leapfrog-ssl-5.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 03:40:77:6b:5c:64:c9:9c:b4:7a:f0:9c:da:06:26:9f:f6:46 was issued on by Let's Encrypt.

With 91 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-5.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:40:77:6b:5c:64:c9:9c:b4:7a:f0:9c:da:06:26:9f:f6:46
Serial Number (int): 283273664859449965536035349855892313994822
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a1:52:e1:6a:72:62:ae:c8:25:a4:4f:30:ee:6b:9f:1b:e3:70:a3:34
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c2:8f:c1:f2:77:9e:6b:ad:a1:c7:ef:96:8a:90:f5:0e:dc:ec:ba:1b
Fingerprint (sha256): 77:a7:cd:75:d6:0f:bf:be:42:ad:ae:e5:2a:ca:eb:e1:97:23:09:c6:2d:f7:d7:96:4a:f0:b8:25:85:34:62:60

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-5.gcs-web.com

91

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-5.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acimmune.gcs-web.com
activisionblizzard.gcs-web.com
aetna.gcs-web.com
agiletherapeutics.gcs-web.com
allot.gcs-web.com
apptio.gcs-web.com
asuresoftware.gcs-web.com
biolinerx.gcs-web.com
capstarbank.gcs-web.com
cleanharbors.gcs-web.com
cmcsa.gcs-web.com
conatuspharma.gcs-web.com
crackerbarrel.gcs-web.com
delltechnologies.gcs-web.com
dollartree.gcs-web.com
emergentbiosolutions.gcs-web.com
fbin.gcs-web.com
glycomimeticsinc.gcs-web.com
groupon.gcs-web.com
guidewire.gcs-web.com
healthequity.gcs-web.com
huntsman.gcs-web.com
immersion.gcs-web.com
investor.activision.com
investor.activisionblizzard.com
investor.aetna.com
investor.asuresoftware.com
investor.cbrl.com
investor.cbrlgroup.com
investor.crackerbarrel.com
investor.eac.dk
investor.jazzpharma.com
investor.lawsonproducts.com
investor.liveoakbank.com
investor.thesantafegroup.com
investors.allot.com
investors.delltechnologies.com
investors.emergentbiosolutions.com
investors.ipictheaters.com
investors.ivalua.com
investors.presbia.com
investors.revlon.com
investors.sabre.com
investors.southwestgas.com
investors.southwestgasholdings.com
investors.sunpower.com
investors.swgas.com
investors.swgasholdings.com
investors.watsco.com
investors.xerox.com
ipicentertainment.gcs-web.com
ir.acimmune.com
ir.agiletherapeutics.com
ir.biolinerx.com
ir.capstarbank.com
ir.cbtxinc.com
ir.cleanharbors.com
ir.fbin.com
ir.glycomimetics.com
ir.guidewire.com
ir.immersion.com
ir.mandtbank.com
ir.mtb.com
ir.neuraxis.com
ir.telesisbio.com
ir.therapeuticsmd.com
ivalua.gcs-web.com
jazzpharma.gcs-web.com
lamresearch.gcs-web.com
lawsonproducts.gcs-web.com
leapfrog-ssl-5.gcs-web.com
liveoak.gcs-web.com
mandtbank.gcs-web.com
neuraxisinc.gcs-web.com
pitneybowesinc.gcs-web.com
presbia.gcs-web.com
qualcomminc.gcs-web.com
revlonir.gcs-web.com
sabre.gcs-web.com
steadymedtherapeuticsinc.gcs-web.com
sunpower.gcs-web.com
swgasholdings.gcs-web.com
telesisbio.gcs-web.com
therapeuticsmd.gcs-web.com
thesantafegroup.gcs-web.com
watsco.gcs-web.com
web.gcs-web.com
www.cmcsa.com
www.eac.dk
www.investorrelations.pitneybowes.com
xerox.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-5.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmhe7t1LM59eT9LCkXpb
HWB2x8fL8ulihXMGJP7e1blHN9jvv2Gr+dimRowcsbfNDZPGslEDvy5kWNeOMZoD
BV1Eevm1WHwd1/qzQqrCuu108T3bCZc9IpwWC3FxbhppRWShsMV8SX3SdOUhjXTA
byP9yLAej32ncib/xyTxeaC300fAWdvwpp+94x4cyYnRWs2cLpllESWN7ub38HBO
7BeVQrVwYvRLZHwX6jVEKQFtChGtEaqz4GFqfkBVVISjBYMJsl6AWy0AnXCBByRe
ocNpX+QzS5cB8o+fPuhED+XWRKmEetJuCIsPxGUvkNcRbHqsqXiwripAf0XPCGvL
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283273664859449965536035349855892313994822
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-15 17:25:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-15 17:25:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-5.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26056557998614201054915615181923044441637630107668473515085576591093620603224564330535107940445037662843689474985197091528748514630378047241507653992441377937949031888315922730715402017236497437484170771700553862003012165922049733725328441556138139244475575925566011773976918249124926006579853424863917168819116103360627068966317596759242030874577747693089490068220232681780354263386037802144620813471815720633166387700825651249799197440355293639362568164453304579348349644347050508874302083574614262521124249886103707642777173935161249096620857516813227862800705539657079211740118244972400176519457336026244062104493
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a152e16a7262aec825a44f30ee6b9f1be370a334
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2170 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acimmune.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activisionblizzard.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aetna.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agiletherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allot.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apptio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asuresoftware.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biolinerx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capstarbank.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleanharbors.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmcsa.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conatuspharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crackerbarrel.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delltechnologies.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dollartree.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emergentbiosolutions.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fbin.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glycomimeticsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groupon.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guidewire.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthequity.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huntsman.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immersion.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.activision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.activisionblizzard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.aetna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.asuresoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.cbrl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.cbrlgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.crackerbarrel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.eac.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.jazzpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.lawsonproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.liveoakbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.thesantafegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.allot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.delltechnologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.emergentbiosolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ipictheaters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ivalua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.presbia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.revlon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.southwestgas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.southwestgasholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sunpower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.swgas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.swgasholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.watsco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipicentertainment.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.acimmune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.agiletherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.biolinerx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.capstarbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cbtxinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cleanharbors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.fbin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.glycomimetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.guidewire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.immersion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mandtbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mtb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.neuraxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.telesisbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.therapeuticsmd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivalua.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jazzpharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lamresearch.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawsonproducts.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-5.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveoak.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mandtbank.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neuraxisinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pitneybowesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'presbia.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualcomminc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revlonir.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sabre.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steadymedtherapeuticsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunpower.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swgasholdings.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telesisbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'therapeuticsmd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesantafegroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watsco.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmcsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eac.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investorrelations.pitneybowes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xerox.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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