leapfrog-ssl-24.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:dd:14:8c:a3:42:1d:c1:7d:b5:99:c6:28:bc:1f:a0:e1:aa was issued on by Let's Encrypt.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-24.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:dd:14:8c:a3:42:1d:c1:7d:b5:99:c6:28:bc:1f:a0:e1:aa
Serial Number (int): 423678861609315313308004938303011440091562
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6a:33:09:85:b2:6b:34:ea:32:83:b6:9b:a7:26:67:d9:d3:5f:b2:b9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): dc:f5:11:b5:b5:95:f1:fe:f9:67:30:22:76:ad:13:82:21:db:90:08
Fingerprint (sha256): 3d:5e:35:4d:09:fc:6d:e8:d6:52:29:f6:fa:3a:13:3c:f4:27:ad:0d:1c:35:4f:9b:19:41:ad:d8:cf:10:c7:5f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-24.gcs-web.com

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-24.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agiospharmaceuticalsinc.gcs-web.com
albint.gcs-web.com
ambac.gcs-web.com
anpacbio.gcs-web.com
apellis.gcs-web.com
arvinas.gcs-web.com
avadimhealth.gcs-web.com
bbqholdco.gcs-web.com
bloominbrands.gcs-web.com
bluejaydx.gcs-web.com
cernercorporation.gcs-web.com
chefswarehouse.gcs-web.com
compassequity.gcs-web.com
costcowholesalecorporation.gcs-web.com
craftbrewallianceinc.gcs-web.com
cyrusone.gcs-web.com
dermtech.gcs-web.com
endopharmaceuticalsinc.gcs-web.com
entegrisinc.gcs-web.com
exiant-redesign.gcs-web.com
exiant.gcs-web.com
fangdd.gcs-web.com
foodlionpr.gcs-web.com
gaincapital.gcs-web.com
globusmedicalinc.gcs-web.com
incresearch.gcs-web.com
intelsat.gcs-web.com
intrado.gcs-web.com
investor.agios.com
investor.avadimhealth.com
investor.cyrusone.com
investor.endo.com
investor.entegris.com
investor.exiant.com
investor.oncternal.com
investor.pagaya.com
investor.syneoshealth.com
investorday.sqzbiotech.com
investors.albint.com
investors.anpacbio.com
investors.apellis.com
investors.avadimhealth.com
investors.bloominbrands.com
investors.cerner.com
investors.chefswarehouse.com
investors.craftbrew.com
investors.dermtech.com
investors.globusmedical.com
investors.intelsat.com
investors.kadmon.com
investors.newscorp.com
investors.ovidrx.com
investors.pae.com
investors.progress.com
investors.scholarrock.com
investors.spscommerce.com
investorsqzbiotech.gcs-web.com
ir.arvinas.com
ir.avadimhealth.com
ir.bbqholdco.com
ir.bluejaydx.com
ir.fangdd.com
ir.gaincapital.com
ir.intrado.com
ir.kiadis.com
ir.liveperson.com
ir.mersana.com
ir.sesenbio.com
kadmon.gcs-web.com
kiadis.gcs-web.com
leapfrog-ssl-24.gcs-web.com
liveperson.gcs-web.com
mandkhome.gcs-web.com
mersana.gcs-web.com
mvccapitalinc.gcs-web.com
newscorp.gcs-web.com
newsroom.foodlion.com
oncternal.gcs-web.com
otis.gcs-web.com
ovidtherapeutics.gcs-web.com
pae.gcs-web.com
pagaya.gcs-web.com
progresssoftwarecorporation.gcs-web.com
scholarrock.gcs-web.com
sesenbio.gcs-web.com
spscommerceinc.gcs-web.com
vmgpartners.gcs-web.com
westcorporation.gcs-web.com
www.investor.syneoshealth.com
www.investors.globusmedical.com
www.mvccapital.com
www.otisinvestors.com
www.vmgspac.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-52.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-24.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIN3jCCDMagAwIBAgISBN0UjKNCHcF9tZnGKLwfoOGqMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjA0MjEyMDA4MjBaFw0yMjA3MjAyMDA4MTlaMCYxJDAiBgNVBAMT
G2xlYXBmcm9nLXNzbC0yNC5nY3Mtd2ViLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALjmvF3KSLhIsP0PUoPkmOGIsGJ6yCBMakW1suGmEwfECOIh
OX+9biw/CKlDADnc4TGSoIHGTQXuchKd1W+Oi5LzkkCJUAvNe0K1vOfZdfsVZ0wQ
LhRHJAkgWlYZonSoNHmbBNw9DqFXVkakaaiHMFbeTog1AzZrhieCZHPsztB4xLJQ
kg9hmBc/QMvktR1gopKXTVvfUiNUkm8wCp+bSFatC6HFDcBkOd4UtHa0A8zCK3/Y
aCdxQLTheY73eDkXADLczWi29FZc9+AjshFDGETy8wcGv9E6zsmI9JfzXvWW9wRV
1t5lhyWbab5cf1gwdxJpMfRmdgSuJHNWpuO1ydMCAwEAAaOCCvgwggr0MA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T
AQH/BAIwADAdBgNVHQ4EFgQUajMJhbJrNOoyg7abpyZn2dNfsrkwHwYDVR0jBBgw
FoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUF
BzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9y
My5pLmxlbmNyLm9yZy8wggjFBgNVHREEggi8MIIIuIIjYWdpb3NwaGFybWFjZXV0
aWNhbHNpbmMuZ2NzLXdlYi5jb22CEmFsYmludC5nY3Mtd2ViLmNvbYIRYW1iYWMu
Z2NzLXdlYi5jb22CFGFucGFjYmlvLmdjcy13ZWIuY29tghNhcGVsbGlzLmdjcy13
ZWIuY29tghNhcnZpbmFzLmdjcy13ZWIuY29tghhhdmFkaW1oZWFsdGguZ2NzLXdl
Yi5jb22CFWJicWhvbGRjby5nY3Mtd2ViLmNvbYIZYmxvb21pbmJyYW5kcy5nY3Mt
d2ViLmNvbYIVYmx1ZWpheWR4Lmdjcy13ZWIuY29tgh1jZXJuZXJjb3Jwb3JhdGlv
bi5nY3Mtd2ViLmNvbYIaY2hlZnN3YXJlaG91c2UuZ2NzLXdlYi5jb22CGWNvbXBh
c3NlcXVpdHkuZ2NzLXdlYi5jb22CJmNvc3Rjb3dob2xlc2FsZWNvcnBvcmF0aW9u
Lmdjcy13ZWIuY29tgiBjcmFmdGJyZXdhbGxpYW5jZWluYy5nY3Mtd2ViLmNvbYIU
Y3lydXNvbmUuZ2NzLXdlYi5jb22CFGRlcm10ZWNoLmdjcy13ZWIuY29tgiJlbmRv
cGhhcm1hY2V1dGljYWxzaW5jLmdjcy13ZWIuY29tghdlbnRlZ3Jpc2luYy5nY3Mt
d2ViLmNvbYIbZXhpYW50LXJlZGVzaWduLmdjcy13ZWIuY29tghJleGlhbnQuZ2Nz
LXdlYi5jb22CEmZhbmdkZC5nY3Mtd2ViLmNvbYIWZm9vZGxpb25wci5nY3Mtd2Vi
LmNvbYIXZ2FpbmNhcGl0YWwuZ2NzLXdlYi5jb22CHGdsb2J1c21lZGljYWxpbmMu
Z2NzLXdlYi5jb22CF2luY3Jlc2VhcmNoLmdjcy13ZWIuY29tghRpbnRlbHNhdC5n
Y3Mtd2ViLmNvbYITaW50cmFkby5nY3Mtd2ViLmNvbYISaW52ZXN0b3IuYWdpb3Mu
Y29tghlpbnZlc3Rvci5hdmFkaW1oZWFsdGguY29tghVpbnZlc3Rvci5jeXJ1c29u
ZS5jb22CEWludmVzdG9yLmVuZG8uY29tghVpbnZlc3Rvci5lbnRlZ3Jpcy5jb22C
E2ludmVzdG9yLmV4aWFudC5jb22CFmludmVzdG9yLm9uY3Rlcm5hbC5jb22CE2lu
dmVzdG9yLnBhZ2F5YS5jb22CGWludmVzdG9yLnN5bmVvc2hlYWx0aC5jb22CGmlu
dmVzdG9yZGF5LnNxemJpb3RlY2guY29tghRpbnZlc3RvcnMuYWxiaW50LmNvbYIW
aW52ZXN0b3JzLmFucGFjYmlvLmNvbYIVaW52ZXN0b3JzLmFwZWxsaXMuY29tghpp
bnZlc3RvcnMuYXZhZGltaGVhbHRoLmNvbYIbaW52ZXN0b3JzLmJsb29taW5icmFu
ZHMuY29tghRpbnZlc3RvcnMuY2VybmVyLmNvbYIcaW52ZXN0b3JzLmNoZWZzd2Fy
ZWhvdXNlLmNvbYIXaW52ZXN0b3JzLmNyYWZ0YnJldy5jb22CFmludmVzdG9ycy5k
ZXJtdGVjaC5jb22CG2ludmVzdG9ycy5nbG9idXNtZWRpY2FsLmNvbYIWaW52ZXN0
b3JzLmludGVsc2F0LmNvbYIUaW52ZXN0b3JzLmthZG1vbi5jb22CFmludmVzdG9y
cy5uZXdzY29ycC5jb22CFGludmVzdG9ycy5vdmlkcnguY29tghFpbnZlc3RvcnMu
cGFlLmNvbYIWaW52ZXN0b3JzLnByb2dyZXNzLmNvbYIZaW52ZXN0b3JzLnNjaG9s
YXJyb2NrLmNvbYIZaW52ZXN0b3JzLnNwc2NvbW1lcmNlLmNvbYIeaW52ZXN0b3Jz
cXpiaW90ZWNoLmdjcy13ZWIuY29tgg5pci5hcnZpbmFzLmNvbYITaXIuYXZhZGlt
aGVhbHRoLmNvbYIQaXIuYmJxaG9sZGNvLmNvbYIQaXIuYmx1ZWpheWR4LmNvbYIN
aXIuZmFuZ2RkLmNvbYISaXIuZ2FpbmNhcGl0YWwuY29tgg5pci5pbnRyYWRvLmNv
bYINaXIua2lhZGlzLmNvbYIRaXIubGl2ZXBlcnNvbi5jb22CDmlyLm1lcnNhbmEu
Y29tgg9pci5zZXNlbmJpby5jb22CEmthZG1vbi5nY3Mtd2ViLmNvbYISa2lhZGlz
Lmdjcy13ZWIuY29tghtsZWFwZnJvZy1zc2wtMjQuZ2NzLXdlYi5jb22CFmxpdmVw
ZXJzb24uZ2NzLXdlYi5jb22CFW1hbmRraG9tZS5nY3Mtd2ViLmNvbYITbWVyc2Fu
YS5nY3Mtd2ViLmNvbYIZbXZjY2FwaXRhbGluYy5nY3Mtd2ViLmNvbYIUbmV3c2Nv
cnAuZ2NzLXdlYi5jb22CFW5ld3Nyb29tLmZvb2RsaW9uLmNvbYIVb25jdGVybmFs
Lmdjcy13ZWIuY29tghBvdGlzLmdjcy13ZWIuY29tghxvdmlkdGhlcmFwZXV0aWNz
Lmdjcy13ZWIuY29tgg9wYWUuZ2NzLXdlYi5jb22CEnBhZ2F5YS5nY3Mtd2ViLmNv
bYIncHJvZ3Jlc3Nzb2Z0d2FyZWNvcnBvcmF0aW9uLmdjcy13ZWIuY29tghdzY2hv
bGFycm9jay5nY3Mtd2ViLmNvbYIUc2VzZW5iaW8uZ2NzLXdlYi5jb22CGnNwc2Nv
bW1lcmNlaW5jLmdjcy13ZWIuY29tghd2bWdwYXJ0bmVycy5nY3Mtd2ViLmNvbYIb
d2VzdGNvcnBvcmF0aW9uLmdjcy13ZWIuY29tgh13d3cuaW52ZXN0b3Iuc3luZW9z
aGVhbHRoLmNvbYIfd3d3LmludmVzdG9ycy5nbG9idXNtZWRpY2FsLmNvbYISd3d3
Lm12Y2NhcGl0YWwuY29tghV3d3cub3Rpc2ludmVzdG9ycy5jb22CD3d3dy52bWdz
cGFjLmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYG
CCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB
1nkCBAIEgfYEgfMA8QB2AEHIyrHfIkZKEMahOglCh15OMYsbA+vrS8do8JBilgb2
AAABgE30V/UAAAQDAEcwRQIgOEaFTBtr9q8VazuMiOYA9JlGJhHfcxzLsiJL6U1u
4u8CIQDydNANJEtWWTZQAEKjy1DrLchVVQwELqgtOSW3tAK9LQB3AEalVet1+pEg
MLWiiWn0830RLEF0vv1JuIWr8vxw/m1HAAABgE30WBUAAAQDAEgwRgIhANk9v1a8
LxtQmpo3dnobOymaL3X1eeILWFwFg5g47DJKAiEA2auV2cFEVbdVm93VwYSZMQcJ
VfkUQSLGNvHvqlga3wQwDQYJKoZIhvcNAQELBQADggEBABzbuMmtNIUSyA78Bt6z
/o1I9uOYwW4E18F0GYIYkx/7iCiBRvOI7FwAqJKXOl3sG/UKHgXp3J95WlDWqL0W
bRSGmSJ10hXifck43csxSI8dNm+VghwsXmqUs03AKWmY/26Flh9Wh8EK2oXCUbmZ
2Dw6vAeDkWqbdXM+nQaYYdD32sbawGk7fTKfodOPy1Q+AbSCZ/8s1MTHWqtWi0md
0APJIAStQRXmdzOXFUmH4k6hc8azRAZshF7WntO5JuLb6rDO4jNYi9DBFWoPeISc
4ol9QTKM++5z4psxyPCVqB71Qb8dNomTQv4TGXK1AQ8rCTaWzOIyk929XqiQMdiY
