leapfrog-ssl-19.gcs-web.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:85:f9:1a:c4:88:d5:d4:da:32:e2:7d:18:6c:bf:92:00:5d was issued on by Let's Encrypt.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-19.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:85:f9:1a:c4:88:d5:d4:da:32:e2:7d:18:6c:bf:92:00:5d
Serial Number (int): 394037815284388058232443419053624975818845
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 16:27:c8:64:f8:5d:07:6d:e4:35:4b:4b:60:10:b2:b5:4f:30:f0:92
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 96:06:bb:d8:59:c6:62:92:55:3e:68:70:9c:36:4d:b6:41:b6:56:6c
Fingerprint (sha256): 19:d6:30:2e:52:16:d5:33:85:ac:65:cf:52:47:b9:4a:7e:04:08:60:00:d3:55:11:e7:e6:3d:21:34:b4:c9:be

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate leapfrog-ssl-19.gcs-web.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-19.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adaptivebiotech.gcs-web.com
aerovironmentinc.gcs-web.com
amdocslimited.gcs-web.com
arris.gcs-web.com
benefytt.gcs-web.com
bmc.gcs-web.com
broadcom.gcs-web.com
castlebiosciences.gcs-web.com
charlesandcolvardltd.gcs-web.com
chemocentryx.gcs-web.com
chesapeakelodgingtrust.gcs-web.com
columbusas.gcs-web.com
corporateresponsibility.arris.com
corporateresponsibility.arrisi.com
emclairefinancial.gcs-web.com
enersysinc.gcs-web.com
envestnetinc.gcs-web.com
everspin.gcs-web.com
extraspace.gcs-web.com
globalbloodtx.gcs-web.com
gmac.gcs-web.com
healthinsuranceinnovations.gcs-web.com
hpres.gcs-web.com
ihsmarkit.gcs-web.com
immunovantinc.gcs-web.com
investor.avinc.com
investor.benefytt.com
investor.enersys.com
investor.envestnet.com
investor.everspin.com
investor.hiiquote.com
investor.hpres.com
investor.ihsmarkit.com
investor.irobot.com
investor.luminexcorp.com
investor.meridianbioscience.com
investor.republicservices.com
investor.rljlodgingtrust.com
investor.uniti.com
investor.winnebagoind.com
investor.worldpay.com
investors.adaptivebiotech.com
investors.amdocs.com
investors.broadcom.com
investors.immunovant.com
investors.karunatx.com
investors.lincolneducationalservices.com
investors.myovant.com
investors.neostx.com
investors.o-i.com
investors.ollies.us
investors.vantiv.com
ir-zh.melco-resorts.com
ir.arris.com
ir.bookingholdings.com
ir.castlebiosciences.com
ir.charlesandcolvard.com
ir.chemocentryx.com
ir.columbusglobal.com
ir.envestnet.com
ir.extraspace.com
ir.gbt.com
ir.kindredbio.com
ir.melco-resorts.com
ir.prevailtherapeutics.com
ir.trimascorp.com
irobotcorporation.gcs-web.com
karunatx.gcs-web.com
kindredbiosciences.gcs-web.com
leapfrog-ssl-19.gcs-web.com
lincolneducationalservices.gcs-web.com
luminexcorp.gcs-web.com
melco.gcs-web.com
meridianbioscience.gcs-web.com
myovant.gcs-web.com
neostx.gcs-web.com
newsroom.bmc.com
nordicshipholding.gcs-web.com
oi.gcs-web.com
olliesbargainoutlet.gcs-web.com
prevailtherapeutics.gcs-web.com
pricelinegroup.gcs-web.com
rattlermidstreampartnerslp.gcs-web.com
republicservicesinc.gcs-web.com
rljlodgingtrust.gcs-web.com
trimascorp.gcs-web.com
unitigroupinc.gcs-web.com
winnebago.gcs-web.com
worldpay.gcs-web.com
www.chesapeakelodgingtrust.com
www.chesapeakereit.com
www.emclairefinancial.com
www.nordicshipholding.com
www.nordicshipholding.dk
www.rattlermidstream.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-19.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7HBIMa5rG7kVqg2vjdp
ZeNxWqJIbXR9V2U8Oqz0Jfr3DsVc9gN2ICkDJmhVFKxjGP3YMpY3GurjS2Kp9KEC
40pG3wMQ7grwJiFuRzGlz6ZYizFho+HR4+VDKV8Gjtc1crsUG1jqKe8ms7OvAh2A
vWPEtA/93d56TPou8dy1AR/C/H3TxT3bHd9q9jvNEvd9x8rxIWxsx8/HlfT88byk
b4h413eCWCMP8uoC7Yf8oUcbr4RyG0vBnz9rg/cNuhC3Eydpz14iRGDmMUkOP0/i
vcMXh/wSYVikcPkFs90bKVtiDfxOqzDJh5N+NddjSyAaYfauDrDeqW5neYKheWP5
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 394037815284388058232443419053624975818845
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-24 09:23:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-22 09:23:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-19.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24199170213209304163026860439215918603228482518699897414536553580556132622329863952554452852714271847966564371346684020389308932574922286443702617691691540510647080431740058610676870326293748379986206504441519354828170916642188578991773585655851641193389242099953222175340403889722860181061227164645197049009594349765094647592866884100959874846680515099527798106384328826625018506432993921695902411471805428802781450514003679608887116858343889396548958947354606346253519995859488151222010030046192133571804105419590858130300935182042964929444735197863779208422589996176439684821012256412304257513237208790297083115913
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1627c864f85d076de4354b4b6010b2b54f30f092
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2425 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adaptivebiotech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerovironmentinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amdocslimited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arris.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefytt.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broadcom.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castlebiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charlesandcolvardltd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chemocentryx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chesapeakelodgingtrust.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbusas.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporateresponsibility.arris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporateresponsibility.arrisi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emclairefinancial.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enersysinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envestnetinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everspin.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extraspace.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalbloodtx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmac.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthinsuranceinnovations.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpres.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihsmarkit.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immunovantinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.avinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.benefytt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.enersys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.envestnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.everspin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.hiiquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.hpres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.ihsmarkit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.irobot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.luminexcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.meridianbioscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.republicservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.rljlodgingtrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.uniti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.winnebagoind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.worldpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.adaptivebiotech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.amdocs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.broadcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.immunovant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.karunatx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.lincolneducationalservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.myovant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.neostx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.o-i.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ollies.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.vantiv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir-zh.melco-resorts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.arris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.bookingholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.castlebiosciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.charlesandcolvard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.chemocentryx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.columbusglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.envestnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.extraspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gbt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.kindredbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.melco-resorts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.prevailtherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.trimascorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irobotcorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karunatx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kindredbiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-19.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lincolneducationalservices.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luminexcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melco.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meridianbioscience.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myovant.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neostx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.bmc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nordicshipholding.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oi.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olliesbargainoutlet.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prevailtherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pricelinegroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rattlermidstreampartnerslp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'republicservicesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rljlodgingtrust.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trimascorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitigroupinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winnebago.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldpay.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chesapeakelodgingtrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chesapeakereit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emclairefinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nordicshipholding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nordicshipholding.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rattlermidstream.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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