leapfrog-ssl-24.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:b1:a6:8f:73:57:00:c9:d8:c6:ae:0e:5f:b4:6c:95:ef:5d was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-24.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b1:a6:8f:73:57:00:c9:d8:c6:ae:0e:5f:b4:6c:95:ef:5d
Serial Number (int): 408900519357168359711234811717250226450269
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 18:79:22:d9:e1:b5:8a:94:f7:6c:aa:8f:20:7f:92:53:57:73:b1:c2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e2:aa:81:13:3f:02:8d:b5:c3:73:1f:ed:b5:83:14:12:21:f3:97:8f
Fingerprint (sha256): 44:5c:78:1c:9e:9c:07:27:97:61:c6:7b:ed:a1:3a:7f:01:75:75:c8:b9:25:0f:7f:10:97:69:39:c0:89:23:dd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-24.gcs-web.com

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-24.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agiospharmaceuticalsinc.gcs-web.com
albint.gcs-web.com
ambac.gcs-web.com
anpacbio.gcs-web.com
apellis.gcs-web.com
arvinas.gcs-web.com
avadimhealth.gcs-web.com
bbqholdco.gcs-web.com
bloominbrands.gcs-web.com
bluejaydx.gcs-web.com
cernercorporation.gcs-web.com
compassequity.gcs-web.com
costcowholesalecorporation.gcs-web.com
craftbrewallianceinc.gcs-web.com
cyrusone.gcs-web.com
dermtech.gcs-web.com
endopharmaceuticalsinc.gcs-web.com
entegrisinc.gcs-web.com
exiant-redesign.gcs-web.com
exiant.gcs-web.com
fangdd.gcs-web.com
foodlionpr.gcs-web.com
gaincapital.gcs-web.com
globusmedicalinc.gcs-web.com
incresearch.gcs-web.com
intelsat.gcs-web.com
intrado.gcs-web.com
investor.agios.com
investor.avadimhealth.com
investor.costco.com
investor.cyrusone.com
investor.endo.com
investor.entegris.com
investor.exiant.com
investor.oncternal.com
investor.syneoshealth.com
investors.albint.com
investors.anpacbio.com
investors.apellis.com
investors.avadimhealth.com
investors.bloominbrands.com
investors.cerner.com
investors.craftbrew.com
investors.dermtech.com
investors.globusmedical.com
investors.intelsat.com
investors.kadmon.com
investors.newscorp.com
investors.ovidrx.com
investors.pae.com
investors.progress.com
investors.scholarrock.com
investors.spscommerce.com
ir.arvinas.com
ir.avadimhealth.com
ir.bbqholdco.com
ir.bluejaydx.com
ir.fangdd.com
ir.gaincapital.com
ir.intrado.com
ir.kiadis.com
ir.liveperson.com
ir.mersana.com
ir.sesenbio.com
kadmon.gcs-web.com
kiadis.gcs-web.com
leapfrog-ssl-24.gcs-web.com
liveperson.gcs-web.com
mandkhome.gcs-web.com
mersana.gcs-web.com
mvccapitalinc.gcs-web.com
newscorp.gcs-web.com
newsroom.foodlion.com
newsroom.mandkhome.com
oncternal.gcs-web.com
otis.gcs-web.com
ovidtherapeutics.gcs-web.com
pae.gcs-web.com
progresssoftwarecorporation.gcs-web.com
scholarrock.gcs-web.com
sesenbio.gcs-web.com
spscommerceinc.gcs-web.com
vmgpartners.gcs-web.com
westcorporation.gcs-web.com
www.investor.syneoshealth.com
www.investors.globusmedical.com
www.mvccapital.com
www.otisinvestors.com
www.vmgspac.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-24.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsjrcXAAGz7llwTV7VXH
AVbnXy26JcMEXuu5o4A+vMm64f+zpXkoNOyG90CSbGUL6cXsSsC1QT5hlxcdbeqU
N0fQ4bCpx1GEj/8xCNiG096cwb9KhQz4CnCNyG/MAFQPzi9ugNSmttfSrBl4v6/g
TYTM1+DAqWt7QwT+dKXvRG46W5HzUI2PiF9dMcizDnxXL1wBB+NMRvewuDoSywg9
qcuquDbPr6NtCU8451J/f6uQoQJLFhUZH5Ajf8F0kcTajkWG55Bn2TqS2UqKSZB/
wYX81PKg+9SWSKykOpslnBrL9GJ/BUoS/5ql8TPbpy4yP2fWBf9zTC87kVtPPC29
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 408900519357168359711234811717250226450269
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-05 16:07:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-03 16:07:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-24.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24084355140115562641758053835623594103228349507382815382940206790242315332691285270551942420710652047663015599948355426371775608419032064218512550519383877783968166375364050556644919365310049404179334384937987362247658638227598723689585496454515276632235478618253020820198643566766440636135657424518599632072929264621426017313360470980400396956536277338320808792521123043684807254214780327432026718381981998195389907725643035435328531079944227229771140509707822940748219254311073549983021918987266577910367628156399215334923471686068563106275855841132833056508748901290406909323345686283616047803037063581111742741899
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							187922d9e1b58a94f76caa8f207f92535773b1c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agiospharmaceuticalsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albint.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ambac.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anpacbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apellis.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arvinas.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avadimhealth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbqholdco.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bloominbrands.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluejaydx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cernercorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compassequity.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costcowholesalecorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'craftbrewallianceinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyrusone.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dermtech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endopharmaceuticalsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entegrisinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exiant-redesign.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exiant.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fangdd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodlionpr.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaincapital.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globusmedicalinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incresearch.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intelsat.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intrado.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.agios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.avadimhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.costco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.cyrusone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.endo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.entegris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.exiant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.oncternal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.syneoshealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.albint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.anpacbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.apellis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.avadimhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.bloominbrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cerner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.craftbrew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.dermtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.globusmedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.intelsat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.kadmon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.newscorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ovidrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.pae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.progress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.scholarrock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.spscommerce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.arvinas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.avadimhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.bbqholdco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.bluejaydx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.fangdd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gaincapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.intrado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.kiadis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.liveperson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mersana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.sesenbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kadmon.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiadis.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-24.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveperson.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mandkhome.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mersana.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvccapitalinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newscorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.foodlion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.mandkhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oncternal.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otis.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ovidtherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pae.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'progresssoftwarecorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scholarrock.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sesenbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spscommerceinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vmgpartners.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westcorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investor.syneoshealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investors.globusmedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mvccapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otisinvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vmgspac.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003b3a857d79972516ef7414fe579ae14ef04b3371101c1c34d4270b3ad210e10b0515e5ff6352ead3179a0b9ff42386f0baa2caf155fe1223dcca1cb1907bfef8624a9f2b81135f4e40694399134c0cda6bf8cf87c08918ef48d9b035769951bc8ef762bc1000217f996b8ac9417598cc5e149270ced8eb9f98747ef9b1f48b7ef60bc64758a2d276a7fc1a1fd46785b2a736516a306fa8174f0fd515f8accf84a5180d6fa79bddb82c702ecc5e14de47bd8cdf41234f19ad92a24b6cdbbb7ac0a5da34acc59e6e11689be7d2db1ef2a4d2f0e5fd18a51b3e50488bfd915ee8f7777f39b23c9a65d74c0c3a95f94a8ed243e96ca19aa0934f0724f569ab01dde8