leapfrog-ssl-13.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:59:fd:69:51:13:90:a8:37:36:0e:fd:74:40:18:5c:fe:8c was issued on by Let's Encrypt.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-13.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:59:fd:69:51:13:90:a8:37:36:0e:fd:74:40:18:5c:fe:8c
Serial Number (int): 379071115901533521892717253546640999775884
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ff:1c:b7:18:b3:bb:1a:d6:3c:ab:a0:88:2d:37:64:5b:d3:28:0b:95
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 48:16:0d:09:49:98:a9:74:33:ec:b7:c4:6e:3c:6a:4c:62:ee:13:88
Fingerprint (sha256): 1c:e6:87:1f:7a:48:03:81:54:06:67:28:b8:7b:5a:e7:78:77:1c:2a:c9:34:ad:df:dc:3d:5b:81:69:b1:2a:de

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-13.gcs-web.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-13.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

3ds.gcs-web.com
allogene.gcs-web.com
altusmidstream.gcs-web.com
analogdevices.gcs-web.com
autowebinc.gcs-web.com
beyondmeat.gcs-web.com
brownandbrown.gcs-web.com
cardlytics.gcs-web.com
centrexion.gcs-web.com
corcept.gcs-web.com
crowncastle.gcs-web.com
distributionnow.gcs-web.com
eloxxpharma.gcs-web.com
emeraldhealththerapeutics.gcs-web.com
equilliumbio.gcs-web.com
etonpharma.gcs-web.com
expediainc.gcs-web.com
gamidacell.gcs-web.com
gossamerbio.gcs-web.com
imacregeneration.gcs-web.com
inovalon.gcs-web.com
investor.3ds.com
investor.analog.com
investor.autoweb.com
investor.bbinsurance.com
investor.crowncastle.com
investor.maersk.com
investor.officedepot.com
investor.si-bone.com
investor.theodpcorp.com
investor.veloxis.com
investors.beyondmeat.com
investors.centrexion.com
investors.eloxxpharma.com
investors.gamida-cell.com
investors.itron.com
investors.kaleido.com
investors.kirbycorp.com
investors.mineralstech.com
investors.next-decade.com
investors.sportsmans.com
investors.sportsmanswarehouse.com
investors.stone.co
investors.wm.com
ir.100tal.com
ir.allogene.com
ir.cardlytics.com
ir.corcept.com
ir.distributionnow.com
ir.dnow.com
ir.equilliumbio.com
ir.etonpharma.com
ir.gossamerbio.com
ir.imacregeneration.com
ir.merus.nl
ir.nantkwest.com
ir.neophotonics.com
ir.newfortressenergy.com
ir.ofscreditcompany.com
ir.osmotica.com
ir.shockwavemedical.com
ir.veloxis.com
ir.verramobility.com
itroninc.gcs-web.com
kaleido.gcs-web.com
kirbycorp.gcs-web.com
leapfrog-ssl-13.gcs-web.com
maersk.gcs-web.com
mcdonaldscorporationprcan.gcs-web.com
merus.gcs-web.com
mineralstechnologiesinc.gcs-web.com
nantkwestinc.gcs-web.com
neophotonics.gcs-web.com
newfortressenergy.gcs-web.com
news.mcdonalds.ca
news.officedepot.com
news.theodpcorp.com
newsroom.officedepot.com
newsroom.theodpcorp.com
nextdecade.gcs-web.com
officedepot.gcs-web.com
ofscreditcompanyinc.gcs-web.com
osmotica.gcs-web.com
peapoddigitallabs.gcs-web.com
qudianinc.gcs-web.com
shockwavemedicalinc.gcs-web.com
siboneinc.gcs-web.com
sportsmanswarehouseinc.gcs-web.com
stone.gcs-web.com
taleducationgroup.gcs-web.com
theodpcorp.com
veloxis.gcs-web.com
verramobility.gcs-web.com
wastemanagement.gcs-web.com
www.peapoddigitallabs.com
www.theodpcorp.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-13.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOKTCCDRGgAwIBAgISBFn9aVETkKg3Ng79dEAYXP6MMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzAzMjkxNjM4NTFaFw0yMzA2MjcxNjM4NTBaMCYxJDAiBgNVBAMT
G2xlYXBmcm9nLXNzbC0xMy5nY3Mtd2ViLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMPNOq+iZb4VmPJmc4LrxfLj5Ly5J/BqrqyEyzMtx6QwCkB6
s/s4M2eceIw3kFPFvOMknxGT2sbsthySkx+IfLK7anNhIlb85GqndbtEtUGhzSv2
k9nwgbEw3Cy97KRFdLNQPti6agBc8TqIzDPrVClfpI+bZ4jLHpfYWzZkV8Jyyomq
Ryj5KEFotfeCq0So7JBn6SShLZD762mpl38bSzTdJH16SfNs/xDNmVkNGmtlzG6S
FK4zQ8eRGkRqPiCX/pb7P1Y7AYC1HK64w+3rVKgBQVZneUtu6AwQmhH5612/cN7t
4KUQrve/8NZBXobd9Ay4S4rp+CPMui+q96h1Y+UCAwEAAaOCC0Mwggs/MA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T
AQH/BAIwADAdBgNVHQ4EFgQU/xy3GLO7GtY8q6CILTdkW9MoC5UwHwYDVR0jBBgw
FoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUF
BzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9y
