leapfrog-ssl-19.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 03:a7:ea:82:40:25:21:72:28:b4:6e:9e:04:a2:e4:2c:ea:76 was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-19.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a7:ea:82:40:25:21:72:28:b4:6e:9e:04:a2:e4:2c:ea:76
Serial Number (int): 318475728721698750841931729905452399258230
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0f:bb:5a:2e:b7:6d:62:e0:09:b2:2a:76:82:ef:c5:65:93:53:76:e8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 07:a0:59:0c:e5:b5:60:82:5a:ee:19:90:21:5d:dc:13:da:7f:17:f9
Fingerprint (sha256): 19:66:35:39:09:9d:b6:4b:db:1b:f2:ad:44:78:4f:06:83:c1:c3:93:23:4b:13:c5:76:98:5b:25:32:4b:74:5e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-19.gcs-web.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-19.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adaptivebiotech.gcs-web.com
aerovironmentinc.gcs-web.com
amdocslimited.gcs-web.com
arris.gcs-web.com
benefytt.gcs-web.com
bmc.gcs-web.com
broadcom.gcs-web.com
castlebiosciences.gcs-web.com
charlesandcolvardltd.gcs-web.com
chemocentryx.gcs-web.com
chesapeakelodgingtrust.gcs-web.com
columbusas.gcs-web.com
corporateresponsibility.arris.com
corporateresponsibility.arrisi.com
emclairefinancial.gcs-web.com
enersysinc.gcs-web.com
envestnetinc.gcs-web.com
everspin.gcs-web.com
extraspace.gcs-web.com
globalbloodtx.gcs-web.com
gmac.gcs-web.com
healthinsuranceinnovations.gcs-web.com
hpres.gcs-web.com
ihsmarkit.gcs-web.com
immunovantinc.gcs-web.com
investor.avinc.com
investor.benefytt.com
investor.enersys.com
investor.everspin.com
investor.hiiquote.com
investor.hpres.com
investor.irobot.com
investor.luminexcorp.com
investor.meridianbioscience.com
investor.republicservices.com
investor.rljlodgingtrust.com
investor.uniti.com
investor.winnebagoind.com
investor.worldpay.com
investors.adaptivebiotech.com
investors.amdocs.com
investors.broadcom.com
investors.immunovant.com
investors.karunatx.com
investors.lincolneducationalservices.com
investors.myovant.com
investors.neostx.com
investors.o-i.com
investors.ollies.us
investors.vantiv.com
ir-zh.melco-resorts.com
ir.arris.com
ir.bookingholdings.com
ir.castlebiosciences.com
ir.charlesandcolvard.com
ir.chemocentryx.com
ir.columbusglobal.com
ir.envestnet.com
ir.extraspace.com
ir.gbt.com
ir.kindredbio.com
ir.melco-resorts.com
ir.prevailtherapeutics.com
ir.trimascorp.com
irobotcorporation.gcs-web.com
karunatx.gcs-web.com
kindredbiosciences.gcs-web.com
leapfrog-ssl-19.gcs-web.com
lincolneducationalservices.gcs-web.com
luminexcorp.gcs-web.com
melco.gcs-web.com
meridianbioscience.gcs-web.com
myovant.gcs-web.com
neostx.gcs-web.com
newsroom.bmc.com
nordicshipholding.gcs-web.com
oi.gcs-web.com
olliesbargainoutlet.gcs-web.com
prevailtherapeutics.gcs-web.com
pricelinegroup.gcs-web.com
rattlermidstreampartnerslp.gcs-web.com
republicservicesinc.gcs-web.com
rljlodgingtrust.gcs-web.com
trimascorp.gcs-web.com
unitigroupinc.gcs-web.com
winnebago.gcs-web.com
worldpay.gcs-web.com
www.chesapeakelodgingtrust.com
www.chesapeakereit.com
www.emclairefinancial.com
www.investors.worldpay.com
www.nordicshipholding.com
www.nordicshipholding.dk
www.rattlermidstream.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-19.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOhjCCDW6gAwIBAgISA6fqgkAlIXIotG6eBKLkLOp2MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTAxMjgxNjI0NDBaFw0yMTA0MjgxNjI0NDBaMCYxJDAiBgNVBAMT
G2xlYXBmcm9nLXNzbC0xOS5nY3Mtd2ViLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALBcwKgCvcH9Vp9nQLdwsku3NjFy0L4SfOli+UyqLRtcheEM
2NFfo+FemvsDk2z71iZoqJWKo2yDLJJJjRrphzcRFTJBfCctIoyud625t7b1AHo0
XibbCZ9xdJXFJ1Hcp7nuSMuRbK29+zfsxcwLzPiB89nZZiRxHWHuv6T1vYXLaKtg
GswJkFV5gJH3/FAKUwl/bNnRMWTGUS9MrMVzbelheZZdELRH3gVVRS/V24xjXQU3
Yq2z3mztf+a2qKDXOJ24SCvKB5r9AjDT8QeeuEyf1F2YsA8PWDDg9y6ikCCB76uY
1/ZB2vx9hVnzcFca/wmGIhOYrUNlR3qxNJwsIPUCAwEAAaOCC6AwggucMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T
AQH/BAIwADAdBgNVHQ4EFgQUD7taLrdtYuAJsip2gu/FZZNTdugwHwYDVR0jBBgw
FoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUF
BzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9y
My5pLmxlbmNyLm9yZy8wggluBgNVHREEggllMIIJYYIbYWRhcHRpdmViaW90ZWNo
Lmdjcy13ZWIuY29tghxhZXJvdmlyb25tZW50aW5jLmdjcy13ZWIuY29tghlhbWRv
Y3NsaW1pdGVkLmdjcy13ZWIuY29tghFhcnJpcy5nY3Mtd2ViLmNvbYIUYmVuZWZ5
dHQuZ2NzLXdlYi5jb22CD2JtYy5nY3Mtd2ViLmNvbYIUYnJvYWRjb20uZ2NzLXdl
Yi5jb22CHWNhc3RsZWJpb3NjaWVuY2VzLmdjcy13ZWIuY29tgiBjaGFybGVzYW5k
Y29sdmFyZGx0ZC5nY3Mtd2ViLmNvbYIYY2hlbW9jZW50cnl4Lmdjcy13ZWIuY29t
giJjaGVzYXBlYWtlbG9kZ2luZ3RydXN0Lmdjcy13ZWIuY29tghZjb2x1bWJ1c2Fz
Lmdjcy13ZWIuY29tgiFjb3Jwb3JhdGVyZXNwb25zaWJpbGl0eS5hcnJpcy5jb22C
ImNvcnBvcmF0ZXJlc3BvbnNpYmlsaXR5LmFycmlzaS5jb22CHWVtY2xhaXJlZmlu
YW5jaWFsLmdjcy13ZWIuY29tghZlbmVyc3lzaW5jLmdjcy13ZWIuY29tghhlbnZl
c3RuZXRpbmMuZ2NzLXdlYi5jb22CFGV2ZXJzcGluLmdjcy13ZWIuY29tghZleHRy
YXNwYWNlLmdjcy13ZWIuY29tghlnbG9iYWxibG9vZHR4Lmdjcy13ZWIuY29tghBn
bWFjLmdjcy13ZWIuY29tgiZoZWFsdGhpbnN1cmFuY2Vpbm5vdmF0aW9ucy5nY3Mt
d2ViLmNvbYIRaHByZXMuZ2NzLXdlYi5jb22CFWloc21hcmtpdC5nY3Mtd2ViLmNv
bYIZaW1tdW5vdmFudGluYy5nY3Mtd2ViLmNvbYISaW52ZXN0b3IuYXZpbmMuY29t
ghVpbnZlc3Rvci5iZW5lZnl0dC5jb22CFGludmVzdG9yLmVuZXJzeXMuY29tghVp
bnZlc3Rvci5ldmVyc3Bpbi5jb22CFWludmVzdG9yLmhpaXF1b3RlLmNvbYISaW52
ZXN0b3IuaHByZXMuY29tghNpbnZlc3Rvci5pcm9ib3QuY29tghhpbnZlc3Rvci5s
dW1pbmV4Y29ycC5jb22CH2ludmVzdG9yLm1lcmlkaWFuYmlvc2NpZW5jZS5jb22C
HWludmVzdG9yLnJlcHVibGljc2VydmljZXMuY29tghxpbnZlc3Rvci5ybGpsb2Rn
aW5ndHJ1c3QuY29tghJpbnZlc3Rvci51bml0aS5jb22CGWludmVzdG9yLndpbm5l
YmFnb2luZC5jb22CFWludmVzdG9yLndvcmxkcGF5LmNvbYIdaW52ZXN0b3JzLmFk
YXB0aXZlYmlvdGVjaC5jb22CFGludmVzdG9ycy5hbWRvY3MuY29tghZpbnZlc3Rv
cnMuYnJvYWRjb20uY29tghhpbnZlc3RvcnMuaW1tdW5vdmFudC5jb22CFmludmVz
dG9ycy5rYXJ1bmF0eC5jb22CKGludmVzdG9ycy5saW5jb2xuZWR1Y2F0aW9uYWxz
ZXJ2aWNlcy5jb22CFWludmVzdG9ycy5teW92YW50LmNvbYIUaW52ZXN0b3JzLm5l
b3N0eC5jb22CEWludmVzdG9ycy5vLWkuY29tghNpbnZlc3RvcnMub2xsaWVzLnVz
ghRpbnZlc3RvcnMudmFudGl2LmNvbYIXaXItemgubWVsY28tcmVzb3J0cy5jb22C
DGlyLmFycmlzLmNvbYIWaXIuYm9va2luZ2hvbGRpbmdzLmNvbYIYaXIuY2FzdGxl
Ymlvc2NpZW5jZXMuY29tghhpci5jaGFybGVzYW5kY29sdmFyZC5jb22CE2lyLmNo
ZW1vY2VudHJ5eC5jb22CFWlyLmNvbHVtYnVzZ2xvYmFsLmNvbYIQaXIuZW52ZXN0
bmV0LmNvbYIRaXIuZXh0cmFzcGFjZS5jb22CCmlyLmdidC5jb22CEWlyLmtpbmRy
ZWRiaW8uY29tghRpci5tZWxjby1yZXNvcnRzLmNvbYIaaXIucHJldmFpbHRoZXJh
cGV1dGljcy5jb22CEWlyLnRyaW1hc2NvcnAuY29tgh1pcm9ib3Rjb3Jwb3JhdGlv
bi5nY3Mtd2ViLmNvbYIUa2FydW5hdHguZ2NzLXdlYi5jb22CHmtpbmRyZWRiaW9z
Y2llbmNlcy5nY3Mtd2ViLmNvbYIbbGVhcGZyb2ctc3NsLTE5Lmdjcy13ZWIuY29t
giZsaW5jb2xuZWR1Y2F0aW9uYWxzZXJ2aWNlcy5nY3Mtd2ViLmNvbYIXbHVtaW5l
eGNvcnAuZ2NzLXdlYi5jb22CEW1lbGNvLmdjcy13ZWIuY29tgh5tZXJpZGlhbmJp
b3NjaWVuY2UuZ2NzLXdlYi5jb22CE215b3ZhbnQuZ2NzLXdlYi5jb22CEm5lb3N0
eC5nY3Mtd2ViLmNvbYIQbmV3c3Jvb20uYm1jLmNvbYIdbm9yZGljc2hpcGhvbGRp
bmcuZ2NzLXdlYi5jb22CDm9pLmdjcy13ZWIuY29tgh9vbGxpZXNiYXJnYWlub3V0
bGV0Lmdjcy13ZWIuY29tgh9wcmV2YWlsdGhlcmFwZXV0aWNzLmdjcy13ZWIuY29t
ghpwcmljZWxpbmVncm91cC5nY3Mtd2ViLmNvbYImcmF0dGxlcm1pZHN0cmVhbXBh
cnRuZXJzbHAuZ2NzLXdlYi5jb22CH3JlcHVibGljc2VydmljZXNpbmMuZ2NzLXdl
Yi5jb22CG3JsamxvZGdpbmd0cnVzdC5nY3Mtd2ViLmNvbYIWdHJpbWFzY29ycC5n
Y3Mtd2ViLmNvbYIZdW5pdGlncm91cGluYy5nY3Mtd2ViLmNvbYIVd2lubmViYWdv
Lmdjcy13ZWIuY29tghR3b3JsZHBheS5nY3Mtd2ViLmNvbYIed3d3LmNoZXNhcGVh
a2Vsb2RnaW5ndHJ1c3QuY29tghZ3d3cuY2hlc2FwZWFrZXJlaXQuY29tghl3d3cu
ZW1jbGFpcmVmaW5hbmNpYWwuY29tghp3d3cuaW52ZXN0b3JzLndvcmxkcGF5LmNv
bYIZd3d3Lm5vcmRpY3NoaXBob2xkaW5nLmNvbYIYd3d3Lm5vcmRpY3NoaXBob2xk
aW5nLmRrghh3d3cucmF0dGxlcm1pZHN0cmVhbS5jb20wTAYDVR0gBEUwQzAIBgZn
gQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5s
ZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdQBvU3asMfAx
GdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAXdKBpHlAAAEAwBGMEQCICxOqAdN
ZWT59BvFP/iVVfJgB6OKyyjCMMP8SUhal3yOAiBaLcKFzrijqol0ZAs5I1vRMhvI
v+uA7DBgcRM2N0/G5gB3APZclC/RdzAiFFQYCDCUVo7jTRMZM7/fDC8gC8xO8WTj
AAABd0oGkZgAAAQDAEgwRgIhAKEnVY4pjEnLLYHSepJTM3KM0YggoX8sKuwBMoYF
P7xbAiEA565+5QnzTnd+zcICi7xVt/Gz/WQQOevAfuNhxxenSgcwDQYJKoZIhvcN
AQELBQADggEBAAsg27QpFpMeJUpwDm/L0oXN9FeKchj3yu4Ew/TLo8TlCJkCJQ2u
sDEVRnL6BtEA0jxQj/e87JcGQr473xjmhhxkFm6Z81wiHd4owGiYWlzHE5mQbom4
NaZo4T1a6sQsSZABFqlkVZqFDySjFrq+aAcaArzz20N/VmUj9vmUXIkRNLN7aFlh
EVpXL4SR0i9ix8Bo1JW9mZ5R2o6fKuth0A4cJJRBeMyvhrhx3nIkCxoxZXMF4vkM
