leapfrog-ssl-30.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 03:f4:88:91:a5:76:41:1e:ea:c5:86:50:01:72:bd:b3:75:df was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-30.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f4:88:91:a5:76:41:1e:ea:c5:86:50:01:72:bd:b3:75:df
Serial Number (int): 344547286570427622814955388870001595479519
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 91:4f:a0:cb:30:9c:68:87:ec:ef:a8:9e:96:6b:09:5c:35:04:f5:3d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e6:d1:5b:7e:cc:28:db:17:15:27:ba:f3:4b:2e:ae:f9:54:41:9b:26
Fingerprint (sha256): 36:4b:60:77:99:c5:04:d4:d5:7b:c8:9b:7b:06:02:07:c0:a3:93:b1:9b:e4:1e:16:9d:72:9c:4c:c4:af:58:d0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-30.gcs-web.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-30.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aerpiopharmaceuticals.gcs-web.com
akouos.gcs-web.com
aosmith.gcs-web.com
aslanpharmaceuticals.gcs-web.com
avidtechnologyinc.gcs-web.com
baozuninc.gcs-web.com
biocryst.gcs-web.com
canaan.gcs-web.com
chinafinanceonlinecolimited.gcs-web.com
chinayuchaiinternationallimited.gcs-web.com
claires.gcs-web.com
cumberlandpharmaceuticalsinc.gcs-web.com
dunkinbrandsinc.gcs-web.com
ecmoho.gcs-web.com
ehang.gcs-web.com
fanhua.gcs-web.com
fdus.gcs-web.com
generationbio.gcs-web.com
genetronhealth.gcs-web.com
gohealth.gcs-web.com
gridsumholdinginc.gcs-web.com
hdsupply.gcs-web.com
hexindai.gcs-web.com
imab.gcs-web.com
investor.aosmith.com
investor.canaan-creative.com
investor.cumberlandpharma.com
investor.cyilimited.com
investor.dunkinbrands.com
investor.fdus.com
investor.luckincoffee.com
investor.metenedu-edtechx.com
investor.molbase.com
investor.wdc.com
investors.akouos.com
investors.generationbio.com
investors.gohealth.com
investors.kymeratx.com
investors.surocap.com
investorsmedia.mesoblast.com
ir.aerpio.com
ir.aslanpharma.com
ir.avid.com
ir.baozun.com
ir.biocryst.com
ir.chinafinanceonline.com
ir.ecmoho.com
ir.ehang.com
ir.fanhuaholdings.com
ir.genetronhealth.com
ir.gridsum.com
ir.hdsupply.com
ir.hexindai.com
ir.i-mabbiopharma.com
ir.immomo.com
ir.jiayin-fintech.com
ir.kaixin.com
ir.pdf.com
ir.qk365.com
ir.reebonz.com
ir.renren-inc.com
ir.reparerx.com
ir.risecenter.com
ir.royaltypharma.com
ir.serestherapeutics.com
ir.smartsand.com
ir.virnetx.com
ir.xunlei.com
ir.yumchina.com
kaixin.gcs-web.com
kymeratx.gcs-web.com
leapfrog-ssl-30.gcs-web.com
luckincoffee.gcs-web.com
mesoblast.gcs-web.com
metenedtechx.gcs-web.com
molbase.gcs-web.com
momoinc.gcs-web.com
niwodai.gcs-web.com
pdfsolutions.gcs-web.com
qingke.gcs-web.com
reebonz.gcs-web.com
renreninc.gcs-web.com
reparerx.gcs-web.com
riseeducationcaymanltd.gcs-web.com
rlhcorp.gcs-web.com
royaltypharma.gcs-web.com
serestherapeutics.gcs-web.com
smartsand.gcs-web.com
surocap.gcs-web.com
virnetx.gcs-web.com
wdc.gcs-web.com
www.clairestores.com
xunleilimited.gcs-web.com
yumchinaholdingsinc.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-52.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-30.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8cMukbi9KIBNLuqG6eA
5FV/1tnijkcSCIpCzsgM1/7P0Kt7QiR9BIOO97uduYlo1iypR5X5jg0am588Ql0S
cadLMz5+Y+rEHfEjLAnsWGmOx5t+Xt4rrRt7qC08aKXUwlXCPhLPZ9VkUZPUzs7i
wPYH5ZGjJONNtVbrkpof82bfsVJzgcbs5+Mwg9fP09Mf/g0W8o9T35XBLPkE7WDX
wXJXzZUsiSTVuRgHo9+SWVBMwQifUYlDouCn8zM7SSxRd14JkUUKG+7ZOlrcjfNP
OFcpuRj0zPtfNBEj8aqM9YXG4f6cWUpgtgRglEH6zNOiRpUF7kfqJUGYaHzItOy9
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344547286570427622814955388870001595479519
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-06 08:53:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-04 08:53:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-30.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21684905223115911096519124568776005130325243061343941694712727561699208937515777996547986313141903097724908575142782759200429081672803347892693849096535968031029707094868969536426093696035570754195910252017497552795489045125440133025398265015967537150942993066866638212152970733238072798852374283058625370252165657226269942603867517768614336360567004538481871239462680681828285434535117017760960161771463311337505414044484458671779614803690584782901621679593285339869734418772529848305090859469130163539396010303380803862895757854993403577132195292536434759671678150495645694169452412659949560945030407243564827065791
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							914fa0cb309c6887ecefa89e966b095c3504f53d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2158 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerpiopharmaceuticals.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akouos.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aosmith.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aslanpharmaceuticals.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avidtechnologyinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baozuninc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biocryst.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canaan.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinafinanceonlinecolimited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinayuchaiinternationallimited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claires.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cumberlandpharmaceuticalsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dunkinbrandsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecmoho.