leapfrog-ssl-8.gcs-web.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:96:02:06:ec:d3:c8:e5:fe:df:68:85:fe:07:43:19:fa:20 was issued on by Let's Encrypt.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-8.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:96:02:06:ec:d3:c8:e5:fe:df:68:85:fe:07:43:19:fa:20
Serial Number (int): 399494193178382460948596566252195562519072
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: cb:8b:81:d0:79:25:0b:60:30:0d:e1:23:49:ec:cb:ca:5b:0b:68:75
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b8:2a:ad:5c:fb:75:d9:63:fd:09:35:5f:9e:ca:50:26:53:34:1b:93
Fingerprint (sha256): 11:56:73:f1:43:ae:b7:3b:2f:bc:d4:07:2f:7d:06:0a:e1:1a:54:7f:7f:36:77:43:3d:b5:32:24:1a:60:7b:aa

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate leapfrog-ssl-8.gcs-web.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-8.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aerojetrocketdyne.gcs-web.com
albemarle.gcs-web.com
alliancedatasystems.gcs-web.com
anaptysbio.gcs-web.com
ashlandglobalholdingsinc.gcs-web.com
buildersfirstsourceinc.gcs-web.com
catalystpharma.gcs-web.com
charter.gcs-web.com
clxcommunications.gcs-web.com
consolidated.gcs-web.com
dollargeneral.gcs-web.com
dpwholdings.gcs-web.com
endocyte.gcs-web.com
evenergypartnerslp.gcs-web.com
fiserv.gcs-web.com
gwgh.gcs-web.com
heequipment.gcs-web.com
hh.gcs-web.com
hlundbeckas.gcs-web.com
htc.gcs-web.com
idexcorp.gcs-web.com
idt.gcs-web.com
internapcorporation.gcs-web.com
investor.alliancedata.com
investor.ashland.com
investor.dollargeneral.com
investor.endocyte.com
investor.he-equipment.com
investor.hh.ru
investor.kimberly-clark.com
investor.kmgchemicals.com
investor.lundbeck.com
investor.mrcglobal.com
investor.sharpsinc.com
investor.shentel.com
investor.xlgroup.com
investors.albemarle.com
investors.bldr.com
investors.fiserv.com
investors.gwgh.com
investors.gwglife.com
investors.htc.com
investors.idexcorp.com
investors.meritor.com
investors.nov.com
investors.osi-systems.com
investors.quantum.com
investors.sinch.com
investors.vrtx.com
ir.aerojetrocketdyne.com
ir.anaptysbio.com
ir.catalystpharma.com
ir.charter.com
ir.clxcommunications.com
ir.consolidated.com
ir.dpwholdings.com
ir.evenergypartners.com
ir.hvstog.com
ir.inap.com
ir.kkr.com
ir.mannatech.com
ir.microstrategy.com
ir.mohawkind.com
ir.novelion.com
ir.spectrum.com
ir.stanleyblackanddecker.com
ir.towerjazz.com
ir.vestas.com
irnews.mmc.com
kimberlyclark.gcs-web.com
kkr.gcs-web.com
kmgchemicals.gcs-web.com
leapfrog-ssl-8.gcs-web.com
macys.gcs-web.com
mannatech.gcs-web.com
media.kkr.com
meritorinc.gcs-web.com
microstrategy.gcs-web.com
mmc.gcs-web.com
mohawkind.gcs-web.com
mrcglobal.gcs-web.com
nationaloilva.gcs-web.com
news-investors.mmc.com
newsroom.fiserv.com
noveliontherapeutics.gcs-web.com
osisystems.gcs-web.com
quantum.gcs-web.com
sharpscompliancecorporation.gcs-web.com
shentel.gcs-web.com
stanleyblackdecker.gcs-web.com
towerjazz.gcs-web.com
ufpinvestor.gcs-web.com
vestaswindsystems.gcs-web.com
vrtx.gcs-web.com
www.ufpinvestor.com
xlgroupltd.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-8.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIODTCCDPWgAwIBAgISBJYCBuzTyOX+32iF/gdDGfogMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MDQyMDQ1MzJaFw0x
OTA5MDIyMDQ1MzJaMCUxIzAhBgNVBAMTGmxlYXBmcm9nLXNzbC04Lmdjcy13ZWIu
Y29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvor8GmNr2p91kND1
VeOSasgFEQlNBWR3Kbqr7nlE6CTjqKS4NAen2+IWHakVAlsUDlEHmMflwhnfCKPT
jIH7XQ/YRYVbOl6tXTJ3m6hof5TjtFmDk6gXS2JjvYo0Z70Uv++DkivPfWesLNIg
SKCbGrrg6F/MoR6jQA9PtKaH8cSTn3WJkqYqJG+Bf0xFpUXKx2U8qHBBJkL5GGuZ
fBxu8/NkIGhXT1Oy9qCOfvnkdRGwPrkj5i2C0x6TsuhmFrwjVNVBqygJUlIWiPCb
M74vCSbAdDEo0X9oE9d4R67ukIE1iWehejyPZnYI5uTxjL6FRqYn1htyZtPaV7E9
g7MqFwIDAQABo4ILEDCCCwwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTLi4HQeSUL
YDAN4SNJ7MvKWwtodTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv
BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s
ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s
