leapfrog-ssl-2.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:a5:86:b3:dc:eb:7a:2d:0b:1d:84:db:81:f2:9a:fe:2a:98 was issued on by Let's Encrypt.

With 78 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-2.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a5:86:b3:dc:eb:7a:2d:0b:1d:84:db:81:f2:9a:fe:2a:98
Serial Number (int): 404774784722355232138637284978883859196568
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7b:35:ce:4c:3d:c7:08:06:e7:8a:f6:f2:1a:1c:ef:f3:b5:ed:5b:a1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3a:bd:ce:39:20:c5:d0:dd:2f:47:82:2f:96:34:00:5c:ab:de:fa:d8
Fingerprint (sha256): d9:08:d8:4c:a6:04:c0:45:ee:d5:47:d9:69:98:99:d4:95:bd:f9:75:46:26:68:02:8d:1d:29:d5:73:9c:67:b3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-2.gcs-web.com

78

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-2.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alpineimmunesciences.gcs-web.com
appian.gcs-web.com
atyrpharma.gcs-web.com
belfuse.gcs-web.com
bioscrip.gcs-web.com
brownformancorp.gcs-web.com
cargurus.gcs-web.com
channeladvisor.gcs-web.com
coremark.gcs-web.com
deciphera.gcs-web.com
draperoakwood.gcs-web.com
enantapharmaceuticalsinc.gcs-web.com
epamsystems.gcs-web.com
exelixis.gcs-web.com
firstindustrialrealtytrustinc.gcs-web.com
firstsolar.gcs-web.com
franchisegrp.gcs-web.com
fredsinc.gcs-web.com
gileadsciences.gcs-web.com
imvaccine.gcs-web.com
investor.firstindustrial.com
investor.lilly.com
investor.matson.com
investor.nilfisk.com
investor.pctel.com
investor.theravance.com
investors.appian.com
investors.atyrpharma.com
investors.bioscrip.com
investors.cargurus.com
investors.deciphera.com
investors.epam.com
investors.gilead.com
investors.optioncarehealth.com
investors.pnk.com
investors.pnkinc.com
investors.secureworks.com
investors.visteon.com
ir.alpineimmunesciences.com
ir.belfuse.com
ir.channeladvisor.com
ir.core-mark.com
ir.exelixis.com
ir.franchisegrp.com
ir.imvaccine.com
ir.junotherapeutics.com
ir.libertytax.com
ir.mobilemini.com
ir.nightstartx.com
ir.rbbusa.com
ir.steelpartners.com
ir.sypris.com
junotherapeutics.gcs-web.com
kadantinc.gcs-web.com
leapfrog-ssl-2.gcs-web.com
libertytax.gcs-web.com
lilly.gcs-web.com
lionbiotechnologiesinc.gcs-web.com
matson.gcs-web.com
mcdonaldscorporation.gcs-web.com
mobilemini.gcs-web.com
nightstarx.gcs-web.com
nilfisk.gcs-web.com
onex.gcs-web.com
pctel.gcs-web.com
pnkinc.gcs-web.com
rbbbancorp.gcs-web.com
realogyservicegroupllc.gcs-web.com
secureworks.gcs-web.com
siennabio.gcs-web.com
sigmapharmaceuticals.gcs-web.com
steelpartners.gcs-web.com
synchronosstechnologiesinc.gcs-web.com
syprissolutionsinc.gcs-web.com
theravancebiopharma.gcs-web.com
vcltest-beta.gcs-web.com
veronapharma.gcs-web.com
visteon.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-2.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iAwXaGExcWJ6vo+LhOa
3RKBDLvB6vrJ6okcFPhL9oMFT5seTWY2+N+BrPp/YgqoxXhWrcSvhIJyHBwmaLfT
rvZOab/UbmE+Jbbm2zafr1oz6VWiPZFN8lxNSWWn8dXdVHjAt3Zl+7ScDvcRe56H
IR69SUE1FH9oY8zuzY20ENaqSnEH/vr+ymHVi8UGDQgPu0AVa+tH17HoXYaD4ET0
K4jzbhYiTY3RaVyEhYBavcjwNYG8YvaEWUd2xS7YrF7JG1mG4sBDkfzIqishHsig
KAl+KrECDWVffzBPCNtTuqETgbWQWMBvdyhwLu5DfHahVavDnbDf+9X5r7XNb0Uo
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 404774784722355232138637284978883859196568
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-28 18:30:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-26 18:29:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-2.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28040776654797378214064360132631778697835601644039181923616959841228978846588097503972804931221191644354584073260640841881065431788179042469211891990886631508675607306735993453124661416511980451889324450692469268362377855666052729440800854232470435892296889183421064848585291837741241040646462365347732070137073534572644115850304441935463451957900485088909420329647550023264077508414214241058042465958680999014850759919755534952150153484111471456945810194962734974624756133428816931498409527439667399320934340114289768320887956885770177663195703098868672045052701015809241300511244418002936641507456193243920917145781
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7b35ce4c3dc70806e78af6f21a1ceff3b5ed5ba1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1915 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpineimmunesciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appian.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atyrpharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belfuse.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bioscrip.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brownformancorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cargurus.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'channeladvisor.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coremark.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deciphera.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'draperoakwood.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enantapharmaceuticalsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epamsystems.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exelixis.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstindustrialrealtytrustinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstsolar.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franchisegrp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fredsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gileadsciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imvaccine.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.firstindustrial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.lilly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.matson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.nilfisk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.pctel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.theravance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.appian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.atyrpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.bioscrip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cargurus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.deciphera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.epam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.gilead.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.optioncarehealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.pnk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.pnkinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.secureworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.visteon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.alpineimmunesciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.belfuse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.channeladvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.core-mark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.exelixis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.franchisegrp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.imvaccine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.junotherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.libertytax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mobilemini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.nightstartx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.rbbusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.steelpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.sypris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'junotherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kadantinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-2.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertytax.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lilly.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lionbiotechnologiesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matson.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdonaldscorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilemini.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nightstarx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nilfisk.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onex.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pctel.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pnkinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbbbancorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realogyservicegroupllc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureworks.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siennabio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sigmapharmaceuticals.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steelpartners.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synchronosstechnologiesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syprissolutionsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theravancebiopharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcltest-beta.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veronapharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visteon.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017fd201b2eb0000040300473045022100d7374b63584c09d8cb1bbe277d4f6102d1a3d8a2642e464dd46c07bdbd4615c102203df9238fbdce330f177c72334d19e3117644aedf59e565c8f5f8b3f37004594100770041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017fd201b5000000040300483046022100cb398622965dc81363989210ef2f6a4bf8b00287859905328f95cad748c705e802210099a65c139c132b8c7a93e53d1acdc084d36362b81a01f7bc7353d6c807063d20
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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