leapfrog-ssl-16.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:c6:d6:de:24:33:3c:2d:72:71:1e:b9:17:84:17:30:2e:01 was issued on by Let's Encrypt.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-16.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c6:d6:de:24:33:3c:2d:72:71:1e:b9:17:84:17:30:2e:01
Serial Number (int): 416110660592613375143153973558530626563585
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5a:82:88:b0:cf:ea:27:8c:5b:42:00:c7:8f:7a:5e:45:16:e9:fa:b0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e1:ab:47:1a:f9:ec:cf:c4:d1:d2:ba:51:bf:4f:fe:69:ad:91:5e:59
Fingerprint (sha256): 1e:9b:59:2d:d1:0e:81:c1:7b:76:7a:58:b5:01:64:74:d4:b6:4e:f1:63:7d:d9:87:b3:19:56:75:48:15:c1:5a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-16.gcs-web.com

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-16.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amsc.gcs-web.com
aob.gcs-web.com
apam.gcs-web.com
axcelis.gcs-web.com
axcellahealth.gcs-web.com
bankunited.gcs-web.com
bridgebio.gcs-web.com
computertaskgroup.gcs-web.com
crawfordandcompany.gcs-web.com
crowdstrike.gcs-web.com
fabrinet.gcs-web.com
fatetherapeuticsinc.gcs-web.com
ferroglobe.gcs-web.com
flexiontherapeutics.gcs-web.com
flexsteel.gcs-web.com
fnf.gcs-web.com
forresterresearch.gcs-web.com
forumenergytechnologiesinc.gcs-web.com
genomichealth.gcs-web.com
globenewswiresupportcenter.gcs-web.com
greenlane.gcs-web.com
guessinc.gcs-web.com
iac.gcs-web.com
investor.axcelis.com
investor.bridgebio.com
investor.fabrinet.com
investor.ferroglobe.com
investor.forrester.com
investor.genomichealth.com
investor.noodles.com
investor.sagerx.com
investor.spark.net
investors.ctg.com
investors.guess.com
investors.meiragtx.com
investors.millendo.com
investors.overstock.com
investors.patternenergy.com
investors.repay.com
investors.ttec.com
investors.ttm.com
ir.amsc.com
ir.aob.com
ir.axcellahealth.com
ir.axcellatx.com
ir.bankunited.com
ir.crowdstrike.com
ir.f-e-t.com
ir.fatetherapeutics.com
ir.flexiontherapeutics.com
ir.flexsteel.com
ir.iac.com
ir.ofscapitalcorp.com
ir.organovo.com
ir.safeholdinc.com
ir.scripps.com
ir.sealedair.com
ir.tcap.com
ir.viacom.com
leapfrog-ssl-16.gcs-web.com
meiragtx.gcs-web.com
millendo.gcs-web.com
newsroom.genomichealth.com
noodles.gcs-web.com
ofscapital.gcs-web.com
organovo.gcs-web.com
otcmarkets.gcs-web.com
overstock.gcs-web.com
patternenergygroupinc.gcs-web.com
presidio.gcs-web.com
repay.gcs-web.com
safeholdinc.gcs-web.com
sagerx.gcs-web.com
scripps.gcs-web.com
sealedair.gcs-web.com
sparknetworksinc.gcs-web.com
trianglecapital.gcs-web.com
ttecholdingsinc.gcs-web.com
ttmtechnologiesinc.gcs-web.com
viacominc.gcs-web.com
w.globenewswire.com
www.apam.com
www.investor.fnf.com
www.spark.net
www.virtualinvestorconferences.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-16.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Z3sKrBqkS/+lXe2IN2w
LyUITY3xbebjarnEDeJ5GNSvdNby/RMHbcu4h3xOMcUN4htXf+eGhtT4Hkk1Wnt1
4lcv7NyEv6/9Sxfwj3X0IR4AII75np/xa7c/FqHIvVyraMc86Lt0vXT3HzYB8jib
EFonJ8ENaYCWxZzeWu5+p+919dGmpQimPlbwgMBxCKozTdTmlmvWwOvXD5c3RrKA
l04ZGWH+9BNNN+gNJxxGZy5qooyWxZ3ITAVTMBA6fh/LSVpYTjYz/IZHztJJxhrH
CQExZvbO/ivPbCIXqb0OXunup8+KSPUaQ4EhB+v/x4rRmWQk3Z67FZZL7Dt15GmE
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 416110660592613375143153973558530626563585
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-03 12:13:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-03 12:13:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-16.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27976539897681457726549319139371391943663431703353327936684427004813800702445140650861373864603649977283364051632404709357112392930112179548808189640697500481645719939871379069337410010924414830391959387761121148774315817424133998322579056091044974425901536213433100549297939921918019283815633824318922800710430741490529358262607769184633780542309795154295433138181813658376659706451393045565352134093379238173335744996234277406641978878121079533280099663167905184563427027577395180920710471402159977138686316582741419550348020053824638208562689509619828169995906925875226736669045012537123428917171725477536330253501
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5a8288b0cfea278c5b4200c78f7a5e4516e9fab0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1957 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amsc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aob.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apam.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axcelis.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axcellahealth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankunited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridgebio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'computertaskgroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crawfordandcompany.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crowdstrike.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabrinet.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatetherapeuticsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ferroglobe.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flexiontherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flexsteel.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fnf.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forresterresearch.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forumenergytechnologiesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genomichealth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globenewswiresupportcenter.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenlane.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guessinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iac.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.axcelis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.bridgebio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.fabrinet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.ferroglobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.forrester.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.genomichealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.noodles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.sagerx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.spark.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ctg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.guess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.meiragtx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.millendo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.overstock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.patternenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.repay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ttec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ttm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.amsc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.aob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.axcellahealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.axcellatx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.bankunited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.crowdstrike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.f-e-t.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.fatetherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.flexiontherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.flexsteel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.iac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ofscapitalcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.organovo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.safeholdinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.scripps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.sealedair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tcap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-16.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meiragtx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'millendo.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.genomichealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noodles.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofscapital.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organovo.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otcmarkets.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overstock.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patternenergygroupinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'presidio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repay.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safeholdinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sagerx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scripps.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sealedair.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sparknetworksinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trianglecapital.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ttecholdingsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ttmtechnologiesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viacominc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w.globenewswire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investor.fnf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spark.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.virtualinvestorconferences.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000017e2012f2180000040300483046022100c3124d4ace4fa4349660f95400fbf1a74f616884e829837bf8b0879d8fe64b9f02210097e687eeac7b1f79ae7910ac422610141ca343e17a23d998f5843d853435aff50076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017e2012f24b000004030047304502207b17daa6d4c983d421f845fa067617757fb4bcefba80d0f3a2caf89850eace080221009411a80aa752ac623f0e004011162bf214e4a44139fbbc766f6d730dd70d9f92
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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