leapfrog-ssl-33.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 03:01:a2:07:9d:e4:1d:45:bc:6b:44:c5:81:c1:e6:35:17:1a was issued on by Let's Encrypt.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-33.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:01:a2:07:9d:e4:1d:45:bc:6b:44:c5:81:c1:e6:35:17:1a
Serial Number (int): 261892514646008232716053443424737025136410
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 83:b5:30:4e:a2:b0:fd:1e:d7:bc:0e:88:e7:8b:cc:b9:d5:21:a4:a9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): cc:91:1c:89:0f:76:31:1a:52:6c:23:38:cd:0d:35:a7:78:25:1b:01
Fingerprint (sha256): 34:f2:3d:f7:e0:f9:d5:2f:8d:33:6a:52:cd:e1:41:e6:93:a4:e7:00:e2:5d:d2:29:84:16:ee:c4:29:92:bd:dd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-33.gcs-web.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-33.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ahbelocorporation.gcs-web.com
allovir.gcs-web.com
biohaven.gcs-web.com
bitautoholdingslimited.gcs-web.com
carrols.gcs-web.com
catalystbiosciencesinc.gcs-web.com
checkmatepharma.gcs-web.com
churchilldownsincorporated.gcs-web.com
colonycapital.gcs-web.com
constellationpharmaceuticals.gcs-web.com
consumerportfolioservicesinc.gcs-web.com
cowen.gcs-web.com
crinetics.gcs-web.com
decibeltherapeutics.gcs-web.com
duckcreek.gcs-web.com
dynetx.gcs-web.com
fennecpharmaceuticalsinc.gcs-web.com
firsthawaiianinc.gcs-web.com
flir.gcs-web.com
healthstreaminc.gcs-web.com
ibexglobal.gcs-web.com
inozymepharma.gcs-web.com
investor.ahbelo.com
investor.carrols.com
investor.cowen.com
investor.pddholdings.com
investor.pinduoduo.com
investor.streamlinehealth.net
investors.dyne-tx.com
investors.fennecpharma.com
investors.flir.com
investors.ibex.co
investors.inozyme.com
investors.invivotherapeutics.com
investors.luminartech.com
investors.marchex.com
investors.merrimack.com
investors.merrimackpharma.com
investors.nanox.vision
investors.predictive-oncology.com
investors.skylinemedical.com
investors.soleno.life
investors.solidpowerbattery.com
investors.surfaceoncology.com
investors.tcr2.com
invivotherapeutics.gcs-web.com
ir.allovir.com
ir.biohaven.com
ir.catalystbiosciences.com
ir.checkmatepharma.com
ir.churchilldownsincorporated.com
ir.clny.com
ir.consumerportfolio.com
ir.crinetics.com
ir.decibeltx.com
ir.duckcreek.com
ir.fhb.com
ir.healthstream.com
ir.lixiang.com
ir.npcinternational.com
ir.nurixtx.com
ir.quanterix.com
ir.solidpowerbattery.com
ir.tejonranch.com
ir.transenterix.com
ir.twindisc.com
ir.vertexinc.com
kcapfinancial.gcs-web.com
leapfrog-ssl-33.gcs-web.com
liauto.gcs-web.com
luminartech.gcs-web.com
marchex.gcs-web.com
medtronic.gcs-web.com
merrimack.gcs-web.com
nano-ximaging.gcs-web.com
newsroom.medtronic.com
npcinternationalinc.gcs-web.com
nurixtx.gcs-web.com
oasismidstreampartners.gcs-web.com
oilstatesintl.gcs-web.com
pinduoduo.gcs-web.com
quanterixcorporation.gcs-web.com
skylinemedicalinc.gcs-web.com
snowflake.gcs-web.com
soleno.gcs-web.com
solidpowerbattery.gcs-web.com
streamlinehealth.gcs-web.com
surfaceoncology.gcs-web.com
tcr2.gcs-web.com
tejonranch.gcs-web.com
transenterixinc.gcs-web.com
twindisc.gcs-web.com
universalcorp.gcs-web.com
vastaedu.gcs-web.com
vertexinc.gcs-web.com
www.ir.oilstatesintl.com
www.portmanridge.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-33.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOtDCCDZygAwIBAgISAwGiB53kHUW8a0TFgcHmNRcaMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzAxMjQxNzUzNTRaFw0yMzA0MjQxNzUzNTNaMCYxJDAiBgNVBAMT
G2xlYXBmcm9nLXNzbC0zMy5nY3Mtd2ViLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOlQDvrSryr9iIrjKkjxlEpJTV2EmzaSIN2g6PvTCi96fyxj
Dm2oDCLFOI55X3OsGI0yJfCJkk+7u8WMXVoi5NA5eHz6N/9F1VOB4sfgmLzM32Uj
y54TN7H3LXiwUrLfztVk3Fr5SisKOh62adYuFc1deieUNwhSMLVWaxkS8/UU9ZcX
ZRY4pJf09wGgTOyC8DjURitKi5mUdaZyXYghOiNOxWh7WmVL/HgbYbDf3R4QYaFv
n4U0v2wQaJaBVAIFS9xdm1apqqjxzjIC0B1HF9D7Yf75zpiYh5vZehaLiYWp+DwX
IGWx1VGX0Oz4n+8q6cJ+cjz+Al60PzMEAV6KtoMCAwEAAaOCC84wggvKMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T
AQH/BAIwADAdBgNVHQ4EFgQUg7UwTqKw/R7XvA6I54vMudUhpKkwHwYDVR0jBBgw
FoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUF
BzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9y
My5pLmxlbmNyLm9yZy8wggmdBgNVHREEggmUMIIJkIIdYWhiZWxvY29ycG9yYXRp
b24uZ2NzLXdlYi5jb22CE2FsbG92aXIuZ2NzLXdlYi5jb22CFGJpb2hhdmVuLmdj
cy13ZWIuY29tgiJiaXRhdXRvaG9sZGluZ3NsaW1pdGVkLmdjcy13ZWIuY29tghNj
YXJyb2xzLmdjcy13ZWIuY29tgiJjYXRhbHlzdGJpb3NjaWVuY2VzaW5jLmdjcy13
ZWIuY29tghtjaGVja21hdGVwaGFybWEuZ2NzLXdlYi5jb22CJmNodXJjaGlsbGRv
d25zaW5jb3Jwb3JhdGVkLmdjcy13ZWIuY29tghljb2xvbnljYXBpdGFsLmdjcy13
ZWIuY29tgihjb25zdGVsbGF0aW9ucGhhcm1hY2V1dGljYWxzLmdjcy13ZWIuY29t
gihjb25zdW1lcnBvcnRmb2xpb3NlcnZpY2VzaW5jLmdjcy13ZWIuY29tghFjb3dl
bi5nY3Mtd2ViLmNvbYIVY3JpbmV0aWNzLmdjcy13ZWIuY29tgh9kZWNpYmVsdGhl
cmFwZXV0aWNzLmdjcy13ZWIuY29tghVkdWNrY3JlZWsuZ2NzLXdlYi5jb22CEmR5
bmV0eC5nY3Mtd2ViLmNvbYIkZmVubmVjcGhhcm1hY2V1dGljYWxzaW5jLmdjcy13
ZWIuY29tghxmaXJzdGhhd2FpaWFuaW5jLmdjcy13ZWIuY29tghBmbGlyLmdjcy13
ZWIuY29tghtoZWFsdGhzdHJlYW1pbmMuZ2NzLXdlYi5jb22CFmliZXhnbG9iYWwu
Z2NzLXdlYi5jb22CGWlub3p5bWVwaGFybWEuZ2NzLXdlYi5jb22CE2ludmVzdG9y
LmFoYmVsby5jb22CFGludmVzdG9yLmNhcnJvbHMuY29tghJpbnZlc3Rvci5jb3dl
bi5jb22CGGludmVzdG9yLnBkZGhvbGRpbmdzLmNvbYIWaW52ZXN0b3IucGluZHVv
ZHVvLmNvbYIdaW52ZXN0b3Iuc3RyZWFtbGluZWhlYWx0aC5uZXSCFWludmVzdG9y
cy5keW5lLXR4LmNvbYIaaW52ZXN0b3JzLmZlbm5lY3BoYXJtYS5jb22CEmludmVz
dG9ycy5mbGlyLmNvbYIRaW52ZXN0b3JzLmliZXguY2+CFWludmVzdG9ycy5pbm96
eW1lLmNvbYIgaW52ZXN0b3JzLmludml2b3RoZXJhcGV1dGljcy5jb22CGWludmVz
dG9ycy5sdW1pbmFydGVjaC5jb22CFWludmVzdG9ycy5tYXJjaGV4LmNvbYIXaW52
ZXN0b3JzLm1lcnJpbWFjay5jb22CHWludmVzdG9ycy5tZXJyaW1hY2twaGFybWEu
Y29tghZpbnZlc3RvcnMubmFub3gudmlzaW9ugiFpbnZlc3RvcnMucHJlZGljdGl2
ZS1vbmNvbG9neS5jb22CHGludmVzdG9ycy5za3lsaW5lbWVkaWNhbC5jb22CFWlu
dmVzdG9ycy5zb2xlbm8ubGlmZYIfaW52ZXN0b3JzLnNvbGlkcG93ZXJiYXR0ZXJ5
LmNvbYIdaW52ZXN0b3JzLnN1cmZhY2VvbmNvbG9neS5jb22CEmludmVzdG9ycy50
Y3IyLmNvbYIeaW52aXZvdGhlcmFwZXV0aWNzLmdjcy13ZWIuY29tgg5pci5hbGxv
dmlyLmNvbYIPaXIuYmlvaGF2ZW4uY29tghppci5jYXRhbHlzdGJpb3NjaWVuY2Vz
LmNvbYIWaXIuY2hlY2ttYXRlcGhhcm1hLmNvbYIhaXIuY2h1cmNoaWxsZG93bnNp
bmNvcnBvcmF0ZWQuY29tggtpci5jbG55LmNvbYIYaXIuY29uc3VtZXJwb3J0Zm9s
aW8uY29tghBpci5jcmluZXRpY3MuY29tghBpci5kZWNpYmVsdHguY29tghBpci5k
dWNrY3JlZWsuY29tggppci5maGIuY29tghNpci5oZWFsdGhzdHJlYW0uY29tgg5p
ci5saXhpYW5nLmNvbYIXaXIubnBjaW50ZXJuYXRpb25hbC5jb22CDmlyLm51cml4
dHguY29tghBpci5xdWFudGVyaXguY29tghhpci5zb2xpZHBvd2VyYmF0dGVyeS5j
b22CEWlyLnRlam9ucmFuY2guY29tghNpci50cmFuc2VudGVyaXguY29tgg9pci50
d2luZGlzYy5jb22CEGlyLnZlcnRleGluYy5jb22CGWtjYXBmaW5hbmNpYWwuZ2Nz
LXdlYi5jb22CG2xlYXBmcm9nLXNzbC0zMy5nY3Mtd2ViLmNvbYISbGlhdXRvLmdj
cy13ZWIuY29tghdsdW1pbmFydGVjaC5nY3Mtd2ViLmNvbYITbWFyY2hleC5nY3Mt
d2ViLmNvbYIVbWVkdHJvbmljLmdjcy13ZWIuY29tghVtZXJyaW1hY2suZ2NzLXdl
Yi5jb22CGW5hbm8teGltYWdpbmcuZ2NzLXdlYi5jb22CFm5ld3Nyb29tLm1lZHRy
b25pYy5jb22CH25wY2ludGVybmF0aW9uYWxpbmMuZ2NzLXdlYi5jb22CE251cml4
dHguZ2NzLXdlYi5jb22CIm9hc2lzbWlkc3RyZWFtcGFydG5lcnMuZ2NzLXdlYi5j
b22CGW9pbHN0YXRlc2ludGwuZ2NzLXdlYi5jb22CFXBpbmR1b2R1by5nY3Mtd2Vi
LmNvbYIgcXVhbnRlcml4Y29ycG9yYXRpb24uZ2NzLXdlYi5jb22CHXNreWxpbmVt
ZWRpY2FsaW5jLmdjcy13ZWIuY29tghVzbm93Zmxha2UuZ2NzLXdlYi5jb22CEnNv
bGVuby5nY3Mtd2ViLmNvbYIdc29saWRwb3dlcmJhdHRlcnkuZ2NzLXdlYi5jb22C
HHN0cmVhbWxpbmVoZWFsdGguZ2NzLXdlYi5jb22CG3N1cmZhY2VvbmNvbG9neS5n
Y3Mtd2ViLmNvbYIQdGNyMi5nY3Mtd2ViLmNvbYIWdGVqb25yYW5jaC5nY3Mtd2Vi
LmNvbYIbdHJhbnNlbnRlcml4aW5jLmdjcy13ZWIuY29tghR0d2luZGlzYy5nY3Mt
d2ViLmNvbYIZdW5pdmVyc2FsY29ycC5nY3Mtd2ViLmNvbYIUdmFzdGFlZHUuZ2Nz
LXdlYi5jb22CFXZlcnRleGluYy5nY3Mtd2ViLmNvbYIYd3d3LmlyLm9pbHN0YXRl
c2ludGwuY29tghR3d3cucG9ydG1hbnJpZGdlLmNvbTBMBgNVHSAERTBDMAgGBmeB
DAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxl
dHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2ALc++yTfnE26
dfI5xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABheUhLE0AAAQDAEcwRQIgdkolEHFD
EKHNfg2a40Xdj2x/8STWN6mDjcvhe1YdJOYCIQDR1klnCIwzlAb70OoYf/o8z7Fr
tY7I4r8umgc7Men2XgB1AK33vvp8/xDIi509nB4+GGq0Zyldz7EMJMqFhjTr3IKK
AAABheUhLJYAAAQDAEYwRAIgTSxZ2VJMKl5PXz/hTAJLEcXL0xG07rhnq977hB8T
8BECIDYGeG9A67indgirO2aV9Nh/5QAD96zv4dHGxWZYoNNaMA0GCSqGSIb3DQEB
CwUAA4IBAQAsEBQfrbYQVrJTqo+S7HXoJDyXqfyqZmbz6Fl5ZppsCAhRH78zHX+y
9IWje/1uzai7m7p8hA3j0sidWQZKJGDouhUvY4a6v0PQt3RmsiiEjYRweuIMfVeS
uZzKe9hz+rvDDSg7lzoVrPXc/0lCp0FNeUa1/+hxVNWzeX1UaX6PWnV7l8bn4SwZ
hfG754uyBZtCWNbegvcbNeFJieS9wROnswRwTg+rIr8M68N1gRziQnDqtR9BfB9q
