leapfrog-ssl-5.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:1f:9a:f6:0b:a3:42:94:26:a5:00:b1:8c:57:8f:fa:3c:53 was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-5.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1f:9a:f6:0b:a3:42:94:26:a5:00:b1:8c:57:8f:fa:3c:53
Serial Number (int): 359203875754009456810040678157303921917011
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 06:1a:1d:ce:0e:ff:23:b3:40:19:ea:96:e8:b5:8e:fb:8d:ea:32:d4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4d:e3:94:71:e0:44:e7:a6:ae:2e:00:52:3a:66:c1:cc:4c:cc:7c:59
Fingerprint (sha256): d8:f9:cc:3a:06:76:9e:4e:91:7b:16:f5:b6:25:7c:33:ec:06:75:62:05:37:33:fd:dd:9d:6a:2c:32:93:fe:51

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-5.gcs-web.com

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-5.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acimmune.gcs-web.com
activisionblizzard.gcs-web.com
aetna.gcs-web.com
agiletherapeutics.gcs-web.com
allot.gcs-web.com
apptio.gcs-web.com
asuresoftware.gcs-web.com
biolinerx.gcs-web.com
capstarbank.gcs-web.com
cleanharbors.gcs-web.com
cmcsa.gcs-web.com
conatuspharma.gcs-web.com
crackerbarrel.gcs-web.com
delltechnologies.gcs-web.com
dollartree.gcs-web.com
emergentbiosolutions.gcs-web.com
fbin.gcs-web.com
glycomimeticsinc.gcs-web.com
groupon.gcs-web.com
guidewire.gcs-web.com
healthequity.gcs-web.com
huntsman.gcs-web.com
immersion.gcs-web.com
investor.activision.com
investor.activisionblizzard.com
investor.aetna.com
investor.asuresoftware.com
investor.cbrl.com
investor.cbrlgroup.com
investor.crackerbarrel.com
investor.eac.dk
investor.jazzpharma.com
investor.lawsonproducts.com
investor.liveoakbank.com
investor.thesantafegroup.com
investors.allot.com
investors.delltechnologies.com
investors.emergentbiosolutions.com
investors.ipictheaters.com
investors.ivalua.com
investors.presbia.com
investors.revlon.com
investors.sabre.com
investors.southwestgas.com
investors.southwestgasholdings.com
investors.sunpower.com
investors.swgas.com
investors.swgasholdings.com
investors.watsco.com
investors.xerox.com
ipicentertainment.gcs-web.com
ir.acimmune.com
ir.agiletherapeutics.com
ir.biolinerx.com
ir.capstarbank.com
ir.cbtxinc.com
ir.cleanharbors.com
ir.fbin.com
ir.glycomimetics.com
ir.guidewire.com
ir.immersion.com
ir.mandtbank.com
ir.mtb.com
ir.telesisbio.com
ir.therapeuticsmd.com
ivalua.gcs-web.com
jazzpharma.gcs-web.com
lamresearch.gcs-web.com
lawsonproducts.gcs-web.com
leapfrog-ssl-5.gcs-web.com
liveoak.gcs-web.com
mandtbank.gcs-web.com
pitneybowesinc.gcs-web.com
presbia.gcs-web.com
qualcomminc.gcs-web.com
revlonir.gcs-web.com
sabre.gcs-web.com
steadymedtherapeuticsinc.gcs-web.com
sunpower.gcs-web.com
swgasholdings.gcs-web.com
telesisbio.gcs-web.com
therapeuticsmd.gcs-web.com
thesantafegroup.gcs-web.com
watsco.gcs-web.com
web.gcs-web.com
www.cmcsa.com
www.eac.dk
www.investorrelations.pitneybowes.com
xerox.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-5.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqLd0Cw8XZh5lpXdaQQZ
YixO+9Jf1/XmPyhukDDZRk2GNNst1coRrLai99HN2HArOPwTJyz/1pmSfxgX2GtF
sQPNjC6IfdB6dRaMzg8WV4uwLUfu6e9EPCXYIbpi0EJY5a/O6k8VhUSEbYJGJkuS
vV+Nb4DF3jtrswc/ferV3kQA29zpeQDjES2Zc9TTAEbtqKIysU7aBQD6mp7nSsIt
i0IUKHeyfWJGylfKbNv7+A19gG5TY2E6QSHohf3T74fT8lVBq89PjfJ9dCyLoO++
iy4uGDXVB8SHEy8L3x2DuEvGBfagWR8Gist2uG3azAqvd8fn4XM9klw7p2RdzC2m
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 359203875754009456810040678157303921917011
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-14 22:33:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-14 22:33:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-5.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20530917848086421165817089585192048906310538861124432145790126326072047259125641151235325313934932302048212710195470872981595245650094210192203875777899057616931646861011657042988865664743404028394413314725778451747062991948341581751674228386028920507630690660792119063196789567086907461091634297224063131809298734611046252608863689494272643058039298633056785712804259330731914390334614504675609916757682193472512851472664336646968394044196685105647607856091550818656340719814263092458966069351680664240288276620637451094495116267963016020698272640543046820524190594514604206540504452744465940444860482468497331168813
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							061a1dce0eff23b34019ea96e8b58efb8dea32d4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2128 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acimmune.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activisionblizzard.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aetna.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agiletherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allot.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apptio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asuresoftware.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biolinerx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capstarbank.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleanharbors.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmcsa.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conatuspharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crackerbarrel.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delltechnologies.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dollartree.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emergentbiosolutions.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fbin.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glycomimeticsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groupon.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guidewire.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthequity.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huntsman.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immersion.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.activision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.activisionblizzard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.aetna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.asuresoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.cbrl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.cbrlgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.crackerbarrel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.eac.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.jazzpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.lawsonproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.liveoakbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.thesantafegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.allot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.delltechnologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.emergentbiosolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ipictheaters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ivalua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.presbia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.revlon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.southwestgas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.southwestgasholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sunpower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.swgas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.swgasholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.watsco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipicentertainment.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.acimmune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.agiletherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.biolinerx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.capstarbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cbtxinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cleanharbors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.fbin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.glycomimetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.guidewire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.immersion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mandtbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mtb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.telesisbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.therapeuticsmd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivalua.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jazzpharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lamresearch.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawsonproducts.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-5.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveoak.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mandtbank.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pitneybowesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'presbia.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualcomminc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revlonir.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sabre.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steadymedtherapeuticsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunpower.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swgasholdings.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telesisbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'therapeuticsmd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesantafegroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watsco.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmcsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eac.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investorrelations.pitneybowes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xerox.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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