e2M=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOa8XcpIuEiw/Q9Sg+SY
4YiwYnrIIExqRbWy4aYTB8QI4iE5f71uLD8IqUMAOdzhMZKggcZNBe5yEp3Vb46L
kvOSQIlQC817QrW859l1+xVnTBAuFEckCSBaVhmidKg0eZsE3D0OoVdWRqRpqIcw
Vt5OiDUDNmuGJ4Jkc+zO0HjEslCSD2GYFz9Ay+S1HWCikpdNW99SI1SSbzAKn5tI
Vq0LocUNwGQ53hS0drQDzMIrf9hoJ3FAtOF5jvd4ORcAMtzNaLb0Vlz34COyEUMY
RPLzBwa/0TrOyYj0l/Ne9Zb3BFXW3mWHJZtpvlx/WDB3Emkx9GZ2BK4kc1am47XJ
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 423678861609315313308004938303011440091562
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-21 20:08:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-20 20:08:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-24.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23341628180395911526904562778695526994981248904194255239102432456216903331285066164393295223823272797394676988557713059039010012108452579210361986468238248378977874364309925242749922516959986746014997176463674088674265092979706803407341385424954885661176249506007534060845789560174304318342836141767243792283518374812084990408091816588290691316491015465708240190653764147980645524414472852004350236677727766010982696501476913793561882959316390275092289337045810150687290308170406594471918615754916986466242827673945472807525506180132971741518139318839712378649869149362548170278337220847994448304748090908416448776659
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6a330985b26b34ea3283b69ba72667d9d35fb2b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2236 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agiospharmaceuticalsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albint.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ambac.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anpacbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apellis.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arvinas.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avadimhealth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbqholdco.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bloominbrands.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluejaydx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cernercorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chefswarehouse.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compassequity.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costcowholesalecorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'craftbrewallianceinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyrusone.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dermtech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endopharmaceuticalsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entegrisinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exiant-redesign.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exiant.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fangdd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodlionpr.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaincapital.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globusmedicalinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incresearch.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intelsat.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intrado.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.agios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.avadimhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.cyrusone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.endo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.entegris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.exiant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.oncternal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.pagaya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.syneoshealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.sqzbiotech