leapfrog-ssl-26.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:9e:32:a3:5a:d5:fe:74:98:f1:43:99:7b:be:a8:30:a4:9e was issued on by Let's Encrypt.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-26.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9e:32:a3:5a:d5:fe:74:98:f1:43:99:7b:be:a8:30:a4:9e
Serial Number (int): 402281067287097663878586007593864391599262
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 48:c1:df:c3:40:59:61:f8:77:8a:5b:b8:76:8e:f2:a6:e7:2f:be:84
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): db:a9:46:83:73:69:56:99:9f:2f:10:40:5a:60:6a:44:5e:40:fa:ab
Fingerprint (sha256): b9:a1:0e:b5:ff:1f:cf:53:e3:2f:ba:b3:1f:97:84:92:24:34:01:91:02:c0:32:f9:50:a3:9d:12:50:ce:44:5a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-26.gcs-web.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-26.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

advaxis.gcs-web.com
akebia.gcs-web.com
allete.gcs-web.com
amicustherapeutics.gcs-web.com
arcturustherapeuticsinc.gcs-web.com
buildabear.gcs-web.com
cocacolabottlingcoconsolidated.gcs-web.com
commscopeholdingcompanyinc.gcs-web.com
cooperstandard.gcs-web.com
daktronics.gcs-web.com
demobryce.gcs-web.com
dicerna.gcs-web.com
dominos.gcs-web.com
edaptmssa.gcs-web.com
extractionog.gcs-web.com
gibraltarindustriesinc.gcs-web.com
griddynamics.gcs-web.com
hookerfurniturecorporation.gcs-web.com
hubgroup.gcs-web.com
hyrecar.gcs-web.com
imaratx.gcs-web.com
installedbuildingproducts.gcs-web.com
insuletcorporation.gcs-web.com
intestcorp.gcs-web.com
investor.allete.com
investor.cokeconsolidated.com
investor.daktronics.com
investor.demobryce.com
investor.edap-tms.com
investor.insulet.com
investor.kodak.com
investor.mksinst.com
investor.rushenterprises.com
investor.trimble.com
investors.dicerna.com
investors.hookerfurniture.com
investors.hubgroup.com
investors.installedbuildingproducts.com
investors.insulet.com
investors.lumos-pharma.com
investors.lyratherapeutics.com
investors.matrixservicecompany.com
investors.molinahealthcare.com
investors.owens-minor.com
investors.parsons.com
investors.psiengines.com
investors.pulmonx.com
investors.wmg.com
investors.xpresspa.com
ir.advaxis.com
ir.akebia.com
ir.amicusrx.com
ir.arcturusrx.com
ir.buildabear.com
ir.commscope.com
ir.dominos.com
ir.extractionog.com
ir.gibraltar1.com
ir.hyrecar.com
ir.imaratx.com
ir.intest.com
ir.midconenergypartners.com
ir.puyiwm.com
ir.sol-gel.com
ir.spplus.com
ir.supernus.com
ir.tenaris.com
ir.xpresspa.com
kodak.gcs-web.com
leapfrog-ssl-26.gcs-web.com
lumos-pharma.gcs-web.com
lyratherapeutics.gcs-web.com
matrixservicecompany.gcs-web.com
midconenergypartners.gcs-web.com
mksinstrumentsinc.gcs-web.com
molinahealthcare.gcs-web.com
newlinkgeneticscorporation.gcs-web.com
owensminor.gcs-web.com
parsons.gcs-web.com
psiengines.gcs-web.com
pulmonx.gcs-web.com
puyi.gcs-web.com
rushenterprises.gcs-web.com
solgel.gcs-web.com
sppluscorporation.gcs-web.com
supernus.gcs-web.com
tenarissa.gcs-web.com
trimbleinc.gcs-web.com
warnermusicgroup.gcs-web.com
www.advaxis.com
www.ir.cooperstandard.com
xpresspa.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-52.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-26.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOBzCCDO+gAwIBAgISBJ4yo1rV/nSY8UOZe76oMKSeMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTAzMDIxNjE2NTZaFw0yMTA1MzExNjE2NTZaMCYxJDAiBgNVBAMT
G2xlYXBmcm9nLXNzbC0yNi5nY3Mtd2ViLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMVG+b8kqx+Tr/9n0KkocgZkyOuMawuNpQTa/DV5JmSY3MPl
noXcR6sCQwLVKOnf6/4oeCr15453oaMrh4g1PCvuhP3D+c2jvt5wnPt20WjWBmMO
cpHcL1/lHGoqhcA32WUxMR/UdYRpfsH9UGdQu4SZepvgMpEawAXfffoVZlV9vZxc
DH1bukBoFyRGftYZyuaeNeBRvX39yUPjky1SHqCvlKZYr8ICav/40nDPCeX2DwPF
NPFrGvpwiYtVnoWGf3mvVnhjB8n/j8co7roJl1ImgsYSsC7UtRJ/j+1ypn5JDDho
/irSpYzcR5dRJqQ3eAJyPa7JpInZMwvsniGoCecCAwEAAaOCCyEwggsdMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T
AQH/BAIwADAdBgNVHQ4EFgQUSMHfw0BZYfh3ilu4do7ypucvvoQwHwYDVR0jBBgw
FoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUF
BzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9y
My5pLmxlbmNyLm9yZy8wggjwBgNVHREEggjnMIII44ITYWR2YXhpcy5nY3Mtd2Vi
LmNvbYISYWtlYmlhLmdjcy13ZWIuY29tghJhbGxldGUuZ2NzLXdlYi5jb22CHmFt
aWN1c3RoZXJhcGV1dGljcy5nY3Mtd2ViLmNvbYIjYXJjdHVydXN0aGVyYXBldXRp
Y3NpbmMuZ2NzLXdlYi5jb22CFmJ1aWxkYWJlYXIuZ2NzLXdlYi5jb22CKmNvY2Fj
b2xhYm90dGxpbmdjb2NvbnNvbGlkYXRlZC5nY3Mtd2ViLmNvbYImY29tbXNjb3Bl
aG9sZGluZ2NvbXBhbnlpbmMuZ2NzLXdlYi5jb22CGmNvb3BlcnN0YW5kYXJkLmdj
cy13ZWIuY29tghZkYWt0cm9uaWNzLmdjcy13ZWIuY29tghVkZW1vYnJ5Y2UuZ2Nz
LXdlYi5jb22CE2RpY2VybmEuZ2NzLXdlYi5jb22CE2RvbWlub3MuZ2NzLXdlYi5j
b22CFWVkYXB0bXNzYS5nY3Mtd2ViLmNvbYIYZXh0cmFjdGlvbm9nLmdjcy13ZWIu
Y29tgiJnaWJyYWx0YXJpbmR1c3RyaWVzaW5jLmdjcy13ZWIuY29tghhncmlkZHlu
YW1pY3MuZ2NzLXdlYi5jb22CJmhvb2tlcmZ1cm5pdHVyZWNvcnBvcmF0aW9uLmdj
cy13ZWIuY29tghRodWJncm91cC5nY3Mtd2ViLmNvbYITaHlyZWNhci5nY3Mtd2Vi
LmNvbYITaW1hcmF0eC5nY3Mtd2ViLmNvbYIlaW5zdGFsbGVkYnVpbGRpbmdwcm9k
dWN0cy5nY3Mtd2ViLmNvbYIeaW5zdWxldGNvcnBvcmF0aW9uLmdjcy13ZWIuY29t
ghZpbnRlc3Rjb3JwLmdjcy13ZWIuY29tghNpbnZlc3Rvci5hbGxldGUuY29tgh1p
bnZlc3Rvci5jb2tlY29uc29saWRhdGVkLmNvbYIXaW52ZXN0b3IuZGFrdHJvbmlj
cy5jb22CFmludmVzdG9yLmRlbW9icnljZS5jb22CFWludmVzdG9yLmVkYXAtdG1z
LmNvbYIUaW52ZXN0b3IuaW5zdWxldC5jb22CEmludmVzdG9yLmtvZGFrLmNvbYIU
aW52ZXN0b3IubWtzaW5zdC5jb22CHGludmVzdG9yLnJ1c2hlbnRlcnByaXNlcy5j
b22CFGludmVzdG9yLnRyaW1ibGUuY29tghVpbnZlc3RvcnMuZGljZXJuYS5jb22C
HWludmVzdG9ycy5ob29rZXJmdXJuaXR1cmUuY29tghZpbnZlc3RvcnMuaHViZ3Jv
dXAuY29tgidpbnZlc3RvcnMuaW5zdGFsbGVkYnVpbGRpbmdwcm9kdWN0cy5jb22C
FWludmVzdG9ycy5pbnN1bGV0LmNvbYIaaW52ZXN0b3JzLmx1bW9zLXBoYXJtYS5j
b22CHmludmVzdG9ycy5seXJhdGhlcmFwZXV0aWNzLmNvbYIiaW52ZXN0b3JzLm1h
dHJpeHNlcnZpY2Vjb21wYW55LmNvbYIeaW52ZXN0b3JzLm1vbGluYWhlYWx0aGNh
cmUuY29tghlpbnZlc3RvcnMub3dlbnMtbWlub3IuY29tghVpbnZlc3RvcnMucGFy
c29ucy5jb22CGGludmVzdG9ycy5wc2llbmdpbmVzLmNvbYIVaW52ZXN0b3JzLnB1
bG1vbnguY29tghFpbnZlc3RvcnMud21nLmNvbYIWaW52ZXN0b3JzLnhwcmVzc3Bh
LmNvbYIOaXIuYWR2YXhpcy5jb22CDWlyLmFrZWJpYS5jb22CD2lyLmFtaWN1c3J4
LmNvbYIRaXIuYXJjdHVydXNyeC5jb22CEWlyLmJ1aWxkYWJlYXIuY29tghBpci5j
b21tc2NvcGUuY29tgg5pci5kb21pbm9zLmNvbYITaXIuZXh0cmFjdGlvbm9nLmNv
bYIRaXIuZ2licmFsdGFyMS5jb22CDmlyLmh5cmVjYXIuY29tgg5pci5pbWFyYXR4
LmNvbYINaXIuaW50ZXN0LmNvbYIbaXIubWlkY29uZW5lcmd5cGFydG5lcnMuY29t
gg1pci5wdXlpd20uY29tgg5pci5zb2wtZ2VsLmNvbYINaXIuc3BwbHVzLmNvbYIP
aXIuc3VwZXJudXMuY29tgg5pci50ZW5hcmlzLmNvbYIPaXIueHByZXNzcGEuY29t
ghFrb2Rhay5nY3Mtd2ViLmNvbYIbbGVhcGZyb2ctc3NsLTI2Lmdjcy13ZWIuY29t
ghhsdW1vcy1waGFybWEuZ2NzLXdlYi5jb22CHGx5cmF0aGVyYXBldXRpY3MuZ2Nz
LXdlYi5jb22CIG1hdHJpeHNlcnZpY2Vjb21wYW55Lmdjcy13ZWIuY29tgiBtaWRj
b25lbmVyZ3lwYXJ0bmVycy5nY3Mtd2ViLmNvbYIdbWtzaW5zdHJ1bWVudHNpbmMu
Z2NzLXdlYi5jb22CHG1vbGluYWhlYWx0aGNhcmUuZ2NzLXdlYi5jb22CJm5ld2xp
bmtnZW5ldGljc2NvcnBvcmF0aW9uLmdjcy13ZWIuY29tghZvd2Vuc21pbm9yLmdj
cy13ZWIuY29tghNwYXJzb25zLmdjcy13ZWIuY29tghZwc2llbmdpbmVzLmdjcy13
ZWIuY29tghNwdWxtb254Lmdjcy13ZWIuY29tghBwdXlpLmdjcy13ZWIuY29tghty
dXNoZW50ZXJwcmlzZXMuZ2NzLXdlYi5jb22CEnNvbGdlbC5nY3Mtd2ViLmNvbYId
c3BwbHVzY29ycG9yYXRpb24uZ2NzLXdlYi5jb22CFHN1cGVybnVzLmdjcy13ZWIu
Y29tghV0ZW5hcmlzc2EuZ2NzLXdlYi5jb22CFnRyaW1ibGVpbmMuZ2NzLXdlYi5j
b22CHHdhcm5lcm11c2ljZ3JvdXAuZ2NzLXdlYi5jb22CD3d3dy5hZHZheGlzLmNv
bYIZd3d3LmlyLmNvb3BlcnN0YW5kYXJkLmNvbYIUeHByZXNzcGEuZ2NzLXdlYi5j
b20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQC
BIH0BIHxAO8AdgCUILwejtWNbIhzH4KLIiwN0dpNXmxPlD1h204vWE2iwgAAAXfz
8VmqAAAEAwBHMEUCIQDP2g/SpuBXwXFhDWhIk+gg5xHQdFCs8qmuOt2Awe1E7gIg
PZHlOtscv1mDXLhIsrtETb+vyTq+/TpnwgGbe2LicFMAdQB9PvL4j/+IVWgkwsDK
nlKJeSvFDngJfy5ql2iZfiLw1wAAAXfz8VniAAAEAwBGMEQCIEFxgLazBeH1bLUi
UwT7Zh1r+r0vSSNluFHtwZD4cNYvAiBRPtSu3X7Kgb2CMQ3meCE77Hyr5xTTV2qL
59CHnyX74zANBgkqhkiG9w0BAQsFAAOCAQEAsBIH8eWHZaFg0kn4YX1/GrVyDEC9
EEv7OkJQlyJZ+QN9oJwzKi2BWQ3dYh4QnbCEmRbQtYHEMdnmK2Hosezm/SEawfH8
AkKH9i3VEu66d/3SQHTulnAZB0MWOzClH5BVukFFwskv/zueQx6xxIkZnN7bcLEB
UksAJtF01OWuCnjmSK5Hl2voParW5KEVSD3o0++nucZwOow5ZK4ZH31z4q97dxxL
f0Eza962aShNoPNRYb9cPMhXxBxk/F/JTjkafBiBRj363VFV/p/PxeY9tknj3w8c
