leapfrog-ssl-5.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:eb:90:03:48:c5:60:08:71:f1:18:e6:3e:8b:1d:b1:9d:66 was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=leapfrog-ssl-5.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:eb:90:03:48:c5:60:08:71:f1:18:e6:3e:8b:1d:b1:9d:66
Serial Number (int): 428606925837716289239224287714829447306598
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2c:ca:bd:7f:c3:6e:87:e4:45:04:d4:93:2f:9c:c5:1e:72:a4:7d:01
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a4:87:8e:95:d8:1a:3b:0e:ac:0f:24:06:5b:8f:2b:b3:b0:9f:be:d2
Fingerprint (sha256): 52:68:46:88:cf:49:01:82:67:3f:5b:63:92:a5:8f:45:b2:ff:8c:37:93:3b:08:b9:a7:38:39:9f:2b:90:01:9a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-5.gcs-web.com

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-5.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acimmune.gcs-web.com
activisionblizzard.gcs-web.com
agiletherapeutics.gcs-web.com
allot.gcs-web.com
apptio.gcs-web.com
asuresoftware.gcs-web.com
biolinerx.gcs-web.com
cabka.gcs-web.com
capstarbank.gcs-web.com
cleanharbors.gcs-web.com
cmcsa.gcs-web.com
conatuspharma.gcs-web.com
crackerbarrel.gcs-web.com
delltechnologies.gcs-web.com
dollartree.gcs-web.com
emergentbiosolutions.gcs-web.com
evaxion.gcs-web.com
fbin.gcs-web.com
glycomimeticsinc.gcs-web.com
groupon.gcs-web.com
guidewire.gcs-web.com
healthequity.gcs-web.com
huntsman.gcs-web.com
immersion.gcs-web.com
investor.activision.com
investor.activisionblizzard.com
investor.asuresoftware.com
investor.cbrl.com
investor.cbrlgroup.com
investor.crackerbarrel.com
investor.eac.dk
investor.jazzpharma.com
investor.lawsonproducts.com
investor.thesantafegroup.com
investors.allot.com
investors.cabka.com
investors.delltechnologies.com
investors.emergentbiosolutions.com
investors.evaxion-biotech.com
investors.ivalua.com
investors.presbia.com
investors.revlon.com
investors.sabre.com
investors.southwestgas.com
investors.southwestgasholdings.com
investors.sunpower.com
investors.swgas.com
investors.swgasholdings.com
investors.watsco.com
investors.xerox.com
ipicentertainment.gcs-web.com
ir.acimmune.com
ir.agiletherapeutics.com
ir.biolinerx.com
ir.capstarbank.com
ir.cbtxinc.com
ir.cleanharbors.com
ir.fbin.com
ir.glycomimetics.com
ir.guidewire.com
ir.immersion.com
ir.mandtbank.com
ir.mtb.com
ir.neuraxis.com
ir.telesisbio.com
ir.therapeuticsmd.com
ivalua.gcs-web.com
jazzpharma.gcs-web.com
lamresearch.gcs-web.com
lawsonproducts.gcs-web.com
leapfrog-ssl-5.gcs-web.com
mandtbank.gcs-web.com
neuraxisinc.gcs-web.com
pitneybowesinc.gcs-web.com
presbia.gcs-web.com
qualcomminc.gcs-web.com
revlonir.gcs-web.com
sabre.gcs-web.com
steadymedtherapeuticsinc.gcs-web.com
sunpower.gcs-web.com
swgasholdings.gcs-web.com
telesisbio.gcs-web.com
therapeuticsmd.gcs-web.com
thesantafegroup.gcs-web.com
watsco.gcs-web.com
web.gcs-web.com
www.cmcsa.com
www.eac.dk
www.investorrelations.pitneybowes.com
xerox.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-5.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gX42reMaTYvcBJFbjvc
M5ZPlO9wPl5QJQ+NMYmCYM4YaezfFqjb6kbP85Ce18JpVORAOKTYXMvn0uB3Qa5n
YU+P2fqEVUm0zJ9T1/dGfLvglb0Kev6RaATmNvz+WaV9BKcV1fnrGlFHB3ymZ1wb
A9Zq/pe/h2lr525N0xwn02Rtmly46DOXHDra1m/lJR/qW5XfHUc/5iLYrScMyV3m
/GeJnpyzuxmjn33jrN6iPRVDKbX1EjQQ28Y6+SrYE7t1x2fnaB+aa8QyRrLfFywm
HJG5GbQb6Pu0TqOU3AgisBczrj2xhDVOPNtnaBJDGLY9ij7K+KbFvNNJ1sQu9ECB
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 428606925837716289239224287714829447306598
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-04 21:48:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-02 21:48:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-5.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29037755088228544892557199495471187921628864198076114457148491427901079388210659016112587753083106633659698890337894197482450152475432363226738082439000192995915189566878788133901397806608778291956392485818322352175574503936226115431517516413823364483788055003962889375359225184277945467702692428411200796214757328002644158430701709124989133950438278197981104752880411496223616823479383849555319153275002478217678614567088167628425249357389861939136619137876922667929396454020247934241622043878370631007730077289777023846871423063840084760739681180255819029651729884421309369399018620210375650242123513444708433035617
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2ccabd7fc36e87e44504d4932f9cc51e72a47d01
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2148 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acimmune.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activisionblizzard.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agiletherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allot.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apptio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asuresoftware.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biolinerx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabka.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capstarbank.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleanharbors.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmcsa.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conatuspharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crackerbarrel.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delltechnologies.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dollartree.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emergentbiosolutions.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evaxion.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fbin.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glycomimeticsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groupon.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guidewire.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthequity.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huntsman.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immersion.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.activision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.activisionblizzard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.asuresoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.cbrl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.cbrlgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.crackerbarrel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.eac.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.jazzpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.lawsonproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.thesantafegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.allot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cabka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.delltechnologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.emergentbiosolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.evaxion-biotech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ivalua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.presbia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.revlon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.southwestgas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.southwestgasholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sunpower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.swgas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.swgasholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.watsco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipicentertainment.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.acimmune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.agiletherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.biolinerx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.capstarbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cbtxinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cleanharbors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.fbin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.glycomimetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.guidewire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.immersion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mandtbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mtb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.neuraxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.telesisbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.therapeuticsmd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivalua.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jazzpharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lamresearch.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawsonproducts.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-5.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mandtbank.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neuraxisinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pitneybowesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'presbia.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualcomminc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revlonir.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sabre.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steadymedtherapeuticsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunpower.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swgasholdings.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telesisbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'therapeuticsmd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesantafegroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watsco.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmcsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eac.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investorrelations.pitneybowes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xerox.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e0ba7225a0000040300463044022004b36523e55fca6542b6c7987eed92112965d6718574836fbe87234f763c36250220476d25422c91629caa312ed10442e89ab57b7b68510536394d9de1579b8d8466007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e0ba7226200000403004730450220340c50808b4cc49a7a3e9f91dac4efd7e1cb58c2ea3e86dfc3fb788beb4b8a3b022100936773e3f00f4d83097e09b747a15f945acf26fba38f543ec263efda8f5e178d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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