leapfrog-ssl-14.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:f9:27:d6:1f:ec:7f:f4:55:9f:f7:ee:6a:8f:d1:f9:7b:63 was issued on by Let's Encrypt.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-14.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f9:27:d6:1f:ec:7f:f4:55:9f:f7:ee:6a:8f:d1:f9:7b:63
Serial Number (int): 433232404781210146206099141555471580232547
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ea:26:04:c5:e6:c8:6c:e6:12:eb:30:40:45:b6:f7:95:3c:f0:c3:0c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d2:31:d3:73:37:16:82:39:79:5b:f7:a1:28:2f:b1:94:f7:c6:34:e2
Fingerprint (sha256): 47:51:6f:80:73:08:9a:ea:1d:39:e6:cb:34:4a:13:7e:e3:7f:d1:c6:e2:7f:7b:26:89:83:50:94:61:be:66:85

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-14.gcs-web.com

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-14.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

360finance.gcs-web.com
aclaristherapeuticsinc.gcs-web.com
alector.gcs-web.com
alight.gcs-web.com
avidxchange.gcs-web.com
cibus.gcs-web.com
ciriustx.gcs-web.com
classvtransaction-delltechnologies.gcs-web.com
classvtransactiondelltechnologies.gcs-web.com
coherusbioscience.gcs-web.com
control4corporation.gcs-web.com
cyclerion.gcs-web.com
dermavantsciences.gcs-web.com
dukerealtycorporation.gcs-web.com
dvmttransaction.delltechnologies.com
foamix.gcs-web.com
fticonsulting.gcs-web.com
futuholdings.gcs-web.com
gf.gcs-web.com
gitlab.gcs-web.com
gtxinc.gcs-web.com
innovivainc.gcs-web.com
investor.aclaristx.com
investor.dukerealty.com
investor.foamix.com
investor.inva.com
investor.manpower.com
investor.manpowergroup.com
investor.newpark.com
investorrelations.sarepta.com
investors.alector.com
investors.alight.com
investors.coherus.com
investors.dermavant.com
investors.foamix.com
investors.gf.com
investors.ivericbio.com
investors.nerdwallet.com
investors.rosettastone.com
investors.rrts.com
investors.twistbioscience.com
investors.unifirst.com
investors.viewray.com
ir.360jinrong.net
ir.360shuke.com
ir.aravive.com
ir.avidxchange.com
ir.cibus.com
ir.ciriustx.com
ir.cyclerion.com
ir.fticonsulting.com
ir.futuholdings.com
ir.gitlab.com
ir.mccormick.com
ir.mirumpharma.com
ir.newellbrands.com
ir.oncobiologics.com
ir.orionmarinegroup.com
ir.outlooktherapeutics.com
ir.tizianalifesciences.com
ir.wabteccorp.com
ir.zoominfo.com
ivericbio.gcs-web.com
junipernetworkspr.gcs-web.com
karyopharm.gcs-web.com
leapfrog-ssl-14.gcs-web.com
manpowergroup.gcs-web.com
mccormickcorporation.gcs-web.com
mirumpharma.gcs-web.com
nerdwallet.gcs-web.com
newellbrands.gcs-web.com
newpark.gcs-web.com
oncobiologics.gcs-web.com
ophthotech.gcs-web.com
oriongroupholdingsinc.gcs-web.com
pr.rosettastone.com
roadrunnertransportationsystemsinc.gcs-web.com
rosettastone.gcs-web.com
sarepta.gcs-web.com
sunrun.gcs-web.com
tizianalifesciences.gcs-web.com
twistbiosciences.gcs-web.com
unifirstcorp.gcs-web.com
versartis.gcs-web.com
viewrayinc.gcs-web.com
wabtec.gcs-web.com
www.foamix.com
zoominfotechnologiesinc.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-52.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-14.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMQtYIKyQkKVHgsY69VH
ZtgpQYWlDa78tGW0CukwGTcgmfWh09up7P2OiVeUYYqZGx7Dbsjh3IFW/Sdq1A2h
LXE0fiI33cPGbx4haVgYU8eE1XkeEMWRxBW63gjg1i00elF2DwcMezhbHzEFGkzo
t0nQANq/aYJ9g5qo2uyskjLjU4vymuG6XjwKwbCgSAzfDtAwxri2WADj8WL3cFpR
Segd1G/eNiARfG2m5A0WvugHx2QFFHhrKcKGltUKm5hKP/P6jTPcehYDEZ52ViHy
QPHaCT4hO6a58L58urCFztx15+iisr4RG4ZnwI4RJ0SzIIFShYJOvXCZ94HCvyfB
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 433232404781210146206099141555471580232547
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-13 17:32:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-13 17:32:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-14.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22314680283413795514356538121145366334537299786848998677569924029506524660350608600606814803773715198329279703694911951171987677021629833655877338443025749771023866451669840451039685605595968599562233582697552868945598818981149390513067092259264033525823196318149814889864756216099679302736395342889314769684545581694838738383395106832544528462645448336898617341869565372273502664007158562750687818416343451699908696486682178359200274446714362622069901707646808720533544317287816674390675771323872128422356661592365088098829409329898942092189452745401245088220646727488376948239532922668485371106918483052650171973981
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ea2604c5e6c86ce612eb304045b6f7953cf0c30c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2186 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '360finance.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aclaristherapeuticsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alector.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alight.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avidxchange.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cibus.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciriustx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classvtransaction-delltechnologies.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classvtransactiondelltechnologies.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coherusbioscience.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'control4corporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyclerion.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dermavantsciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dukerealtycorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvmttransaction.delltechnologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foamix.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fticonsulting.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futuholdings.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gf.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtxinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovivainc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.aclaristx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.dukerealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.foamix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.inva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.manpower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.manpowergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.newpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorrelations.sarepta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.alector.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.alight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.coherus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.dermavant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.foamix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.gf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ivericbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.nerdwallet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.rosettastone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.rrts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.twistbioscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.unifirst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.viewray.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.360jinrong.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.360shuke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.aravive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.avidxchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cibus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ciriustx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cyclerion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.fticonsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.futuholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gitlab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mccormick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mirumpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.newellbrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.oncobiologics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.orionmarinegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.outlooktherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tizianalifesciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.wabteccorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.zoominfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivericbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'junipernetworkspr.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karyopharm.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-14.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manpowergroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mccormickcorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mirumpharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nerdwallet.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newellbrands.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newpark.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oncobiologics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ophthotech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oriongroupholdingsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.rosettastone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roadrunnertransportationsystemsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosettastone.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sarepta.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunrun.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tizianalifesciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twistbiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unifirstcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'versartis.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viewrayinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wabtec.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foamix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zoominfotechnologiesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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