leapfrog-ssl-1.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:90:f1:dc:e3:d9:dc:59:41:a7:10:47:52:8d:4b:ea:71:47 was issued on by Let's Encrypt.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-1.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:90:f1:dc:e3:d9:dc:59:41:a7:10:47:52:8d:4b:ea:71:47
Serial Number (int): 397771295437316853613788425445797547110727
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3e:aa:b1:27:9d:48:81:2e:ef:32:fe:12:fa:05:6a:0d:9d:eb:4c:88
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b5:4a:e8:ca:26:c4:33:e8:2d:f7:31:d5:71:1f:5a:9a:18:dc:0f:8f
Fingerprint (sha256): 35:0e:92:f2:5e:92:2c:e0:2c:50:e7:d5:a8:28:1a:53:07:0a:0f:18:42:3b:aa:e3:e9:81:9b:2b:cd:98:53:c8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-1.gcs-web.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-1.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

akceatherapeutics.gcs-web.com
americancommerciallinesinc.gcs-web.com
amkortech.gcs-web.com
apellis.gcs-web.com
appliedindustrialtechnologies.gcs-web.com
arconic.gcs-web.com
arcticcat.gcs-web.com
axtinc.gcs-web.com
boisecascade.gcs-web.com
brighthousefinancial.gcs-web.com
bristowir.gcs-web.com
catabasispharmaceuticalsinc.gcs-web.com
celestica.gcs-web.com
centene.gcs-web.com
chsnet.gcs-web.com
cincinnatibell.gcs-web.com
compxinternational.gcs-web.com
corporate.celestica.com
cowen.gcs-web.com
cytrxcorporation.gcs-web.com
diodesinc.gcs-web.com
editasmedicine.gcs-web.com
enphaseenergy.gcs-web.com
enzon.gcs-web.com
etsy.gcs-web.com
faro.gcs-web.com
fifththirdbancorp.gcs-web.com
gencoshippingandtradinglimited.gcs-web.com
greatplainsenergy.gcs-web.com
hotus.gcs-web.com
iilg.gcs-web.com
innovatebiopharma.gcs-web.com
investor.brighthousefinancial.com
investor.enphase.com
investor.enzon.com
investor.landstar.com
investor.lantheus.com
investor.mediclinic.com
investors.mastec.com
investors.materialise.com
investors.rapid7.com
investors.solidbio.com
ir.amkor.com
ir.astriatx.com
ir.editasmedicine.com
ir.jinkosolar.com
ir.mediclinic.com
iterisinc.gcs-web.com
jamesriver.gcs-web.com
jinkosolar.gcs-web.com
kimballinternationalinc.gcs-web.com
kindredhealthcareinc.gcs-web.com
landstar.gcs-web.com
lantheusholdings.gcs-web.com
lbfostercompany.gcs-web.com
leapfrog-ssl-1.gcs-web.com
lemaitre.gcs-web.com
lifetimebrands.gcs-web.com
mastec.gcs-web.com
materialise.gcs-web.com
mediaroom.truecar.com
medicaltranscriptionbillingcorp.gcs-web.com
mediclinic.gcs-web.com
momentiveperformance.gcs-web.com
neuroderm.gcs-web.com
newfieldexploration.gcs-web.com
newsroom.enphase.com
odonate.gcs-web.com
piedmontnaturalgas.gcs-web.com
piedmontofficerealty.gcs-web.com
pixelworks.gcs-web.com
qcholdings.gcs-web.com
radioone.gcs-web.com
rapid7inc.gcs-web.com
republicairways.gcs-web.com
rljentertainment.gcs-web.com
rubytuesday.gcs-web.com
saia.gcs-web.com
secfilings.odonate.com
snapon.gcs-web.com
solarcapltd.gcs-web.com
solidbio.gcs-web.com
spartanmotors.gcs-web.com
strattec.gcs-web.com
tesscotechnologies.gcs-web.com
theshyftgroup.gcs-web.com
transdigmgroupinc.gcs-web.com
trexcompanyinc.gcs-web.com
true.gcs-web.com
ulta.gcs-web.com
www.investor.landstar.com
zumiez.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-52.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-1.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxe67pGzrxQrDXjNNbrdF
YDlnUIjNp6lLSaEgJOsu4X0iwKb+567pfzxkFYXpV2P/fOdH0OrLtqMzo/D7pJ+v
4Oa7e+xNjJSjUs5em0Te9iLB5FrlLWjJ+FnBspkciUCXLkcBMcb2J1rDtreNpj/i
dBKSOKx2g839nS+pffDQ9v0ZLKQK/8mNCVOndS7LSItW1HUtWXcxr9MDUZY4ZJnI
jzcbx+Okt8VI5LhdUFBqA7RQUzeZ5bGlIsAAN2r4pyxLjXR/q4WTdVB+UQxitxpO
gvuNIb0pjcwxmoOAER6ZAFE/iujzoMHFzBAZGD14wIJZGkK4MA7Xi3eiuGqmhoaV
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 397771295437316853613788425445797547110727
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-01 20:56:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-02 20:56:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-1.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24986669697228696453792952535885971960853895452545412800031479842849999664714283327908949224218050419380844520777444753949054057607181826446920720207695043810659089231685461584983474344874170489557778904863033350569603493299601903316732365095595888288052541248479106048507403921308909907521447299611142460454406337595818023440164725462827421207194951898275458545472125129550025746878020833897162635205731990219068524497822374547324780313307305570784120220607621908888056681382587513210694314618617256469980600461715516857675380405158498279091945740915770206199495431097195466437505979740668806325507570530128792819089
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3eaab1279d48812eef32fe12fa056a0d9deb4c88
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akceatherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americancommerciallinesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amkortech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apellis.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appliedindustrialtechnologies.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arconic.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arcticcat.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axtinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boisecascade.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brighthousefinancial.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bristowir.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catabasispharmaceuticalsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celestica.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centene.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chsnet.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cincinnatibell.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compxinternational.