leapfrog-ssl-7.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:58:1e:1d:31:74:92:df:57:e0:80:ba:85:4a:64:17:8e:72 was issued on by Let's Encrypt.

With 82 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-7.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:58:1e:1d:31:74:92:df:57:e0:80:ba:85:4a:64:17:8e:72
Serial Number (int): 378434020435640008604926339992041547075186
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9a:6f:64:2b:55:31:d0:98:7e:04:74:82:c4:66:c5:1a:6d:92:0c:e6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 27:13:3c:2b:e7:73:e5:63:0b:26:2f:bf:2b:7b:a6:ad:65:86:0f:ef
Fingerprint (sha256): 28:b3:99:c1:e7:08:e0:a2:36:c0:09:40:c1:83:4a:d5:36:db:fb:45:46:56:d0:e7:96:ac:66:dc:e1:3f:7f:5b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-7.gcs-web.com

82

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-7.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alkermes.gcs-web.com
amaraholdings.gcs-web.com
americanfinancialgroup.gcs-web.com
anikatherapeuticsinc.gcs-web.com
aristocratleisurelimited.gcs-web.com
bcrhbluecapital.gcs-web.com
blackstoneminerals.gcs-web.com
bluecapital.gcs-web.com
btsgroupab.gcs-web.com
carbonite.gcs-web.com
carriageservices.gcs-web.com
cititrendsinc.gcs-web.com
corporate.finishline.com
cutera.gcs-web.com
determineinc.gcs-web.com
dish.gcs-web.com
ebosgroup.gcs-web.com
finishline.gcs-web.com
gartner.gcs-web.com
genmab.gcs-web.com
goldreserve.gcs-web.com
hanesbrandsinc.gcs-web.com
incyte.gcs-web.com
investor.alkermes.com
investor.blackstoneminerals.com
investor.carbonite.com
investor.determine.com
investor.ebosgroup.com
investor.mysportsclubs.com
investor.northeastbank.com
investor.pandora.net
investor.pandoragroup.com
investor.scotts.com
investor.synaptics.com
investor.velodyne.com
investor.velodynelidar.com
investors.carriageservices.com
investors.la-z-boy.com
investors.symetra.com
investors.tactilemedical.com
investors.thomsonreuters.com
investors.velodyne.com
investors.velodynelidar.com
ir-bcai.bluecapital.bm
ir-bcrh.bluecapital.bm
ir.amaraholdings.com
ir.anikatherapeutics.com
ir.aristocrat.com
ir.bts.com
ir.cititrends.com
ir.cutera.com
ir.dish.com
ir.genmab.com
ir.goldreserveinc.com
ir.hanesbrands.com
ir.jd.com
ir.mondelezinternational.com
ir.qad.com
ir.thomsonreuters.com
ir.unisys.com
ir.velodyne.com
ir.velodynelidar.com
jdcominc.gcs-web.com
la-z-boy.gcs-web.com
lazboy.gcs-web.com
leapfrog-ssl-7.gcs-web.com
matas.gcs-web.com
mondelezinternational.gcs-web.com
mysportsclubs.gcs-web.com
northeastbancorp.gcs-web.com
pandoragroup.gcs-web.com
qad.gcs-web.com
scottsmiraclegro.gcs-web.com
sevenstarscloud.gcs-web.com
symetra.gcs-web.com
synaptics.gcs-web.com
tactilemedical.gcs-web.com
thomsonreuters.gcs-web.com
unisys.gcs-web.com
velodynelidar.gcs-web.com
www.afginc.com
www.townsportsinternational.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-7.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/CAaI4eE7zi6eXSu7009
JRIP5HiwJ5eU4sxTZTtUkslEj1kMtjpZV8Eyr9+t9jsJDAJmuhuGPoQ4KPGE/+KF
DGmGq/owBvneiB7tt3k+h5V0Ff3Bp2i+oX+uyeaMRqy2WzQueFkyYpC42gKxFfyx
JupxB4Y8pfc3TUie4RtnMDsQ1plPPmWQXXehAegzb3sDCbGnDupoiEsBWeXV6JZM
Ulqa9gge0iGRNAB6YsD7PBjrvQ8J30Kng4ixZHh2tGCTsKYRdSNu3I1XNEvjeZrb
FbKFk6CyVu+y1zPWUDKhLy7l5K/6lMP68EfpkhWC/Y8IKqC3noHOOlMH3gDLYTkx
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 378434020435640008604926339992041547075186
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-24 16:19:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-23 16:19:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-7.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31827882989239702995347945518170806155394539964897113883334615094418826098148718779035874452735519595069410929404377822477219019719741212634696936867061493772430562255493125385972432199517682450371826247289795238569404066916306375554079054029888297863718832735786843481199478634806684198900115812004298931116037746030611585533694141772225739567376899198906024421033798554860567785237330935737899427190884125588340657089723456465981599151535595539836696983315068268500228141733482869292198971335365541343526178856238607780572913993664183297378398372481071662236170138665732828347598982995424214394207449078786057384299
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9a6f642b5531d0987e047482c466c51a6d920ce6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1986 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alkermes.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amaraholdings.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americanfinancialgroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anikatherapeuticsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aristocratleisurelimited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcrhbluecapital.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackstoneminerals.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluecapital.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btsgroupab.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carbonite.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carriageservices.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cititrendsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.finishline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cutera.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'determineinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dish.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebosgroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finishline.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gartner.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genmab.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldreserve.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hanesbrandsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incyte.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.alkermes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.blackstoneminerals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.carbonite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.determine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.ebosgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.mysportsclubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.northeastbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.pandora.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.pandoragroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.scotts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.synaptics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.velodyne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.velodynelidar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.carriageservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.la-z-boy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.symetra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.tactilemedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.thomsonreuters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.velodyne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.velodynelidar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir-bcai.bluecapital.bm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir-bcrh.bluecapital.bm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.amaraholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.anikatherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.aristocrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.bts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cititrends.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cutera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.dish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.genmab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.goldreserveinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.hanesbrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.jd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mondelezinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.qad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.thomsonreuters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.unisys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.velodyne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.velodynelidar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jdcominc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'la-z-boy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lazboy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-7.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matas.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mondelezinternational.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysportsclubs.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northeastbancorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pandoragroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qad.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scottsmiraclegro.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sevenstarscloud.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'symetra.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synaptics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tactilemedical.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thomsonreuters.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unisys.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'velodynelidar.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afginc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townsportsinternational.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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