leapfrog-ssl-4.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 03:e9:41:85:41:5c:b4:7d:3b:8a:60:b0:df:63:47:c1:91:7a was issued on by Let's Encrypt.

With 75 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-4.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e9:41:85:41:5c:b4:7d:3b:8a:60:b0:df:63:47:c1:91:7a
Serial Number (int): 340709741008769080477989755096046690734458
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 43:88:7e:40:ab:57:58:47:3a:ff:96:b1:04:69:d2:7f:db:c4:be:d7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 85:95:31:13:0f:f0:a6:ad:55:a2:1b:67:0d:ae:23:c1:61:d5:64:b9
Fingerprint (sha256): 3c:ac:bd:f8:d5:3f:de:b6:3e:56:8c:b0:4c:a9:ce:22:f8:e0:ff:a3:00:81:81:3b:b0:c1:54:87:81:ad:f4:86

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-4.gcs-web.com

75

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-4.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aia.gcs-web.com
altair.gcs-web.com
aralezpharmaceuticalsinc.gcs-web.com
arbutusbio.gcs-web.com
assemblybio.gcs-web.com
bandwidth.gcs-web.com
bill.gcs-web.com
caredxinc.gcs-web.com
casellawastesystems.gcs-web.com
catabasispharmaceuticalsinc.gcs-web.com
elliemae.gcs-web.com
enterabio.gcs-web.com
fleetcor.gcs-web.com
gastar.gcs-web.com
generac.gcs-web.com
genprex.gcs-web.com
globalpowerequipmentgroupinc.gcs-web.com
intelliatherapeutics.gcs-web.com
investor.altair.com
investor.arbutusbio.com
investor.assemblybio.com
investor.fleetcor.com
investor.sangamo.com
investor.synlogictx.com
investor.teaminc.com
investor.veracyte.com
investors.altair.com
investors.bandwidth.com
investors.enterabio.com
investors.factory.jcrew.com
investors.generac.com
investors.jcrew.com
investors.madewell.com
investors.nkt.com
investors.optimizerx.com
investors.pier1.com
investors.sperotherapeutics.com
investors.sterlingbank.com
investors.unitil.com
investors.willscot.com
investors.zurabio.com
ir.altair.com
ir.casella.com
ir.catabasis.com
ir.gastar.com
ir.intelliatx.com
ir.istar.com
ir.lemaitre.com
ir.superiorenergy.com
ir.uhs.com
ir.uhsinc.com
istarfinancial.gcs-web.com
jcrewgroupinc.gcs-web.com
leapfrog-ssl-4.gcs-web.com
lemaitre.gcs-web.com
metabank.gcs-web.com
navientnews.gcs-web.com
news.navient.com
nkt.gcs-web.com
optimizerx.gcs-web.com
pier1.gcs-web.com
reatapharma.gcs-web.com
sangamotherapeuticsinc.gcs-web.com
sperotherapeutics.gcs-web.com
sterlingbank.gcs-web.com
superiorenergyservices.gcs-web.com
synlogic.gcs-web.com
teaminc.gcs-web.com
teleflexincorporated.gcs-web.com
uhsinc.gcs-web.com
unitilcorp.gcs-web.com
veracyteinc.gcs-web.com
westpharma.gcs-web.com
www.fleetcor.com
zurabio.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-4.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIK6DCCCdCgAwIBAgISA+lBhUFctH07imCw32NHwZF6MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA4MTYwMTMyNTNaFw0yMzExMTQwMTMyNTJaMCUxIzAhBgNVBAMT
GmxlYXBmcm9nLXNzbC00Lmdjcy13ZWIuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAyegG1IYPMhb419em/L/OhoONx1kZk4sbVcfCgW1jsBZyHB5Z
l0ChGKAXL5ieKBYOXY8M1gQgfyYfa0y43eEc4MdvVjuPGljeYP3uxM2k9HqvJ8u8
Dzgzit4Dl+CqlEwxQGfd6g13c7bqPrTzKFN9bQJv4EgNtfZtrEP9PUmgLixEW8I+
4kCWKIyc7IttNxQfmYqeCjEGN2STXywDCEHvag3AimYij/zfmqd3IoX/EZnsEmO8
5q0AhWp6l/ejpWgYYNacP6AukMCVVGhEyY7cSHaC6j50lhFtwJLj0phywF1T+GQF
tnr1wrBGKn46aiDyRQWu1oIHDoGyvEyRVqu9IQIDAQABo4IIAzCCB/8wDgYDVR0P
AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMB
Af8EAjAAMB0GA1UdDgQWBBRDiH5Aq1dYRzr/lrEEadJ/28S+1zAfBgNVHSMEGDAW
gBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUH
MAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3Iz
LmkubGVuY3Iub3JnLzCCBv0GA1UdEQSCBvQwggbwgg9haWEuZ2NzLXdlYi5jb22C
EmFsdGFpci5nY3Mtd2ViLmNvbYIkYXJhbGV6cGhhcm1hY2V1dGljYWxzaW5jLmdj
cy13ZWIuY29tghZhcmJ1dHVzYmlvLmdjcy13ZWIuY29tghdhc3NlbWJseWJpby5n
Y3Mtd2ViLmNvbYIVYmFuZHdpZHRoLmdjcy13ZWIuY29tghBiaWxsLmdjcy13ZWIu
Y29tghVjYXJlZHhpbmMuZ2NzLXdlYi5jb22CH2Nhc2VsbGF3YXN0ZXN5c3RlbXMu
Z2NzLXdlYi5jb22CJ2NhdGFiYXNpc3BoYXJtYWNldXRpY2Fsc2luYy5nY3Mtd2Vi
LmNvbYIUZWxsaWVtYWUuZ2NzLXdlYi5jb22CFWVudGVyYWJpby5nY3Mtd2ViLmNv
bYIUZmxlZXRjb3IuZ2NzLXdlYi5jb22CEmdhc3Rhci5nY3Mtd2ViLmNvbYITZ2Vu
ZXJhYy5nY3Mtd2ViLmNvbYITZ2VucHJleC5nY3Mtd2ViLmNvbYIoZ2xvYmFscG93
ZXJlcXVpcG1lbnRncm91cGluYy5nY3Mtd2ViLmNvbYIgaW50ZWxsaWF0aGVyYXBl