My5pLmxlbmNyLm9yZy8wggkQBgNVHREEggkHMIIJA4IPM2RzLmdjcy13ZWIuY29t
ghRhbGxvZ2VuZS5nY3Mtd2ViLmNvbYIaYWx0dXNtaWRzdHJlYW0uZ2NzLXdlYi5j
b22CGWFuYWxvZ2RldmljZXMuZ2NzLXdlYi5jb22CFmF1dG93ZWJpbmMuZ2NzLXdl
Yi5jb22CFmJleW9uZG1lYXQuZ2NzLXdlYi5jb22CGWJyb3duYW5kYnJvd24uZ2Nz
LXdlYi5jb22CFmNhcmRseXRpY3MuZ2NzLXdlYi5jb22CFmNlbnRyZXhpb24uZ2Nz
LXdlYi5jb22CE2NvcmNlcHQuZ2NzLXdlYi5jb22CF2Nyb3duY2FzdGxlLmdjcy13
ZWIuY29tghtkaXN0cmlidXRpb25ub3cuZ2NzLXdlYi5jb22CF2Vsb3h4cGhhcm1h
Lmdjcy13ZWIuY29tgiVlbWVyYWxkaGVhbHRodGhlcmFwZXV0aWNzLmdjcy13ZWIu
Y29tghhlcXVpbGxpdW1iaW8uZ2NzLXdlYi5jb22CFmV0b25waGFybWEuZ2NzLXdl
Yi5jb22CFmV4cGVkaWFpbmMuZ2NzLXdlYi5jb22CFmdhbWlkYWNlbGwuZ2NzLXdl
Yi5jb22CF2dvc3NhbWVyYmlvLmdjcy13ZWIuY29tghxpbWFjcmVnZW5lcmF0aW9u
Lmdjcy13ZWIuY29tghRpbm92YWxvbi5nY3Mtd2ViLmNvbYIQaW52ZXN0b3IuM2Rz
LmNvbYITaW52ZXN0b3IuYW5hbG9nLmNvbYIUaW52ZXN0b3IuYXV0b3dlYi5jb22C
GGludmVzdG9yLmJiaW5zdXJhbmNlLmNvbYIYaW52ZXN0b3IuY3Jvd25jYXN0bGUu
Y29tghNpbnZlc3Rvci5tYWVyc2suY29tghhpbnZlc3Rvci5vZmZpY2VkZXBvdC5j
b22CFGludmVzdG9yLnNpLWJvbmUuY29tghdpbnZlc3Rvci50aGVvZHBjb3JwLmNv
bYIUaW52ZXN0b3IudmVsb3hpcy5jb22CGGludmVzdG9ycy5iZXlvbmRtZWF0LmNv
bYIYaW52ZXN0b3JzLmNlbnRyZXhpb24uY29tghlpbnZlc3RvcnMuZWxveHhwaGFy
bWEuY29tghlpbnZlc3RvcnMuZ2FtaWRhLWNlbGwuY29tghNpbnZlc3RvcnMuaXRy
b24uY29tghVpbnZlc3RvcnMua2FsZWlkby5jb22CF2ludmVzdG9ycy5raXJieWNv
cnAuY29tghppbnZlc3RvcnMubWluZXJhbHN0ZWNoLmNvbYIZaW52ZXN0b3JzLm5l
eHQtZGVjYWRlLmNvbYIYaW52ZXN0b3JzLnNwb3J0c21hbnMuY29tgiFpbnZlc3Rv
cnMuc3BvcnRzbWFuc3dhcmVob3VzZS5jb22CEmludmVzdG9ycy5zdG9uZS5jb4IQ
aW52ZXN0b3JzLndtLmNvbYINaXIuMTAwdGFsLmNvbYIPaXIuYWxsb2dlbmUuY29t
ghFpci5jYXJkbHl0aWNzLmNvbYIOaXIuY29yY2VwdC5jb22CFmlyLmRpc3RyaWJ1
dGlvbm5vdy5jb22CC2lyLmRub3cuY29tghNpci5lcXVpbGxpdW1iaW8uY29tghFp
ci5ldG9ucGhhcm1hLmNvbYISaXIuZ29zc2FtZXJiaW8uY29tghdpci5pbWFjcmVn
ZW5lcmF0aW9uLmNvbYILaXIubWVydXMubmyCEGlyLm5hbnRrd2VzdC5jb22CE2ly
Lm5lb3Bob3Rvbmljcy5jb22CGGlyLm5ld2ZvcnRyZXNzZW5lcmd5LmNvbYIXaXIu
b2ZzY3JlZGl0Y29tcGFueS5jb22CD2lyLm9zbW90aWNhLmNvbYIXaXIuc2hvY2t3
YXZlbWVkaWNhbC5jb22CDmlyLnZlbG94aXMuY29tghRpci52ZXJyYW1vYmlsaXR5
LmNvbYIUaXRyb25pbmMuZ2NzLXdlYi5jb22CE2thbGVpZG8uZ2NzLXdlYi5jb22C
FWtpcmJ5Y29ycC5nY3Mtd2ViLmNvbYIbbGVhcGZyb2ctc3NsLTEzLmdjcy13ZWIu
Y29tghJtYWVyc2suZ2NzLXdlYi5jb22CJW1jZG9uYWxkc2NvcnBvcmF0aW9ucHJj
YW4uZ2NzLXdlYi5jb22CEW1lcnVzLmdjcy13ZWIuY29tgiNtaW5lcmFsc3RlY2hu
b2xvZ2llc2luYy5nY3Mtd2ViLmNvbYIYbmFudGt3ZXN0aW5jLmdjcy13ZWIuY29t
ghhuZW9waG90b25pY3MuZ2NzLXdlYi5jb22CHW5ld2ZvcnRyZXNzZW5lcmd5Lmdj
cy13ZWIuY29tghFuZXdzLm1jZG9uYWxkcy5jYYIUbmV3cy5vZmZpY2VkZXBvdC5j
b22CE25ld3MudGhlb2RwY29ycC5jb22CGG5ld3Nyb29tLm9mZmljZWRlcG90LmNv
bYIXbmV3c3Jvb20udGhlb2RwY29ycC5jb22CFm5leHRkZWNhZGUuZ2NzLXdlYi5j
b22CF29mZmljZWRlcG90Lmdjcy13ZWIuY29tgh9vZnNjcmVkaXRjb21wYW55aW5j
Lmdjcy13ZWIuY29tghRvc21vdGljYS5nY3Mtd2ViLmNvbYIdcGVhcG9kZGlnaXRh
bGxhYnMuZ2NzLXdlYi5jb22CFXF1ZGlhbmluYy5nY3Mtd2ViLmNvbYIfc2hvY2t3
YXZlbWVkaWNhbGluYy5nY3Mtd2ViLmNvbYIVc2lib25laW5jLmdjcy13ZWIuY29t
giJzcG9ydHNtYW5zd2FyZWhvdXNlaW5jLmdjcy13ZWIuY29tghFzdG9uZS5nY3Mt
d2ViLmNvbYIddGFsZWR1Y2F0aW9uZ3JvdXAuZ2NzLXdlYi5jb22CDnRoZW9kcGNv
cnAuY29tghN2ZWxveGlzLmdjcy13ZWIuY29tghl2ZXJyYW1vYmlsaXR5Lmdjcy13
ZWIuY29tght3YXN0ZW1hbmFnZW1lbnQuZ2NzLXdlYi5jb22CGXd3dy5wZWFwb2Rk
aWdpdGFsbGFicy5jb22CEnd3dy50aGVvZHBjb3JwLmNvbTBMBgNVHSAERTBDMAgG
BmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3Bz
LmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2AHoyjFTY
ty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABhy5zdwAAAAQDAEcwRQIgPult
NESV+2ZvDGk8noe4tXwsJn0U9PWzVlbpr6vNB/gCIQDPxk7m0mjNA6Nddwt0bdgy
PNg/jBqSLl0W3MpbEaTe0wB3AK33vvp8/xDIi509nB4+GGq0Zyldz7EMJMqFhjTr
3IKKAAABhy5zdy4AAAQDAEgwRgIhAMjkCQAOhXLW4ZGhDFr5z3wG3uqhLwa4CzlB
VnJtwJdFAiEAtPXJh2UH3RS+5xV9jmxRC0Oeu4+3NScfGKaeUl4thKgwDQYJKoZI
hvcNAQELBQADggEBAEmaJ8nIdYDnU7zWM0myCsujRXOfoSCFBcjSiHTFTV7xQJhT
Y0lsxswKYyzElVXdN4QR8m6LHFCLlDcCT5jM2LyiFJ3321t3km3ykv/856qUJ/Ls
w5XjCOLkfSIP2SeULkTA0+qw1SZoD3pfawpPzaZ9S1RaUf7yXRr/sOYW0VLV6nVs
sGvmeozoAPKi7FlqAHq3ZsOpTiaBIZ9BzFGqT3gFndd1BdUl3oP8I8kDLLurfX2G
OgQggUMc1btSH0ahkj0CTo6zLOvOChj15ItJwmmCqvFEMnPqXgNMCEpjwgMJaizG
5NkEfE8VSSN5YCwjr1hTNNBW7YL+YrrEOVikZYU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw806r6JlvhWY8mZzguvF
