:c5:b5:58:88:f2:8f:49:d3:39:b8:66 was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=leapfrog-ssl-15.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0b:fa:de:c5:7e:f1:c5:b5:58:88:f2:8f:49:d3:39:b8:66
Serial Number (int): 265413427525952152036239608007680725727334
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 24:84:be:ab:7b:ec:fb:52:64:a0:1e:6c:8f:5b:37:c8:bd:9d:d0:b6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2c:23:c1:00:aa:3c:df:62:0b:e2:79:f4:d2:0f:a7:98:62:1f:9b:71
Fingerprint (sha256): 0f:89:1e:92:1b:81:16:68:10:e8:a5:7a:fa:41:d1:35:a1:81:17:90:83:59:55:86:b9:3d:68:31:9f:69:11:c6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-15.gcs-web.com

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-15.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abm.gcs-web.com
agco.gcs-web.com
alexionpharmaceuticalsinc.gcs-web.com
atninternationalinc.gcs-web.com
averydennison.gcs-web.com
benefitfocusinc.gcs-web.com
blackbaud.gcs-web.com
bladetherapeutics.gcs-web.com
brainsway.gcs-web.com
cbscorporation.gcs-web.com
chickensoupforthesoulentertainment.gcs-web.com
clearsidebiomedicalinc.gcs-web.com
colgateenergy.gcs-web.com
connsinc.gcs-web.com
destinationxlgroupinc.gcs-web.com
ellingtonresidential.gcs-web.com
esperion.gcs-web.com
everbridge.gcs-web.com
exlserviceholdingsinc.gcs-web.com
fluentco.gcs-web.com
genesco.gcs-web.com
gladstonecapitalcorporation.gcs-web.com
gladstonecommercial.gcs-web.com
gladstoneinvestment.gcs-web.com
gladstonelandcorporation.gcs-web.com
harscocorporation.gcs-web.com
hookipapharma.gcs-web.com
ideayabiosciences.gcs-web.com
idsystemsinc.gcs-web.com
investor.abm.com
investor.benefitfocus.com
investor.blackbaud.com
investor.destinationxl.com
investor.dxl.com
investor.esperion.com
investor.medpace.com
investor.ti.com
investor.tribpub.com
investorday.nninc.com
investors.agcocorp.com
investors.averydennison.com
investors.blademed.com
investors.brainsway.com
investors.cbscorporation.com
investors.enviri.com
investors.fluentco.com
investors.harsco.com
investors.medicinova.com
investors.milestonepharma.com
investors.polestar.com
investors.silkroadmed.com
investors.z.co.nz
ionispharmaceuticalsinc.gcs-web.com
ir.atni.com
ir.clearsidebio.com
ir.conns.com
ir.cssentertainment.com
ir.everbridge.com
ir.exlservice.com
ir.hookipapharma.com
ir.ionispharma.com
ir.ngmbio.com
ir.prestigebrands.com
ir.ultrapetroleum.com
ir.vaxxinity.com
ir.zetadisplay.com
leapfrog-ssl-15.gcs-web.com
media.alexion.com
medicinova.gcs-web.com
medpaceholdingsinc.gcs-web.com
milestonepharma.gcs-web.com
ncfwealth.gcs-web.com
news.alexion.com
ngmbio.gcs-web.com
nnincinvestorday.gcs-web.com
polestar.gcs-web.com
portlandgeneralelectriccompany.gcs-web.com
prestigebrands.gcs-web.com
silkroadmed.gcs-web.com
supermicro.gcs-web.com
ti.gcs-web.com
tribpub.gcs-web.com
ultrapetroleumcorp.gcs-web.com
vaxxinity.gcs-web.com
www.earnreit.com
www.esperion.com
www.genesco.com
www.investors.averydennison.com
zenergy.gcs-web.com
zetadisplay.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-15.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIN2DCCDMCgAwIBAgISAwv63sV+8cW1WIjyj0nTObhmMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMTUxNTU4MjVaFw0yNDA0MTQxNTU4MjRaMCYxJDAiBgNVBAMT
G2xlYXBmcm9nLXNzbC0xNS5nY3Mtd2ViLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMtMBiax12rKwYDY+BAkJwygGIRklkidmrc/pX/YOhb/hHtK
R7ZmcAKojIEL2CHOXpGDP/ujsIG8lnY8aeu0xRyQRqmlBx8SDx3He3K/Di/9D5mC
3T5MBwnIC7OK1IiC1TIAgW4RZvUBqESC3+jyjbIYnpqXPgDwKZYwpAuhGetwIsg9
2c/mLUyIWeM2S/dTQlD4eOjFP5b9BjepCO8wioLBxz4VgdOJ6Bwiy0W8vNcfnMFX
cfEti7AX0ZCp8SpORnYrm4iAa6HRCC4kn9Jfxu5RTh73WMo2pNMkMfiiVmFZWWoD
Eo1g1w0Qyf0gWYnowXRzEkV/TIAeX0TJj8fNJJUCAwEAAaOCCvIwggruMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T
AQH/BAIwADAdBgNVHQ4EFgQUJIS+q3vs+1JkoB5sj1s3yL2d0LYwHwYDVR0jBBgw
FoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUF
BzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9y
My5pLmxlbmNyLm9yZy8wggj4BgNVHREEggjvMIII64IPYWJtLmdjcy13ZWIuY29t
ghBhZ2NvLmdjcy13ZWIuY29tgiVhbGV4aW9ucGhhcm1hY2V1dGljYWxzaW5jLmdj
cy13ZWIuY29tgh9hdG5pbnRlcm5hdGlvbmFsaW5jLmdjcy13ZWIuY29tghlhdmVy
eWRlbm5pc29uLmdjcy13ZWIuY29tghtiZW5lZml0Zm9jdXNpbmMuZ2NzLXdlYi5j
b22CFWJsYWNrYmF1ZC5nY3Mtd2ViLmNvbYIdYmxhZGV0aGVyYXBldXRpY3MuZ2Nz
LXdlYi5jb22CFWJyYWluc3dheS5nY3Mtd2ViLmNvbYIaY2JzY29ycG9yYXRpb24u
Z2NzLXdlYi5jb22CLmNoaWNrZW5zb3VwZm9ydGhlc291bGVudGVydGFpbm1lbnQu
Z2NzLXdlYi5jb22CImNsZWFyc2lkZWJpb21lZGljYWxpbmMuZ2NzLXdlYi5jb22C
GWNvbGdhdGVlbmVyZ3kuZ2NzLXdlYi5jb22CFGNvbm5zaW5jLmdjcy13ZWIuY29t
giFkZXN0aW5hdGlvbnhsZ3JvdXBpbmMuZ2NzLXdlYi5jb22CIGVsbGluZ3RvbnJl
c2lkZW50aWFsLmdjcy13ZWIuY29tghRlc3Blcmlvbi5nY3Mtd2ViLmNvbYIWZXZl
cmJyaWRnZS5nY3Mtd2ViLmNvbYIhZXhsc2VydmljZWhvbGRpbmdzaW5jLmdjcy13
ZWIuY29tghRmbHVlbnRjby5nY3Mtd2ViLmNvbYITZ2VuZXNjby5nY3Mtd2ViLmNv
bYInZ2xhZHN0b25lY2FwaXRhbGNvcnBvcmF0aW9uLmdjcy13ZWIuY29tgh9nbGFk
c3RvbmVjb21tZXJjaWFsLmdjcy13ZWIuY29tgh9nbGFkc3RvbmVpbnZlc3RtZW50
Lmdjcy13ZWIuY29tgiRnbGFkc3RvbmVsYW5kY29ycG9yYXRpb24uZ2NzLXdlYi5j
b22CHWhhcnNjb2NvcnBvcmF0aW9uLmdjcy13ZWIuY29tghlob29raXBhcGhhcm1h
Lmdjcy13ZWIuY29tgh1pZGVheWFiaW9zY2llbmNlcy5nY3Mtd2ViLmNvbYIYaWRz
eXN0ZW1zaW5jLmdjcy13ZWIuY29tghBpbnZlc3Rvci5hYm0uY29tghlpbnZlc3Rv
ci5iZW5lZml0Zm9jdXMuY29tghZpbnZlc3Rvci5ibGFja2JhdWQuY29tghppbnZl
c3Rvci5kZXN0aW5hdGlvbnhsLmNvbYIQaW52ZXN0b3IuZHhsLmNvbYIVaW52ZXN0
b3IuZXNwZXJpb24uY29tghRpbnZlc3Rvci5tZWRwYWNlLmNvbYIPaW52ZXN0b3Iu
dGkuY29tghRpbnZlc3Rvci50cmlicHViLmNvbYIVaW52ZXN0b3JkYXkubm5pbmMu
Y29tghZpbnZlc3RvcnMuYWdjb2NvcnAuY29tghtpbnZlc3RvcnMuYXZlcnlkZW5u
aXNvbi5jb22CFmludmVzdG9ycy5ibGFkZW1lZC5jb22CF2ludmVzdG9ycy5icmFp
bnN3YXkuY29tghxpbnZlc3RvcnMuY2JzY29ycG9yYXRpb24uY29tghRpbnZlc3Rv
cnMuZW52aXJpLmNvbYIWaW52ZXN0b3JzLmZsdWVudGNvLmNvbYIUaW52ZXN0b3Jz
LmhhcnNjby5jb22CGGludmVzdG9ycy5tZWRpY2lub3ZhLmNvbYIdaW52ZXN0b3Jz
Lm1pbGVzdG9uZXBoYXJtYS5jb22CFmludmVzdG9ycy5wb2xlc3Rhci5jb22CGWlu
dmVzdG9ycy5zaWxrcm9hZG1lZC5jb22CEWludmVzdG9ycy56LmNvLm56giNpb25p
c3BoYXJtYWNldXRpY2Fsc2luYy5nY3Mtd2ViLmNvbYILaXIuYXRuaS5jb22CE2ly
LmNsZWFyc2lkZWJpby5jb22CDGlyLmNvbm5zLmNvbYIXaXIuY3NzZW50ZXJ0YWlu
bWVudC5jb22CEWlyLmV2ZXJicmlkZ2UuY29tghFpci5leGxzZXJ2aWNlLmNvbYIU
aXIuaG9va2lwYXBoYXJtYS5jb22CEmlyLmlvbmlzcGhhcm1hLmNvbYINaXIubmdt
YmlvLmNvbYIVaXIucHJlc3RpZ2VicmFuZHMuY29tghVpci51bHRyYXBldHJvbGV1
bS5jb22CEGlyLnZheHhpbml0eS5jb22CEmlyLnpldGFkaXNwbGF5LmNvbYIbbGVh
cGZyb2ctc3NsLTE1Lmdjcy13ZWIuY29tghFtZWRpYS5hbGV4aW9uLmNvbYIWbWVk
aWNpbm92YS5nY3Mtd2ViLmNvbYIebWVkcGFjZWhvbGRpbmdzaW5jLmdjcy13ZWIu
Y29tghttaWxlc3RvbmVwaGFybWEuZ2NzLXdlYi5jb22CFW5jZndlYWx0aC5nY3Mt
d2ViLmNvbYIQbmV3cy5hbGV4aW9uLmNvbYISbmdtYmlvLmdjcy13ZWIuY29tghxu
bmluY2ludmVzdG9yZGF5Lmdjcy13ZWIuY29tghRwb2xlc3Rhci5nY3Mtd2ViLmNv
bYIqcG9ydGxhbmRnZW5lcmFsZWxlY3RyaWNjb21wYW55Lmdjcy13ZWIuY29tghpw
cmVzdGlnZWJyYW5kcy5nY3Mtd2ViLmNvbYIXc2lsa3JvYWRtZWQuZ2NzLXdlYi5j
b22CFnN1cGVybWljcm8uZ2NzLXdlYi5jb22CDnRpLmdjcy13ZWIuY29tghN0cmli
cHViLmdjcy13ZWIuY29tgh51bHRyYXBldHJvbGV1bWNvcnAuZ2NzLXdlYi5jb22C
FXZheHhpbml0eS5nY3Mtd2ViLmNvbYIQd3d3LmVhcm5yZWl0LmNvbYIQd3d3LmVz
cGVyaW9uLmNvbYIPd3d3LmdlbmVzY28uY29tgh93d3cuaW52ZXN0b3JzLmF2ZXJ5
ZGVubmlzb24uY29tghN6ZW5lcmd5Lmdjcy13ZWIuY29tghd6ZXRhZGlzcGxheS5n
Y3Mtd2ViLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQUGCisGAQQB1nkCBAIE
gfYEgfMA8QB2AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABjQ4P
Y0MAAAQDAEcwRQIgIKgyzuVFdqv0+8FkXK3wku51mLc/kLlNYRHjFIAtKAICIQC6
/mIHttoNeaU7IHrcRu4TeZUYWaZ3OFZm7NS1eoT3egB3AKLiv9Ye3i8vB6DWTm03
p9xlQ7DGtS6i2reK+Jpt9RfYAAABjQ4PYzcAAAQDAEgwRgIhAKEUJ+VCsmGZ3NeW
kq0BqMsFUTyFXrdeq5qTSIEk6TvbAiEAt3EKwF+Wog4uuxqVg3Ba8ZJNxtYHRpjh
AuzIskRr1YQwDQYJKoZIhvcNAQELBQADggEBAJWlZmTclNJINMgc3dp1l8i5S5Ya
Zo7eo2PeAXQiHdgkz4rXrp5A6TWiHoRa8Ds6H4DXWsf1T3veV4DaVW5/g5W9vB19
SYue+vciH/ztMoNao6+suzKfqKQuCA6sBOlBuePtygSROj6RoZ8XCIZOliqlxkmk
Yvm68YT1MKpw/iSFeKsWfLQN8Tf8RdUqN0jYHGXwezTFitu0Y3Gq1pZ/BmzDnSn+
hhAdZKprk3Ehai5macip8zi38FXGjdGRVdLfpBfT8tJ92LNbtdUr0jmTdolOE+5A