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ehang.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanhua.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fdus.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'generationbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genetronhealth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gohealth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gridsumholdinginc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdsupply.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hexindai.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imab.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.aosmith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.canaan-creative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.cumberlandpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.cyilimited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.dunkinbrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.fdus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.luckincoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.metenedu-edtechx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.molbase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.wdc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.akouos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.generationbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.gohealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.kymeratx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.surocap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorsmedia.mesoblast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.aerpio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.aslanpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.avid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.baozun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.biocryst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.chinafinanceonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ecmoho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ehang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.fanhuaholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.genetronhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gridsum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.hdsupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.hexindai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.i-mabbiopharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.immomo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.jiayin-fintech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.kaixin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.pdf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.qk365.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.reebonz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.renren-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.reparerx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.risecenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.royaltypharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.serestherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.smartsand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.virnetx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.xunlei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.yumchina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaixin.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kymeratx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-30.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luckincoffee.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesoblast.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metenedtechx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'molbase.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'momoinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niwodai.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdfsolutions.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qingke.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reebonz.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renreninc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reparerx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riseeducationcaymanltd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rlhcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royaltypharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serestherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartsand.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surocap.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virnetx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wdc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clairestores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xunleilimited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yumchinaholdingsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006a440f47b187ad96f8379265b64b20e08e1d54982401b3c4ee65771fc34f8316cae76b7a21e944043352d6d5b010664383bfbd503af6cc346cd32189f24dbf9fbef052c16fba544e35eca64600e53186e67281941f339c2d64d7c2fcda87362711988a8e4859c1dc446857270a65d1865b7ab91aaf3de05a60eb24c633fef303f4553e6070ef73642d5611df089d41c3f75a6ee9c64b2ce423ad8f4db26577c8bb97deceac7582967c638dc8bd18b83f2ed0e58a423425642b8076a47a70338a937975c46c6db1c7103d2bfe4149a8aa0ae587a27f968705f6cb55bc092156ceaf0f8955656fcc67814b4bc470ea01fe2fa4fafeb01cf43e1ee528d1451fc545