leapfrog-ssl-14.gcs-web.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:41:3d:bb:8a:73:1d:fb:c9:ba:f3:5b:cc:c7:ba:36:6a:6e was issued on by Let's Encrypt.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-14.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:41:3d:bb:8a:73:1d:fb:c9:ba:f3:5b:cc:c7:ba:36:6a:6e
Serial Number (int): 283537268320490209397385468320288643377774
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0a:5e:7e:ff:54:bd:01:19:9a:58:22:e7:4e:a0:19:bf:f5:3a:5d:83
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 06:c8:25:46:ab:20:30:be:62:75:6c:8c:ec:5d:72:84:4c:c3:5a:8b
Fingerprint (sha256): 1f:33:34:08:3e:ee:ee:72:2d:c0:17:86:d6:95:dc:26:74:24:19:79:ba:39:db:1b:de:0a:07:1b:ed:95:f0:42

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate leapfrog-ssl-14.gcs-web.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-14.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

360finance.gcs-web.com
aclaristherapeuticsinc.gcs-web.com
agilitihealth.gcs-web.com
alector.gcs-web.com
alight.gcs-web.com
approachresources.gcs-web.com
cibus.gcs-web.com
ciriustx.gcs-web.com
classvtransaction-delltechnologies.gcs-web.com
classvtransactiondelltechnologies.gcs-web.com
coherusbioscience.gcs-web.com
control4corporation.gcs-web.com
cyclerion.gcs-web.com
dermavantsciences.gcs-web.com
dukerealtycorporation.gcs-web.com
dvmttransaction.delltechnologies.com
foamix.gcs-web.com
fticonsulting.gcs-web.com
futuholdings.gcs-web.com
gtxinc.gcs-web.com
innovivainc.gcs-web.com
investor.aclaristx.com
investor.dukerealty.com
investor.foamix.com
investor.inva.com
investor.manpower.com
investor.manpowergroup.com
investor.newpark.com
investorrelations.sarepta.com
investors.agilitihealth.com
investors.alector.com
investors.alight.com
investors.coherus.com
investors.dermavant.com
investors.foamix.com
investors.gtxinc.com
investors.ivericbio.com
investors.karyopharm.com
investors.leaptx.com
investors.modernatx.com
investors.rosettastone.com
investors.rrts.com
investors.twistbioscience.com
investors.unifirst.com
investors.viewray.com
ir.360jinrong.net
ir.approachresources.com
ir.aravive.com
ir.cibus.com
ir.ciriustx.com
ir.cyclerion.com
ir.fticonsulting.com
ir.futuholdings.com
ir.mccormick.com
ir.mirumpharma.com
ir.newellbrands.com
ir.oncobiologics.com
ir.orionmarinegroup.com
ir.outlooktherapeutics.com
ir.pintec.com
ir.svb.com
ir.tizianalifesciences.com
ir.wabteccorp.com
ivericbio.gcs-web.com
junipernetworkspr.gcs-web.com
karyopharm.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leaptherapeutics.gcs-web.com
manpowergroup.gcs-web.com
mccormickcorporation.gcs-web.com
mirumpharma.gcs-web.com
modernatx.gcs-web.com
newellbrands.gcs-web.com
newpark.gcs-web.com
newsroom.juniper.net
oncobiologics.gcs-web.com
ophthotech.gcs-web.com
oriongroupholdingsinc.gcs-web.com
pintec.gcs-web.com
pr.rosettastone.com
roadrunnertransportationsystemsinc.gcs-web.com
rosettastone.gcs-web.com
sarepta.gcs-web.com
sunrun.gcs-web.com
svb.gcs-web.com
tizianalifesciences.gcs-web.com
twistbiosciences.gcs-web.com
unifirstcorp.gcs-web.com
versartis.gcs-web.com
viewrayinc.gcs-web.com
wabtec.gcs-web.com
www.foamix.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-52.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-14.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy0sT9Hfww2/32HvSXtG
nn8AddXLFQEXJH+rBcCh0fJFJ70cIqUgyPciAby+z7Q6jnk2KC/Q57tzuJGLXx4N
mKfeWAqLFfaAAZu0Oh0XB49QiEst8EsETh87KOh31SNtKLH/6B4GNiUs3FyswR1V
KtDvsXubEt0jwWiGmqQNNWKs8xwAnBCnpIX8UN9nQtDZeJho9pgvBG21pt4+Lt3S
tGiEEcIqmrTp93vOql64ukgGZnAl+KopvR6G7nAVvYj07D7sV4ESRMBNqfLRFyON
TS1GqkDXZfAWCxybn7Y/igrOJD7GQ1eaB93ByOA8Ttm1+NgeJLrfwmUxSdKbBXgx
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283537268320490209397385468320288643377774
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-20 16:06:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-19 16:06:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-14.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22618932271286066007425537013109431576887744547143365443689907495639211638490653741400730119477182261706875745346524408807341400251482652006312259013543991895484333403878013674068803035711481983993282971409146941525903527080039006587129909195206775429003138649965550382553365139188681449083186207254573492863188727630716297954332049357574803178161981075313626800073391623271487595497948511275419323692103282571509154792190508040239784771393504770775323715574454335166518444233941431380180620295187013221461010882320595101475938817076793104153917143741373609366136850365376731175245687292398448497769485982398093472207
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0a5e7eff54bd01199a5822e74ea019bff53a5d83
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2298 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '360finance.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aclaristherapeuticsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agilitihealth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alector.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alight.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'approachresources.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cibus.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciriustx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classvtransaction-delltechnologies.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classvtransactiondelltechnologies.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coherusbioscience.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'control4corporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyclerion.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dermavantsciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dukerealtycorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvmttransaction.delltechnologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foamix.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fticonsulting.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futuholdings.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtxinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovivainc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.aclaristx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.dukerealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.foamix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.inva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.manpower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.manpowergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.newpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorrelations.sarepta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.agilitihealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.alector.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.alight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.coherus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.dermavant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.foamix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.gtxinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ivericbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.karyopharm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.leaptx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.modernatx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.rosettastone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.rrts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.twistbioscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.unifirst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.viewray.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.360jinrong.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.approachresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.aravive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cibus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ciriustx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cyclerion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.fticonsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.futuholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mccormick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mirumpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.newellbrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.oncobiologics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.orionmarinegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.outlooktherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.pintec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.svb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tizianalifesciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.wabteccorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivericbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'junipernetworkspr.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karyopharm.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-14.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leaptherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manpowergroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mccormickcorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mirumpharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modernatx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newellbrands.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newpark.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.juniper.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oncobiologics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ophthotech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oriongroupholdingsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pintec.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.rosettastone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roadrunnertransportationsystemsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosettastone.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sarepta.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunrun.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svb.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tizianalifesciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twistbiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unifirstcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'versartis.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viewrayinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wabtec.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foamix.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f2446439200000403004630440220686a5644785485f3bdd96072bd27981cf12b53a0c62078f496a93a07e46c6a670220534b0747c571b5596b23c56254a9c76efc621631a7a525a464c5471b770c48d1007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f244643820000040300483046022100e98983e3a9087bc0758ff09bc07539d6e15b4e1d2f95900ac0e507ba55b116540221009ac6b14924194fb50c790e56eea5ad1e9fb489c5b23e2c2c39290d28f7e5b5cd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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