leapfrog-ssl-41.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 03:9c:58:3c:aa:8f:21:90:c6:ea:9c:3f:37:ab:a7:46:cf:01 was issued on by Let's Encrypt.

With 81 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-41.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9c:58:3c:aa:8f:21:90:c6:ea:9c:3f:37:ab:a7:46:cf:01
Serial Number (int): 314538194095737372816953645859058452188929
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3c:24:78:9c:9c:3e:61:0f:1c:39:d5:b7:bd:bd:01:23:32:21:bc:38
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fb:73:e9:b7:2f:07:b6:79:e7:48:b9:8b:c9:32:04:a4:c5:a3:60:eb
Fingerprint (sha256): 00:62:b5:ac:91:fe:4c:68:b9:ef:c5:6d:6d:1c:50:02:ba:a3:00:51:a4:52:85:bf:1e:ab:9a:2f:6b:27:3c:89

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-41.gcs-web.com

81

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-41.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adagene.gcs-web.com
afcgamma.gcs-web.com
angion.gcs-web.com
asensus.gcs-web.com
ast-science.gcs-web.com
atlasinvestorday.gcs-web.com
bioventus.gcs-web.com
bumble.gcs-web.com
casasystems.gcs-web.com
categoryleaderpartnercorporation1.gcs-web.com
diamondoffshore.gcs-web.com
diversey.gcs-web.com
dycomind.gcs-web.com
finchtherapeutics.gcs-web.com
greatelmcapitalcorp.gcs-web.com
greensky.gcs-web.com
hornbeckoffshore.gcs-web.com
immunocore.gcs-web.com
innovage.gcs-web.com
instilbio.gcs-web.com
investor.adagene.com
investor.diamondoffshore.com
investor.innovage.com
investor.nustarenergy.com
investor.ralphlauren.com
investorday.sunlife.com
investors.afcgamma.com
investors.ast-science.com
investors.casa-systems.com
investors.greensky.com
investors.joann.com
investors.potbelly.com
investors.talis.bio
investors.talkspace.com
investors.view.com
ir.angion.com
ir.asensus.com
ir.bioventus.com
ir.bumble.com
ir.diversey.com
ir.dycomind.com
ir.finchtherapeutics.com
ir.hornbeckoffshore.com
ir.immunocore.com
ir.instilbio.com
ir.lavatherapeutics.com
ir.neximmune.com
ir.pharvaris.com
ir.rymanhp.com
joann.gcs-web.com
lavatherapeutics.gcs-web.com
leapfrog-ssl-41.gcs-web.com
luxhealth.gcs-web.com
mcapacquisition.gcs-web.com
nclhltd.gcs-web.com
nclhltdcorp.gcs-web.com
nclhltdpr.gcs-web.com
neximmune.gcs-web.com
nustarenergylp.gcs-web.com
pharvaris.gcs-web.com
plbygroup.gcs-web.com
potbelly.gcs-web.com
ralphlauren.gcs-web.com
rymanhospitalitypropertiesinc.gcs-web.com
starequityholdings.gcs-web.com
sunlifeinvestorday.gcs-web.com
talisbiomedical.gcs-web.com
talkspace.gcs-web.com
ugi.gcs-web.com
view.gcs-web.com
www.atlascorpinvestorday.com
www.category-leader.com
www.investor.greatelmcc.com
www.luxhealth.tech
www.mcapacquisitioncorp.com
www.nclhltd.com
www.nclhltdinvestor.com
www.nclhltdmedia.com
www.plbygroup.com
www.starequity.com
www.ugicorp.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-41.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiqu68zcCpC8d/d45xZG
pewVk0hIdxlS/0b2Sm+gOI5Ei9OXaAOZetwDI3Cn36YOaZuAmWOycxg5axoJ0yvK
XS0Cs3miFsCylitfQnOglRvEz27ZAVOkqnMqWS16HJpEJRT4evDs8kR/iaKdUgos
Kac7QCtXsZ2Uk8BZ8TSq8lHPVUjed/vLnIAqwT6reydhnVN1TbHf5ee3VLCgKX7K
doVMHcxdiKBj4lQyGY8M08YABZngP2/cSyWTf7l/WioxkVRLzyduo7HA5ppPDvX1
Y0T5AWvwjN5g/Od99Dv1RPn779PFVYUjtyDmrgmDgiLnXgJmm88q5g0Bv/2U23EY
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314538194095737372816953645859058452188929
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-04 10:48:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-02 10:48:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-41.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22491466196517754108783546545318714146767273240529639688407555157826042552795888105118240499582649429225129981246113703294252415156548479606404908142266974876654651833949192258054746873215856754934412654027929476922960186358643057751925069064773611416908286751067709786603913732066510918303106549030230446870348053711871541204205283205282758025536712971073689706529235284625551796531676725176716482213831310555739076790669635070574209517236611213756021436172368913287206764785819299880979291408851775393749038394405833905415241836936294805705477257627566523146329215776762200356332942790097090482513164359367188879441
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c24789c9c3e610f1c39d5b7bdbd01233221bc38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1936 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adagene.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afcgamma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angion.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asensus.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ast-science.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlasinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bioventus.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bumble.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casasystems.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'categoryleaderpartnercorporation1.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondoffshore.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diversey.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dycomind.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finchtherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatelmcapitalcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greensky.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hornbeckoffshore.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immunocore.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovage.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instilbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.adagene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.diamondoffshore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.innovage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.nustarenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.ralphlauren.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.sunlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.afcgamma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ast-science.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.casa-systems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.greensky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.joann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.potbelly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.talis.bio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.talkspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.view.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.angion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.asensus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.bioventus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.bumble.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.diversey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.dycomind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.finchtherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.hornbeckoffshore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.immunocore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.instilbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.lavatherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.neximmune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.pharvaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.rymanhp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joann.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lavatherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-41.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxhealth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcapacquisition.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nclhltd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nclhltdcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nclhltdpr.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neximmune.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nustarenergylp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pharvaris.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plbygroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'potbelly.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ralphlauren.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rymanhospitalitypropertiesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starequityholdings.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunlifeinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talisbiomedical.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talkspace.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ugi.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'view.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atlascorpinvestorday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.category-leader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investor.greatelmcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luxhealth.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcapacquisitioncorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nclhltd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nclhltdinvestor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nclhltdmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plbygroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.starequity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ugicorp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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