dXRpY3MuZ2NzLXdlYi5jb22CE2ludmVzdG9yLmFsdGFpci5jb22CF2ludmVzdG9y
LmFyYnV0dXNiaW8uY29tghhpbnZlc3Rvci5hc3NlbWJseWJpby5jb22CFWludmVz
dG9yLmZsZWV0Y29yLmNvbYIUaW52ZXN0b3Iuc2FuZ2Ftby5jb22CF2ludmVzdG9y
LnN5bmxvZ2ljdHguY29tghRpbnZlc3Rvci50ZWFtaW5jLmNvbYIVaW52ZXN0b3Iu
dmVyYWN5dGUuY29tghRpbnZlc3RvcnMuYWx0YWlyLmNvbYIXaW52ZXN0b3JzLmJh
bmR3aWR0aC5jb22CF2ludmVzdG9ycy5lbnRlcmFiaW8uY29tghtpbnZlc3RvcnMu
ZmFjdG9yeS5qY3Jldy5jb22CFWludmVzdG9ycy5nZW5lcmFjLmNvbYITaW52ZXN0
b3JzLmpjcmV3LmNvbYIWaW52ZXN0b3JzLm1hZGV3ZWxsLmNvbYIRaW52ZXN0b3Jz
Lm5rdC5jb22CGGludmVzdG9ycy5vcHRpbWl6ZXJ4LmNvbYITaW52ZXN0b3JzLnBp
ZXIxLmNvbYIfaW52ZXN0b3JzLnNwZXJvdGhlcmFwZXV0aWNzLmNvbYIaaW52ZXN0
b3JzLnN0ZXJsaW5nYmFuay5jb22CFGludmVzdG9ycy51bml0aWwuY29tghZpbnZl
c3RvcnMud2lsbHNjb3QuY29tghVpbnZlc3RvcnMuenVyYWJpby5jb22CDWlyLmFs
dGFpci5jb22CDmlyLmNhc2VsbGEuY29tghBpci5jYXRhYmFzaXMuY29tgg1pci5n
YXN0YXIuY29tghFpci5pbnRlbGxpYXR4LmNvbYIMaXIuaXN0YXIuY29tgg9pci5s
ZW1haXRyZS5jb22CFWlyLnN1cGVyaW9yZW5lcmd5LmNvbYIKaXIudWhzLmNvbYIN
aXIudWhzaW5jLmNvbYIaaXN0YXJmaW5hbmNpYWwuZ2NzLXdlYi5jb22CGWpjcmV3
Z3JvdXBpbmMuZ2NzLXdlYi5jb22CGmxlYXBmcm9nLXNzbC00Lmdjcy13ZWIuY29t
ghRsZW1haXRyZS5nY3Mtd2ViLmNvbYIUbWV0YWJhbmsuZ2NzLXdlYi5jb22CF25h
dmllbnRuZXdzLmdjcy13ZWIuY29tghBuZXdzLm5hdmllbnQuY29tgg9ua3QuZ2Nz
LXdlYi5jb22CFm9wdGltaXplcnguZ2NzLXdlYi5jb22CEXBpZXIxLmdjcy13ZWIu
Y29tghdyZWF0YXBoYXJtYS5nY3Mtd2ViLmNvbYIic2FuZ2Ftb3RoZXJhcGV1dGlj
c2luYy5nY3Mtd2ViLmNvbYIdc3Blcm90aGVyYXBldXRpY3MuZ2NzLXdlYi5jb22C
GHN0ZXJsaW5nYmFuay5nY3Mtd2ViLmNvbYIic3VwZXJpb3JlbmVyZ3lzZXJ2aWNl
cy5nY3Mtd2ViLmNvbYIUc3lubG9naWMuZ2NzLXdlYi5jb22CE3RlYW1pbmMuZ2Nz
LXdlYi5jb22CIHRlbGVmbGV4aW5jb3Jwb3JhdGVkLmdjcy13ZWIuY29tghJ1aHNp
bmMuZ2NzLXdlYi5jb22CFnVuaXRpbGNvcnAuZ2NzLXdlYi5jb22CF3ZlcmFjeXRl
aW5jLmdjcy13ZWIuY29tghZ3ZXN0cGhhcm1hLmdjcy13ZWIuY29tghB3d3cuZmxl
ZXRjb3IuY29tghN6dXJhYmlvLmdjcy13ZWIuY29tMBMGA1UdIAQMMAowCAYGZ4EM
AQIBMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAcNLLL
rnBJsAr/6oj2bpbhRydLJ5cmzPokY6VLMsDwMqaWkV4BJ/1z5zc/S/oroPQR4Otc
RmtTW3zZNSdidb8kgfS0xxF26PXbiaFZ8lybbaZJSPQYY3csW3/B1r4MQtCS6xl6
YbEtq0GXEOhKHDxPCzdMQBq9aP+jUNG7BG4biOJjQsJMtAvLYruGJhleZv3G4+Vj
kB9a2qW/0ekJssmrmADT4kzNtEsxQlupCMc0OkkMtSDfui8VxiL0zmh8swY4W2Vh
Gyb5iwCgZO2xoN2OozNkvBDwmgvCdYzxeIVvKDj52Yur9maYFuc1k2AzpSXxTGC6
H9EqTQBDL+mhkwUG
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyegG1IYPMhb419em/L/O
hoONx1kZk4sbVcfCgW1jsBZyHB5Zl0ChGKAXL5ieKBYOXY8M1gQgfyYfa0y43eEc
4MdvVjuPGljeYP3uxM2k9HqvJ8u8Dzgzit4Dl+CqlEwxQGfd6g13c7bqPrTzKFN9
bQJv4EgNtfZtrEP9PUmgLixEW8I+4kCWKIyc7IttNxQfmYqeCjEGN2STXywDCEHv
ag3AimYij/zfmqd3IoX/EZnsEmO85q0AhWp6l/ejpWgYYNacP6AukMCVVGhEyY7c
SHaC6j50lhFtwJLj0phywF1T+GQFtnr1wrBGKn46aiDyRQWu1oIHDoGyvEyRVqu9
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340709741008769080477989755096046690734458
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-16 01:32:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-14 01:32:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-4.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25488315918626105212438519226794833358366214511854976408714763382361192493063018304030197865552147798300626711398819393836359822130323830446230046377362034246856301288209684292720910639426129698626774928341139721100016720664669017978991086351952290367000901111211232982317691040194046947192425869745781497442211307745336729596194643036809828821198435111305827293020326017402214923434910093162564157823388639435346631458911874194508475499935381245445186471042877995888681424461487715867013767548939870304777122542451975763916701376234105728139704007138961982055151147596327601261675663767189220948032597668985628769569
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							43887e40ab5758473aff96b10469d27fdbc4bed7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1780 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aia.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altair.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aralezpharmaceuticalsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbutusbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assemblybio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bandwidth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bill.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caredxinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casellawastesystems.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catabasispharmaceuticalsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elliemae.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterabio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fleetcor.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gastar.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'generac.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genprex.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalpowerequipmentgroupinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intelliatherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.altair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.arbutusbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.assemblybio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.fleetcor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.sangamo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.synlogictx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.teaminc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.veracyte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.altair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.bandwidth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.enterabio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.factory.jcrew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.generac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.jcrew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.madewell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.nkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.optimizerx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.pier1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sperotherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sterlingbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.unitil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.willscot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.zurabio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.altair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.casella.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.catabasis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gastar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.intelliatx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.istar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.lemaitre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.superiorenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.uhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.uhsinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'istarfinancial.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcrewgroupinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-4.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lemaitre.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metabank.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navientnews.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.navient.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nkt.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optimizerx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pier1.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reatapharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sangamotherapeuticsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sperotherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sterlingbank.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superiorenergyservices.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synlogic.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teaminc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teleflexincorporated.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitilcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veracyteinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westpharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fleetcor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zurabio.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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