8GP6i3YChJj/tvkuybaUMVezgWDygQVcKWK/vm8+KzjqVSTrinN3iasdjcsb9BnA
r29HHmrygUp3a4aRxSgw8od0WS8bSvXRhpo=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFzAqAK9wf1Wn2dAt3Cy
S7c2MXLQvhJ86WL5TKotG1yF4QzY0V+j4V6a+wOTbPvWJmiolYqjbIMskkmNGumH
NxEVMkF8Jy0ijK53rbm3tvUAejReJtsJn3F0lcUnUdynue5Iy5Fsrb37N+zFzAvM
+IHz2dlmJHEdYe6/pPW9hctoq2AazAmQVXmAkff8UApTCX9s2dExZMZRL0ysxXNt
6WF5ll0QtEfeBVVFL9XbjGNdBTdirbPebO1/5raooNc4nbhIK8oHmv0CMNPxB564
TJ/UXZiwDw9YMOD3LqKQIIHvq5jX9kHa/H2FWfNwVxr/CYYiE5itQ2VHerE0nCwg
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318475728721698750841931729905452399258230
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-28 16:24:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-28 16:24:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-19.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22263679667835552574635709031254624361217945414739237752245071313372052035180645373959810376157044213592838066666197762940434383406654789557357330247728796524547287400876316244157863998343404006337745963029617473847407991078793971932090320221658484409417607135997764479085149776232308164683582183522985243554816093192883988894927315744691368551614635629633004184295248704262632695433667820339307920244953690736549362156527684225890584668101464402016208198549593541128567088573680897359171539706921844922501317187312883035379926745728098144571287704809889595905357524052553631350530095477894705034399208968237894869237
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0fbb5a2eb76d62e009b22a7682efc565935376e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2405 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adaptivebiotech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerovironmentinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amdocslimited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arris.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefytt.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broadcom.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castlebiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charlesandcolvardltd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chemocentryx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chesapeakelodgingtrust.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbusas.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporateresponsibility.arris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporateresponsibility.arrisi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emclairefinancial.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enersysinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envestnetinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everspin.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extraspace.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalbloodtx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmac.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthinsuranceinnovations.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpres.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihsmarkit.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immunovantinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.avinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.benefytt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.enersys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.everspin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.hiiquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.hpres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.irobot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.luminexcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.meridianbioscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.republicservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.rljlodgingtrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.uniti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.winnebagoind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.worldpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.adaptivebiotech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.amdocs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.broadcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.immunovant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.karunatx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.lincolneducationalservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.myovant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.neostx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.o-i.