ZXRzZW5jcnlwdC5vcmcvMIIIxgYDVR0RBIIIvTCCCLmCHWFlcm9qZXRyb2NrZXRk
eW5lLmdjcy13ZWIuY29tghVhbGJlbWFybGUuZ2NzLXdlYi5jb22CH2FsbGlhbmNl
ZGF0YXN5c3RlbXMuZ2NzLXdlYi5jb22CFmFuYXB0eXNiaW8uZ2NzLXdlYi5jb22C
JGFzaGxhbmRnbG9iYWxob2xkaW5nc2luYy5nY3Mtd2ViLmNvbYIiYnVpbGRlcnNm
aXJzdHNvdXJjZWluYy5nY3Mtd2ViLmNvbYIaY2F0YWx5c3RwaGFybWEuZ2NzLXdl
Yi5jb22CE2NoYXJ0ZXIuZ2NzLXdlYi5jb22CHWNseGNvbW11bmljYXRpb25zLmdj
cy13ZWIuY29tghhjb25zb2xpZGF0ZWQuZ2NzLXdlYi5jb22CGWRvbGxhcmdlbmVy
YWwuZ2NzLXdlYi5jb22CF2Rwd2hvbGRpbmdzLmdjcy13ZWIuY29tghRlbmRvY3l0
ZS5nY3Mtd2ViLmNvbYIeZXZlbmVyZ3lwYXJ0bmVyc2xwLmdjcy13ZWIuY29tghJm
aXNlcnYuZ2NzLXdlYi5jb22CEGd3Z2guZ2NzLXdlYi5jb22CF2hlZXF1aXBtZW50
Lmdjcy13ZWIuY29tgg5oaC5nY3Mtd2ViLmNvbYIXaGx1bmRiZWNrYXMuZ2NzLXdl
Yi5jb22CD2h0Yy5nY3Mtd2ViLmNvbYIUaWRleGNvcnAuZ2NzLXdlYi5jb22CD2lk
dC5nY3Mtd2ViLmNvbYIfaW50ZXJuYXBjb3Jwb3JhdGlvbi5nY3Mtd2ViLmNvbYIZ
aW52ZXN0b3IuYWxsaWFuY2VkYXRhLmNvbYIUaW52ZXN0b3IuYXNobGFuZC5jb22C
GmludmVzdG9yLmRvbGxhcmdlbmVyYWwuY29tghVpbnZlc3Rvci5lbmRvY3l0ZS5j
b22CGWludmVzdG9yLmhlLWVxdWlwbWVudC5jb22CDmludmVzdG9yLmhoLnJ1ghtp
bnZlc3Rvci5raW1iZXJseS1jbGFyay5jb22CGWludmVzdG9yLmttZ2NoZW1pY2Fs
cy5jb22CFWludmVzdG9yLmx1bmRiZWNrLmNvbYIWaW52ZXN0b3IubXJjZ2xvYmFs
LmNvbYIWaW52ZXN0b3Iuc2hhcnBzaW5jLmNvbYIUaW52ZXN0b3Iuc2hlbnRlbC5j
b22CFGludmVzdG9yLnhsZ3JvdXAuY29tghdpbnZlc3RvcnMuYWxiZW1hcmxlLmNv
bYISaW52ZXN0b3JzLmJsZHIuY29tghRpbnZlc3RvcnMuZmlzZXJ2LmNvbYISaW52
ZXN0b3JzLmd3Z2guY29tghVpbnZlc3RvcnMuZ3dnbGlmZS5jb22CEWludmVzdG9y
cy5odGMuY29tghZpbnZlc3RvcnMuaWRleGNvcnAuY29tghVpbnZlc3RvcnMubWVy
aXRvci5jb22CEWludmVzdG9ycy5ub3YuY29tghlpbnZlc3RvcnMub3NpLXN5c3Rl
bXMuY29tghVpbnZlc3RvcnMucXVhbnR1bS5jb22CE2ludmVzdG9ycy5zaW5jaC5j
b22CEmludmVzdG9ycy52cnR4LmNvbYIYaXIuYWVyb2pldHJvY2tldGR5bmUuY29t
ghFpci5hbmFwdHlzYmlvLmNvbYIVaXIuY2F0YWx5c3RwaGFybWEuY29tgg5pci5j
aGFydGVyLmNvbYIYaXIuY2x4Y29tbXVuaWNhdGlvbnMuY29tghNpci5jb25zb2xp
ZGF0ZWQuY29tghJpci5kcHdob2xkaW5ncy5jb22CF2lyLmV2ZW5lcmd5cGFydG5l
cnMuY29tgg1pci5odnN0b2cuY29tggtpci5pbmFwLmNvbYIKaXIua2tyLmNvbYIQ
aXIubWFubmF0ZWNoLmNvbYIUaXIubWljcm9zdHJhdGVneS5jb22CEGlyLm1vaGF3
a2luZC5jb22CD2lyLm5vdmVsaW9uLmNvbYIPaXIuc3BlY3RydW0uY29tghxpci5z
dGFubGV5YmxhY2thbmRkZWNrZXIuY29tghBpci50b3dlcmphenouY29tgg1pci52
ZXN0YXMuY29tgg5pcm5ld3MubW1jLmNvbYIZa2ltYmVybHljbGFyay5nY3Mtd2Vi
LmNvbYIPa2tyLmdjcy13ZWIuY29tghhrbWdjaGVtaWNhbHMuZ2NzLXdlYi5jb22C
GmxlYXBmcm9nLXNzbC04Lmdjcy13ZWIuY29tghFtYWN5cy5nY3Mtd2ViLmNvbYIV
bWFubmF0ZWNoLmdjcy13ZWIuY29tgg1tZWRpYS5ra3IuY29tghZtZXJpdG9yaW5j
Lmdjcy13ZWIuY29tghltaWNyb3N0cmF0ZWd5Lmdjcy13ZWIuY29tgg9tbWMuZ2Nz
LXdlYi5jb22CFW1vaGF3a2luZC5nY3Mtd2ViLmNvbYIVbXJjZ2xvYmFsLmdjcy13
ZWIuY29tghluYXRpb25hbG9pbHZhLmdjcy13ZWIuY29tghZuZXdzLWludmVzdG9y
cy5tbWMuY29tghNuZXdzcm9vbS5maXNlcnYuY29tgiBub3ZlbGlvbnRoZXJhcGV1
dGljcy5nY3Mtd2ViLmNvbYIWb3Npc3lzdGVtcy5nY3Mtd2ViLmNvbYITcXVhbnR1
bS5nY3Mtd2ViLmNvbYInc2hhcnBzY29tcGxpYW5jZWNvcnBvcmF0aW9uLmdjcy13
ZWIuY29tghNzaGVudGVsLmdjcy13ZWIuY29tgh5zdGFubGV5YmxhY2tkZWNrZXIu
Z2NzLXdlYi5jb22CFXRvd2VyamF6ei5nY3Mtd2ViLmNvbYIXdWZwaW52ZXN0b3Iu
Z2NzLXdlYi5jb22CHXZlc3Rhc3dpbmRzeXN0ZW1zLmdjcy13ZWIuY29tghB2cnR4
Lmdjcy13ZWIuY29tghN3d3cudWZwaW52ZXN0b3IuY29tghZ4bGdyb3VwbHRkLmdj
cy13ZWIuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgw
JgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAgYKKwYB
BAHWeQIEAgSB8wSB8ADuAHUA4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x
2/4AAAFrJHRVewAABAMARjBEAiBWY+jRFy6oBlt0nzj3bdkGqQCHD3Fbre46hNgz
06fWlgIgLeZr6CadVWI+k262cJd4CFNNqSaMqk3sJUMqmyEiO4sAdQApPFGWVMg5
ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWskdFVtAAAEAwBGMEQCIAwgKsIR
ggzxdQxTcetsAnGx5nk8ODkOKjrE+z0WOovzAiAstoVdkj+47UdeM9iLIoEu//Yp
S6tznTWmNi7WJdCyLTANBgkqhkiG9w0BAQsFAAOCAQEAP6bKrG02BBLHpVWp008i
JJFod0tZXUunSP4QdNcj1TaKF790TOsKrNHmYApb+ORDmKBFsY//crKXnVWm+8c/
7KAbgajUyhT3j8cQcTPnNdSjit+F7ge9BtQBWIae8GLFDpMnD1ofa3tY1cU1VBKQ
D2nukAqE6krwNTcvNEuwOtnzD+OpeKyNRKgpoGTm9NPjXceQOPBoRINn8zKRODip
JMM4YWWKjps1j42Je9XLb829M0f9OaddOs3QXSNARhTV0VdTsdTw7a9zPabC9G2f
reor5SESBrJvntdhlp/KDAsQOrjtNCsWdeU2+nLMX5ARxy+VXCgwQgqQx8vK7M4v
gA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvor8GmNr2p91kND1VeOS
