leapfrog-ssl-26.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 03:f4:2f:61:24:c2:09:90:72:33:be:95:97:aa:e5:a2:8e:24 was issued on by Let's Encrypt.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=leapfrog-ssl-26.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f4:2f:61:24:c2:09:90:72:33:be:95:97:aa:e5:a2:8e:24
Serial Number (int): 344428733438126863198179678522692524477988
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9b:f6:57:11:d2:98:85:2d:8c:a1:b7:22:07:78:51:07:0b:02:60:58
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 27:87:97:18:89:e5:1d:04:c3:5c:b5:8c:20:2b:3b:47:c7:91:0a:3d
Fingerprint (sha256): 90:58:f9:4e:85:bc:26:07:27:07:77:f7:41:5d:17:e2:33:62:01:24:a9:38:d1:86:5f:2f:6d:13:5a:af:67:bd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-26.gcs-web.com

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-26.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

advaxis.gcs-web.com
akebia.gcs-web.com
allete.gcs-web.com
amicustherapeutics.gcs-web.com
arcturustherapeuticsinc.gcs-web.com
buildabear.gcs-web.com
cocacolabottlingcoconsolidated.gcs-web.com
commscopeholdingcompanyinc.gcs-web.com
daktronics.gcs-web.com
demobryce.gcs-web.com
dicerna.gcs-web.com
dominos.gcs-web.com
edaptmssa.gcs-web.com
extractionog.gcs-web.com
gibraltarindustriesinc.gcs-web.com
hookerfurniturecorporation.gcs-web.com
hubgroup.gcs-web.com
installedbuildingproducts.gcs-web.com
insuletcorporation.gcs-web.com
intestcorp.gcs-web.com
investor.allete.com
investor.cokeconsolidated.com
investor.daktronics.com
investor.demobryce.com
investor.edap-tms.com
investor.kodak.com
investor.mks.com
investor.mksinst.com
investor.rushenterprises.com
investorday.stepstonegroup.com
investors.dicerna.com
investors.hookerfurnishings.com
investors.hookerfurniture.com
investors.hubgroup.com
investors.installedbuildingproducts.com
investors.lumos-pharma.com
investors.lyratherapeutics.com
investors.matrixservicecompany.com
investors.molinahealthcare.com
investors.parsons.com
investors.psiengines.com
investors.pulmonx.com
investors.wmg.com
investors.xpresspa.com
ir.advaxis.com
ir.akebia.com
ir.amicusrx.com
ir.arcturusrx.com
ir.biosighttx.com
ir.buildabear.com
ir.commscope.com
ir.dominos.com
ir.extractionog.com
ir.gibraltar1.com
ir.intest.com
ir.puyiwm.com
ir.sol-gel.com
ir.spplus.com
ir.supernus.com
ir.tenaris.com
ir.vistagen.com
ir.xpresspa.com
kodak.gcs-web.com
leapfrog-ssl-26.gcs-web.com
lumos-pharma.gcs-web.com
lyratherapeutics.gcs-web.com
matrixservicecompany.gcs-web.com
midconenergypartners.gcs-web.com
mksinstrumentsinc.gcs-web.com
molinahealthcare.gcs-web.com
newlinkgeneticscorporation.gcs-web.com
parsons.gcs-web.com
psiengines.gcs-web.com
pulmonx.gcs-web.com
puyi.gcs-web.com
rushenterprises.gcs-web.com
solgel.gcs-web.com
sppluscorporation.gcs-web.com
stepstonemicrosite.gcs-web.com
supernus.gcs-web.com
tenarissa.gcs-web.com
vistagen.gcs-web.com
warnermusicgroup.gcs-web.com
www.advaxis.com
www.investors.dicerna.com
www.vistagen.com
xpresspa.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-52.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-26.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVew05RcIK8NrbuEHc3U
K2YkTdltQ0ydfjLNOzYrxLEVQoLEztOgitF5p4VEQ7EfxfpSIM08AJMD/bjxBTN+
wXtOU5kN1SDDEwA8tuq8G0vESNf7+ghpjZeC/3vF9Pqh+P1/HWBEREwgAZJyLP0I
TIexEgZof7otevhR+l+V1oHDpW+6p/9CpJxB3V7L1f/SjJqsZsgt6wH3J5O9V6ki
/yqBA68iqnngFd7WockLtwYzHLaKfoyAC9sUuW/X0bzsWhZlAjsqlI9LldyeN0MZ
v9PNORJjofIrmlOl8tdrwSFWNE61Q9X7zH593isdH5Thx1ajvh3uyzlGF0ZuvasM
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344428733438126863198179678522692524477988
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-02 14:26:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-31 14:26:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-26.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18852749349788213117496516380731038056817957530247681816006344069422371469340647410432380255332462826287616039863147980487051802430496289481643127309718486359573228455242240905813259866295503218100638449128320341496279920519328423450361148921856906916957160279512353303536120752851061678681476476792378266305989995531568401849964566559240437097032730800994767978044014388692388968641309882291282039788980072935871711128729340500288127493510825330805479254686738668277836600671682622696580400786832519030495576468631925500526127684755443175717183873499881743163766037952972968384707942401282641484932475094879078911147
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9bf65711d298852d8ca1b722077851070b026058
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2171 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advaxis.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akebia.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allete.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amicustherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arcturustherapeuticsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildabear.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cocacolabottlingcoconsolidated.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commscopeholdingcompanyinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daktronics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demobryce.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dicerna.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dominos.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edaptmssa.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extractionog.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gibraltarindustriesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hookerfurniturecorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hubgroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'installedbuildingproducts.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insuletcorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intestcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.allete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.cokeconsolidated.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.daktronics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.demobryce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.edap-tms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.kodak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.mks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.mksinst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.rushenterprises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.stepstonegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.dicerna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.hookerfurnishings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.hookerfurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.hubgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.installedbuildingproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.lumos-pharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.lyratherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.matrixservicecompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.molinahealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.parsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.psiengines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.pulmonx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.wmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.xpresspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.advaxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.akebia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.amicusrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.arcturusrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.biosighttx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.buildabear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.commscope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.dominos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.extractionog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gibraltar1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.intest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.puyiwm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.sol-gel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.spplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.supernus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tenaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vistagen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.xpresspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kodak.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-26.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumos-pharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyratherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matrixservicecompany.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midconenergypartners.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mksinstrumentsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'molinahealthcare.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newlinkgeneticscorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parsons.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psiengines.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulmonx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puyi.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rushenterprises.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solgel.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sppluscorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stepstonemicrosite.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supernus.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenarissa.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vistagen.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warnermusicgroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advaxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investors.dicerna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vistagen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xpresspa.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018af0ff34e4000004030047304502203a66187fd88cffd9518d61afd8795a9c0ba03574998ff529286bc2b63aa585dc022100a8b09876d1302649cfe653cf0b38d3b994448239f183d2cc2f6038f405dc5176007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018af0ff34be0000040300483046022100dffba201730de3645021051bfed4ad4bca76ecfa3a8713db49bdcdb2315e0ec9022100c395f903a404a144a7a0a7ad6c64b79cf036406c050b145275ae18bfbea47afe
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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