8uPkvLkn8GqurITLMy3HpDAKQHqz+zgzZ5x4jDeQU8W84ySfEZPaxuy2HJKTH4h8
srtqc2EiVvzkaqd1u0S1QaHNK/aT2fCBsTDcLL3spEV0s1A+2LpqAFzxOojMM+tU
KV+kj5tniMsel9hbNmRXwnLKiapHKPkoQWi194KrRKjskGfpJKEtkPvraamXfxtL
NN0kfXpJ82z/EM2ZWQ0aa2XMbpIUrjNDx5EaRGo+IJf+lvs/VjsBgLUcrrjD7etU
qAFBVmd5S27oDBCaEfnrXb9w3u3gpRCu97/w1kFeht30DLhLiun4I8y6L6r3qHVj
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 379071115901533521892717253546640999775884
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-29 16:38:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-27 16:38:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-13.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24717671779704064668532143983703980928480741171238162996653204527773825481635554012897282513986978850794213747312662538864526695261376142573673378821453658786508264131281234554372331374538340411053261968483080675782034121730397885525400808849987540410716178119761771842213898519289613844749655216840503831762728547039322739329463458101683189502772485840973304255141737141408481602959861204604755881266845836825510827467541401237326894784140059303068407002315326137968337357298497205422497974840207894468372970607569291967201517681224627486996747679416297804555904751488435144172607262442585536363028153073359954207717
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ff1cb718b3bb1ad63caba0882d37645bd3280b95
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2311 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3ds.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allogene.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altusmidstream.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analogdevices.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autowebinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beyondmeat.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brownandbrown.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardlytics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centrexion.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corcept.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crowncastle.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'distributionnow.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eloxxpharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emeraldhealththerapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equilliumbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etonpharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expediainc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamidacell.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gossamerbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imacregeneration.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inovalon.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.3ds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.analog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.autoweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.bbinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.crowncastle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.maersk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.officedepot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.si-bone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.theodpcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.veloxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.beyondmeat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.centrexion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.eloxxpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.gamida-cell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.itron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.kaleido.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.kirbycorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.mineralstech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.next-decade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sportsmans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sportsmanswarehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.stone.