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ollies.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.vantiv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir-zh.melco-resorts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.arris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.bookingholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.castlebiosciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.charlesandcolvard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.chemocentryx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.columbusglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.envestnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.extraspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gbt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.kindredbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.melco-resorts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.prevailtherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.trimascorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irobotcorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karunatx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kindredbiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-19.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lincolneducationalservices.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luminexcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melco.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meridianbioscience.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myovant.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neostx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.bmc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nordicshipholding.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oi.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olliesbargainoutlet.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prevailtherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pricelinegroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rattlermidstreampartnerslp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'republicservicesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rljlodgingtrust.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trimascorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitigroupinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winnebago.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldpay.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chesapeakelodgingtrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chesapeakereit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emclairefinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investors.worldpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nordicshipholding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nordicshipholding.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rattlermidstream.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001774a0691e5000004030046304402202c4ea8074d6564f9f41bc53ff89555f26007a38acb28c230c3fc49485a977c8e02205a2dc285ceb8a3aa8974640b39235bd1321bc8bfeb80ec3060711336374fc6e6007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e3000001774a0691980000040300483046022100a127558e298c49cb2d81d27a925333728cd18820a17f2c2aec013286053fbc5b022100e7ae7ee509f34e777ecdc2028bbc55b7f1b3fd641039ebc07ee361c717a74a07
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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