leapfrog-ssl-24.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:83:3d:62:b4:b2:7e:60:16:1d:f2:e1:b9:1d:e3:92:37:71 was issued on by Let's Encrypt.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-24.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:83:3d:62:b4:b2:7e:60:16:1d:f2:e1:b9:1d:e3:92:37:71
Serial Number (int): 393107729211494394438952820362660531025777
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b2:65:3d:8e:ca:5b:44:60:46:11:c5:08:b7:e5:5d:9e:0f:4b:90:32
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5a:cf:cc:0f:07:7b:ce:d1:f9:c3:5e:cc:e7:e6:11:92:3c:0d:45:49
Fingerprint (sha256): 46:f2:6e:ba:68:34:9f:b4:ef:c8:ec:77:88:a4:a2:57:4d:08:25:9b:96:6e:a6:04:72:f3:6c:b4:49:be:79:c3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-24.gcs-web.com

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-24.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agiospharmaceuticalsinc.gcs-web.com
ambac.gcs-web.com
anpacbio.gcs-web.com
apellis.gcs-web.com
arvinas.gcs-web.com
avadimhealth.gcs-web.com
bbqholdco.gcs-web.com
bloominbrands.gcs-web.com
bluejaydx.gcs-web.com
cernercorporation.gcs-web.com
compassequity.gcs-web.com
costcowholesalecorporation.gcs-web.com
craftbrewallianceinc.gcs-web.com
cyrusone.gcs-web.com
dermtech.gcs-web.com
endopharmaceuticalsinc.gcs-web.com
entegrisinc.gcs-web.com
exiant-redesign.gcs-web.com
exiant.gcs-web.com
fangdd.gcs-web.com
foodlionpr.gcs-web.com
gaincapital.gcs-web.com
globusmedicalinc.gcs-web.com
incresearch.gcs-web.com
intelsat.gcs-web.com
intrado.gcs-web.com
investor.agios.com
investor.avadimhealth.com
investor.costco.com
investor.cyrusone.com
investor.endo.com
investor.entegris.com
investor.exiant.com
investor.oncternal.com
investor.syneoshealth.com
investors.anpacbio.com
investors.apellis.com
investors.avadimhealth.com
investors.bloominbrands.com
investors.cerner.com
investors.craftbrew.com
investors.dermtech.com
investors.globusmedical.com
investors.intelsat.com
investors.kadmon.com
investors.newscorp.com
investors.ovidrx.com
investors.pae.com
investors.progress.com
investors.scholarrock.com
investors.spscommerce.com
ir.arvinas.com
ir.avadimhealth.com
ir.bbqholdco.com
ir.bluejaydx.com
ir.fangdd.com
ir.gaincapital.com
ir.intrado.com
ir.kiadis.com
ir.liveperson.com
ir.mersana.com
ir.sesenbio.com
kadmon.gcs-web.com
kiadis.gcs-web.com
leapfrog-ssl-24.gcs-web.com
liveperson.gcs-web.com
mandkhome.gcs-web.com
mersana.gcs-web.com
mvccapitalinc.gcs-web.com
newscorp.gcs-web.com
newsroom.foodlion.com
newsroom.mandkhome.com
oncternal.gcs-web.com
otis.gcs-web.com
ovidtherapeutics.gcs-web.com
pae.gcs-web.com
progresssoftwarecorporation.gcs-web.com
scholarrock.gcs-web.com
sesenbio.gcs-web.com
spscommerceinc.gcs-web.com
westcorporation.gcs-web.com
www.investor.syneoshealth.com
www.investors.globusmedical.com
www.mvccapital.com
www.otisinvestors.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-52.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-24.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RGPTMbejWSE1qV5Xo3F
abieRq5sWhXyg4bywcY2G+J0rvuOXln5v+QTpZb6M8ssEYiH0Xozj9H6yCLWu8yk
x3VWy0OlrwzeHNFRyejn8Ub1BSYTSoBlIftiQR6fRF2xHdKYBGAGf18PpJnz/HjN
No3T0bfh5trQjZ2Dc1wvR1bAeAgz/NcipU1eZtB8HkZ06OXlCiTmuh5ghv6QSJVX
4slh6tc8c+W3l6mcgtuluckQoELl6XdNmgzXMWLZzHpJ6OMZuiyvDhudf/baIQNo
/SRcsPWObMTo6x7dBq20hRzUSfa9HR2jl3Is9aqZrGFYctlpJdgweeXUQ+MjxDBd
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 393107729211494394438952820362660531025777
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-03 22:31:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-01 22:31:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-24.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26392464780888582935629998236268318773553682427265297174610599037978130165277839544278529754226907464613406634345368230383800576951371201700414502177165741482765097877052039235800095121547207281182554518570900232325707773714931093181247743263705210485784906925250016760563222620737750287912337858019660038328400610659804476947615111951240153278092473095096117034307785910506890005272170210395005220011254773450528405595868114283126098702595780369670674187821123685820605264433768003910005008185191724865716241701494645432357176451704787555088682966978155783065200229907750519664752342165078557510320752893283410140609
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b2653d8eca5b44604611c508b7e55d9e0f4b9032
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2038 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agiospharmaceuticalsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ambac.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anpacbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apellis.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arvinas.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avadimhealth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbqholdco.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bloominbrands.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluejaydx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cernercorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compassequity.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costcowholesalecorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'craftbrewallianceinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyrusone.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dermtech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endopharmaceuticalsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entegrisinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exiant-redesign.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exiant.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fangdd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodlionpr.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaincapital.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globusmedicalinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incresearch.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intelsat.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intrado.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.agios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.avadimhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.costco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.cyrusone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.endo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.entegris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.exiant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.oncternal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.syneoshealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.anpacbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.apellis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.avadimhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.bloominbrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cerner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.craftbrew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.dermtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.globusmedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.intelsat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.kadmon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.newscorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ovidrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.pae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.progress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.scholarrock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.spscommerce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.arvinas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.avadimhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.bbqholdco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.bluejaydx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.fangdd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gaincapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.intrado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.kiadis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.liveperson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mersana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.sesenbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kadmon.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiadis.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-24.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveperson.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mandkhome.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mersana.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvccapitalinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newscorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.foodlion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.mandkhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oncternal.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otis.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ovidtherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pae.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'progresssoftwarecorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scholarrock.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sesenbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spscommerceinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westcorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investor.syneoshealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investors.globusmedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mvccapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otisinvestors.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017ce8250d12000004030047304502210085323749519b53f22c04f33d1d3195d046a0539fa5fe84000d4ea876c1a3b6c1022053cf26bf6881a362438ad405823868d2fae73071e6a7ced50992ee3f02fbf602007600dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000017ce8250edc00000403004730450220520c9e4df08f8cb615a14d0d0f129352635b3da2a5cda7bd683e7f0fd9863d57022100d0b3a357f8b01235b282a61c021b107cbaba215e0f90a8293a8f63a77147915f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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