leapfrog-ssl-26.gcs-web.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c0:7c:e9:35:75:be:32:cc:83:9a:d4:51:88:7c:62:5a:25 was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-26.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c0:7c:e9:35:75:be:32:cc:83:9a:d4:51:88:7c:62:5a:25
Serial Number (int): 326837107405042560679572081688669480704549
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ff:9d:42:38:63:7f:f7:db:e7:7a:3c:7b:0a:16:65:15:ad:e9:fb:3c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6c:a9:4a:32:30:7f:9e:26:1e:f4:bb:b1:ed:9b:3c:70:10:d5:d7:1c
Fingerprint (sha256): 28:ab:d7:b7:3c:a1:ef:2e:04:94:ab:40:7d:32:d8:32:e7:55:46:93:f5:d2:65:7e:b2:26:48:c7:32:4d:7c:20

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate leapfrog-ssl-26.gcs-web.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-26.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

advaxis.gcs-web.com
akebia.gcs-web.com
allete.gcs-web.com
amicustherapeutics.gcs-web.com
arcturustherapeuticsinc.gcs-web.com
buildabear.gcs-web.com
cocacolabottlingcoconsolidated.gcs-web.com
codexis.gcs-web.com
commscopeholdingcompanyinc.gcs-web.com
cooperstandard.gcs-web.com
daktronics.gcs-web.com
demobryce.gcs-web.com
dicerna.gcs-web.com
edaptmssa.gcs-web.com
extractionog.gcs-web.com
gibraltarindustriesinc.gcs-web.com
griddynamics.gcs-web.com
hookerfurniturecorporation.gcs-web.com
hubgroup.gcs-web.com
hyrecar.gcs-web.com
imaratx.gcs-web.com
installedbuildingproducts.gcs-web.com
insuletcorporation.gcs-web.com
intestcorp.gcs-web.com
investor.allete.com
investor.cokeconsolidated.com
investor.daktronics.com
investor.demobryce.com
investor.edap-tms.com
investor.insulet.com
investor.kodak.com
investor.mksinst.com
investor.rushenterprises.com
investor.trimble.com
investors.dicerna.com
investors.hookerfurniture.com
investors.hubgroup.com
investors.installedbuildingproducts.com
investors.insulet.com
investors.lumos-pharma.com
investors.lyratherapeutics.com
investors.matrixservicecompany.com
investors.molinahealthcare.com
investors.owens-minor.com
investors.parsons.com
investors.psiengines.com
investors.pulmonx.com
investors.wmg.com
investors.xpresspa.com
ir.advaxis.com
ir.akebia.com
ir.amicusrx.com
ir.arcturusrx.com
ir.buildabear.com
ir.codexis.com
ir.commscope.com
ir.extractionog.com
ir.gibraltar1.com
ir.griddynamics.com
ir.hyrecar.com
ir.imaratx.com
ir.intest.com
ir.ltbridge.com
ir.midconenergypartners.com
ir.puyiwm.com
ir.sol-gel.com
ir.spplus.com
ir.supernus.com
ir.tenaris.com
kodak.gcs-web.com
leapfrog-ssl-26.gcs-web.com
lightbridgecorporation.gcs-web.com
lumos-pharma.gcs-web.com
lyratherapeutics.gcs-web.com
matrixservicecompany.gcs-web.com
midconenergypartners.gcs-web.com
mksinstrumentsinc.gcs-web.com
molinahealthcare.gcs-web.com
newlinkgeneticscorporation.gcs-web.com
owensminor.gcs-web.com
parsons.gcs-web.com
psiengines.gcs-web.com
pulmonx.gcs-web.com
puyi.gcs-web.com
rushenterprises.gcs-web.com
solgel.gcs-web.com
sppluscorporation.gcs-web.com
supernus.gcs-web.com
tenarissa.gcs-web.com
trimbleinc.gcs-web.com
warnermusicgroup.gcs-web.com
www.advaxis.com
www.ir.cooperstandard.com
xpresspa.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-52.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-26.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOczCCDVugAwIBAgISA8B86TV1vjLMg5rUUYh8YlolMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMTExMDQ0MDNaFw0y
MDA2MDkxMDQ0MDNaMCYxJDAiBgNVBAMTG2xlYXBmcm9nLXNzbC0yNi5nY3Mtd2Vi
LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOai/YRr3HpM5zaS
VGxI/G6T+4qKCm2aVYtkytgRaUhIxc44mY1YRAL6B8Bttc25QYylfE3eGnEnTyif
Hoknbi0Lx9KtJPLqPYsKd/kcU1OVZyc1P10HIhhd1+FKlAyAiIleyQJja3ZqTujd
MXorGRFLAFdGj2yfWbtT4ywJvwjSOEG/vFwoA+cuewi7FOJl5ZanjUnZyXYYLk8N
02d7rYlJDKlKiqs3x56to5smnPNsVi4xb4r7bmXW8pkBhClxrqx/tcsEtwBQUIXp
OkP6Jb2DAZEBDtEJcxXB+iCnmhpcvwKWmCGlT52LwUQIwuJZWp82yS8uyFJ4xfTP
xA0Y8J8CAwEAAaOCC3UwggtxMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU/51COGN/
99vnejx7ChZlFa3p+zwwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw
bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnLzCCCSkGA1UdEQSCCSAwggkcghNhZHZheGlzLmdjcy13
ZWIuY29tghJha2ViaWEuZ2NzLXdlYi5jb22CEmFsbGV0ZS5nY3Mtd2ViLmNvbYIe
YW1pY3VzdGhlcmFwZXV0aWNzLmdjcy13ZWIuY29tgiNhcmN0dXJ1c3RoZXJhcGV1
dGljc2luYy5nY3Mtd2ViLmNvbYIWYnVpbGRhYmVhci5nY3Mtd2ViLmNvbYIqY29j
YWNvbGFib3R0bGluZ2NvY29uc29saWRhdGVkLmdjcy13ZWIuY29tghNjb2RleGlz
Lmdjcy13ZWIuY29tgiZjb21tc2NvcGVob2xkaW5nY29tcGFueWluYy5nY3Mtd2Vi
LmNvbYIaY29vcGVyc3RhbmRhcmQuZ2NzLXdlYi5jb22CFmRha3Ryb25pY3MuZ2Nz
LXdlYi5jb22CFWRlbW9icnljZS5nY3Mtd2ViLmNvbYITZGljZXJuYS5nY3Mtd2Vi
LmNvbYIVZWRhcHRtc3NhLmdjcy13ZWIuY29tghhleHRyYWN0aW9ub2cuZ2NzLXdl
Yi5jb22CImdpYnJhbHRhcmluZHVzdHJpZXNpbmMuZ2NzLXdlYi5jb22CGGdyaWRk
eW5hbWljcy5nY3Mtd2ViLmNvbYImaG9va2VyZnVybml0dXJlY29ycG9yYXRpb24u
Z2NzLXdlYi5jb22CFGh1Ymdyb3VwLmdjcy13ZWIuY29tghNoeXJlY2FyLmdjcy13
ZWIuY29tghNpbWFyYXR4Lmdjcy13ZWIuY29tgiVpbnN0YWxsZWRidWlsZGluZ3By
b2R1Y3RzLmdjcy13ZWIuY29tgh5pbnN1bGV0Y29ycG9yYXRpb24uZ2NzLXdlYi5j
b22CFmludGVzdGNvcnAuZ2NzLXdlYi5jb22CE2ludmVzdG9yLmFsbGV0ZS5jb22C
HWludmVzdG9yLmNva2Vjb25zb2xpZGF0ZWQuY29tghdpbnZlc3Rvci5kYWt0cm9u
aWNzLmNvbYIWaW52ZXN0b3IuZGVtb2JyeWNlLmNvbYIVaW52ZXN0b3IuZWRhcC10
bXMuY29tghRpbnZlc3Rvci5pbnN1bGV0LmNvbYISaW52ZXN0b3Iua29kYWsuY29t
ghRpbnZlc3Rvci5ta3NpbnN0LmNvbYIcaW52ZXN0b3IucnVzaGVudGVycHJpc2Vz
LmNvbYIUaW52ZXN0b3IudHJpbWJsZS5jb22CFWludmVzdG9ycy5kaWNlcm5hLmNv
bYIdaW52ZXN0b3JzLmhvb2tlcmZ1cm5pdHVyZS5jb22CFmludmVzdG9ycy5odWJn
cm91cC5jb22CJ2ludmVzdG9ycy5pbnN0YWxsZWRidWlsZGluZ3Byb2R1Y3RzLmNv
bYIVaW52ZXN0b3JzLmluc3VsZXQuY29tghppbnZlc3RvcnMubHVtb3MtcGhhcm1h
LmNvbYIeaW52ZXN0b3JzLmx5cmF0aGVyYXBldXRpY3MuY29tgiJpbnZlc3RvcnMu
bWF0cml4c2VydmljZWNvbXBhbnkuY29tgh5pbnZlc3RvcnMubW9saW5haGVhbHRo
Y2FyZS5jb22CGWludmVzdG9ycy5vd2Vucy1taW5vci5jb22CFWludmVzdG9ycy5w
YXJzb25zLmNvbYIYaW52ZXN0b3JzLnBzaWVuZ2luZXMuY29tghVpbnZlc3RvcnMu
cHVsbW9ueC5jb22CEWludmVzdG9ycy53bWcuY29tghZpbnZlc3RvcnMueHByZXNz
cGEuY29tgg5pci5hZHZheGlzLmNvbYINaXIuYWtlYmlhLmNvbYIPaXIuYW1pY3Vz
cnguY29tghFpci5hcmN0dXJ1c3J4LmNvbYIRaXIuYnVpbGRhYmVhci5jb22CDmly
LmNvZGV4aXMuY29tghBpci5jb21tc2NvcGUuY29tghNpci5leHRyYWN0aW9ub2cu
Y29tghFpci5naWJyYWx0YXIxLmNvbYITaXIuZ3JpZGR5bmFtaWNzLmNvbYIOaXIu
aHlyZWNhci5jb22CDmlyLmltYXJhdHguY29tgg1pci5pbnRlc3QuY29tgg9pci5s
dGJyaWRnZS5jb22CG2lyLm1pZGNvbmVuZXJneXBhcnRuZXJzLmNvbYINaXIucHV5
aXdtLmNvbYIOaXIuc29sLWdlbC5jb22CDWlyLnNwcGx1cy5jb22CD2lyLnN1cGVy
bnVzLmNvbYIOaXIudGVuYXJpcy5jb22CEWtvZGFrLmdjcy13ZWIuY29tghtsZWFw
ZnJvZy1zc2wtMjYuZ2NzLXdlYi5jb22CImxpZ2h0YnJpZGdlY29ycG9yYXRpb24u
Z2NzLXdlYi5jb22CGGx1bW9zLXBoYXJtYS5nY3Mtd2ViLmNvbYIcbHlyYXRoZXJh
cGV1dGljcy5nY3Mtd2ViLmNvbYIgbWF0cml4c2VydmljZWNvbXBhbnkuZ2NzLXdl
Yi5jb22CIG1pZGNvbmVuZXJneXBhcnRuZXJzLmdjcy13ZWIuY29tgh1ta3NpbnN0
cnVtZW50c2luYy5nY3Mtd2ViLmNvbYIcbW9saW5haGVhbHRoY2FyZS5nY3Mtd2Vi
LmNvbYImbmV3bGlua2dlbmV0aWNzY29ycG9yYXRpb24uZ2NzLXdlYi5jb22CFm93
ZW5zbWlub3IuZ2NzLXdlYi5jb22CE3BhcnNvbnMuZ2NzLXdlYi5jb22CFnBzaWVu
Z2luZXMuZ2NzLXdlYi5jb22CE3B1bG1vbnguZ2NzLXdlYi5jb22CEHB1eWkuZ2Nz
LXdlYi5jb22CG3J1c2hlbnRlcnByaXNlcy5nY3Mtd2ViLmNvbYISc29sZ2VsLmdj
cy13ZWIuY29tgh1zcHBsdXNjb3Jwb3JhdGlvbi5nY3Mtd2ViLmNvbYIUc3VwZXJu
dXMuZ2NzLXdlYi5jb22CFXRlbmFyaXNzYS5nY3Mtd2ViLmNvbYIWdHJpbWJsZWlu
Yy5nY3Mtd2ViLmNvbYIcd2FybmVybXVzaWNncm91cC5nY3Mtd2ViLmNvbYIPd3d3
LmFkdmF4aXMuY29tghl3d3cuaXIuY29vcGVyc3RhbmRhcmQuY29tghR4cHJlc3Nw
YS5nY3Mtd2ViLmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEB
ATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQG
CisGAQQB1nkCBAIEgfUEgfIA8AB2ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJ
Uy3vi5BeAAABcMlopVcAAAQDAEcwRQIhAPwnEeISCipr761xqkcVVU3r6C55P5RD
hkf6TOUE4ct8AiAjjufPwE+KVAxUl0yF7AxPPmXbanqaau3Ivelcv4T5HwB2AG9T
dqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABcMlopYEAAAQDAEcwRQIg
RM93CGbqoKhA1vRLbzYTQxSLAGqRzN0GNGZlbmYPXqsCIQDfUlH5f3Jikm0gqWE4
4+Tc1k5MUeio2tko5spNMtTlfTANBgkqhkiG9w0BAQsFAAOCAQEALZSZUCJWMOY5
tU7u30GWCLy9TLoxBPQvIK3loJ4bEsyjLgLVZtoICsqC0CbTtRmDKL/FFLDiftxu
yCIzzOOtVd7NkFds51QYFA7elkbQNOf18iCFIWolWq7DDl7ieh0Elt6MrsMzus7z
bpjMZbIkzgfNGeIAGOAalYXMRjLubsHwUcUqHBDfNkZHSh6XODpAVLQZng5zg0+f
hYUs7yTTHoRjkzRkkLj4TBzkMyavC8o/2nIDdVmsE6BhiQlutTZrMJn5yvxLKOQf
