leapfrog-ssl-4.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 03:84:d0:be:bc:f6:f1:47:50:bd:c2:5d:67:15:28:e7:eb:db was issued on by Let's Encrypt.

With 73 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-4.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:84:d0:be:bc:f6:f1:47:50:bd:c2:5d:67:15:28:e7:eb:db
Serial Number (int): 306531600021028806803263521625020876450779
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 44:7d:ab:f6:1d:37:55:8b:d7:b9:86:ad:8e:f1:3c:19:e9:9c:b0:2e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9b:5b:53:31:17:5d:f1:35:01:11:5e:7e:88:83:b4:2f:3c:97:46:69
Fingerprint (sha256): 43:aa:c2:fa:63:b4:04:01:c7:d2:4d:d5:69:6b:27:e0:04:f0:83:99:7f:54:21:80:92:02:04:7a:e1:85:35:b6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-4.gcs-web.com

73

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-4.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aia.gcs-web.com
altair.gcs-web.com
aralezpharmaceuticalsinc.gcs-web.com
arbutusbio.gcs-web.com
assemblybio.gcs-web.com
bandwidth.gcs-web.com
bill.gcs-web.com
caredxinc.gcs-web.com
casellawastesystems.gcs-web.com
catabasispharmaceuticalsinc.gcs-web.com
elliemae.gcs-web.com
enterabio.gcs-web.com
fleetcor.gcs-web.com
gastar.gcs-web.com
genprex.gcs-web.com
globalpowerequipmentgroupinc.gcs-web.com
intelliatherapeutics.gcs-web.com
investor.altair.com
investor.arbutusbio.com
investor.assemblybio.com
investor.fleetcor.com
investor.sangamo.com
investor.synlogictx.com
investor.teaminc.com
investor.veracyte.com
investors.aia.com
investors.altair.com
investors.bandwidth.com
investors.caredxinc.com
investors.enterabio.com
investors.factory.jcrew.com
investors.jcrew.com
investors.madewell.com
investors.nkt.com
investors.optimizerx.com
investors.pier1.com
investors.sperotherapeutics.com
investors.sterlingbank.com
investors.unitil.com
investors.willscot.com
ir.altair.com
ir.casella.com
ir.catabasis.com
ir.gastar.com
ir.intelliatx.com
ir.istar.com
ir.opiant.com
ir.superiorenergy.com
ir.tuesdaymorning.com
ir.uhsinc.com
istarfinancial.gcs-web.com
jcrewgroupinc.gcs-web.com
leapfrog-ssl-4.gcs-web.com
metabank.gcs-web.com
navientnews.gcs-web.com
news.navient.com
nkt.gcs-web.com
opiantpharmaceuticalsinc.gcs-web.com
optimizerx.gcs-web.com
pier1.gcs-web.com
reatapharma.gcs-web.com
sangamotherapeuticsinc.gcs-web.com
sperotherapeutics.gcs-web.com
sterlingbank.gcs-web.com
superiorenergyservices.gcs-web.com
synlogic.gcs-web.com
teaminc.gcs-web.com
teleflexincorporated.gcs-web.com
tuesdaymorning.gcs-web.com
uhsinc.gcs-web.com
unitilcorp.gcs-web.com
veracyteinc.gcs-web.com
westpharma.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-4.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuZFMEzYGtq/aYGdQeKM
9m4/fvH0yGLF9w/8KFHGawOqu4DsYjJD1NX7gJ2cxxVH1ezFCxSTQC3yQKly8TL+
2YKnQaHVW5ujAd29V1e6MM43jBxSDNYW1zezmh4D1SDDb+WTk+O4PHja/R8i6xik
teNublwn7pWVFcBTq5akQqIxo3i5/AxjCed5NO/wPReEOdygwik8JM8EFOeOWUiJ
CPW7PMamkcuFaXMReLLHdHZ6/aflcbtjNYuAy6YPTueyJ9mhxJ9CzLFb8XI7TpRR
SnMQ+2PLXgYNJ+2jJxf81enStlhu/7vHEHGPyYQuNU+hIeswkDJS+MuLqu0ZRMs2
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306531600021028806803263521625020876450779
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-21 09:29:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-19 09:29:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-4.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21069109125726005755839431774525916572776347755315078925206044905656355051405000063969690917857283016044956717517392753437601825924722145107541451782188023988568996947923622848753790419455067576082604789737151460081776466763268446264750405535712148046564361670987679495394377297699909207013765660771364144599847828530100220413421626732990076551160125442906267710573434931855921440342006549306153949998512644523163870826312920953752188278096915912262191916891441524270164366761467020333993863605284312636466238338093131392308436769354292806766942466953120090810617979790874234455629675231999091849881911600604798203499
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							447dabf61d37558bd7b986ad8ef13c19e99cb02e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1771 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aia.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altair.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aralezpharmaceuticalsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbutusbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assemblybio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bandwidth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bill.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caredxinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casellawastesystems.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catabasispharmaceuticalsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elliemae.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterabio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fleetcor.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gastar.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genprex.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalpowerequipmentgroupinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intelliatherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.altair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.arbutusbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.assemblybio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.fleetcor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.sangamo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.synlogictx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.teaminc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.veracyte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.aia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.altair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.bandwidth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.caredxinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.enterabio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.factory.jcrew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.jcrew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.madewell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.nkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.optimizerx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.pier1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sperotherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sterlingbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.unitil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.willscot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.altair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.casella.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.catabasis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gastar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.intelliatx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.istar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.opiant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.superiorenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tuesdaymorning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.uhsinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'istarfinancial.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcrewgroupinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-4.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metabank.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navientnews.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.navient.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nkt.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opiantpharmaceuticalsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optimizerx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pier1.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reatapharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sangamotherapeuticsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sperotherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sterlingbank.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superiorenergyservices.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synlogic.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teaminc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teleflexincorporated.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuesdaymorning.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitilcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veracyteinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westpharma.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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