asgFEQlNBWR3Kbqr7nlE6CTjqKS4NAen2+IWHakVAlsUDlEHmMflwhnfCKPTjIH7
XQ/YRYVbOl6tXTJ3m6hof5TjtFmDk6gXS2JjvYo0Z70Uv++DkivPfWesLNIgSKCb
Grrg6F/MoR6jQA9PtKaH8cSTn3WJkqYqJG+Bf0xFpUXKx2U8qHBBJkL5GGuZfBxu
8/NkIGhXT1Oy9qCOfvnkdRGwPrkj5i2C0x6TsuhmFrwjVNVBqygJUlIWiPCbM74v
CSbAdDEo0X9oE9d4R67ukIE1iWehejyPZnYI5uTxjL6FRqYn1htyZtPaV7E9g7Mq
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 399494193178382460948596566252195562519072
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-04 20:45:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-02 20:45:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-8.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24053813891782337455708396110042026180181945550955591878296670114167907160957668170020942510982454057295223559862037979894392380881133115314952027741707970395951958607022839205549788907050455909566914829159472018557813971235012891767222039593227441378099423574398836134308723691750726309348535785570278197092970135792029516730788302928259558408354108000112225331978935233944441593420272874073841901798614597519021760967130828937256763533855490147855023621721477451819378295479110613147061994998737114660218524808167033852229918276756724346395402231331129254129225882820689514082037854243326618358443998918858023053847
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cb8b81d079250b60300de12349eccbca5b0b6875
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2237 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerojetrocketdyne.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albemarle.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alliancedatasystems.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anaptysbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashlandglobalholdingsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildersfirstsourceinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalystpharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charter.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clxcommunications.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consolidated.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dollargeneral.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dpwholdings.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endocyte.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evenergypartnerslp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiserv.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gwgh.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heequipment.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hh.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hlundbeckas.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'htc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idexcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idt.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internapcorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.alliancedata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.ashland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.dollargeneral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.endocyte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.he-equipment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.hh.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.kimberly-clark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.kmgchemicals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.lundbeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.mrcglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.sharpsinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.shentel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.xlgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.albemarle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.bldr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.fiserv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.gwgh