DtqaPQaZDKmufHz4rZoPovKuoI0ZqpeLxFnjvWVvJmu5pm3g8AWymKYcw4XjfzEN
eT/GVX+k8A==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qL9hGvcekznNpJUbEj8
bpP7iooKbZpVi2TK2BFpSEjFzjiZjVhEAvoHwG21zblBjKV8Td4acSdPKJ8eiSdu
LQvH0q0k8uo9iwp3+RxTU5VnJzU/XQciGF3X4UqUDICIiV7JAmNrdmpO6N0xeisZ
EUsAV0aPbJ9Zu1PjLAm/CNI4Qb+8XCgD5y57CLsU4mXllqeNSdnJdhguTw3TZ3ut
iUkMqUqKqzfHnq2jmyac82xWLjFvivtuZdbymQGEKXGurH+1ywS3AFBQhek6Q/ol
vYMBkQEO0QlzFcH6IKeaGly/ApaYIaVPnYvBRAjC4llanzbJLy7IUnjF9M/EDRjw
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326837107405042560679572081688669480704549
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-11 10:44:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-09 10:44:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-26.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29115183655592253672866100556820870355771852772700711303446881611430351151886029443632345092304641740342639373194310508902390065698662387962192223727460537060045612920970936350279640815837042719564195128096603540771282254512746170158296675631846604322673625148866306145440030403830335248383853574614675619969722974911970438367638876255369426508367567496407719852440425764879550264612834072637542374947927918634025915903991935018456496754439937734298070818347033155484780096806636395327389318835854760808217142696465290368059126795753374070917596188922355287015505937661816218856775472801100751055374427025106877870239
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ff9d4238637ff7dbe77a3c7b0a166515ade9fb3c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2336 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advaxis.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akebia.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allete.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amicustherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arcturustherapeuticsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildabear.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cocacolabottlingcoconsolidated.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codexis.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commscopeholdingcompanyinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cooperstandard.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daktronics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demobryce.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dicerna.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edaptmssa.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extractionog.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gibraltarindustriesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'griddynamics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hookerfurniturecorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hubgroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyrecar.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imaratx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'installedbuildingproducts.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insuletcorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intestcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.allete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.cokeconsolidated.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.daktronics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.demobryce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.edap-tms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.insulet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.kodak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.mksinst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.rushenterprises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.trimble.