leapfrog-ssl-7.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 03:20:92:06:33:6d:90:cf:5f:6a:69:a2:a1:89:17:55:19:d3 was issued on by Let's Encrypt.

With 67 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=leapfrog-ssl-7.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:20:92:06:33:6d:90:cf:5f:6a:69:a2:a1:89:17:55:19:d3
Serial Number (int): 272419993021000095737046133864695004994003
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ac:59:36:e2:31:13:f4:d6:64:05:75:76:84:88:66:22:80:80:7a:9e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a4:4e:7e:81:73:1b:64:29:1d:87:4b:3b:0c:b6:bf:71:c1:b8:39:5d
Fingerprint (sha256): 1c:49:11:c3:7b:ff:5f:a0:cc:59:12:ae:22:3a:65:56:20:98:6f:b1:86:b7:c8:43:a8:15:0f:0e:0e:36:ec:40

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-7.gcs-web.com

67

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-7.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alkermes.gcs-web.com
amaraholdings.gcs-web.com
americanfinancialgroup.gcs-web.com
aristocratleisurelimited.gcs-web.com
blackstoneminerals.gcs-web.com
btsgroupab.gcs-web.com
carbonite.gcs-web.com
carriageservices.gcs-web.com
cititrendsinc.gcs-web.com
corporate.finishline.com
cutera.gcs-web.com
determineinc.gcs-web.com
dish.gcs-web.com
ebosgroup.gcs-web.com
finishline.gcs-web.com
genmab.gcs-web.com
goldreserve.gcs-web.com
hanesbrandsinc.gcs-web.com
incyte.gcs-web.com
investor.alkermes.com
investor.blackstoneminerals.com
investor.carbonite.com
investor.ebosgroup.com
investor.mysportsclubs.com
investor.northeastbank.com
investor.pandora.net
investor.pandoragroup.com
investor.scotts.com
investor.synaptics.com
investors.carriageservices.com
investors.la-z-boy.com
investors.symetra.com
investors.tactilemedical.com
investors.thomsonreuters.com
ir.amaraholdings.com
ir.aristocrat.com
ir.bts.com
ir.cititrends.com
ir.cutera.com
ir.dish.com
ir.genmab.com
ir.goldreserveinc.com
ir.hanesbrands.com
ir.jd.com
ir.mondelezinternational.com
ir.qad.com
ir.thomsonreuters.com
ir.unisys.com
jdcominc.gcs-web.com
la-z-boy.gcs-web.com
lazboy.gcs-web.com
leapfrog-ssl-7.gcs-web.com
matas.gcs-web.com
mondelezinternational.gcs-web.com
mysportsclubs.gcs-web.com
northeastbancorp.gcs-web.com
pandoragroup.gcs-web.com
qad.gcs-web.com
scottsmiraclegro.gcs-web.com
sevenstarscloud.gcs-web.com
symetra.gcs-web.com
synaptics.gcs-web.com
tactilemedical.gcs-web.com
thomsonreuters.gcs-web.com
unisys.gcs-web.com
www.afginc.com
www.townsportsinternational.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-7.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7gqrjkS43JaDRDDw5uSe
pW8Q0xEMAUGwq6xvk3zUeCKX/DEYAoYfcRKNJ44LPpGul4wRlj4h+xoUAe/mv13O
HyN3FKJ5c0yIEqWjqM52xPai7qlp2/pTnvWcyhxgvKe9EBMKgXiuZLEn3MzV06KA
wjHRFCZdsKokosvJs6E44LlWk71Vc5SMQp6DsOHgSIF/3WYCJCfLlIp5HXkwzF2M
YXB4Po2d7hebWqDBd2pQljp1mS6Hx75KHAClfMwLjb/7kCGtqXgWaV71LgpI1bfo
qjmb6CThLU3kiZgpyCP/0s7A5yyKzpTXhufqMxNAo6rMNFctU1Ab+dIWTy5EBr3Y
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272419993021000095737046133864695004994003
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-18 21:58:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-17 21:58:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-7.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30049978223859934773657120008451846692525890359121403749884602089823257006241270139890588755304215866620694638467155008117255844669791364230031615609251175886505963550568386079278033272347260941642800894170259445251375677212357785719456792682571209924018717079677780439071868682486355495557012070534048802149791263949193101533091308524123160629603937629297887389066702568018878707531277209180214745144684688774340186889095387477802491659314291821451159129387828593051392613916462551473814628062696932111583067286016943593294548916603450140132956262000085425188007234533115768425234259430339137496376430957426315745531
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ac5936e23113f4d6640575768488662280807a9e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1609 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alkermes.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amaraholdings.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americanfinancialgroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aristocratleisurelimited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackstoneminerals.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btsgroupab.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carbonite.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carriageservices.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cititrendsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.finishline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cutera.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'determineinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dish.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebosgroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finishline.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genmab.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldreserve.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hanesbrandsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incyte.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.alkermes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.blackstoneminerals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.carbonite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.ebosgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.mysportsclubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.northeastbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.pandora.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.pandoragroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.scotts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.synaptics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.carriageservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.la-z-boy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.symetra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.tactilemedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.thomsonreuters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.amaraholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.aristocrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.bts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cititrends.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cutera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.dish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.genmab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.goldreserveinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.hanesbrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.jd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mondelezinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.qad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.thomsonreuters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.unisys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jdcominc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'la-z-boy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lazboy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-7.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matas.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mondelezinternational.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysportsclubs.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northeastbancorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pandoragroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qad.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scottsmiraclegro.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sevenstarscloud.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'symetra.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synaptics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tactilemedical.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thomsonreuters.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unisys.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afginc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townsportsinternational.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c7f2704b7000004030047304502203fdb10297b3e35ce6a78624b3123b1b6ebc5cf03bf4b3fa542b43bcc931e392502210082a8a0acfe749f8cb863ff274df8ce7c79a60c7e0bb94f0739214863c8d2072000770029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018c7f2705830000040300483046022100f8d700a6a9638606c655f529480e87a9e3b7f925058bb89e27183b8180bb4cd0022100cc20162bd309bf98c9efdb41f29e8e6b9d3527f5b879d3f79f02a0d039d52e82
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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