leapfrog-ssl-4.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 03:e4:08:82:cd:98:50:f9:09:2f:1b:e5:bf:b8:4d:6d:c7:97 was issued on by Let's Encrypt.

With 73 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-4.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e4:08:82:cd:98:50:f9:09:2f:1b:e5:bf:b8:4d:6d:c7:97
Serial Number (int): 338932550445774307781541761835511998957463
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 28:cd:bc:8b:2d:9d:ac:a8:24:15:86:5c:57:0d:7b:9b:ec:31:41:9b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8a:9e:d5:75:58:b9:47:80:3e:9e:ba:9c:09:ea:14:cc:3b:2f:0d:19
Fingerprint (sha256): 53:e2:74:ac:c2:8e:9c:73:83:2a:d4:b3:e0:b9:94:f4:da:e4:93:a9:cb:ea:f5:e1:3b:75:ae:cd:7e:5b:48:51

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-4.gcs-web.com

73

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-4.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aia.gcs-web.com
altair.gcs-web.com
aralezpharmaceuticalsinc.gcs-web.com
arbutusbio.gcs-web.com
assemblybio.gcs-web.com
bandwidth.gcs-web.com
bill.gcs-web.com
caredxinc.gcs-web.com
casellawastesystems.gcs-web.com
catabasispharmaceuticalsinc.gcs-web.com
elliemae.gcs-web.com
enterabio.gcs-web.com
fleetcor.gcs-web.com
gastar.gcs-web.com
genprex.gcs-web.com
globalpowerequipmentgroupinc.gcs-web.com
intelliatherapeutics.gcs-web.com
investor.altair.com
investor.arbutusbio.com
investor.assemblybio.com
investor.fleetcor.com
investor.sangamo.com
investor.synlogictx.com
investor.teaminc.com
investor.veracyte.com
investors.aia.com
investors.altair.com
investors.bandwidth.com
investors.caredxinc.com
investors.enterabio.com
investors.factory.jcrew.com
investors.jcrew.com
investors.madewell.com
investors.nkt.com
investors.optimizerx.com
investors.pier1.com
investors.sperotherapeutics.com
investors.sterlingbank.com
investors.unitil.com
investors.willscot.com
ir.altair.com
ir.casella.com
ir.catabasis.com
ir.gastar.com
ir.intelliatx.com
ir.istar.com
ir.opiant.com
ir.superiorenergy.com
ir.tuesdaymorning.com
ir.uhsinc.com
istarfinancial.gcs-web.com
jcrewgroupinc.gcs-web.com
leapfrog-ssl-4.gcs-web.com
metabank.gcs-web.com
navientnews.gcs-web.com
news.navient.com
nkt.gcs-web.com
opiantpharmaceuticalsinc.gcs-web.com
optimizerx.gcs-web.com
pier1.gcs-web.com
reatapharma.gcs-web.com
sangamotherapeuticsinc.gcs-web.com
sperotherapeutics.gcs-web.com
sterlingbank.gcs-web.com
superiorenergyservices.gcs-web.com
synlogic.gcs-web.com
teaminc.gcs-web.com
teleflexincorporated.gcs-web.com
tuesdaymorning.gcs-web.com
uhsinc.gcs-web.com
unitilcorp.gcs-web.com
veracyteinc.gcs-web.com
westpharma.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-4.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6YKOYi3SfZXMoEzxNYO
Eo4K0FAUAXgQQPOCKSYIN6NZlrrUE6xSPzpAVuu7oFbmPeoxEeBqtq6/gS0cgptR
G26y8ncB5D34MKDlWYX7aMr5kqSJ0c0lFNkItNZRU4IBNxc0ceJBGVzZCkT1lwe8
KnOpyBc5x2wIKsODy4d6wHWN3CkLkiYpX3Bw0PSP+6b78QaBMNQeO4z0mJAJ9Lr3
WJKdLmZUEh36Sq7atF39UZGtxWPoO3uvYp3skbCW8yboahCSdsUi2VYj79GHZfIa
/PVlIIQvPwUyA71OGCmZkUdYclnb2z6O0wAhBqt7tdQGl/7kJDeAiXgkcf/Io+g9
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 338932550445774307781541761835511998957463
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-23 11:46:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-21 11:46:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-4.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22173580715281925672131747683389316145290159506047566232906346142856995831917251512863666887480683411943302428203578917711487115950619050013271237005115098449791940740207201688182839331788475924211647288380276979980588372118162756238391328950138561979723035928847853345797001495787957372190608215981141242011503645901180579503507088481108238032143818717915401747681929609274280026599259687957391765854493705159216628710723279481840531757515908639360987907954002126349300346196893268328653867908908369321786228256015748949494410968215554220802887600687633364967305583715369097077664607925016421728168154189438372035983
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							28cdbc8b2d9daca82415865c570d7b9bec31419b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1771 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aia.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altair.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aralezpharmaceuticalsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbutusbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assemblybio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bandwidth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bill.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caredxinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casellawastesystems.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catabasispharmaceuticalsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elliemae.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterabio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fleetcor.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gastar.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genprex.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalpowerequipmentgroupinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intelliatherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.altair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.arbutusbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.assemblybio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.fleetcor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.sangamo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.synlogictx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.teaminc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.veracyte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.aia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.altair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.bandwidth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.caredxinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.enterabio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.factory.jcrew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.jcrew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.madewell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.nkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.optimizerx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.pier1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sperotherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sterlingbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.unitil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.willscot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.altair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.casella.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.catabasis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gastar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.intelliatx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.istar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.opiant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.superiorenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tuesdaymorning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.uhsinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'istarfinancial.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcrewgroupinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-4.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metabank.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navientnews.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.navient.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nkt.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opiantpharmaceuticalsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optimizerx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pier1.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reatapharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sangamotherapeuticsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sperotherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sterlingbank.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superiorenergyservices.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synlogic.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teaminc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teleflexincorporated.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuesdaymorning.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitilcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veracyteinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westpharma.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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