leapfrog-ssl-39.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:68:f9:a7:44:d9:64:2c:b4:8e:08:43:56:c3:77:9e:1e:66 was issued on by Let's Encrypt.

With 72 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-39.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:68:f9:a7:44:d9:64:2c:b4:8e:08:43:56:c3:77:9e:1e:66
Serial Number (int): 384170356167771773015526717360675781221990
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 38:26:92:13:4e:e8:03:63:f2:52:6b:a2:a4:51:d3:59:9b:ed:fb:9b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 70:55:7d:87:63:e8:68:72:a0:b0:c4:85:09:4c:34:4e:2c:a0:9a:17
Fingerprint (sha256): 3e:61:f4:97:fd:b3:d3:6a:47:57:7c:e1:79:26:c6:e2:8f:eb:d8:26:84:9e:34:62:58:e8:29:e4:8d:07:42:54

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-39.gcs-web.com

72

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-39.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

17education.gcs-web.com
4dmt.gcs-web.com
908devices.gcs-web.com
aarcorp.gcs-web.com
avisbudgetgroup.gcs-web.com
billtrust.gcs-web.com
cbiz.gcs-web.com
comtechtel.gcs-web.com
gamestop.gcs-web.com
hartehanksinc.gcs-web.com
humanco.gcs-web.com
investor.gamestop.com
investor.piedmontreit.com
investor.scholastic.com
investor.seer.bio
investorday.parsons.com
investors.aarcorp.com
investors.billtrust.com
investors.hartehanks.com
investors.kempharm.com
investors.kinnate.com
investors.kosmosenergy.com
investors.phiopharma.com
ir.17zuoye.com
ir.4dmoleculartherapeutics.com
ir.4dmt.com
ir.908devices.com
ir.avisbudgetgroup.com
ir.cbiz.com
ir.humancospac.com
ir.lear.com
ir.mammothenergy.com
ir.nationalgeneral.com
ir.odysseymarine.com
ir.patria.com
ir.petco.com
ir.rangeresources.com
ir.revivapharma.com
ir.ribontx.com
ir.silverbacktx.com
ir.ucloudlink.com
ir.upstart.com
ir.vtvtherapeutics.com
kempharm.gcs-web.com
kinnate.gcs-web.com
kosmosenergyllc.gcs-web.com
leapfrog-ssl-39.gcs-web.com
lear.gcs-web.com
mammothenergy.gcs-web.com
nationalgeneral.gcs-web.com
newsroom.sleepnumber.com
odysseymarineexplorationinc.gcs-web.com
parsonsinvestorday.gcs-web.com
patria.gcs-web.com
petco.gcs-web.com
phiopharma.gcs-web.com
piedmontofficerealty.gcs-web.com
rangeresources.gcs-web.com
revivapharma.gcs-web.com
ribontx.gcs-web.com
scholasticcorporation.gcs-web.com
seerinc.gcs-web.com
silverbacktx.gcs-web.com
sleepnumber.gcs-web.com
stbancorp.gcs-web.com
thesimplygoodfoodscompany.gcs-web.com
ucloudlink.gcs-web.com
upstartnetworkinc.gcs-web.com
vtvtherapeuticsinc.gcs-web.com
www.comtechtel.com
www.stbancorp.com
www.thesimplygoodfoodscompany.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-39.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyY58UnX1ARuvOwZrBoD8
Tx984SLGMAdAdvE5KH2YAShD+0RWoKVxQWMbW2S1PVkFRXNc5Rk8Piwfy/ybpVN9
hsmOf5aI2MatRK+oJ30fb8Y/lL9HK/dQi5YIipGmFZIbLDkyEjHe8jfy38dJJrD1
M7QJwXZJdrLEyFJaN9DAzfhxFjqjbIlAcxcJ6qIeip3ownbdTFpdk4zfC8GkAlTl
uir2FYkcAHZ6AwLqZYMq3JrH9j2LkNzO/M6cG1y4V/W1Tuz2UBr9QzK8LYWC39Xi
ankwg58AlnrZqclJUctKaCgwgfvJfvuoloNhHZSBXm3SV1yAiOTwEPxBNo/04vt1
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 384170356167771773015526717360675781221990
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-16 16:18:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-16 16:18:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-39.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25444161582645297583255071599671503901410881374154875848297775072348442632250740285194311152744409334359222686077253137514616761471474629770193761134312428580254074552800822263581574706974179856420396690296725298112185915411368639948390016817755135294757523913087831832734107196231439117389299258024890801993798337380109418521832168687540398217592465978449329995370393379039602563464628551482342597800881620462609373674442023903188172914370683820380170401802550592514212886866457269181088396037678879357031912026380346231510921370996522462938242246062608125183625919507264513181552962120264953974067716019896886982059
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							382692134ee80363f2526ba2a451d3599bedfb9b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1713 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '17education.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4dmt.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '908devices.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aarcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avisbudgetgroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billtrust.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbiz.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comtechtel.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamestop.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hartehanksinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humanco.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.gamestop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.piedmontreit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.scholastic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.seer.bio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.parsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.aarcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.billtrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.hartehanks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.kempharm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.kinnate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.kosmosenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.phiopharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.17zuoye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.4dmoleculartherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.4dmt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.908devices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.avisbudgetgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cbiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.humancospac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.lear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mammothenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.nationalgeneral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.odysseymarine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.patria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.petco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.rangeresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.revivapharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ribontx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.silverbacktx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ucloudlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.upstart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vtvtherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kempharm.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinnate.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kosmosenergyllc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-39.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lear.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mammothenergy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalgeneral.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.sleepnumber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odysseymarineexplorationinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parsonsinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patria.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petco.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phiopharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piedmontofficerealty.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rangeresources.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revivapharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ribontx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scholasticcorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seerinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silverbacktx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sleepnumber.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stbancorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesimplygoodfoodscompany.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucloudlink.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upstartnetworkinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vtvtherapeuticsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comtechtel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stbancorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesimplygoodfoodscompany.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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