D7npdq9yKDP0YRnflBUIgBstKc9rC7Fnj1YJqmxS04XzE2T2iShCvKuvOf8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0wGJrHXasrBgNj4ECQn
DKAYhGSWSJ2atz+lf9g6Fv+Ee0pHtmZwAqiMgQvYIc5ekYM/+6OwgbyWdjxp67TF
HJBGqaUHHxIPHcd7cr8OL/0PmYLdPkwHCcgLs4rUiILVMgCBbhFm9QGoRILf6PKN
shiempc+APApljCkC6EZ63AiyD3Zz+YtTIhZ4zZL91NCUPh46MU/lv0GN6kI7zCK
gsHHPhWB04noHCLLRby81x+cwVdx8S2LsBfRkKnxKk5GdiubiIBrodEILiSf0l/G
7lFOHvdYyjak0yQx+KJWYVlZagMSjWDXDRDJ/SBZiejBdHMSRX9MgB5fRMmPx80k
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265413427525952152036239608007680725727334
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-15 15:58:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-14 15:58:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-15.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25663864753512638326030008185421506476372602902725777463969473509437132766220781510586469990255862529139666631527943289216797943967925951809321776069536217820124325802881505244716238903882089831672836650342294131949169474455485227398243610951530123928479625226500526042503304989419196382634660490942902488296980758595284825602988775803890281083037789675925502326937250723822692839449362239760337973781376387339327488402087718754405027951050917913960456909256730717100773432765356670758549751142337386981047104741810659179197638433966149550781883365350168959075593523531089364491887259562143902582472269635305205474453
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2484beab7becfb5264a01e6c8f5b37c8bd9dd0b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2287 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abm.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agco.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexionpharmaceuticalsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atninternationalinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'averydennison.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefitfocusinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackbaud.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bladetherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brainsway.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbscorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chickensoupforthesoulentertainment.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clearsidebiomedicalinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colgateenergy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'destinationxlgroupinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellingtonresidential.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esperion.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everbridge.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exlserviceholdingsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fluentco.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genesco.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gladstonecapitalcorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gladstonecommercial.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gladstoneinvestment.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gladstonelandcorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harscocorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hookipapharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ideayabiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idsystemsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.abm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.benefitfocus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.blackbaud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.dxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.esperion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.medpace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.ti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.tribpub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.nninc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.agcocorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.averydennison.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.blademed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.brainsway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cbscorporation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.enviri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.fluentco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.harsco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.medicinova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.milestonepharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.polestar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.silkroadmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.z.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ionispharmaceuticalsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.atni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.clearsidebio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.conns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cssentertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.everbridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.exlservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.hookipapharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ionispharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ngmbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.prestigebrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ultrapetroleum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vaxxinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.zetadisplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-15.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.alexion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicinova.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medpaceholdingsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milestonepharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncfwealth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.alexion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngmbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nnincinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polestar.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portlandgeneralelectriccompany.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prestigebrands.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silkroadmed.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supermicro.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ti.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tribpub.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultrapetroleumcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaxxinity.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.earnreit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esperion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.genesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investors.averydennison.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zenergy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zetadisplay.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d0e0f63430000040300473045022020a832cee54576abf4fbc1645cadf092ee7598b73f90b94d6111e314802d2802022100bafe6207b6da0d79a53b207adc46ee1379951859a677385666ecd4b57a84f77a007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d0e0f63370000040300483046022100a11427e542b26199dcd79692ad01a8cb05513c855eb75eab9a93488124e93bdb022100b7710ac05f96a20e2ebb1a9583705af1924dc6d6074698e102ecc8b2446bd584
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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