leapfrog-ssl-14.gcs-web.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:d8:66:fe:99:aa:fe:a0:63:e9:21:2a:97:30:c6:4f:87:e5 was issued on by Let's Encrypt.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-14.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d8:66:fe:99:aa:fe:a0:63:e9:21:2a:97:30:c6:4f:87:e5
Serial Number (int): 422087038197692084038409383586621981427685
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 86:5e:5b:5d:93:ad:e8:e6:23:c2:c9:c2:95:bf:a6:97:be:f7:c6:53
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fc:a1:f1:df:4d:48:da:c5:cc:ad:f3:3a:93:c3:8e:ba:ea:82:80:ff
Fingerprint (sha256): 2b:96:7e:93:22:97:47:1b:23:bd:3f:1c:73:06:77:62:5a:76:34:d7:79:63:b8:5d:ae:3a:59:e1:b4:7f:92:6a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate leapfrog-ssl-14.gcs-web.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-14.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

360finance.gcs-web.com
aclaristherapeuticsinc.gcs-web.com
agilitihealth.gcs-web.com
alector.gcs-web.com
alight.gcs-web.com
approachresources.gcs-web.com
cibus.gcs-web.com
ciriustx.gcs-web.com
classvtransaction-delltechnologies.gcs-web.com
classvtransactiondelltechnologies.gcs-web.com
coherusbioscience.gcs-web.com
control4corporation.gcs-web.com
cyclerion.gcs-web.com
dermavantsciences.gcs-web.com
dukerealtycorporation.gcs-web.com
dvmttransaction.delltechnologies.com
foamix.gcs-web.com
fticonsulting.gcs-web.com
futuholdings.gcs-web.com
gtxinc.gcs-web.com
innovivainc.gcs-web.com
investor.aclaristx.com
investor.dukerealty.com
investor.foamix.com
investor.inva.com
investor.manpower.com
investor.manpowergroup.com
investor.newpark.com
investorrelations.sarepta.com
investors.agilitihealth.com
investors.alector.com
investors.alight.com
investors.coherus.com
investors.dermavant.com
investors.foamix.com
investors.gtxinc.com
investors.ivericbio.com
investors.karyopharm.com
investors.leaptx.com
investors.modernatx.com
investors.rosettastone.com
investors.rrts.com
investors.twistbioscience.com
investors.unifirst.com
investors.viewray.com
ir.360jinrong.net
ir.approachresources.com
ir.aravive.com
ir.cibus.com
ir.ciriustx.com
ir.cyclerion.com
ir.fticonsulting.com
ir.futuholdings.com
ir.mccormick.com
ir.mirumpharma.com
ir.newellbrands.com
ir.oncobiologics.com
ir.orionmarinegroup.com
ir.outlooktherapeutics.com
ir.pintec.com
ir.svb.com
ir.tizianalifesciences.com
ir.wabteccorp.com
ivericbio.gcs-web.com
junipernetworkspr.gcs-web.com
karyopharm.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leaptherapeutics.gcs-web.com
manpowergroup.gcs-web.com
mccormickcorporation.gcs-web.com
mirumpharma.gcs-web.com
modernatx.gcs-web.com
newellbrands.gcs-web.com
newpark.gcs-web.com
newsroom.juniper.net
oncobiologics.gcs-web.com
ophthotech.gcs-web.com
oriongroupholdingsinc.gcs-web.com
pintec.gcs-web.com
pr.rosettastone.com
roadrunnertransportationsystemsinc.gcs-web.com
rosettastone.gcs-web.com
sarepta.gcs-web.com
sunrun.gcs-web.com
svb.gcs-web.com
tizianalifesciences.gcs-web.com
twistbiosciences.gcs-web.com
unifirstcorp.gcs-web.com
versartis.gcs-web.com
viewrayinc.gcs-web.com
wabtec.gcs-web.com
www.foamix.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-52.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-14.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9mOoI64+2ZrESbojw1l
RuBvhxvAgHAu83COBr+aRPO/sAkmzAihjGFB9Gt+DnM1XtinVCQaVRM2gBDGZRaY
nMb0hMmItkmXI4thXM8iEYdW8TWLiuc4J0tGANZFCfYc6PONrU5dpv0XPAkHlYHv
5nXn9A78wiJrQ2qDeSWXqbN7BXqXyFZ9YMemUTnqY3jsLpyWgeDO/zMybh9Y7QEq
uPDqJ2Meb946gBmq9Ax6JQq81QjzTpLPFcVDnrOFyW7o/fcO6pAkHaYc3bwy2D0m
JkqTXCcedLj18I6mh8lWwQZu5rJvo5izDlOSfzVlARaVYvvwTDRO73kstJ31nyw+
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 422087038197692084038409383586621981427685
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-11 17:05:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-09 17:05:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-14.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23713844451544788997564100986040161889921863859833880336797097921564727103169791922720903826347782922430001185150117381116372585681684077995772497466750433777813914118263115067233436074442740186557953063012172383129165158544939440943778339154663410091995312998433930387685876405999961968277500106644142838952572223819404111330424125741347141637553461208939180795223921835961641369659026880723946347011530228576441881515537591453467310787877635130022499900838930398914017848942475615320623251036739414858710541411570762656652117831155452516123207208597166615305794291416001942316803916163646759448209698800850646613609
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							865e5b5d93ade8e623c2c9c295bfa697bef7c653
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2298 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '360finance.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aclaristherapeuticsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agilitihealth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alector.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alight.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'approachresources.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cibus.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciriustx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classvtransaction-delltechnologies.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classvtransactiondelltechnologies.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coherusbioscience.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'control4corporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyclerion.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dermavantsciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dukerealtycorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvmttransaction.delltechnologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foamix.