bgvzSKFF+ZTjzmKab0z6na2xY7wY+Gne2TylcEt42WMjgyHnEdaw2gxpdA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUb5vySrH5Ov/2fQqShy
BmTI64xrC42lBNr8NXkmZJjcw+WehdxHqwJDAtUo6d/r/ih4KvXnjnehoyuHiDU8
K+6E/cP5zaO+3nCc+3bRaNYGYw5ykdwvX+UcaiqFwDfZZTExH9R1hGl+wf1QZ1C7
hJl6m+AykRrABd99+hVmVX29nFwMfVu6QGgXJEZ+1hnK5p414FG9ff3JQ+OTLVIe
oK+UplivwgJq//jScM8J5fYPA8U08Wsa+nCJi1WehYZ/ea9WeGMHyf+PxyjuugmX
UiaCxhKwLtS1En+P7XKmfkkMOGj+KtKljNxHl1EmpDd4AnI9rsmkidkzC+yeIagJ
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 402281067287097663878586007593864391599262
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-02 16:16:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-31 16:16:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-26.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24903945437736934749915565045224160211777228023515155946794986010246636475612465292494416303315734426578831960027465336058297698896567916701736419219127856448926367128194006952408113910720793069999177643995683013301431771662067219961158224021639569146656669063459193871846628820891046839454725639139834252359433431670428106311131665039132028975746478862541607033438918369380927642126475561858326645208553477750169141889374138617228956966612024694568050106439657286810191224917080105511322242955828826253698828483799491367703757779884900924568910384564708845084686667744885369167053741793282081888651550233815736125927
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							48c1dfc3405961f8778a5bb8768ef2a6e72fbe84
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2279 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advaxis.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akebia.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allete.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amicustherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arcturustherapeuticsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildabear.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cocacolabottlingcoconsolidated.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commscopeholdingcompanyinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cooperstandard.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daktronics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demobryce.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dicerna.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dominos.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edaptmssa.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extractionog.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gibraltarindustriesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'griddynamics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hookerfurniturecorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hubgroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyrecar.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imaratx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'installedbuildingproducts.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insuletcorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intestcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.allete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.cokeconsolidated.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.daktronics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.demobryce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.edap-tms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.insulet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.kodak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.mksinst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.rushenterprises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.trimble.