leapfrog-ssl-16.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 03:e2:f2:86:68:5f:af:9e:1b:19:4b:be:ee:c5:88:01:53:57 was issued on by Let's Encrypt.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-16.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e2:f2:86:68:5f:af:9e:1b:19:4b:be:ee:c5:88:01:53:57
Serial Number (int): 338563043779123451224336896544264547291991
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5a:1f:3e:cf:61:d4:f7:8a:0d:f2:ec:82:e6:eb:46:44:58:51:8c:3d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): eb:e2:45:30:a1:79:76:3f:23:94:9f:17:e1:e5:55:bc:af:84:5c:e8
Fingerprint (sha256): 41:e8:c5:45:2d:e1:d4:13:54:07:2c:04:b2:41:84:bc:db:1e:e1:ed:a4:9c:bf:57:7d:00:d0:5a:5f:d5:da:6a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-16.gcs-web.com

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-16.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amsc.gcs-web.com
aob.gcs-web.com
apam.gcs-web.com
axcelis.gcs-web.com
axcellahealth.gcs-web.com
bankunited.gcs-web.com
bridgebio.gcs-web.com
computertaskgroup.gcs-web.com
crawfordandcompany.gcs-web.com
crowdstrike.gcs-web.com
fabrinet.gcs-web.com
fatetherapeuticsinc.gcs-web.com
ferroglobe.gcs-web.com
flexiontherapeutics.gcs-web.com
flexsteel.gcs-web.com
fnf.gcs-web.com
forresterresearch.gcs-web.com
forumenergytechnologiesinc.gcs-web.com
genomichealth.gcs-web.com
globenewswiresupportcenter.gcs-web.com
greenlane.gcs-web.com
guessinc.gcs-web.com
iac.gcs-web.com
investor.axcelis.com
investor.bridgebio.com
investor.fabrinet.com
investor.ferroglobe.com
investor.forrester.com
investor.genomichealth.com
investor.gnln.com
investor.noodles.com
investor.sagerx.com
investor.spark.net
investors.ctg.com
investors.guess.com
investors.meiragtx.com
investors.millendo.com
investors.overstock.com
investors.patternenergy.com
investors.repay.com
investors.ttec.com
investors.ttm.com
ir.amsc.com
ir.aob.com
ir.axcellahealth.com
ir.bankunited.com
ir.crowdstrike.com
ir.f-e-t.com
ir.fatetherapeutics.com
ir.flexiontherapeutics.com
ir.flexsteel.com
ir.iac.com
ir.ofscapitalcorp.com
ir.organovo.com
ir.safeholdinc.com
ir.scripps.com
ir.sealedair.com
ir.tcap.com
ir.viacom.com
leapfrog-ssl-16.gcs-web.com
meiragtx.gcs-web.com
millendo.gcs-web.com
newsroom.genomichealth.com
noodles.gcs-web.com
ofscapital.gcs-web.com
organovo.gcs-web.com
otcmarkets.gcs-web.com
overstock.gcs-web.com
patternenergygroupinc.gcs-web.com
presidio.gcs-web.com
repay.gcs-web.com
safeholdinc.gcs-web.com
sagerx.gcs-web.com
scripps.gcs-web.com
sealedair.gcs-web.com
sparknetworksinc.gcs-web.com
trianglecapital.gcs-web.com
ttecholdingsinc.gcs-web.com
ttmtechnologiesinc.gcs-web.com
viacominc.gcs-web.com
w.globenewswire.com
www.apam.com
www.investor.fnf.com
www.spark.net
www.virtualinvestorconferences.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-16.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubbwp5boSjoOcc0dt7sE
xBT+RJoFC5Nxig96Vb/zB1YuQu1TIHiOTcE3LFN/LdKciF78682EGkW/MlrTznbA
78gSfD+F8oUn1povK/cTNOVz120KjIgYPmigf0Hxp1IyXb/aIZR5Xo003IS8n2dl
j/TuSNs+Egu8DY4Tr04qMUHCa1g7r6EC3d/QkEedCS6EI9nSnlYQjhOcESwo2C3t
bQNP3c4lIGsPEsDMcfGFGJWZIj6mSCpWIPsO7AFFEJR0IkFUYu7FNUY1DRowPSm3
sGVOm4HxqX0ptkCByqY5Bmtk5psP7uKBYuCEyJxvBO0gKnyTtMF5WV9twbjv4mKK
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 338563043779123451224336896544264547291991
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-27 18:46:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-26 18:46:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-16.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23444297523146261725351737800198560774838457174794343346803357732822579712425620664026987772400005358351271266448865237932125789838502641076265381117323881467843940517882343139115365406440353967297453107653865304215210070405018489813080625686294251857518822185618946236799351277304277788384224203464467596168729122852783175913055980411196495215054512458657972063947896181831001764174866493675850469607869241039479787702980854703312820637934681597030294560676918650861304302761330433864628613595684148947370058864933347132401688570132796946471950831238283866581486337214836498898185049363058967064299386905605905222239
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5a1f3ecf61d4f78a0df2ec82e6eb464458518c3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1958 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amsc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aob.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apam.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axcelis.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axcellahealth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankunited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridgebio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'computertaskgroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crawfordandcompany.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crowdstrike.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabrinet.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatetherapeuticsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ferroglobe.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flexiontherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flexsteel.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fnf.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forresterresearch.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forumenergytechnologiesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genomichealth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globenewswiresupportcenter.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenlane.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guessinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iac.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.axcelis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.bridgebio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.fabrinet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.ferroglobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.forrester.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.genomichealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.gnln.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.noodles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.sagerx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.spark.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ctg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.guess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.meiragtx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.millendo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.overstock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.patternenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.repay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ttec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ttm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.amsc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.aob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.axcellahealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.bankunited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.crowdstrike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.f-e-t.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.fatetherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.flexiontherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.flexsteel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.iac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ofscapitalcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.organovo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.safeholdinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.scripps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.sealedair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tcap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-16.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meiragtx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'millendo.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.genomichealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noodles.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofscapital.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organovo.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otcmarkets.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overstock.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patternenergygroupinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'presidio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repay.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safeholdinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sagerx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scripps.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sealedair.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sparknetworksinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trianglecapital.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ttecholdingsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ttmtechnologiesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viacominc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w.globenewswire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investor.fnf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spark.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.virtualinvestorconferences.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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