leapfrog-ssl-28.gcs-web.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:b2:77:d8:41:94:ea:4a:2d:55:94:fc:37:20:f8:2b:bc:a9 was issued on by Let's Encrypt.

With 72 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-28.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b2:77:d8:41:94:ea:4a:2d:55:94:fc:37:20:f8:2b:bc:a9
Serial Number (int): 409178706036742783050983340001048061000873
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 1e:05:ff:a1:f9:7b:d7:06:27:32:08:b1:1c:ca:31:7e:bf:61:8a:8a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a7:09:94:c2:10:68:bf:e4:cb:df:81:fa:3e:d4:96:b8:fc:92:b3:44
Fingerprint (sha256): 13:52:32:bf:4c:c7:a1:bd:56:28:c8:eb:fc:3f:f8:f2:76:80:12:e3:f0:51:68:08:04:02:76:03:9a:5b:39:59

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate leapfrog-ssl-28.gcs-web.com

72

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-28.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

9finc.gcs-web.com
advancedenergyindustries.gcs-web.com
ardelyx.gcs-web.com
arrowheadpharma.gcs-web.com
bdsi.gcs-web.com
biminicapitalmanagementinc.gcs-web.com
biocept.gcs-web.com
brbiotech.gcs-web.com
colfaxcorp.gcs-web.com
dvcr.gcs-web.com
dynavaxtechnologiescorporation.gcs-web.com
formatherapeutics.gcs-web.com
globalcordbloodcorporation.gcs-web.com
histogen.gcs-web.com
inarimedical.gcs-web.com
inv.issworld.com
investor.dvcr.com
investor.jmpg.com
investor.lululemon.com
investor.northropgrumman.com
investor.royalunibrew.com
investor.rubiconproject.com
investor.telaria.com
investors.dynavax.com
investors.histogen.com
investors.mattel.com
investors.openlending.com
investors.rayonieram.com
investors.sorrentotherapeutics.com
investors.thetradedesk.com
ir.9fgroup.com
ir.advanced-energy.com
ir.ardelyx.com
ir.arrowheadpharma.com
ir.bdsi.com
ir.biminicapital.com
ir.biocept.com
ir.brbiotech.com
ir.colfaxcorp.com
ir.formatherapeutics.com
ir.globalcordbloodcorp.com
ir.inarimedical.com
ir.lianbeng.com.sg
ir.martinmidstream.com
ir.osseninnovation.com
ir.protaratx.com
ir.proteostasis.com
ir.unitybiotechnology.com
issworldservicesas.gcs-web.com
jmpg.gcs-web.com
leapfrog-ssl-28.gcs-web.com
lianbeng.gcs-web.com
lululemonathleticainc.gcs-web.com
martinmidstream.gcs-web.com
mattel.gcs-web.com
maxeon.gcs-web.com
northropgrumman.gcs-web.com
ocwen.gcs-web.com
openlending.gcs-web.com
osseninnovation.gcs-web.com
protaratx.gcs-web.com
proteostasistherapeuticsinc.gcs-web.com
rayonieram.gcs-web.com
royalunibrew.gcs-web.com
rubiconproject.gcs-web.com
shareholders.ocwen.com
sofragi.gcs-web.com
sorrentotherapeutics.gcs-web.com
thetradedesk.gcs-web.com
unitybiotechnology.gcs-web.com
www.maxeon.com
www.sofragi.fr

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-52.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-28.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiWd6IwplT0zKXkhyykR
8DYEeiTzvZqHMYsx10LFNeCB1getAqTK/CRjfwVv/5jNsEZ2ULR984qMKwEDf36B
VJmfLLaAF8aSsnQWpx+Iq8+toT1K06vtLOLIVO9ybExrMy1wzHrzYQmEofAs+bWG
W0H+JbDD10qVcqV297u5WVF9jTMyLda1Fg8ioIpkyLVnOaLV36ag7zKdJqWne+F1
v1sMdfh2Ryqe2sieQwgDg2kTuV6GgMchT4/kUaZ55cJW6G6b4fhmWxNbvwdny9fL
pqgoE9wc0IBlqpu6sKdcWbXNb9yhL5y8q7r4cjuh/OxUlnp0UTBah/WNomeCINKy
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 409178706036742783050983340001048061000873
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-09 11:58:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-07 11:58:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-28.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23498874273735259665004132794919502853355013434109434777820159833526327161115496074582090747029203878177064174900366446791321015619507704430791952449489146295399166190873905837528463970932765693507390779829516423609936158737835713178078494086008715606464992816375719013361518706883766935708020498685682029936723451168974400503654715003087017673940148000940952963427429270653363840866525360854550448336172778084240611840591063277243616911308523782330361127185987222715014521807875357782062465539732941579210985102136058253356842859356213294702551314989416645127410059538250790623384861256932571373233421909604049269319
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1e05ffa1f97bd706273208b11cca317ebf618a8a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1787 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9finc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advancedenergyindustries.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ardelyx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arrowheadpharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdsi.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biminicapitalmanagementinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biocept.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brbiotech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colfaxcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvcr.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynavaxtechnologiescorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formatherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalcordbloodcorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'histogen.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inarimedical.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inv.issworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.dvcr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.jmpg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.northropgrumman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.royalunibrew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.rubiconproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.telaria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.dynavax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.histogen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.mattel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.openlending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.rayonieram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sorrentotherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.thetradedesk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.9fgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.advanced-energy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ardelyx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.arrowheadpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.bdsi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.biminicapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.biocept.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.brbiotech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.colfaxcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.formatherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.globalcordbloodcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.inarimedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.lianbeng.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.martinmidstream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.osseninnovation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.protaratx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.proteostasis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.unitybiotechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'issworldservicesas.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jmpg.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-28.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lianbeng.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lululemonathleticainc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martinmidstream.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mattel.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxeon.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northropgrumman.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocwen.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openlending.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osseninnovation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protaratx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proteostasistherapeuticsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rayonieram.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalunibrew.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rubiconproject.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shareholders.ocwen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sofragi.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sorrentotherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetradedesk.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitybiotechnology.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maxeon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sofragi.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000017333a7e7b20000040300463044022016d4968608b5bf7df9119950f04a79469594533393c8b88d71b6dae3fee96400022001941ccb2d962d1487db74f721b6a1df54d72ee28d1f319da70639cb5bb04d8600770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017333a7e7e30000040300483046022100ceeadd21aaba5f515189b8659faf102bfd81ee776f3e47fa638dfc6c9e8deb7a022100d71c6e5416a1ea0593345e35c0192b69866dbd4669a07591ab08b1994c745ede
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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