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.albint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.anpacbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.apellis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.avadimhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.bloominbrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cerner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.chefswarehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.craftbrew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.dermtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.globusmedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.intelsat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.kadmon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.newscorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ovidrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.pae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.progress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.scholarrock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.spscommerce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorsqzbiotech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.arvinas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.avadimhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.bbqholdco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.bluejaydx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.fangdd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gaincapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.intrado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.kiadis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.liveperson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mersana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.sesenbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kadmon.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiadis.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-24.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveperson.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mandkhome.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mersana.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvccapitalinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newscorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.foodlion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oncternal.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otis.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ovidtherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pae.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pagaya.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'progresssoftwarecorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scholarrock.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sesenbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spscommerceinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vmgpartners.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westcorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investor.syneoshealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investors.globusmedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mvccapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otisinvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vmgspac.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f6000001804df457f5000004030047304502203846854c1b6bf6af156b3b8c88e600f499462611df731ccbb2224be94d6ee2ef022100f274d00d244b565936500042a3cb50eb2dc855550c042ea82d3925b7b402bd2d00770046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d47000001804df458150000040300483046022100d93dbf56bc2f1b509a9a37767a1b3b299a2f75f579e20b585c05839838ec324a022100d9ab95d9c14455b7559bddd5c1849931070955f9144122c636f1efaa581adf04
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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