leapfrog-ssl-20.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 03:d7:54:7f:a8:78:40:8e:30:aa:20:48:21:bf:01:3f:bc:92 was issued on by Let's Encrypt.

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=leapfrog-ssl-20.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d7:54:7f:a8:78:40:8e:30:aa:20:48:21:bf:01:3f:bc:92
Serial Number (int): 334609884673601648294029149184215570431122
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ad:c7:b9:ee:1e:32:84:bd:e8:b0:aa:4b:20:4e:6d:0d:e6:78:07:e7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 09:65:30:68:c2:0e:96:b7:6d:ea:a5:d6:8a:6e:d2:ec:49:78:6f:97
Fingerprint (sha256): 18:da:3a:e8:22:9e:c8:68:43:99:04:54:0a:de:f3:c2:e5:86:0a:da:0c:5b:d3:6a:8c:86:d2:5c:99:98:75:02

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-20.gcs-web.com

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-20.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adtcorp.gcs-web.com
agncgcswebcom.gcs-web.com
altimmune.gcs-web.com
ametekinc.gcs-web.com
atreca.gcs-web.com
bakerhughesrigcount.gcs-web.com
biogen.gcs-web.com
cambiumnetworks.gcs-web.com
cargotx.gcs-web.com
collegiumpharma.gcs-web.com
cray.gcs-web.com
crossfirstbankshares.gcs-web.com
diamondbackenergy.gcs-web.com
dsv.gcs-web.com
durect.gcs-web.com
flexshopper.gcs-web.com
globalstar.gcs-web.com
groceryoutletinc.gcs-web.com
healthcatalystinc.gcs-web.com
ingredion.gcs-web.com
interxion.gcs-web.com
intracellulartherapies.gcs-web.com
investor-cn.sandschina.com
investor-hk.sandschina.com
investor.dsv.com
investor.morphictx.com
investor.ni.com
investor.rentacenter.com
investor.sandschina.com
investor.stoketherapeutics.com
investor.therealreal.com
investor.tjx.com
investors.agnc.com
investors.ametek.com
investors.biogen.com
investors.cambiumnetworks.com
investors.cargo-tx.com
investors.crossfirstbankshares.com
investors.flexshopper.com
investors.globalstar.com
investors.groceryoutlet.com
investors.interxion.com
investors.leonardodrs.com
investors.nrg.com
investors.rapt.com
investors.usacompression.com
investors.usacpartners.com
ioncorp.gcs-web.com
ir.agnc.com
ir.altimmune.com
ir.atreca.com
ir.collegiumpharma.com
ir.diamondbackenergy.com
ir.healthcatalyst.com
ir.ingredionincorporated.com
ir.intracellulartherapies.com
ir.ncsmultistage.com
ir.pliantrx.com
ir.steelconnectinc.com
ir.trivago.com
ir.viperenergy.com
irhythmtech.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leonardodrs.gcs-web.com
morphictx.gcs-web.com
ncsmultistageholdings.gcs-web.com
ni.gcs-web.com
nrgenergyinc.gcs-web.com
plianttherapeutics.gcs-web.com
rapt.gcs-web.com
rentacenter.gcs-web.com
rigcount.bakerhughes.com
rigcount.bhge.com
sandschinaltd.gcs-web.com
steelconnect.gcs-web.com
stoketherapeutics.gcs-web.com
therealreal.gcs-web.com
thetjxcompaniesinc.gcs-web.com
thetorocompany.gcs-web.com
trivago.gcs-web.com
usacompressionpartnerslp.gcs-web.com
viperenergy.gcs-web.com
whitehorsefinance.gcs-web.com
www.diamondbackenergy.com
www.thetorocompany.com
www.viperenergy.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-20.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEanCXLesU7NZlGlcr/h
NR4s0WRnn5bOIAldZTwelCcG9yRS97Iyr6C8+aYj/pe5XONKo/F5yqb2GeCSsSfL
m8jpCQMHhgX4uDGs5iYSgxoXubw2r5Zzb4dgdIA44RBw+K1YIgCp5k6b5DmT2a6g
4k3OpqoURxQWDtPFOy8/JFtnfoF9xXxSbH8tBG/1nv+CpI+dGwAnOXHtAPq1rPk0
4/94k3lLyq1YFYQ6RThHQfAqvKH7FMXYPv0xUMwq90HUKo5/bmJUykzeh8aaNdYP
jujSOAcG0uifYjyycBXvDIz8lljRgMHrPyVjGkqutCNSFoASUL1dNOAkrfg9LUpq
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334609884673601648294029149184215570431122
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-17 15:16:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-15 15:16:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-20.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19223062395143246937323427756474082071847929228991999083609450160231941291529335802707669244353483887317038162723346370430478362627594134800409675633671924985856300896723942346551846864228323111750858666589997117471881974844436240515642538539184017628265616142151769394188329132254825161847093003527584078248780670439394142631644775718751342307198927789292546264925331242742454604206459853277469772541053372161443172921896081854464962944887997926893904200697243804109182637355295593827461068771890059901927552587748952172164339827004236500335150003621018407987639537522701669572583821709841177567465730121910318688843
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							adc7b9ee1e3284bde8b0aa4b204e6d0de67807e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adtcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agncgcswebcom.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altimmune.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ametekinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atreca.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakerhughesrigcount.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biogen.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambiumnetworks.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cargotx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegiumpharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cray.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crossfirstbankshares.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondbackenergy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsv.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'durect.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flexshopper.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalstar.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groceryoutletinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthcatalystinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ingredion.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interxion.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intracellulartherapies.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor-cn.sandschina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor-hk.sandschina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.dsv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.morphictx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.ni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.rentacenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.sandschina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.stoketherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.therealreal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.tjx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.agnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ametek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.biogen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cambiumnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cargo-tx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.crossfirstbankshares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.flexshopper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.globalstar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.groceryoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.interxion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.leonardodrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.nrg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.rapt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.usacompression.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.usacpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ioncorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.agnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.altimmune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.atreca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.collegiumpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.diamondbackenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.healthcatalyst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ingredionincorporated.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.intracellulartherapies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ncsmultistage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.pliantrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.steelconnectinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.trivago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.viperenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irhythmtech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-20.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leonardodrs.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morphictx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncsmultistageholdings.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ni.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrgenergyinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plianttherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapt.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rentacenter.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rigcount.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rigcount.bhge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandschinaltd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steelconnect.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stoketherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'therealreal.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetjxcompaniesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetorocompany.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trivago.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usacompressionpartnerslp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viperenergy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitehorsefinance.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondbackenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thetorocompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viperenergy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b3e6c5f1c000004030046304402207534231f16677463061189ac81126a4982f1b50baa08449aa08e8fb4fcf5573d02205957c36f8a8068945d9e62e4a8a76b753a38115350f83c5045c51ee6e59c4c6d007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b3e6c5f31000004030047304502207b33b589436a570a018f6afb0c1d30b1fb7ae519835040939109e7fb6b42e341022100c19cd7f787a6030f7feab57dbc62a261f7b1e9900a7ae99487adc77e95b677ff
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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