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.gwglife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.htc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.idexcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.meritor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.nov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.osi-systems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.quantum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sinch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.vrtx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.aerojetrocketdyne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.anaptysbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.catalystpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.charter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.clxcommunications.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.consolidated.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.dpwholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.evenergypartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.hvstog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.inap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.kkr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mannatech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.microstrategy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mohawkind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.novelion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.spectrum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.stanleyblackanddecker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.towerjazz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vestas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irnews.mmc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kimberlyclark.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kkr.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kmgchemicals.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-8.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macys.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mannatech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.kkr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meritorinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microstrategy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mohawkind.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrcglobal.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaloilva.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news-investors.mmc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.fiserv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noveliontherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osisystems.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quantum.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharpscompliancecorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shentel.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanleyblackdecker.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'towerjazz.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ufpinvestor.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vestaswindsystems.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vrtx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ufpinvestor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xlgroupltd.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b2474557b000004030046304402205663e8d1172ea8065b749f38f76dd906a900870f715badee3a84d833d3a7d69602202de66be8269d55623e936eb670977808534da9268caa4dec25432a9b21223b8b007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b2474556d000004030046304402200c202ac211820cf1750c5371eb6c0271b1e6793c38390e2a3ac4fb3d163a8bf302202cb6855d923fb8ed475e33d88b22812efff6294bab739d35a6362ed625d0b22d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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