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.dicerna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.hookerfurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.hubgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.installedbuildingproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.insulet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.lumos-pharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.lyratherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.matrixservicecompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.molinahealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.owens-minor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.parsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.psiengines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.pulmonx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.wmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.xpresspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.advaxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.akebia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.amicusrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.arcturusrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.buildabear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.commscope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.dominos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.extractionog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gibraltar1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.hyrecar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.imaratx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.intest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.midconenergypartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.puyiwm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.sol-gel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.spplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.supernus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tenaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.xpresspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kodak.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-26.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumos-pharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyratherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matrixservicecompany.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midconenergypartners.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mksinstrumentsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'molinahealthcare.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newlinkgeneticscorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owensminor.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parsons.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psiengines.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulmonx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puyi.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rushenterprises.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solgel.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sppluscorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supernus.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenarissa.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trimbleinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warnermusicgroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advaxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ir.cooperstandard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xpresspa.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c200000177f3f159aa0000040300473045022100cfda0fd2a6e057c171610d684893e820e711d07450acf2a9ae3add80c1ed44ee02203d91e53adb1cbf59835cb848b2bb444dbfafc93abefd3a67c2019b7b62e270530075007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d700000177f3f159e200000403004630440220417180b6b305e1f56cb5225304fb661d6bfabd2f492365b851edc190f870d62f0220513ed4aedd7eca81bd82310de678213bec7cabe714d3576a8be7d0879f25fbe3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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