leapfrog-ssl-26.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:9d:3d:a1:ec:db:04:36:92:41:ba:15:e4:61:a9:08:50:1e was issued on by Let's Encrypt.

With 83 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=leapfrog-ssl-26.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:9d:3d:a1:ec:db:04:36:92:41:ba:15:e4:61:a9:08:50:1e
Serial Number (int): 401955399005166367290870345310625111494686
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b9:78:7b:b9:bb:6c:0c:02:ac:46:11:59:77:69:2c:6e:5c:5b:ba:08
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 47:7f:36:ac:7a:f3:1c:01:c0:3d:21:1f:5e:86:17:62:7c:b0:d9:07
Fingerprint (sha256): 39:f2:87:4f:28:76:86:ec:00:16:f9:a7:fa:43:fb:68:40:90:41:5d:dc:a5:86:cf:25:6f:fd:f2:ea:9e:1a:52

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-26.gcs-web.com

83

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-26.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

akebia.gcs-web.com
allete.gcs-web.com
amicustherapeutics.gcs-web.com
arcturustherapeuticsinc.gcs-web.com
buildabear.gcs-web.com
cocacolabottlingcoconsolidated.gcs-web.com
commscopeholdingcompanyinc.gcs-web.com
daktronics.gcs-web.com
demobryce.gcs-web.com
dicerna.gcs-web.com
dominos.gcs-web.com
edaptmssa.gcs-web.com
extractionog.gcs-web.com
gibraltarindustriesinc.gcs-web.com
hookerfurniturecorporation.gcs-web.com
hubgroup.gcs-web.com
installedbuildingproducts.gcs-web.com
insuletcorporation.gcs-web.com
intestcorp.gcs-web.com
investor.allete.com
investor.cokeconsolidated.com
investor.daktronics.com
investor.demobryce.com
investor.edap-tms.com
investor.kodak.com
investor.mks.com
investor.mksinst.com
investor.rushenterprises.com
investorday.stepstonegroup.com
investors.dicerna.com
investors.hookerfurnishings.com
investors.hookerfurniture.com
investors.hubgroup.com
investors.installedbuildingproducts.com
investors.lumos-pharma.com
investors.lyratherapeutics.com
investors.matrixservicecompany.com
investors.molinahealthcare.com
investors.parsons.com
investors.psiengines.com
investors.pulmonx.com
investors.wmg.com
investors.xpresspa.com
ir.akebia.com
ir.amicusrx.com
ir.arcturusrx.com
ir.buildabear.com
ir.commscope.com
ir.dominos.com
ir.extractionog.com
ir.gibraltar1.com
ir.intest.com
ir.puyiwm.com
ir.sol-gel.com
ir.spplus.com
ir.supernus.com
ir.tenaris.com
ir.vistagen.com
ir.xpresspa.com
kodak.gcs-web.com
leapfrog-ssl-26.gcs-web.com
lumos-pharma.gcs-web.com
lyratherapeutics.gcs-web.com
matrixservicecompany.gcs-web.com
midconenergypartners.gcs-web.com
mksinstrumentsinc.gcs-web.com
molinahealthcare.gcs-web.com
newlinkgeneticscorporation.gcs-web.com
parsons.gcs-web.com
psiengines.gcs-web.com
pulmonx.gcs-web.com
puyi.gcs-web.com
rushenterprises.gcs-web.com
solgel.gcs-web.com
sppluscorporation.gcs-web.com
stepstonemicrosite.gcs-web.com
supernus.gcs-web.com
tenarissa.gcs-web.com
vistagen.gcs-web.com
warnermusicgroup.gcs-web.com
www.investors.dicerna.com
www.vistagen.com
xpresspa.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-52.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-26.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINGTCCDAGgAwIBAgISBJ09oezbBDaSQboV5GGpCFAeMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAzMjYxMDMxMjdaFw0yNDA2MjQxMDMxMjZaMCYxJDAiBgNVBAMT
G2xlYXBmcm9nLXNzbC0yNi5nY3Mtd2ViLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJyrge33XJx0zGvxL2sh4lgL/uwtKXBuRGZwUSHjtSxHd5A2
Ib51Zq0kNQgdTZcJ8T9dVCicD1u+1rs0lE1fYIyK/9E8j+b3MKXPhMVqR3vyxJq3
Kn2kymmfVqiJT5i7XeA47ZBuIWKWigY9JnEbtNZWDq9DEtLwqthxCTPBjce94Ch5
cPFFNy7jYykppesBY3ghvdjFJ2N/6xdoYSOOwnBrqMXWDaicoq3cAxGUpT9wbaVD
aN3rde44f/PLK5/3fAFxFAz4HS8kVGG3RytNS1Tuo+R1JvkPUyjRJbTQysfaaNAn
sBk/JSoaSZCZivG/Y5VqnwsOU07YlgH6o1YxzEsCAwEAAaOCCjMwggovMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T
AQH/BAIwADAdBgNVHQ4EFgQUuXh7ubtsDAKsRhFZd2ksblxbuggwHwYDVR0jBBgw
FoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUF
BzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9y
My5pLmxlbmNyLm9yZy8wggg7BgNVHREEgggyMIIILoISYWtlYmlhLmdjcy13ZWIu
Y29tghJhbGxldGUuZ2NzLXdlYi5jb22CHmFtaWN1c3RoZXJhcGV1dGljcy5nY3Mt
d2ViLmNvbYIjYXJjdHVydXN0aGVyYXBldXRpY3NpbmMuZ2NzLXdlYi5jb22CFmJ1
aWxkYWJlYXIuZ2NzLXdlYi5jb22CKmNvY2Fjb2xhYm90dGxpbmdjb2NvbnNvbGlk
YXRlZC5nY3Mtd2ViLmNvbYImY29tbXNjb3BlaG9sZGluZ2NvbXBhbnlpbmMuZ2Nz
LXdlYi5jb22CFmRha3Ryb25pY3MuZ2NzLXdlYi5jb22CFWRlbW9icnljZS5nY3Mt
d2ViLmNvbYITZGljZXJuYS5nY3Mtd2ViLmNvbYITZG9taW5vcy5nY3Mtd2ViLmNv
bYIVZWRhcHRtc3NhLmdjcy13ZWIuY29tghhleHRyYWN0aW9ub2cuZ2NzLXdlYi5j
b22CImdpYnJhbHRhcmluZHVzdHJpZXNpbmMuZ2NzLXdlYi5jb22CJmhvb2tlcmZ1
cm5pdHVyZWNvcnBvcmF0aW9uLmdjcy13ZWIuY29tghRodWJncm91cC5nY3Mtd2Vi
LmNvbYIlaW5zdGFsbGVkYnVpbGRpbmdwcm9kdWN0cy5nY3Mtd2ViLmNvbYIeaW5z
dWxldGNvcnBvcmF0aW9uLmdjcy13ZWIuY29tghZpbnRlc3Rjb3JwLmdjcy13ZWIu
Y29tghNpbnZlc3Rvci5hbGxldGUuY29tgh1pbnZlc3Rvci5jb2tlY29uc29saWRh
dGVkLmNvbYIXaW52ZXN0b3IuZGFrdHJvbmljcy5jb22CFmludmVzdG9yLmRlbW9i
cnljZS5jb22CFWludmVzdG9yLmVkYXAtdG1zLmNvbYISaW52ZXN0b3Iua29kYWsu
Y29tghBpbnZlc3Rvci5ta3MuY29tghRpbnZlc3Rvci5ta3NpbnN0LmNvbYIcaW52
ZXN0b3IucnVzaGVudGVycHJpc2VzLmNvbYIeaW52ZXN0b3JkYXkuc3RlcHN0b25l
Z3JvdXAuY29tghVpbnZlc3RvcnMuZGljZXJuYS5jb22CH2ludmVzdG9ycy5ob29r
ZXJmdXJuaXNoaW5ncy5jb22CHWludmVzdG9ycy5ob29rZXJmdXJuaXR1cmUuY29t
ghZpbnZlc3RvcnMuaHViZ3JvdXAuY29tgidpbnZlc3RvcnMuaW5zdGFsbGVkYnVp
bGRpbmdwcm9kdWN0cy5jb22CGmludmVzdG9ycy5sdW1vcy1waGFybWEuY29tgh5p
bnZlc3RvcnMubHlyYXRoZXJhcGV1dGljcy5jb22CImludmVzdG9ycy5tYXRyaXhz
ZXJ2aWNlY29tcGFueS5jb22CHmludmVzdG9ycy5tb2xpbmFoZWFsdGhjYXJlLmNv
bYIVaW52ZXN0b3JzLnBhcnNvbnMuY29tghhpbnZlc3RvcnMucHNpZW5naW5lcy5j
b22CFWludmVzdG9ycy5wdWxtb254LmNvbYIRaW52ZXN0b3JzLndtZy5jb22CFmlu
dmVzdG9ycy54cHJlc3NwYS5jb22CDWlyLmFrZWJpYS5jb22CD2lyLmFtaWN1c3J4
LmNvbYIRaXIuYXJjdHVydXNyeC5jb22CEWlyLmJ1aWxkYWJlYXIuY29tghBpci5j
b21tc2NvcGUuY29tgg5pci5kb21pbm9zLmNvbYITaXIuZXh0cmFjdGlvbm9nLmNv
bYIRaXIuZ2licmFsdGFyMS5jb22CDWlyLmludGVzdC5jb22CDWlyLnB1eWl3bS5j
b22CDmlyLnNvbC1nZWwuY29tgg1pci5zcHBsdXMuY29tgg9pci5zdXBlcm51cy5j
b22CDmlyLnRlbmFyaXMuY29tgg9pci52aXN0YWdlbi5jb22CD2lyLnhwcmVzc3Bh
LmNvbYIRa29kYWsuZ2NzLXdlYi5jb22CG2xlYXBmcm9nLXNzbC0yNi5nY3Mtd2Vi
LmNvbYIYbHVtb3MtcGhhcm1hLmdjcy13ZWIuY29tghxseXJhdGhlcmFwZXV0aWNz
Lmdjcy13ZWIuY29tgiBtYXRyaXhzZXJ2aWNlY29tcGFueS5nY3Mtd2ViLmNvbYIg
bWlkY29uZW5lcmd5cGFydG5lcnMuZ2NzLXdlYi5jb22CHW1rc2luc3RydW1lbnRz
aW5jLmdjcy13ZWIuY29tghxtb2xpbmFoZWFsdGhjYXJlLmdjcy13ZWIuY29tgiZu
ZXdsaW5rZ2VuZXRpY3Njb3Jwb3JhdGlvbi5nY3Mtd2ViLmNvbYITcGFyc29ucy5n
Y3Mtd2ViLmNvbYIWcHNpZW5naW5lcy5nY3Mtd2ViLmNvbYITcHVsbW9ueC5nY3Mt
d2ViLmNvbYIQcHV5aS5nY3Mtd2ViLmNvbYIbcnVzaGVudGVycHJpc2VzLmdjcy13
ZWIuY29tghJzb2xnZWwuZ2NzLXdlYi5jb22CHXNwcGx1c2NvcnBvcmF0aW9uLmdj
cy13ZWIuY29tgh5zdGVwc3RvbmVtaWNyb3NpdGUuZ2NzLXdlYi5jb22CFHN1cGVy
bnVzLmdjcy13ZWIuY29tghV0ZW5hcmlzc2EuZ2NzLXdlYi5jb22CFHZpc3RhZ2Vu
Lmdjcy13ZWIuY29tghx3YXJuZXJtdXNpY2dyb3VwLmdjcy13ZWIuY29tghl3d3cu
aW52ZXN0b3JzLmRpY2VybmEuY29tghB3d3cudmlzdGFnZW4uY29tghR4cHJlc3Nw
YS5nY3Mtd2ViLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkC
BAIEgfQEgfEA7wB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAAB
jnqHjAAAAAQDAEcwRQIhAOLXmHYlkv2Rt/1cI2LIAkjfOO5BkWy/N9/KqL0ckAXw
AiAVjzApvVK2XSOTWvOCZtEkUXjL7FRhkURyycFQ+nJ1iwB1AKLiv9Ye3i8vB6DW
Tm03p9xlQ7DGtS6i2reK+Jpt9RfYAAABjnqHjB8AAAQDAEYwRAIgdvwgxgWz4FWl
XPMHAsUHoOAZ4ff9ejP7LNknc1aIKxwCIFXE1Mek1qKVJEEXGpGkJSoIiBsprCBe
qQYPXNbtj7xiMA0GCSqGSIb3DQEBCwUAA4IBAQCM6sX6ZtSRbgO7/UkwQIWA7nt2
D25zoO/VRRILU1qZMs4JcXNHcQsAumTGBKuLRyd1+MNSwZlsC0YhZvJml6mlBwfL
oEeBdQbOqBBAOZ5N1NOsFNhIrLnPKzKebUp6GbSpenbFjbXMzJheZnLm0kmA7wzy
eAUVr8KyxO0xSi968LSpULRInrEh0bIP+X+ZeQdRBtqKVUUlue6U43JTeL5q/0OB
2IgDlUGKr95uuUSGmnmyueIg5HlLVkdXmp/ucSRF907F8TnHckCcig0wiMtEGRN5
wOK/JqJ0fyTA86X5hUSrdvFQzorBacVbn2+6+cwlIDBs2tcxuUT4/5ltPtWU
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKuB7fdcnHTMa/EvayHi
WAv+7C0pcG5EZnBRIeO1LEd3kDYhvnVmrSQ1CB1NlwnxP11UKJwPW77WuzSUTV9g
