leapfrog-ssl-16.gcs-web.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:60:cc:b6:bb:6c:28:56:41:dc:c3:c3:44:4c:70:a6:3a:d6 was issued on by Let's Encrypt.

With 68 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-16.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:60:cc:b6:bb:6c:28:56:41:dc:c3:c3:44:4c:70:a6:3a:d6
Serial Number (int): 294276076330238929722498899687069589060310
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6b:53:59:8b:0b:cc:96:01:e6:2c:f4:38:fb:82:3e:c0:59:3a:2a:c1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 01:e0:23:08:4c:36:bd:d4:bd:d4:7d:55:d8:f2:f4:30:06:5e:5a:be
Fingerprint (sha256): 0f:a4:a9:00:ed:e8:47:d4:6d:62:8a:97:9a:bb:44:c6:a6:09:35:53:7d:0b:a6:a3:0e:dc:73:8d:33:0a:20:f7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate leapfrog-ssl-16.gcs-web.com

68

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-16.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amsc.gcs-web.com
avedro.gcs-web.com
bankunited.gcs-web.com
computertaskgroup.gcs-web.com
covalon.gcs-web.com
crawfordandcompany.gcs-web.com
ctripcominternationalltd.gcs-web.com
fatetherapeuticsinc.gcs-web.com
flexiontherapeutics.gcs-web.com
fnf.gcs-web.com
forumenergytechnologiesinc.gcs-web.com
gapinc.gcs-web.com
globenewswiresupportcenter.gcs-web.com
guessinc.gcs-web.com
investor.noodles.com
investor.sagerx.com
investor.spark.net
investors.avedro.com
investors.crawfordandcompany.com
investors.ctg.com
investors.gapinc.com
investors.guess.com
investors.meiragtx.com
investors.millendo.com
investors.noblecorp.com
investors.overstock.com
investors.patternenergy.com
investors.presidio.com
investors.repay.com
investors.ttm.com
ir.amsc.com
ir.bankunited.com
ir.covalon.com
ir.ctrip.com
ir.f-e-t.com
ir.fatetherapeutics.com
ir.flexiontherapeutics.com
ir.ofscapitalcorp.com
ir.organovo.com
ir.safeholdinc.com
ir.scripps.com
ir.sealedair.com
ir.tcap.com
ir.viacom.com
leapfrog-ssl-16.gcs-web.com
meiragtx.gcs-web.com
millendo.gcs-web.com
noblecorp.gcs-web.com
noodles.gcs-web.com
ofscapital.gcs-web.com
organovo.gcs-web.com
otcmarkets.gcs-web.com
overstock.gcs-web.com
patternenergygroupinc.gcs-web.com
presidio.gcs-web.com
repay.gcs-web.com
safeholdinc.gcs-web.com
sagerx.gcs-web.com
scripps.gcs-web.com
sealedair.gcs-web.com
sparknetworksinc.gcs-web.com
trianglecapital.gcs-web.com
ttmtechnologiesinc.gcs-web.com
viacominc.gcs-web.com
w.globenewswire.com
www.investor.fnf.com
www.spark.net
www.virtualinvestorconferences.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-16.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pVfa5HipSNiXtKq2qzP
wBWEibzUO8GfxBrYrTjyN6nQ5aZikBC7Oq+g3jBgZJ0P4elXnKpOgHQVwNEkNCco
mDhOZUz7EhUMu5aRqxRhTjR22oBIyc+1g5xUaKTGoUgFXibsr6dD8U3B772O4pAA
F6iZ6ZsiIJO0qdvSjWDrlNvDevuTzT4XETaT53odATQ/jR73KMLk15tDJYPVbtnX
iyFliYMncIIhV2H7Wfealt128w53ACdUa0oMJfAH4Fe5JKGz2qlP34WzFAPj6pgy
QK1WZXKjFjYIE32R7zz2JTkj1RgU3BY56RJ2GCEWeh9scNooP3oS6UTNj78t7CgE
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294276076330238929722498899687069589060310
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-28 18:24:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-26 18:24:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-16.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29108468583176673153481768713671227545824451255288692194365444649025536044420488836704200604135586151997196593821105313218029216330519733617652627602277493887600585643584201118050010511818473180207481820218924722317692992358087915990548392272008126289109446771224342255642291758787826864782681734399937692451051840867051992698228380648528065885532048100661573571287432794769451895763626595703023002004739057142500816635480069617440893762945456919964379579500094664537205588119819454364873405549268773677302365548924153046939285349610005521436210532863352557394293155867258553690876859960668404619812584673246144103617
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6b53598b0bcc9601e62cf438fb823ec0593a2ac1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1599 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amsc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avedro.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankunited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'computertaskgroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covalon.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crawfordandcompany.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctripcominternationalltd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatetherapeuticsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flexiontherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fnf.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forumenergytechnologiesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gapinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globenewswiresupportcenter.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guessinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.noodles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.sagerx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.spark.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.avedro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.crawfordandcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ctg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.gapinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.guess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.meiragtx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.millendo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.noblecorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.overstock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.patternenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.presidio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.repay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ttm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.amsc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.bankunited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.covalon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ctrip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.f-e-t.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.fatetherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.flexiontherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ofscapitalcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.organovo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.safeholdinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.scripps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.sealedair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tcap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-16.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meiragtx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'millendo.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noblecorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noodles.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofscapital.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organovo.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otcmarkets.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overstock.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patternenergygroupinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'presidio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repay.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safeholdinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sagerx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scripps.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sealedair.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sparknetworksinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trianglecapital.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ttmtechnologiesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viacominc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w.globenewswire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investor.fnf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spark.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.virtualinvestorconferences.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002387e124ffc8aae30cf43f30aa546f141c920ed1baed31f46e86dcf14baf71cae4772a018d855df3ca7d3586beedf82de6d23aeecef5ab044744f47654582d090d332678ccd31824bb547042c7d1f7fe9bd86f5e7bee8a433355a9852e6ec0253a3172ea38a85d51d3a1dd5dc2c738e7c58db80b94b7210cbc75e10123a5293fcd8b2e79d347a5e1996583131251a9a088ac4008b2ef2901c668dac470fa3ecb86ca11ea0b9f97d48ce8be54cfb1b5d1427ff3b73f957916454b2441011e5015f8ca8be25553aa0ffbb36dfbcf35982006557c4c08bdc3c37156d4d1e1c34190a59df46e3cf4ef3c4bd51d71c1743cd461f478aa765587d23bb995812d92e912