leapfrog-ssl-18.gcs-web.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:01:71:18:15:3c:33:9c:59:b8:09:35:5f:73:9b:dc:f1:f8 was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-18.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:01:71:18:15:3c:33:9c:59:b8:09:35:5f:73:9b:dc:f1:f8
Serial Number (int): 261827467971550242911991457110345696211448
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 70:73:08:87:03:a0:68:e8:f8:76:00:38:82:9a:98:a4:52:42:4a:f5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2f:2c:52:4b:0a:40:72:e3:a1:c9:01:50:92:29:db:55:dd:20:b8:13
Fingerprint (sha256): 35:d7:04:06:14:fc:f1:82:3c:32:5e:86:aa:55:dd:3e:0d:11:9b:2b:6e:e8:bb:ee:73:a6:d7:78:fe:67:a0:58

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate leapfrog-ssl-18.gcs-web.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-18.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abbottinvestor.gcs-web.com
alarmcom.gcs-web.com
amerantbank.gcs-web.com
americanwater.gcs-web.com
amtrustfinancialservices.gcs-web.com
appliedtherapeutics.gcs-web.com
aquaamerica.gcs-web.com
archcoal.gcs-web.com
athenex.gcs-web.com
atricure.gcs-web.com
bangandolufsen.gcs-web.com
bicycletherapeutics.gcs-web.com
cimcommercial.gcs-web.com
colgatepalmolivecompany.gcs-web.com
concertpharma.gcs-web.com
coupa.gcs-web.com
creeinc.gcs-web.com
employers.gcs-web.com
escotechnologies.gcs-web.com
extremenetworksinc.gcs-web.com
fico.gcs-web.com
ingredion.gcs-web.com
intersectent.gcs-web.com
investor.amerantbank.com
investor.archcoal.com
investor.bang-olufsen.com
investor.colgatepalmolive.com
investor.cree.com
investor.eig.com
investor.escotechnologies.com
investor.extremenetworks.com
investor.myriad.com
investor.nordstrom.com
investor.omeros.com
investor.points.com
investor.precisionbiosciences.com
investor.spectrumbrands.com
investors.bicycletherapeutics.com
investors.cimcommercial.com
investors.coupa.com
investors.escotechnologies.com
investors.fico.com
investors.mimecast.com
investors.parker.com
investors.rossstores.com
investors.simon.com
investors.solaredge.com
investors.tradeweb.com
investors.transmedics.com
investors.urogen.com
investors.voxxintl.com
investors.zoom.us
ir.amtrustfinancial.com
ir.appliedtherapeutics.com
ir.aquaamerica.com
ir.athenex.com
ir.atricure.com
ir.concertpharma.com
ir.ingredionincorporated.com
ir.intersectent.com
ir.lincolnelectric.com
ir.macom.com
ir.pelotontherapeutics.com
ir.restorationrobotics.com
ir.simon.com
ir.venusconcept.com
leapfrog-ssl-18.gcs-web.com
lincolnelectricholdingsinc.gcs-web.com
macom.gcs-web.com
mimecast.gcs-web.com
myriadgeneticsinc.gcs-web.com
news.archcoal.com
nordstrom.gcs-web.com
omeros.gcs-web.com
parkerhannifincorporation.gcs-web.com
pelotontherapeutics.gcs-web.com
pointsinternationalltd.gcs-web.com
pr.amwater.com
precisionbiosciences.gcs-web.com
press.nordstrom.com
restorationroboticsinc.gcs-web.com
rossstoresinc.gcs-web.com
shareholders.cimcommercial.com
simonpropertygroupinc.gcs-web.com
solaredge.gcs-web.com
spectrumbrandsholdingsinc.gcs-web.com
telenet.gcs-web.com
tradeweb.gcs-web.com
transmedicsinc.gcs-web.com
urogen.gcs-web.com
voxx.gcs-web.com
www.abbottinvestor.com
www.essential.co
zoom.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-18.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4obBqhZ9ScSuXROnRBMK
9VS94P3K0z5kKRCX7//70otA+PdRfrNbYHF5BvxZK9wCFzAJn9xkBxT1wNS812nK
N/kDOnVmfrPZ7+GImdvwtkiqJ808Py3qNB/Ctm5aHEzeUKuE+UvlOSJJ9qTbF2lj
KeQrJdwUgOtI5sMD0upGRFibrIid7m8i9Thv2UyU3E3HD2bRvRaFlKaQq5lodE8/
RFwn8zhCUOUjc3Cw+Aalc9i0kXzpbUPTvQiKEUYzdAQ6F0J8OTrGl85K1bTJFBEU
e6X88hBXyXZL7QwRnYcLkxB1G84yq+C/YSeEbRLhZrzk83ftpS2vcaG6GawK7ggv
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 261827467971550242911991457110345696211448
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-05 03:34:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-03 03:34:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-18.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28596307829919864376151931968921504913602879084329107289845188074796378560527596817738212269065352604172211143894321126876525344024586871200671554018789700782743356302803752056775632132889235569295881358171495992948671976832178859325277431818781782464797366287249613354690522488475148420384756626174226556852923270677685428963512510116179882802738885965914360200861623419858607539674815889976210352524779523810265433221085672901264609393074967237054255096523333924358815838911777728108807478625651341767172203571310966271375249952643089334506552602502173956689620919484280732572054082368321626112587319721240040058879
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7073088703a068e8f8760038829a98a452424af5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2389 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abbottinvestor.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alarmcom.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amerantbank.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americanwater.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amtrustfinancialservices.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appliedtherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquaamerica.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archcoal.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athenex.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atricure.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bangandolufsen.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicycletherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cimcommercial.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colgatepalmolivecompany.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concertpharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coupa.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creeinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employers.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escotechnologies.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extremenetworksinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fico.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ingredion.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intersectent.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.amerantbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.archcoal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.bang-olufsen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.colgatepalmolive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.cree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.eig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.escotechnologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.extremenetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.myriad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.nordstrom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.omeros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.points.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.precisionbiosciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.spectrumbrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.bicycletherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cimcommercial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.coupa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.escotechnologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.fico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.mimecast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.parker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.rossstores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.simon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.solaredge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.tradeweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.transmedics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.urogen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.voxxintl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.zoom.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.amtrustfinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.appliedtherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.aquaamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.athenex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.atricure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.concertpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ingredionincorporated.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.intersectent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.lincolnelectric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.macom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.pelotontherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.restorationrobotics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.simon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.venusconcept.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-18.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lincolnelectricholdingsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macom.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mimecast.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myriadgeneticsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.archcoal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nordstrom.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omeros.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkerhannifincorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pelotontherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pointsinternationalltd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.amwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'precisionbiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'press.nordstrom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restorationroboticsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rossstoresinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shareholders.cimcommercial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simonpropertygroupinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solaredge.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spectrumbrandsholdingsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telenet.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradeweb.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transmedicsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urogen.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voxx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abbottinvestor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.essential.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zoom.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170a8f9210d0000040300483046022100974a235ee1e1b4d6cd34ec3a9c0191c4ef97f75debe66e070c47b73e276d676c022100b29f9501ab18ee9a8368abf4037eb94669a1513f468734a76e4e754c3cc6fb1600750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170a8f921130000040300463044022008893a6586ca285aef1a9ed6d08850d5d41c40c37bf273ab15d79db9df18ae24022022619a411bd08409d6b814c670672f8544d5608bd2a3048083d56b9a4e88dba5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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