leapfrog-ssl-15.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:95:ab:2e:b8:c7:ed:20:cb:61:31:8f:4e:cc:ce:5a:b3:9a was issued on by Let's Encrypt.

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-15.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:95:ab:2e:b8:c7:ed:20:cb:61:31:8f:4e:cc:ce:5a:b3:9a
Serial Number (int): 399378756978998689864509026921792916861850
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: fb:26:45:ba:9b:7e:51:c4:8f:1d:aa:67:74:80:21:b7:1a:92:3e:ba
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 50:a6:60:25:cc:a8:85:7c:70:00:cc:18:f6:f7:49:6b:94:ec:cf:46
Fingerprint (sha256): 10:d5:09:c4:aa:00:9b:56:97:2e:06:0e:58:e3:65:3e:2d:02:2c:c4:2f:be:ea:b9:72:36:92:6b:cb:1f:d5:23

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-15.gcs-web.com

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-15.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abm.gcs-web.com
agco.gcs-web.com
alexionpharmaceuticalsinc.gcs-web.com
atninternationalinc.gcs-web.com
averydennison.gcs-web.com
benefitfocusinc.gcs-web.com
blackbaud.gcs-web.com
brainsway.gcs-web.com
cbscorporation.gcs-web.com
chickensoupforthesoulentertainment.gcs-web.com
clearsidebiomedicalinc.gcs-web.com
connsinc.gcs-web.com
destinationxlgroupinc.gcs-web.com
esperion.gcs-web.com
everbridge.gcs-web.com
exlserviceholdingsinc.gcs-web.com
fluentco.gcs-web.com
gladstonecapitalcorporation.gcs-web.com
gladstonecommercial.gcs-web.com
gladstoneinvestment.gcs-web.com
gladstonelandcorporation.gcs-web.com
harscocorporation.gcs-web.com
hookipapharma.gcs-web.com
ideayabiosciences.gcs-web.com
idsystemsinc.gcs-web.com
investor.abm.com
investor.benefitfocus.com
investor.blackbaud.com
investor.destinationxl.com
investor.dxl.com
investor.esperion.com
investor.maerskdrilling.com
investor.medpace.com
investor.ti.com
investor.tribpub.com
investors.agcocorp.com
investors.averydennison.com
investors.brainsway.com
investors.cbscorporation.com
investors.fluentco.com
investors.harsco.com
investors.medicinova.com
investors.milestonepharma.com
investors.portlandgeneral.com
investors.silkroadmed.com
investors.watfordre.com
investors.z.co.nz
ionispharmaceuticalsinc.gcs-web.com
ir.alexion.com
ir.atni.com
ir.clearsidebio.com
ir.conns.com
ir.cssentertainment.com
ir.everbridge.com
ir.exlservice.com
ir.hookipapharma.com
ir.ionispharma.com
ir.jouncetx.com
ir.ngmbio.com
ir.prestigebrands.com
ir.ultrapetroleum.com
ir.zetadisplay.com
jouncetherapeutics.gcs-web.com
leapfrog-ssl-15.gcs-web.com
maerskdrilling.gcs-web.com
medicinova.gcs-web.com
medpaceholdingsinc.gcs-web.com
milestonepharma.gcs-web.com
ncfwealth.gcs-web.com
news.alexion.com
ngmbio.gcs-web.com
portlandgeneralelectriccompany.gcs-web.com
prestigebrands.gcs-web.com
silkroadmed.gcs-web.com
supermicro.gcs-web.com
ti.gcs-web.com
tribpub.gcs-web.com
ultrapetroleumcorp.gcs-web.com
watfordholdings.gcs-web.com
watfordre.gcs-web.com
www.esperion.com
www.investors.averydennison.com
zenergy.gcs-web.com
zetadisplay.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-15.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzplctlUn7Fj7gd0Y9FDv
Afp0b0qiCRC6TTqbLTbdA5bZrvsQk9MD4A7qu5AEL+5PrZ28M88eVtVyyz1tlD2O
TnrvobWAlSTjneC/Kc2pPXLIizlJSlLBgxEQaepgLcc1IIJXqmosrJfcpCxYPOVr
IbSyWMgFpCvbGyr9J6CbE1B9auJZBVvTUmybLX47invJm+CYsxBkKfYuYmmnHub2
CnTt/1NFeNoEojcfi/UfaUvPMd06ev49CcdBqm3xY34LzPdls4OHFp0yjDKLpa6T
dn7SrSWwFUjrUaLFeRD+jrzjFx01SwHP0IvuB4dKT6D6tJf4gJJZ7xrL5riAyNqP
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 399378756978998689864509026921792916861850
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-20 17:12:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-18 17:12:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-15.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26080716521319592116953548851915490703724094385798521886778200687523421693302021376497871446734301029002474381289726818265235057753278010834261131435970567281032711145482653200604093872046812331180346930776637292803986313566323606438310939873531235564077249839172481074105415675527624468238851739460425900311331259221540985970725658558381467112371265328673679413683180201951304623637893256216051817772093186194208830363971659339133544066638068446834823546179530156469515370850135595918493452585584418089333885692136729741944348504226279460892091849589769033647788082949502129157928803452477117761454263634461141405481
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fb2645ba9b7e51c48f1daa67748021b71a923eba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2164 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abm.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agco.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexionpharmaceuticalsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atninternationalinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'averydennison.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefitfocusinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackbaud.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brainsway.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbscorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chickensoupforthesoulentertainment.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clearsidebiomedicalinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'destinationxlgroupinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esperion.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everbridge.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exlserviceholdingsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fluentco.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gladstonecapitalcorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gladstonecommercial.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gladstoneinvestment.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gladstonelandcorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harscocorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hookipapharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ideayabiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idsystemsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.abm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.benefitfocus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.blackbaud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.dxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.esperion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.maerskdrilling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.medpace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.ti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.tribpub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.agcocorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.averydennison.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.brainsway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cbscorporation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.fluentco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.harsco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.medicinova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.milestonepharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.portlandgeneral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.silkroadmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.watfordre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.z.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ionispharmaceuticalsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.alexion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.atni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.clearsidebio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.conns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cssentertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.everbridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.exlservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.hookipapharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ionispharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.jouncetx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ngmbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.prestigebrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ultrapetroleum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.zetadisplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jouncetherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-15.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maerskdrilling.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicinova.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medpaceholdingsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milestonepharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncfwealth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.alexion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngmbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portlandgeneralelectriccompany.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prestigebrands.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silkroadmed.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supermicro.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ti.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tribpub.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultrapetroleumcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watfordholdings.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watfordre.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esperion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investors.averydennison.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zenergy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zetadisplay.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003ae6aa3c7273b0102a8d787135a540eae3ce87e70083bda6b3cf77be5419f95f0a074b4bf0798f0da8106275369e47ee7d118e28ec611a32c32fcd5189a6f7699189178c79e4b5af28978ec282d505f745e1077a93a7a57786fe3a4537e997914f4029b25a67afccbaea2a1d70d9b2ca1ef27c0e1325ba9ec89af8459d92d7d56659caff9885fe9f1f775c7816b142ca30db025a3d6b3f499dbf3304e0cf079531d8a86fd61be1a5efd2e0762995b4706685b4b2953564dfaba79d0dc9b6538af610869ba1f7c636c8a043e43653d242b7cda13b2991408148d0615cbd5eda974fd1d07eab2942256d2a4dfb1ef180c40909ab41c8ea257492ca5b1ca3ec42f0