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fticonsulting.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futuholdings.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtxinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovivainc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.aclaristx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.dukerealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.foamix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.inva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.manpower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.manpowergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.newpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorrelations.sarepta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.agilitihealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.alector.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.alight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.coherus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.dermavant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.foamix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.gtxinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ivericbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.karyopharm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.leaptx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.modernatx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.rosettastone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.rrts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.twistbioscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.unifirst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.viewray.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.360jinrong.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.approachresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.aravive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cibus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ciriustx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cyclerion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.fticonsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.futuholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mccormick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mirumpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.newellbrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.oncobiologics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.orionmarinegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.outlooktherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.pintec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.svb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tizianalifesciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.wabteccorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivericbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'junipernetworkspr.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karyopharm.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-14.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leaptherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manpowergroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mccormickcorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mirumpharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modernatx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newellbrands.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newpark.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.juniper.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oncobiologics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ophthotech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oriongroupholdingsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pintec.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.rosettastone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roadrunnertransportationsystemsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosettastone.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sarepta.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunrun.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svb.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tizianalifesciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twistbiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unifirstcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'versartis.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viewrayinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wabtec.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foamix.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dbbff27ba0000040300483046022100e20c408b8063d6f955c75b2ddd5df30ec88849f1d96edd6b9300c7622ec66ba0022100cf9f4f1879298383d93c9c2c5872bb832ad8e48c15f1bfa7103a507ce0064e5a0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dbbff29cd000004030047304502210081be851d56ae4c2df77319b97847d9543b2888b8627793466390b01f4eff6c020220643607ac43ac7835d3795fa4256a8beb188c3706ebae5ecdb39ccd1cd6de9094
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002c19bde99a1d832b517fd034de92f4c15ee7eedf19f21c49a1e4ceed15418a85b7a46e3de8dc471a051af61cab3eccbf9c84b92fe7966ae98b19068a83826ddeae607144b114dddcf917e48b217853a07d3872305c176a3726a253c0872b99d972f20c98f4dacd5815c7de14cdea13af92a2ec919eae49290478c14f16e183c1b5129c6a2cba7b4c606fbd55fd94edd2617e76b3f0e8da588b1c63f90e19f114330a4918e777f0bd9cd8226350412b756c3a5cb6aa56ab5784b770ea6a33cf6fbaf1c21ce0b030ab208cb17da99322327681de90934f6bf6783bc0e0074609a2e5e2ac7b34f68d5eb6729843838880ae8bda40749d0487366aa751071be86e61