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.dicerna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.hookerfurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.hubgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.installedbuildingproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.insulet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.lumos-pharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.lyratherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.matrixservicecompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.molinahealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.owens-minor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.parsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.psiengines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.pulmonx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.wmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.xpresspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.advaxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.akebia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.amicusrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.arcturusrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.buildabear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.codexis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.commscope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.extractionog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gibraltar1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.griddynamics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.hyrecar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.imaratx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.intest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ltbridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.midconenergypartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.puyiwm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.sol-gel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.spplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.supernus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tenaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kodak.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-26.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightbridgecorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumos-pharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyratherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matrixservicecompany.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midconenergypartners.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mksinstrumentsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'molinahealthcare.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newlinkgeneticscorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owensminor.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parsons.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psiengines.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulmonx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puyi.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rushenterprises.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solgel.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sppluscorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supernus.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenarissa.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trimbleinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warnermusicgroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advaxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ir.cooperstandard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xpresspa.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170c968a5570000040300473045022100fc2711e2120a2a6befad71aa4715554debe82e793f94438647fa4ce504e1cb7c0220238ee7cfc04f8a540c54974c85ec0c4f3e65db6a7a9a6aedc8bde95cbf84f91f0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170c968a5810000040300473045022044cf770866eaa0a840d6f44b6f361343148b006a91ccdd063466656e660f5eab022100df5251f97f7262926d20a96138e3e4dcd64e4c51e8a8dad928e6ca4d32d4e57d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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