leapfrog-ssl-29.gcs-web.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:15:96:a2:b4:0b:e6:aa:f5:9b:f1:ec:8c:7d:ae:e5:4d:65 was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-29.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:15:96:a2:b4:0b:e6:aa:f5:9b:f1:ec:8c:7d:ae:e5:4d:65
Serial Number (int): 268683016503855894370076252237130254077285
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d5:72:b9:ca:a5:ed:68:43:be:8e:e8:7e:88:1c:b1:9d:87:26:c0:c9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 52:05:a1:a9:ff:cf:47:ea:6e:b6:29:87:87:e3:08:58:b0:fc:8f:e9
Fingerprint (sha256): c1:4f:9e:2c:da:d1:67:0f:36:69:d1:23:cc:27:43:2a:12:85:7e:a4:95:78:92:24:e1:20:01:4f:0c:4c:76:b8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate leapfrog-ssl-29.gcs-web.com

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-29.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

36kr.gcs-web.com
appliedmt.gcs-web.com
archrsc.gcs-web.com
austal.gcs-web.com
bostonproperties.gcs-web.com
bumitamaagri.gcs-web.com
championx.gcs-web.com
cherryhillmortgageinvestmentcorporation.gcs-web.com
chfsolutionsinc.gcs-web.com
chinaindexholdings.gcs-web.com
cvrenergy.gcs-web.com
cvrpartners.gcs-web.com
cvrrefining.gcs-web.com
dadanexuslimited.gcs-web.com
evergyinc.gcs-web.com
exeloncorporation.gcs-web.com
fangholdingslimited.gcs-web.com
gdsholdingsltd.gcs-web.com
glp.gcs-web.com
gnc.gcs-web.com
hexion.gcs-web.com
investor-relations.medicalpropertiestrust.com
investor.archrsc.com
investor.austal.com
investor.championx.com
investor.michaelhill.com
investorcentre.sigmahealthcare.com.au
investors.bxp.com
investors.championx.com
investors.chmireit.com
investors.cvrenergy.com
investors.cvrpartners.com
investors.cvrrefining.com
investors.exeloncorp.com
investors.gds-services.com
investors.hexion.com
investors.kalarx.com
investors.larimartx.com
investors.poseida.com
investors.vaxcyte.com
ir-zhtw.tlcbio.com
ir.36kr.com
ir.appliedmt.com
ir.bumitama-agri.com
ir.chf-solutions.com
ir.chinaindexholdings.com
ir.fang.com
ir.glprop.com
ir.gnc.com
ir.ifeng.com
ir.imdada.cn
ir.ksyun.com
ir.leju.com
ir.linknet.co.id
ir.noahgroup.com
ir.pgn.co.id
ir.siliconmotion.com
ir.smith-wesson.com
ir.targaresources.com
ir.tlcbio.com
ir.topglobal.com.sg
ir.vip.com
ir.vroom.com
ir.yy.com
kalapharmaceuticals.gcs-web.com
ksyun.gcs-web.com
larimar.gcs-web.com
leapfrog-ssl-29.gcs-web.com
lejuholdingsltd.gcs-web.com
medicalpropertiestrust.gcs-web.com
michaellhill.gcs-web.com
news.archrsc.com
noahholdingsltd.gcs-web.com
pgn.gcs-web.com
phoenixnewmedialtd.gcs-web.com
poseida.gcs-web.com
ptlinknettbk.gcs-web.com
sigmapharmaceuticals.gcs-web.com
siliconmotiontechnologycorporation.gcs-web.com
smithwesson.gcs-web.com
targaresources.gcs-web.com
tlcbio.gcs-web.com
topgloballimited.gcs-web.com
vaxcyte.gcs-web.com
vipshopholdingsltd.gcs-web.com
vroom.gcs-web.com
www.evergyinc.com
www.targaresources.com
yy.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-29.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5Ff53/qPRLuakvIZL4r
Y2p3WEJoH036fDGHnjBsYaqr7vSkpK/mC4AjLQyOMMbNk4Is6veZqzk9jyzQ+RLU
aF/WLrO0kGPd4mvwbSCNc4MBQXzpesBAkJ7OPLWfcwJvmGaDlzu+v6ZG250T46ZG
/gATSamiqUuxz1E7JtgN9BhxQLV8UKElSYmfawAlqn5Mr9Si1irdc7xJrwTkzDOT
dK/OZqS9EM9vp49BtDvLM+NX8see9WtQHFYSzxYclznAOe1II0mK7NRoyLInjnhP
08Uh89IDBp4HzfBcJFE+IkuOBK6SR4TFe8546JuCeNFE+NhoJUvOHRhQ3IYtigjT
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268683016503855894370076252237130254077285
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-01 11:30:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-30 11:30:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-29.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25193109588209850649848120443645082111654991153367381827729199451096811907915766886089910430330917270855230371705223679122848054982846701838762412233467937457481222025826713286734581342103942668640544511701732446730351752203348373868930802532991727884380064073455990532146251755465157459900689858679457217852817752223082864620134544063587047416705508490228495120610874423245796393057414149659252049932115204769159020750732618206007300419129863379877995657331800085220779806927565564494653197079957272089792067584378980527528412663607343584410593757817068076050005048529295126561286318020191551411570142837000632849331
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d572b9caa5ed6843be8ee87e881cb19d8726c0c9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '36kr.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appliedmt.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archrsc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'austal.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bostonproperties.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bumitamaagri.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'championx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cherryhillmortgageinvestmentcorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chfsolutionsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinaindexholdings.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvrenergy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvrpartners.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvrrefining.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dadanexuslimited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evergyinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exeloncorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fangholdingslimited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gdsholdingsltd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gnc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hexion.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor-relations.medicalpropertiestrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.archrsc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.austal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.championx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.michaelhill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorcentre.sigmahealthcare.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.bxp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.championx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.chmireit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cvrenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cvrpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cvrrefining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.exeloncorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.gds-services.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.hexion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.kalarx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.larimartx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.poseida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.vaxcyte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir-zhtw.tlcbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.36kr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.appliedmt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.bumitama-agri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.chf-solutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.chinaindexholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.fang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.glprop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ifeng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.imdada.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ksyun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.leju.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.linknet.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.noahgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.pgn.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.siliconmotion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.smith-wesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.targaresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tlcbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.topglobal.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.yy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kalapharmaceuticals.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ksyun.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'larimar.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-29.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lejuholdingsltd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicalpropertiestrust.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michaellhill.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.archrsc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noahholdingsltd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pgn.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phoenixnewmedialtd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poseida.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptlinknettbk.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sigmapharmaceuticals.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siliconmotiontechnologycorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smithwesson.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'targaresources.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tlcbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topgloballimited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaxcyte.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vipshopholdingsltd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vroom.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.evergyinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.targaresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yy.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00806b8c45fda9491d021026031270b19323d17474169a9ead4bb7373ec760a5e5ca992d17727d94d190c6b74160a54a299ae15910edc4c27ec1719207758d571910ca0b5602d707520f98077639fa328ecc6c029dbecfca5aeb6013b6af35c11b68a8e6a96b61a6fa0b36f789291d02f2449dabb0752b7a2fe731ae2f55dfcba187557c32a4061752edadd5d08848ed2e39e466f0b66117421e9c447c9e39da22b340204a6517d2e0ef57bd99e1a46611eb3c20432f4f676a063880247e96953698b99290e11294acd09f23de2c9fc07ce40f13eb2e918f5b27f8b155758b03c5ba2a363d3feb79d0e573e006211dd04fc70ca81ef992c1f664b2dedd3183bf33