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.celestica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cowen.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cytrxcorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diodesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'editasmedicine.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enphaseenergy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enzon.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etsy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faro.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fifththirdbancorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gencoshippingandtradinglimited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatplainsenergy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotus.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iilg.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovatebiopharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.brighthousefinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.enphase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.enzon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.landstar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.lantheus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.mediclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.mastec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.materialise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.rapid7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.solidbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.amkor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.astriatx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.editasmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.jinkosolar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mediclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iterisinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamesriver.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jinkosolar.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kimballinternationalinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kindredhealthcareinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landstar.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lantheusholdings.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lbfostercompany.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-1.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lemaitre.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifetimebrands.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mastec.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'materialise.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaroom.truecar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicaltranscriptionbillingcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediclinic.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'momentiveperformance.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neuroderm.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newfieldexploration.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.enphase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odonate.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piedmontnaturalgas.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piedmontofficerealty.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pixelworks.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qcholdings.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radioone.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapid7inc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'republicairways.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rljentertainment.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rubytuesday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saia.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secfilings.odonate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snapon.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solarcapltd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solidbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spartanmotors.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strattec.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tesscotechnologies.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theshyftgroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transdigmgroupinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trexcompanyinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'true.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ulta.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investor.landstar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zumiez.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017eb749c48b00000403004830460221009ec72aa4b05f9f075ca1e8840e9404c6a02b0ba2b979df91c5d012c0be459fa3022100bf7b117ff008ed83776e6e99f1eba383ec1b45dbd1b05da80cce71c932f3125200770046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017eb749c4be0000040300483046022100ea48ac5113c6a4d49e53f1d189d8a32f1272eb0b63b0efe1fbdc143ffa1d1a56022100804a6fa3cf516eb630810c3bf3335a9468747638140346f8ba4cc05ab59ebf75
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002f86b7eb71f5373b4e18d47a3c6e062194fcaab5e5199b2d49b563cb1090ddab0e9e8ab1fb357cfaa0ed9d60b0eae4416a353218af61e3ee2769ef2d77ef42d1cb85b37d0e87d4e427607bc66d1905ffb748f3a238cd3a54b9addb8cf082b0d8f74152679ee94a052d681e8fcbcbc212d23e5f5e6636d1a7cda021b7ba250bc51612fc99a79e43d745add8d3bb930b0843d61d890d8dd62ac19c887cd82b7ee6cd221892d859966c20796bed7872091eb69c4a52385a55b5c4d015c981093a18cb59c3ffe24b4e0ef296f72ed9797a3184a324e1cec446a2254a606466ebd300cc400b574a24a2d28d8b84e4de95f725a4508f1df11b71fcb233d22ef15d3117