leapfrog-ssl-29.gcs-web.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:9c:b0:b1:97:4c:56:c8:1f:b7:95:f6:61:9e:b8:4a:74:e0 was issued on by Let's Encrypt.

With 77 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-29.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9c:b0:b1:97:4c:56:c8:1f:b7:95:f6:61:9e:b8:4a:74:e0
Serial Number (int): 401768059199201540893178160050973755208928
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: fc:84:1b:fd:f7:b4:14:fd:48:1c:a6:b8:48:84:36:6e:88:7e:31:91
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7d:da:3b:80:81:e9:7f:36:c4:cb:4b:e5:c9:5b:11:25:b1:6e:f5:52
Fingerprint (sha256): 79:f3:43:40:61:01:60:b0:a4:8d:19:3a:9a:50:d3:a9:1d:89:a2:48:1f:56:88:01:69:cf:94:5c:fe:5b:91:0e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate leapfrog-ssl-29.gcs-web.com

77

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-29.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

archrsc.gcs-web.com
austal.gcs-web.com
bostonproperties.gcs-web.com
bumitamaagri.gcs-web.com
championx.gcs-web.com
cherryhillmortgageinvestmentcorporation.gcs-web.com
chfsolutionsinc.gcs-web.com
chinaindexholdings.gcs-web.com
cvrenergy.gcs-web.com
cvrpartners.gcs-web.com
cvrrefining.gcs-web.com
dadanexuslimited.gcs-web.com
evergyinc.gcs-web.com
exeloncorporation.gcs-web.com
fangholdingslimited.gcs-web.com
gdsholdingsltd.gcs-web.com
glp.gcs-web.com
gnc.gcs-web.com
hexion.gcs-web.com
investor-relations.medicalpropertiestrust.com
investor.archrsc.com
investor.austal.com
investor.championx.com
investor.michaelhill.com
investorcentre.sigmahealthcare.com.au
investors.bxp.com
investors.championx.com
investors.chmireit.com
investors.cvrenergy.com
investors.cvrpartners.com
investors.cvrrefining.com
investors.exeloncorp.com
investors.gds-services.com
investors.hexion.com
investors.kalarx.com
investors.larimartx.com
investors.poseida.com
ir-zhtw.tlcbio.com
ir.bumitama-agri.com
ir.chf-solutions.com
ir.chinaindexholdings.com
ir.fang.com
ir.glprop.com
ir.gnc.com
ir.ifeng.com
ir.imdada.cn
ir.ksyun.com
ir.leju.com
ir.noahgroup.com
ir.pgn.co.id
ir.siliconmotion.com
ir.targaresources.com
ir.tlcbio.com
ir.topglobal.com.sg
ir.vroom.com
ir.yy.com
kalapharmaceuticals.gcs-web.com
ksyun.gcs-web.com
larimar.gcs-web.com
leapfrog-ssl-29.gcs-web.com
lejuholdingsltd.gcs-web.com
medicalpropertiestrust.gcs-web.com
michaellhill.gcs-web.com
news.archrsc.com
noahholdingsltd.gcs-web.com
pgn.gcs-web.com
phoenixnewmedialtd.gcs-web.com
poseida.gcs-web.com
sigmapharmaceuticals.gcs-web.com
siliconmotiontechnologycorporation.gcs-web.com
targaresources.gcs-web.com
tlcbio.gcs-web.com
topgloballimited.gcs-web.com
vroom.gcs-web.com
www.evergyinc.com
www.targaresources.com
yy.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-29.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59hzAK4LfUgJX0iRnziV
HIeze1YIt78x8ymyESHe+Ik9CAKXSiiF1MCH36u2QGPNpr99BbOl7EYnhYo11qdu
uVP9UdmS4+kun0flTFLb3IgC1t7WYXRbfRPafXlVb21Pe3luHwvesjMuBqZwOXtZ
2gGdMzbJciL3QuM00vMgZW791d3Rv84dWNVj0NVowULh1vwJciEWTSiY3tWfctaQ
mPDBw3XQptGziVK9I8N1Ysks86Hn72M6vgTejzbkNNJTQA7fdgSDGFLgHariR+d1
SJA9j1PTtZhxlsXvXJ3/9GlUPC4nRl24zRFR2TgiQyliFkVYuT2te3tPH3zyrPGh
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 401768059199201540893178160050973755208928
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-27 18:22:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-25 18:22:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-29.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29267783540111920939603514484220054274431870391084403141522273622921442582778359093596114870855252157403877073110172866182698781582126895398932363099489131933506928251256711890275965746850439921693191222426737461456783144646213112555115756529340151360998519601563696144629330418707020141807062797678890954765549065864941928519281077268385034033884642965048972071412881217195488152140288571106779202889146022483835296727496254833582461099584743187983976520409984107625168976885484740863655924218267671648222183764648900458182080028737615199814867169191175764134514367916180081532072706842781153373051588697747434348911
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fc841bfdf7b414fd481ca6b84884366e887e3191
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1854 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archrsc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'austal.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bostonproperties.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bumitamaagri.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'championx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cherryhillmortgageinvestmentcorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chfsolutionsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinaindexholdings.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvrenergy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvrpartners.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvrrefining.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dadanexuslimited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evergyinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exeloncorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fangholdingslimited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gdsholdingsltd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gnc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hexion.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor-relations.medicalpropertiestrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.archrsc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.austal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.championx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.michaelhill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorcentre.sigmahealthcare.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.bxp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.championx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.chmireit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cvrenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cvrpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cvrrefining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.exeloncorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.gds-services.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.hexion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.kalarx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.larimartx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.poseida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir-zhtw.tlcbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.bumitama-agri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.chf-solutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.chinaindexholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.fang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.glprop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ifeng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.imdada.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ksyun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.leju.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.noahgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.pgn.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.siliconmotion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.targaresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tlcbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.topglobal.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.yy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kalapharmaceuticals.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ksyun.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'larimar.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-29.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lejuholdingsltd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicalpropertiestrust.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michaellhill.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.archrsc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noahholdingsltd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pgn.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phoenixnewmedialtd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poseida.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sigmapharmaceuticals.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siliconmotiontechnologycorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'targaresources.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tlcbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topgloballimited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vroom.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.evergyinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.targaresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yy.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001725795a763000004030046304402202b7de53338a096b6a6683b96ff0b1d1646be42ccbf6074a32b93612b1ba70858022033cd8fd48e703df02e31d06edcc044836a3c82372ecbee2340d80e003d10a35b00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001725795a790000004030046304402205d9c87d9a797705f850116a11aff4b5618127f7c5963a32f3c84f48024cec57b02206d2fe5b5029f1a0f36e62ba7f35809e10cc9d80456077cae0cd7cd1b24a409e5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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