zc6fNQ5wP2bvUK5EGn6BLlLBLlklVPi++XKJIneD+vbdXxMadt4qZ/XhAST4NkY5
IV+P4mb08p534YThjaiih9yl8tI0j404
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6VAO+tKvKv2IiuMqSPGU
SklNXYSbNpIg3aDo+9MKL3p/LGMObagMIsU4jnlfc6wYjTIl8ImST7u7xYxdWiLk
0Dl4fPo3/0XVU4Hix+CYvMzfZSPLnhM3sfcteLBSst/O1WTcWvlKKwo6HrZp1i4V
zV16J5Q3CFIwtVZrGRLz9RT1lxdlFjikl/T3AaBM7ILwONRGK0qLmZR1pnJdiCE6
I07FaHtaZUv8eBthsN/dHhBhoW+fhTS/bBBoloFUAgVL3F2bVqmqqPHOMgLQHUcX
0Pth/vnOmJiHm9l6FouJhan4PBcgZbHVUZfQ7Pif7yrpwn5yPP4CXrQ/MwQBXoq2
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 261892514646008232716053443424737025136410
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-24 17:53:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-24 17:53:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-33.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29453003382094684815873269110306151828286157727364248819235899570173007473862992259261420935315144745696288583139980530628498859472862030807825519382239312642448031512908678890975101527051513293386618780551985654967883905357094726012467013291845857841657623806737420673350395108289530987904198035602183666779309443946457582030971599894180705137735025139162365709403457704412994947291780343150974386055203633469860293762843041919697687908631478850954890202549322505736130298741141350791052688648933355488668907937741337512115671995881499718377029891077055078288663585140745740385551816263368366856685540439551520716419
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							83b5304ea2b0fd1ed7bc0e88e78bccb9d521a4a9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2452 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahbelocorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allovir.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biohaven.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitautoholdingslimited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrols.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalystbiosciencesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkmatepharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'churchilldownsincorporated.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colonycapital.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'constellationpharmaceuticals.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consumerportfolioservicesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cowen.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crinetics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decibeltherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duckcreek.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynetx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fennecpharmaceuticalsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firsthawaiianinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flir.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthstreaminc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibexglobal.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inozymepharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.ahbelo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.carrols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.cowen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.pddholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.pinduoduo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.streamlinehealth.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.dyne-tx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.fennecpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.flir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ibex.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.inozyme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.invivotherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.luminartech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.marchex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.merrimack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.merrimackpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.nanox.vision'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.predictive-oncology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.skylinemedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.soleno.