leapfrog-ssl-2.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 03:f3:f8:b1:88:7e:ee:65:38:5c:7b:55:6e:28:4c:55:49:a2 was issued on by Let's Encrypt.

With 69 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=leapfrog-ssl-2.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:f3:f8:b1:88:7e:ee:65:38:5c:7b:55:6e:28:4c:55:49:a2
Serial Number (int): 344356043305031640735870378185873769712034
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e4:d6:29:99:d9:40:3c:62:ec:c2:d2:87:fd:f0:be:9b:ee:dc:34:a6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 94:43:15:42:1b:a4:b1:e7:5f:a6:41:a8:6a:82:47:22:0f:10:b3:f3
Fingerprint (sha256): e8:2a:a1:0f:00:f1:19:40:94:c3:0d:a0:8d:47:18:a2:79:50:9e:b7:23:25:75:8a:7a:4d:c7:6d:1d:38:25:82

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-2.gcs-web.com

69

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-2.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

appian.gcs-web.com
atyrpharma.gcs-web.com
belfuse.gcs-web.com
bioscrip.gcs-web.com
brownformancorp.gcs-web.com
cargurus.gcs-web.com
channeladvisor.gcs-web.com
coremark.gcs-web.com
deciphera.gcs-web.com
draperoakwood.gcs-web.com
enantapharmaceuticalsinc.gcs-web.com
exelixis.gcs-web.com
firstindustrialrealtytrustinc.gcs-web.com
firstsolar.gcs-web.com
franchisegrp.gcs-web.com
fredsinc.gcs-web.com
gileadsciences.gcs-web.com
imvaccine.gcs-web.com
investor.firstindustrial.com
investor.lilly.com
investor.matson.com
investor.nilfisk.com
investor.pctel.com
investor.theravance.com
investors.appian.com
investors.atyrpharma.com
investors.cargurus.com
investors.deciphera.com
investors.optioncarehealth.com
investors.pnk.com
investors.pnkinc.com
investors.visteon.com
ir.belfuse.com
ir.exelixis.com
ir.franchisegrp.com
ir.imvaccine.com
ir.junotherapeutics.com
ir.libertytax.com
ir.mobilemini.com
ir.nightstartx.com
ir.rbbusa.com
ir.steelpartners.com
ir.sunlands.com
ir.sypris.com
junotherapeutics.gcs-web.com
kadantinc.gcs-web.com
leapfrog-ssl-2.gcs-web.com
libertytax.gcs-web.com
lilly.gcs-web.com
lionbiotechnologiesinc.gcs-web.com
matson.gcs-web.com
mcdonaldscorporation.gcs-web.com
mobilemini.gcs-web.com
nightstarx.gcs-web.com
nilfisk.gcs-web.com
pctel.gcs-web.com
pnkinc.gcs-web.com
rbbbancorp.gcs-web.com
realogyservicegroupllc.gcs-web.com
siennabio.gcs-web.com
sigmapharmaceuticals.gcs-web.com
steelpartners.gcs-web.com
sunlands.gcs-web.com
synchronosstechnologiesinc.gcs-web.com
syprissolutionsinc.gcs-web.com
theravancebiopharma.gcs-web.com
vcltest-beta.gcs-web.com
veronapharma.gcs-web.com
visteon.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-2.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4QkE3ID6pb+NbPCzIvs
agTO3I+gsZ3vzdSOLTzgVur/R8BXuYJADmZ+kyRTW97/A4LlGs1eJ3jVLIE24V1e
qyEHMF1er9BEMevaVPGl7A7UmsYCgE8Rui7wwtlQoJjj2AICPtbwWE8JJlSvl4Dw
BBjx2WdldDPrRUcyKojzuCnehC4NKtVDjRAXz/AhikWvkmwMqFfkuZPUA2x7cLLJ
nQiVQzOnCq01cKlTHp6/SCv2LTch948GECZx7VMDxOSTzmBcdS6ddgdjJK0FeNRx
bUTX1h24K36ytK9u2Ec0zANeatEZ1LM5czEfUbMhK78AWvAZLap7uaygQ9hRYcgK
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344356043305031640735870378185873769712034
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 05:23:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-01 05:23:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-2.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18622191947095307934997119443774855465306964379861621769011499167903193323433470686058728029267851366316149325852382438390144760934090597834611559145581677191496507219723786771135448506879269890408836790971590807342395296293017064990723023996876822909400196194963515507481308361031493368610783983924848818760128468934323899877981553090083007209126261171786254177345955518203439019277312390093879105606178501931027406372619701288661640758657689737413835367450245310940535682518761810961771442615025358532465379596493169739024270316926671161460963009470121323093459591355999307123683143683462183730835777474095349238517
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e4d62999d9403c62ecc2d287fdf0be9beedc34a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1689 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appian.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atyrpharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belfuse.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bioscrip.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brownformancorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cargurus.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'channeladvisor.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coremark.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deciphera.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'draperoakwood.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enantapharmaceuticalsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exelixis.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstindustrialrealtytrustinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstsolar.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franchisegrp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fredsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gileadsciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imvaccine.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.firstindustrial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.lilly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.matson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.nilfisk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.pctel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.theravance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.appian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.atyrpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cargurus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.deciphera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.optioncarehealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.pnk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.pnkinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.visteon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.belfuse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.exelixis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.franchisegrp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.imvaccine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.junotherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.libertytax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mobilemini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.nightstartx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.rbbusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.steelpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.sunlands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.sypris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'junotherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kadantinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-2.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertytax.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lilly.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lionbiotechnologiesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matson.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdonaldscorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilemini.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nightstarx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nilfisk.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pctel.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pnkinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbbbancorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realogyservicegroupllc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siennabio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sigmapharmaceuticals.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steelpartners.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunlands.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synchronosstechnologiesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syprissolutionsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theravancebiopharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcltest-beta.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veronapharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visteon.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e9d79d35f0000040300483046022100a320bfc815eb7a6f2760a1c98652d270b77a23fd362201039d15c35b7c35672a022100ffd006ff12d3e3b00ffe0cdf2a63df3fd77435a802848bb5203cecf4d2a61924007700dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018e9d79d4030000040300483046022100eb9b197efadbafbb1ba8a35ef907458fad574e1b879a1094b44b89e4db923d15022100eaa4ced6ba7153da75889ac40d8925bde77fcd4fc14e75bd2b3aafcff22bcb11
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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