leapfrog-ssl-8.gcs-web.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:12:0d:33:a5:1a:23:0b:39:be:17:67:30:68:32:16:ec:a7 was issued on by Let's Encrypt.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-8.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:12:0d:33:a5:1a:23:0b:39:be:17:67:30:68:32:16:ec:a7
Serial Number (int): 267479488519610983838874958822905283538087
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 54:f5:a0:e2:17:77:1e:cf:06:eb:82:2d:fc:74:4a:d9:b3:4e:81:84
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2c:c1:69:a0:a0:51:3f:b9:26:e1:fb:37:81:28:fa:05:07:3d:b7:fa
Fingerprint (sha256): 17:d1:9e:99:95:3a:49:4d:00:a1:84:89:04:b9:b3:13:04:1f:b5:cd:b5:4f:80:b7:a8:85:f3:bb:65:c3:25:83

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate leapfrog-ssl-8.gcs-web.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-8.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aerojetrocketdyne.gcs-web.com
albemarle.gcs-web.com
anaptysbio.gcs-web.com
ashlandglobalholdingsinc.gcs-web.com
buildersfirstsourceinc.gcs-web.com
catalystpharma.gcs-web.com
charter.gcs-web.com
clxcommunications.gcs-web.com
consolidated.gcs-web.com
dollargeneral.gcs-web.com
dpwholdings.gcs-web.com
endocyte.gcs-web.com
evenergypartnerslp.gcs-web.com
fiserv.gcs-web.com
gwgh.gcs-web.com
heequipment.gcs-web.com
hh.gcs-web.com
hlundbeckas.gcs-web.com
htc.gcs-web.com
idexcorp.gcs-web.com
idt.gcs-web.com
internapcorporation.gcs-web.com
investor.ashland.com
investor.dollargeneral.com
investor.endocyte.com
investor.he-equipment.com
investor.hh.ru
investor.kimberly-clark.com
investor.kmgchemicals.com
investor.lundbeck.com
investor.mrcglobal.com
investor.sharpsinc.com
investor.shentel.com
investor.xlgroup.com
investors.albemarle.com
investors.bldr.com
investors.fiserv.com
investors.gwgh.com
investors.gwglife.com
investors.htc.com
investors.idexcorp.com
investors.meritor.com
investors.nov.com
investors.osi-systems.com
investors.sinch.com
investors.vrtx.com
ir.aerojetrocketdyne.com
ir.anaptysbio.com
ir.catalystpharma.com
ir.charter.com
ir.clxcommunications.com
ir.consolidated.com
ir.dpwholdings.com
ir.evenergypartners.com
ir.hvstog.com
ir.inap.com
ir.kkr.com
ir.mannatech.com
ir.microstrategy.com
ir.mohawkind.com
ir.novelion.com
ir.spectrum.com
ir.stanleyblackanddecker.com
ir.towerjazz.com
ir.vestas.com
irnews.mmc.com
kimberlyclark.gcs-web.com
kkr.gcs-web.com
kmgchemicals.gcs-web.com
leapfrog-ssl-8.gcs-web.com
macys.gcs-web.com
mannatech.gcs-web.com
media.kkr.com
meritorinc.gcs-web.com
microstrategy.gcs-web.com
mmc.gcs-web.com
mohawkind.gcs-web.com
mrcglobal.gcs-web.com
nationaloilva.gcs-web.com
news-investors.mmc.com
newsroom.fiserv.com
noveliontherapeutics.gcs-web.com
osisystems.gcs-web.com
quantum.gcs-web.com
sharpscompliancecorporation.gcs-web.com
shentel.gcs-web.com
stanleyblackdecker.gcs-web.com
test-news-investors.mmc.com
towerjazz.gcs-web.com
tw-investors.htc.com
ufpinvestor.gcs-web.com
vestaswindsystems.gcs-web.com
vrtx.gcs-web.com
www.ufpinvestor.com
xlgroupltd.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-8.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAne0kazWOgtcDO+MMHhiS
6DBra7BeU08lDo8sLg2suRzGDwgbUGmoeau3c/d5Z2q05HKO9i3nzFIH5HZPMo/E
R563d4FBZF8J7yW+B/gDlzGHkCplJTiemIBtu4/meCyl/bgO9sR5m9az84d5mkx5
SW/ZCqbD6qp/gD2MPYwocUp/JF+1i0aBwi93FcXrwTQzZtUaYBFtzwqaVzePJavR
IwG3/OAVPFKnNAyf3wqDJclhDNHnP1qrvkHWTUzy6Ph1a46fACTwPcCr1QqYwmBX
3oAe0YGGdkyY97XzJgZTNpfrRzO3nbS+P7wvsNPff8rrxIJ9MR+3oiwl5myQxwQo
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267479488519610983838874958822905283538087
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-04 12:40:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-02 12:40:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-8.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19936353086896381292085327782932125668182329886731430542452376854204317638820595511831016871036892510103216627811781936062805433329396881179011814298154625574474373288007314054490446101596476303138419927403444024269380731627245517608761574458755198798026259651739233737116272711988138863421580846200742811201255936661851222041645531760076439781283935911895423885268921441749627386597227493805536146426552765112997893213934297609402518825518202753817243373917276366412395993095754014314816945747059626785314113451752682386085520682355594901829884921238541025996069757219875312595428959923766698114374101359077173241951
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							54f5a0e217771ecf06eb822dfc744ad9b34e8184
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2205 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerojetrocketdyne.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albemarle.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anaptysbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashlandglobalholdingsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildersfirstsourceinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalystpharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charter.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clxcommunications.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consolidated.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dollargeneral.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dpwholdings.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endocyte.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evenergypartnerslp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiserv.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gwgh.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heequipment.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hh.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hlundbeckas.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'htc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idexcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idt.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internapcorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.ashland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.dollargeneral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.endocyte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.he-equipment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.hh.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.kimberly-clark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.kmgchemicals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.lundbeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.mrcglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.sharpsinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.shentel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.xlgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.albemarle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.bldr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.fiserv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.gwgh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.gwglife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.htc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.idexcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.meritor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.nov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.osi-systems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sinch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.vrtx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.aerojetrocketdyne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.anaptysbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.catalystpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.charter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.clxcommunications.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.consolidated.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.dpwholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.evenergypartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.hvstog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.inap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.kkr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mannatech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.microstrategy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mohawkind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.novelion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.spectrum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.stanleyblackanddecker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.towerjazz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vestas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irnews.mmc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kimberlyclark.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kkr.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kmgchemicals.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-8.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macys.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mannatech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.kkr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meritorinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microstrategy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mohawkind.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrcglobal.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaloilva.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news-investors.mmc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.fiserv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noveliontherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osisystems.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quantum.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharpscompliancecorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shentel.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanleyblackdecker.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-news-investors.mmc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'towerjazz.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw-investors.htc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ufpinvestor.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vestaswindsystems.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vrtx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ufpinvestor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xlgroupltd.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e36a4cf64000004030046304402206026e1a48147c978380a6dbf9f7ea3f96c0df7a4ce624205cd18fce831fe663002205c48441f34edef0427ac9365f5644a0f13b4518dfb51f8fed3923c529123c48600760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e36a4cf950000040300473045022100fa0523436fee858c6b701dd6d8062c57edf0faabdc5712f74aa7f69993427a0702203bd4e538fa60c8bec4be6726bc588651cb99dcb90082b84ebddf99211adfcd9b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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