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.solidpowerbattery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.surfaceoncology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.tcr2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invivotherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.allovir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.biohaven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.catalystbiosciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.checkmatepharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.churchilldownsincorporated.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.clny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.consumerportfolio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.crinetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.decibeltx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.duckcreek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.fhb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.healthstream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.lixiang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.npcinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.nurixtx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.quanterix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.solidpowerbattery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tejonranch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.transenterix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.twindisc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vertexinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcapfinancial.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-33.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liauto.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luminartech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marchex.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medtronic.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merrimack.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nano-ximaging.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.medtronic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'npcinternationalinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nurixtx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oasismidstreampartners.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oilstatesintl.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinduoduo.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quanterixcorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skylinemedicalinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snowflake.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soleno.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solidpowerbattery.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streamlinehealth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surfaceoncology.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcr2.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tejonranch.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transenterixinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twindisc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vastaedu.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vertexinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ir.oilstatesintl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portmanridge.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000185e5212c4d00000403004730450220764a2510714310a1cd7e0d9ae345dd8f6c7ff124d637a9838dcbe17b561d24e6022100d1d64967088c339406fbd0ea187ffa3ccfb16bb58ec8e2bf2e9a073b31e9f65e007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000185e5212c96000004030046304402204d2c59d9524c2a5e4f5f3fe14c024b11c5cbd311b4eeb867abdefb841f13f01102203606786f40ebb8a77608ab3b6695f4d87fe50003f7acefe1d1c6c56658a0d35a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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