jIr/0TyP5vcwpc+ExWpHe/LEmrcqfaTKaZ9WqIlPmLtd4DjtkG4hYpaKBj0mcRu0
1lYOr0MS0vCq2HEJM8GNx73gKHlw8UU3LuNjKSml6wFjeCG92MUnY3/rF2hhI47C
cGuoxdYNqJyirdwDEZSlP3BtpUNo3et17jh/88srn/d8AXEUDPgdLyRUYbdHK01L
VO6j5HUm+Q9TKNEltNDKx9po0CewGT8lKhpJkJmK8b9jlWqfCw5TTtiWAfqjVjHM
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 401955399005166367290870345310625111494686
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-26 10:31:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-24 10:31:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-26.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19777749093459258863884092487840236333805172488022286176581263112301083325278788342597557478501465805633830580149699247007785998851395409394003393863449368670571158742959730535005630326703161404141087177496919302155212414126260121254550256196751056576576657494841001270953066727380000355077807627131058926095016447911984636114857068377895452886932825225195594788241675499663634669476983097923944693102439068897448865446134346965763221655750332675232642511430364804170841756976149142201378836634675276835644738226210654260553947829755718269538815397024484391705617211117847332329672271609787369744879456803779679210571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b9787bb9bb6c0c02ac46115977692c6e5c5bba08
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2098 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akebia.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allete.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amicustherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arcturustherapeuticsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildabear.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cocacolabottlingcoconsolidated.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commscopeholdingcompanyinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daktronics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demobryce.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dicerna.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dominos.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edaptmssa.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extractionog.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gibraltarindustriesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hookerfurniturecorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hubgroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'installedbuildingproducts.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insuletcorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intestcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.allete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.cokeconsolidated.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.daktronics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.demobryce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.edap-tms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.kodak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.mks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.mksinst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.rushenterprises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.stepstonegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.dicerna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.hookerfurnishings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.hookerfurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.hubgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.installedbuildingproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.lumos-pharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.lyratherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.matrixservicecompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.molinahealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.parsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.psiengines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.pulmonx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.wmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.xpresspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.akebia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.amicusrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.arcturusrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.buildabear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.commscope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.dominos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.extractionog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gibraltar1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.intest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.puyiwm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.sol-gel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.spplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.supernus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tenaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vistagen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.xpresspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kodak.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-26.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumos-pharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyratherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matrixservicecompany.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midconenergypartners.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mksinstrumentsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'molinahealthcare.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newlinkgeneticscorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parsons.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psiengines.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulmonx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puyi.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rushenterprises.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solgel.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sppluscorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stepstonemicrosite.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supernus.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenarissa.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vistagen.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warnermusicgroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investors.dicerna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vistagen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xpresspa.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e7a878c000000040300473045022100e2d798762592fd91b7fd5c2362c80248df38ee41916cbf37dfcaa8bd1c9005f00220158f3029bd52b65d23935af38266d1245178cbec5461914472c9c150fa72758b007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e7a878c1f0000040300463044022076fc20c605b3e055a55cf30702c507a0e019e1f7fd7a33fb2cd9277356882b1c022055c4d4c7a4d6a2952441171a91a4252a08881b29ac205ea9060f5cd6ed8fbc62
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008ceac5fa66d4916e03bbfd4930408580ee7b760f6e73a0efd545120b535a9932ce09717347710b00ba64c604ab8b472775f8c352c1996c0b462166f26697a9a50707cba047817506cea81040399e4dd4d3ac14d848acb9cf2b329e6d4a7a19b4a97a76c58db5cccc985e6672e6d24980ef0cf2780515afc2b2c4ed314a2f7af0b4a950b4489eb121d1b20ff97f9979075106da8a554525b9ee94e3725378be6aff4381d8880395418aafde6eb944869a79b2b9e220e4794b5647579a9fee712445f74ec5f139c772409c8a0d3088cb44191379c0e2bf26a2747f24c0f3a5f98544ab76f150ce8ac169c55b9f6fbaf9cc2520306cdad731b944f8ff996d3ed594