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.wm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.100tal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.allogene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cardlytics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.corcept.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.distributionnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.dnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.equilliumbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.etonpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gossamerbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.imacregeneration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.merus.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.nantkwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.neophotonics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.newfortressenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ofscreditcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.osmotica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.shockwavemedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.veloxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.verramobility.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itroninc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaleido.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirbycorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-13.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maersk.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdonaldscorporationprcan.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merus.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mineralstechnologiesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nantkwestinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neophotonics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newfortressenergy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.mcdonalds.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.officedepot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.theodpcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.officedepot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.theodpcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextdecade.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'officedepot.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofscreditcompanyinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osmotica.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peapoddigitallabs.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qudianinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shockwavemedicalinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siboneinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsmanswarehouseinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stone.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taleducationgroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theodpcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veloxis.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verramobility.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wastemanagement.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peapoddigitallabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theodpcorp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001872e737700000004030047304502203ee96d344495fb666f0c693c9e87b8b57c2c267d14f4f5b35656e9afabcd07f8022100cfc64ee6d268cd03a35d770b746dd8323cd83f8c1a922e5d16dcca5b11a4ded3007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001872e73772e0000040300483046022100c8e409000e8572d6e191a10c5af9cf7c06deeaa12f06b80b394156726dc09745022100b4f5c9876507dd14bee7157d8e6c510b439ebb8fb735271f18a69e525e2d84a8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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