leapfrog-ssl-19.gcs-web.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9f:bf:34:f2:f9:d0:92:b1:e2:f0:fd:d2:34:e3:c6:0a:14 was issued on by Let's Encrypt.

With 77 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-19.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9f:bf:34:f2:f9:d0:92:b1:e2:f0:fd:d2:34:e3:c6:0a:14
Serial Number (int): 315695911610477005148323334885201687218708
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0a:a0:92:02:ef:be:82:54:59:67:88:de:18:60:da:6c:9d:c7:b2:45
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c6:93:76:9f:b7:1c:8d:88:c9:e4:c2:0a:dd:74:3c:7b:2a:d3:4d:fa
Fingerprint (sha256): 23:5a:5e:af:2b:07:c6:9f:f3:31:f8:7d:23:75:5c:33:72:82:57:ae:0b:1f:2c:79:0c:89:dc:98:ff:53:ff:e6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate leapfrog-ssl-19.gcs-web.com

77

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-19.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adaptivebiotech.gcs-web.com
aerovironmentinc.gcs-web.com
amdocslimited.gcs-web.com
arris.gcs-web.com
bmc.gcs-web.com
charlesandcolvardltd.gcs-web.com
chemocentryx.gcs-web.com
chesapeakelodgingtrust.gcs-web.com
columbusas.gcs-web.com
corporateresponsibility.arris.com
emclairefinancial.gcs-web.com
enersysinc.gcs-web.com
envestnetinc.gcs-web.com
everspin.gcs-web.com
extraspace.gcs-web.com
globalbloodtx.gcs-web.com
gmac.gcs-web.com
hpres.gcs-web.com
ihsmarkit.gcs-web.com
investor.avinc.com
investor.enersys.com
investor.envestnet.com
investor.everspin.com
investor.hpres.com
investor.ihsmarkit.com
investor.irobot.com
investor.kbhome.com
investor.luminexcorp.com
investor.meridianbioscience.com
investor.rljlodgingtrust.com
investor.uniti.com
investor.winnebagoind.com
investor.worldpay.com
investors.adaptivebiotech.com
investors.amdocs.com
investors.lincolneducationalservices.com
investors.myovant.com
investors.ollies.us
investors.vantiv.com
ir-zh.melco-resorts.com
ir.arris.com
ir.bookingholdings.com
ir.charlesandcolvard.com
ir.chemocentryx.com
ir.columbusglobal.com
ir.envestnet.com
ir.extraspace.com
ir.gbt.com
ir.kindredbio.com
ir.melco-resorts.com
ir.trimascorp.com
irobotcorporation.gcs-web.com
kbhome.gcs-web.com
kindredbiosciences.gcs-web.com
leapfrog-ssl-19.gcs-web.com
lincolneducationalservices.gcs-web.com
luminexcorp.gcs-web.com
melco.gcs-web.com
meridianbioscience.gcs-web.com
myovant.gcs-web.com
newscenter.gmac.com
newsroom.bmc.com
nordicshipholding.gcs-web.com
olliesbargainoutlet.gcs-web.com
pricelinegroup.gcs-web.com
rattlermidstreampartnerslp.gcs-web.com
rljlodgingtrust.gcs-web.com
trimascorp.gcs-web.com
unitigroupinc.gcs-web.com
winnebago.gcs-web.com
worldpay.gcs-web.com
www.chesapeakelodgingtrust.com
www.chesapeakereit.com
www.emclairefinancial.com
www.nordicshipholding.com
www.nordicshipholding.dk
www.rattlermidstream.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-19.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9B4rHZauJHH3DMv/iXO
WmMQmybrExS79OKzmmnN1DZ4Qj0ccJbvRgHj4LisW/Gh1etmcDiqcDdWlIaQOC1m
G1WuxUaMhJWAxExO00iTX34mua+aP7m3Ia4X3wz5CWUooWRzYGPHEo83bkYUV/Lq
/9AxjH7jaN9qa6Lz5SNbM8QSVLbbN75HLTcdQcjhHpIrYYywosu51bqXhdCXAT++
lurgL7eJfMrimjqK9sZ6tIy4Mz8RSeChwhp0F712tRM50ns/YNEgkZWOf1lAU/il
dNIWORa7aMszHc3FiFhLZzOk8JW/cPK5HxOhRx84+2yUz4xx+kOBeoKKXsoZF83O
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315695911610477005148323334885201687218708
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-17 14:58:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-15 14:58:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-19.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26234130197672760576643278826017247648599410251681698638927803888063526384270650096281074407602109859326345105847333133594910175076763361242418414311272091509313115295300327310114421043948041441137759148358325560640713950053807664342331233911218394612310097032875169451053702926088015801257388009137347794799471208267446129674161449579667168827038279211637002288756701200493918941758113875609087316103780995798755679353886671302780638582766380139428696417786137729547478598968265986468676595850976320680659359231705510750370998644748790427511974148971241581806028899047410897026189246023409106087192832253275518389939
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0aa09202efbe8254596788de1860da6c9dc7b245
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1939 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adaptivebiotech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerovironmentinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amdocslimited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arris.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charlesandcolvardltd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chemocentryx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chesapeakelodgingtrust.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbusas.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporateresponsibility.arris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emclairefinancial.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enersysinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envestnetinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everspin.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extraspace.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalbloodtx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmac.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpres.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihsmarkit.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.avinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.enersys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.envestnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.everspin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.hpres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.ihsmarkit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.irobot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.kbhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.luminexcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.meridianbioscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.rljlodgingtrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.uniti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.winnebagoind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.worldpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.adaptivebiotech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.amdocs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.lincolneducationalservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.myovant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ollies.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.vantiv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir-zh.melco-resorts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.arris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.bookingholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.charlesandcolvard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.chemocentryx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.columbusglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.envestnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.extraspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gbt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.kindredbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.melco-resorts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.trimascorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irobotcorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbhome.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kindredbiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-19.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lincolneducationalservices.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luminexcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melco.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meridianbioscience.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myovant.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newscenter.gmac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.bmc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nordicshipholding.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olliesbargainoutlet.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pricelinegroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rattlermidstreampartnerslp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rljlodgingtrust.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trimascorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitigroupinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winnebago.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldpay.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chesapeakelodgingtrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chesapeakereit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emclairefinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nordicshipholding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nordicshipholding.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rattlermidstream.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b6629338d0000040300483046022100c360b24ab57065e68dcdbf7fcef1891400cb3f6196e29d5b37ffbcb75a0f4cd1022100fe5eaccc944414601ccd809ce4ba4a4b4bc8232af8b293c75565ecc43608f19f00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b662933820000040300483046022100fa5c8da4c5264b62740c7f3dad68005daacab92f32054dda99994fc2eded3596022100bbf7288afc1fb02c5d4381975e443e138f1b27f957ffa6b1366456c0e5cb4f64
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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