leapfrog-ssl-8.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:ab:7f:b3:95:f9:34:c1:63:61:d9:b8:76:51:91:47:5f:f7 was issued on by Let's Encrypt.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-8.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ab:7f:b3:95:f9:34:c1:63:61:d9:b8:76:51:91:47:5f:f7
Serial Number (int): 406807172888946996311400859531038188593143
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a3:21:1b:6e:90:8d:42:e9:47:40:b8:70:ff:6d:78:9c:65:d7:35:3d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 98:dd:7e:8a:dd:d3:31:cc:1c:ef:df:d3:20:a6:d7:19:df:dc:7d:5e
Fingerprint (sha256): 24:d6:f9:d7:e7:30:99:fc:1e:d8:8d:8e:34:32:36:34:85:15:e1:b2:f4:80:1c:db:b0:a4:9d:a2:24:72:a9:ac

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-8.gcs-web.com

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-8.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aerojetrocketdyne.gcs-web.com
albemarle.gcs-web.com
anaptysbio.gcs-web.com
ashlandglobalholdingsinc.gcs-web.com
buildersfirstsourceinc.gcs-web.com
catalystpharma.gcs-web.com
charter.gcs-web.com
clxcommunications.gcs-web.com
dollargeneral.gcs-web.com
dpwholdings.gcs-web.com
endocyte.gcs-web.com
evenergypartnerslp.gcs-web.com
fiserv.gcs-web.com
gwgh.gcs-web.com
heequipment.gcs-web.com
hh.gcs-web.com
hlundbeckas.gcs-web.com
idexcorp.gcs-web.com
idt.gcs-web.com
internapcorporation.gcs-web.com
investor.ashland.com
investor.he-equipment.com
investor.hh.ru
investor.kimberly-clark.com
investor.kmgchemicals.com
investor.lundbeck.com
investor.mrcglobal.com
investor.sharpsinc.com
investor.shentel.com
investor.xlgroup.com
investors.albemarle.com
investors.bldr.com
investors.fiserv.com
investors.gwgh.com
investors.gwglife.com
investors.idexcorp.com
investors.meritor.com
investors.nov.com
investors.osi-systems.com
investors.sinch.com
investors.vrtx.com
ir.aerojetrocketdyne.com
ir.anaptysbio.com
ir.catalystpharma.com
ir.charter.com
ir.clxcommunications.com
ir.dpwholdings.com
ir.evenergypartners.com
ir.hvstog.com
ir.inap.com
ir.mannatech.com
ir.mohawkind.com
ir.novelion.com
ir.spectrum.com
ir.stanleyblackanddecker.com
ir.towerjazz.com
ir.towersemi.com
ir.vestas.com
irnews.marshmclennan.com
irnews.mmc.com
kimberlyclark.gcs-web.com
kmgchemicals.gcs-web.com
leapfrog-ssl-8.gcs-web.com
macys.gcs-web.com
mannatech.gcs-web.com
meritorinc.gcs-web.com
mmc.gcs-web.com
mohawkind.gcs-web.com
mrcglobal.gcs-web.com
nationaloilva.gcs-web.com
news-investors.mmc.com
newsroom.fiserv.com
noveliontherapeutics.gcs-web.com
osisystems.gcs-web.com
quantum.gcs-web.com
sharpscompliancecorporation.gcs-web.com
shentel.gcs-web.com
stanleyblackdecker.gcs-web.com
test-news-investors.mmc.com
towerjazz.gcs-web.com
ufpinvestor.gcs-web.com
vestaswindsystems.gcs-web.com
vrtx.gcs-web.com
www.ufpinvestor.com
xlgroupltd.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-8.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt204dDwwhX23TtvaSms3
Zn6EG4BBEKQ3f7S2o+YlZ2vLnvFigSTlI8rWTT4TlOa+ZwnceM4ec7W960REZRVL
/bhAjzjsFWln8BAGwMbyiwSyfvJH+jwq80bRTsAvMQ5Ke04sVdZ9/f0zsYpzUpn2
NwhyBVZQbrSKjNrC9ZixcpjsMZPg4yrvg1ZDQ2tdnWCU6y5EOCWeuHcb+B/fhcnG
+IMntisYhFvgHMiME00H5Vo1Umt/E7rzEvfcz3vhaJM8bi6lPe+aTmcR7tjfpkLl
wEOKJm08NlqCIGnz67htjrjpzuxARR49qDOtfPS+2B5IeS4HcIkiFkseX2yUSDFq
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 406807172888946996311400859531038188593143
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-14 11:07:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-13 11:07:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-8.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23155468456318675554652735657742055040366887781051925963000627856843482073361600585511613530282021779410846127715633734968981919715894027406010481413620908021083255205536283672716553825699219610756339716791401693070332725672468903499980806438210717740913801286327823207606221754012604382226114543026698866165606690059204151140296841595997340229029091542196641895342596836517667707637960818142236207690523572951063704253406364680028919886899383324573781702843484698329888471582915183076809832544599124620838453451093026024386762451545821853470910009876258692933763612740014765414096135502187522800234213833426452179567
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a3211b6e908d42e94740b870ff6d789c65d7353d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2000 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerojetrocketdyne.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albemarle.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anaptysbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashlandglobalholdingsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildersfirstsourceinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalystpharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charter.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clxcommunications.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dollargeneral.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dpwholdings.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endocyte.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evenergypartnerslp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiserv.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gwgh.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heequipment.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hh.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hlundbeckas.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idexcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idt.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internapcorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.ashland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.he-equipment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.hh.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.kimberly-clark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.kmgchemicals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.lundbeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.mrcglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.sharpsinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.shentel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.xlgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.albemarle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.bldr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.fiserv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.gwgh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.gwglife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.idexcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.meritor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.nov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.osi-systems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sinch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.vrtx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.aerojetrocketdyne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.anaptysbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.catalystpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.charter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.clxcommunications.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.dpwholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.evenergypartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.hvstog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.inap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mannatech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mohawkind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.novelion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.spectrum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.stanleyblackanddecker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.towerjazz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.towersemi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vestas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irnews.marshmclennan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irnews.mmc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kimberlyclark.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kmgchemicals.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-8.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macys.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mannatech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meritorinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mohawkind.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrcglobal.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaloilva.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news-investors.mmc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.fiserv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noveliontherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osisystems.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quantum.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharpscompliancecorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shentel.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanleyblackdecker.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-news-investors.mmc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'towerjazz.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ufpinvestor.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vestaswindsystems.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vrtx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ufpinvestor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xlgroupltd.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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